dfbfgbfgbf.boxmode.io/
209.192.137.208301 Moved Permanently 164 B IP 209.192.137.208:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 0ddfe38fe52729401ec28b0c671ff9cc
168fb534ee60922a73876b99d57259cb09a5be73
639762e638bc698ac208f1a8d5f5af04901e9df719978deb315e9e6c7b817f9a
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: dfbfgbfgbf.boxmode.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 28 Nov 2022 19:48:56 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://dfbfgbfgbf.boxmode.io/
Server: Unknown
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3730
Expires: Mon, 28 Nov 2022 20:51:06 GMT
Date: Mon, 28 Nov 2022 19:48:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6335
Expires: Mon, 28 Nov 2022 21:34:31 GMT
Date: Mon, 28 Nov 2022 19:48:56 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3170
Cache-Control: max-age=142515
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 19:48:56 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:24:11 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: yiqpNw11/MNQXibMjHZruxUlnJfrZYQ1sV5oOY1yv9UtXnJglAATIwh3uN6DL0ullanGOQ4JDIjO06SaKnuRfQ==
x-amz-request-id: VX8M6E06GQGH3HJN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 19:42:12 GMT
age: 404
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 19:17:49 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1867
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 19:48:56 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 19:08:55 GMT
cache-control: public,max-age=3600
age: 2402
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4423
Cache-Control: max-age=138701
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 19:48:57 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:20:38 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
storage.boxmode.com/9968262673/extension/top-banner/3.2.1/index.css
205.185.216.10200 OK 431 B URL HTTP/1.1 storage.boxmode.com/9968262673/extension/top-banner/3.2.1/index.css
IP 205.185.216.10:0
File type ASCII text, with very long lines (960), with no line terminators
Hash 13cdb1c754d751b0cface95d38d40f1f
230b4dfa4e88f2b0f16fe9486b8d6a02232c2c11
60fd7a8f416fb60fbb4780632150b4de5963332b91a76beb988b17419a6e9ff2
GET /9968262673/extension/top-banner/3.2.1/index.css HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:57 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 431
Content-Type: text/css;charset=UTF-8
Last-Modified: Thu, 30 Dec 2021 08:27:06 GMT
Accept-Ranges: bytes
ETag: "61cd6d5a-3c0"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.css"
X-HW: 1669664937.dop017.sk1.t,1669664937.cds023.sk1.shn,1669664937.dop017.sk1.t,1669664937.cds251.sk1.c
storage.boxmode.com/9968190488/extension/image/3.2.0/index.css
205.185.216.10200 OK 535 B URL HTTP/1.1 storage.boxmode.com/9968190488/extension/image/3.2.0/index.css
IP 205.185.216.10:0
File type ASCII text, with very long lines (1391), with no line terminators
Hash 534e1a5e096526c92f9452d9ff07d1d4
ca6df5759e523a327ae14deec01ad7937945ed19
309ab3510cb78acd0bfceb6d5581a89ad0600fa440f74d64fc19dddb40743035
GET /9968190488/extension/image/3.2.0/index.css HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:57 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 535
Content-Type: text/css;charset=UTF-8
Last-Modified: Thu, 30 Dec 2021 08:12:51 GMT
Accept-Ranges: bytes
ETag: W/"61cd6a03-56f"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.css"
X-HW: 1669664937.dop021.sk1.t,1669664937.cds017.sk1.shn,1669664937.dop021.sk1.t,1669664937.cds261.sk1.c
storage.boxmode.com/9968257296/extension/form/3.2.0/index.css
205.185.216.10200 OK 2.8 kB URL HTTP/1.1 storage.boxmode.com/9968257296/extension/form/3.2.0/index.css
IP 205.185.216.10:0
File type ASCII text, with very long lines (12279), with no line terminators
Hash 5ff7d147b276fc2e5ce2db0c513e2369
28930bb4384aaeacb12b5a81a2144397beb2a426
fed2a20c983c943fb76bb2e610f2b579e8935be5f3dcfdf49a02bf4ff5b98484
GET /9968257296/extension/form/3.2.0/index.css HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:57 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 2821
Content-Type: text/css;charset=UTF-8
Last-Modified: Thu, 30 Dec 2021 08:26:50 GMT
Accept-Ranges: bytes
ETag: W/"61cd6d4a-2ff7"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.css"
X-HW: 1669664937.dop212.sk1.t,1669664937.cds231.sk1.shn,1669664937.dop212.sk1.t,1669664937.cds256.sk1.c
storage.boxmode.com/9970071474/extension/loader/3.2.2/index.js
205.185.216.10200 OK 52 kB URL HTTP/1.1 storage.boxmode.com/9970071474/extension/loader/3.2.2/index.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9b571b622d4421849e56271177286a7a
437573cdc69133ab9d0ea96f4794524ddbf49539
57a0c4405244065eafb3b69f9b3f25211c14d8b4940c10a753cdcb8bf9cc1a42
GET /9970071474/extension/loader/3.2.2/index.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:57 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 51550
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Fri, 31 Dec 2021 00:48:47 GMT
Accept-Ranges: bytes
ETag: W/"61ce536f-271a5"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.js"
X-HW: 1669664937.dop207.sk1.t,1669664937.cds210.sk1.shn,1669664937.dop207.sk1.t,1669664937.cds021.sk1.c
storage.boxmode.com/10893328473/pages/home.css
205.185.216.10200 OK 4.0 kB URL HTTP/1.1 storage.boxmode.com/10893328473/pages/home.css
IP 205.185.216.10:0
File type ASCII text, with very long lines (15777), with no line terminators
Hash 05db0a0606dea5ed11af1ea6507b6afd
269d6746e5d556dd441ee37608eadc3751f3b569
218033b3d3248e2199ca39a2df9f73d85040d46df0ed1eba59717b68ad8fe9c2
GET /10893328473/pages/home.css HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:57 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 3992
Content-Type: text/css;charset=UTF-8
Last-Modified: Thu, 28 Oct 2021 08:10:25 GMT
Accept-Ranges: bytes
ETag: "617a5af1-3da1"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="home.css"
X-HW: 1669664937.dop017.sk1.t,1669664937.cds207.sk1.shn,1669664937.dop017.sk1.t,1669664937.cds260.sk1.pr
storage.boxmode.com/9970071468/extension/loader/3.2.2/oldExtensionsLoader.js
205.185.216.10200 OK 45 kB URL HTTP/1.1 storage.boxmode.com/9970071468/extension/loader/3.2.2/oldExtensionsLoader.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7d13e0516c9b93c386fb7ca1f6bf74b8
850dfb14778520cc60a278a955ddf898bc54d842
d54d3cc1c519002fa9eb58caf730ff38b7db8895304f31aabf734f574f2a390e
GET /9970071468/extension/loader/3.2.2/oldExtensionsLoader.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:57 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 45140
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Fri, 05 Nov 2021 12:41:21 GMT
Accept-Ranges: bytes
ETag: "61852671-203f5"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="oldExtensionsLoader.js"
X-HW: 1669664937.dop009.sk1.t,1669664937.cds259.sk1.shn,1669664937.dop009.sk1.t,1669664937.cds215.sk1.pr
storage.boxmode.com/9968190464/extension/container/3.2.0/index.css
205.185.216.10200 OK 466 B URL HTTP/1.1 storage.boxmode.com/9968190464/extension/container/3.2.0/index.css
IP 205.185.216.10:0
File type ASCII text, with very long lines (1321), with no line terminators
Hash 4e2fc0cf4ca71ba4125770b629446cb5
8291280205808903080c3b6558b3dbb2ca716c27
e3d38750fa3dd157222b10fe40d0be505b361be52f3850bf080a19016fa83e11
GET /9968190464/extension/container/3.2.0/index.css HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:57 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 466
Content-Type: text/css;charset=UTF-8
Last-Modified: Fri, 12 Nov 2021 13:06:39 GMT
Accept-Ranges: bytes
ETag: "618e66df-529"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.css"
X-HW: 1669664937.dop017.sk1.t,1669664937.cds023.sk1.shn,1669664937.dop017.sk1.t,1669664937.cds018.sk1.pr
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 19:48:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Roboto:100,300,300i,400,500,600,700,900
142.250.74.10200 OK 1.4 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:100,300,300i,400,500,600,700,900
IP 142.250.74.10:0
Hash c327272a9837426e53668ecef4fe148d
36c1b51cbff97aefefd371fa399eb80e1cb5b440
6ccdc496de69cf99019aa6f13c0806f6a41632d5fc6754d3197baae25618dbad
GET /css?family=Roboto:100,300,300i,400,500,600,700,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Nov 2022 19:48:57 GMT
date: Mon, 28 Nov 2022 19:48:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 19:48:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 19:48:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MSKLDHV
142.250.74.168404 Not Found 1.6 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MSKLDHV
IP 142.250.74.168:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash f07df138451562b43769e9d194f839f8
fb6fbdf80d60b42dde6c966fccab92bf63997ae4
1852605084c192c70098fbe32b77a5eff533d82b5ca483bfa1773de3cef8235d
GET /gtm.js?id=GTM-MSKLDHV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
date: Mon, 28 Nov 2022 19:48:58 GMT
content-type: text/html; charset=UTF-8
server: Google Tag Manager
content-length: 1582
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 432890
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 19:48:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:53:49 GMT
expires: Thu, 23 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 435309
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 19:48:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 19:48:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
34.218.168.248101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.218.168.248:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: l7PzUdGdlGlW59xUrngS6Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: FyLk2hTJQqrIeaxrDRrD216aT9k=
storage.boxmode.com/9968262482/assets/Inter-Medium.ttf
205.185.216.10200 OK 285 kB URL HTTP/1.1 storage.boxmode.com/9968262482/assets/Inter-Medium.ttf
IP 205.185.216.10:0
File type TrueType Font data, 13 tables, 1st "GDEF", 30 names, Microsoft, language 0x409, Copyright 2019 The Inter project authorsInter MediumRegularInter Medium:2019:aca7606f2Inter Medi\012- data
Size 285 kB (284956 bytes)
Hash ddd056b0ae58cec13dd9a7c1d8a2d01f
386779f5d49071119f4f8ef6ffd1ce2e777c481b
314d5a1f97cacaab0f8f20b6d4a37c7a8a9c5e9be031d460dffe5f14ad21bc6a
GET /9968262482/assets/Inter-Medium.ttf HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:58 GMT
Connection: Keep-Alive
Content-Length: 284956
Content-Type: application/octet-stream;charset=UTF-8
Last-Modified: Tue, 30 Jun 2020 13:35:37 GMT
Accept-Ranges: bytes
ETag: "5efb3fa9-4591c"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="Inter-Medium.ttf"
X-HW: 1669664938.dop211.sk1.t,1669664938.cds018.sk1.shn,1669664938.dop211.sk1.t,1669664938.cds065.sk1.pr
storage.boxmode.com/9968262858/assets/Inter-Regular.ttf
205.185.216.10200 OK 278 kB URL HTTP/1.1 storage.boxmode.com/9968262858/assets/Inter-Regular.ttf
IP 205.185.216.10:0
File type TrueType Font data, 13 tables, 1st "GDEF", 28 names, Microsoft, language 0x409, Copyright 2019 The Inter project authorsInterRegularInter Regular:2019:aca7606f2Inter RegularVer\012- data
Size 278 kB (278284 bytes)
Hash 54610ee01fa0621378878142c3442177
2450d4d91c1f8d4397fc12ba1d559be15e4e1d09
b02e565207c8d42459ad8e3795babf8a9f3fe337508da7f0c74b60ab6f8f81e7
GET /9968262858/assets/Inter-Regular.ttf HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:58 GMT
Connection: Keep-Alive
Content-Length: 278284
Content-Type: application/octet-stream;charset=UTF-8
Last-Modified: Mon, 13 Apr 2020 12:14:50 GMT
Accept-Ranges: bytes
ETag: "5e9457ba-43f0c"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="Inter-Regular.ttf"
X-HW: 1669664938.dop202.sk1.t,1669664938.cds022.sk1.shn,1669664938.dop202.sk1.t,1669664938.cds224.sk1.pr
dfbfgbfgbf.boxmode.io/favicon.ico
209.192.137.208200 OK 728 B URL HTTP/2 dfbfgbfgbf.boxmode.io/favicon.ico
IP 209.192.137.208:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 60f42b257489abb0a300e73c1a259650
35a82ed9f59e49686c29dd1c999f506c5af40e61
f5a2be97aa9c20631c0e168a19b47537d00c83fb1e8eb9cd68d2f76a42225d26
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: dfbfgbfgbf.boxmode.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 19:48:58 GMT
content-type: image/png;charset=UTF-8
content-length: 728
access-control-allow-origin: *
access-control-allow-methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
access-control-allow-headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
access-control-allow-credentials: true
last-modified: Wed, 12 Feb 2020 09:06:27 GMT
content-disposition: inline; filename="favicon-32.png"
etag: "5e43c013-2d8"
cache-control: must-revalidate
access-control-expose-headers: Content-Disposition
accept-ranges: bytes
server: Unknown
x-request-id: 346807bae93ef63babf875e8cc973d32
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2756
Expires: Mon, 28 Nov 2022 20:34:54 GMT
Date: Mon, 28 Nov 2022 19:48:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2756
Expires: Mon, 28 Nov 2022 20:34:54 GMT
Date: Mon, 28 Nov 2022 19:48:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2756
Expires: Mon, 28 Nov 2022 20:34:54 GMT
Date: Mon, 28 Nov 2022 19:48:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2756
Expires: Mon, 28 Nov 2022 20:34:54 GMT
Date: Mon, 28 Nov 2022 19:48:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2756
Expires: Mon, 28 Nov 2022 20:34:54 GMT
Date: Mon, 28 Nov 2022 19:48:58 GMT
Connection: keep-alive
storage.boxmode.com/9970071478/chipmunk.min.js
205.185.216.10200 OK 103 kB URL HTTP/1.1 storage.boxmode.com/9970071478/chipmunk.min.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (102631 bytes)
Hash 6bafd29cc57a423669440bc4ef01a047
6c1feecb09196d2c6f3a8698d6238bb74331956c
1e2052575193d09c6d5658319aecae60f2580a54e59fdd59219694efa193107b
GET /9970071478/chipmunk.min.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:58 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 102631
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Thu, 28 Oct 2021 08:12:35 GMT
Accept-Ranges: bytes
ETag: "617a5b73-44d99"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="chipmunk.min.js"
X-HW: 1669664937.dop207.sk1.t,1669664937.cds210.sk1.shn,1669664938.dop207.sk1.t,1669664938.cds251.sk1.pr
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
10 kB URL img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP :0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78b1389f425425d0450c94d900404dc4
53b12a8702f7c5b7cc697e2a24da824d9434be65
0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 78452
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:25:51 GMT
age: 76987
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
storage.boxmode.com/10893331053/bt_2019_logo_before_after.jpg?profile=original
205.185.216.10200 OK 8.9 kB URL HTTP/1.1 storage.boxmode.com/10893331053/bt_2019_logo_before_after.jpg?profile=original
IP 205.185.216.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3a1a4e00f1f15827cf651f373863c379
70c2a238f06ca7e56ef80c83738e081bf0de3330
3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f
GET /10893331053/bt_2019_logo_before_after.jpg?profile=original HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:57 GMT
Connection: Keep-Alive
Content-Length: 95333
Content-Type: image/jpeg;charset=UTF-8
Last-Modified: Mon, 28 Nov 2022 09:12:52 GMT
Accept-Ranges: bytes
ETag: "63847b94-17465"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="bt_2019_logo_before_after.jpg"
X-HW: 1669664937.dop207.sk1.t,1669664937.cds210.sk1.shn,1669664937.dop207.sk1.t,1669664937.cds246.sk1.c
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 78462
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
storage.boxmode.com/9970071465/react.production.min.js
205.185.216.10200 OK 4.7 kB URL HTTP/1.1 storage.boxmode.com/9970071465/react.production.min.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (11118), with no line terminators
Hash 7ae3db562006fef9bacf498f4e15bd2c
ee37589dc6fc763b44c00cde51bbf7509d68c73d
c72fffa40b0e1f9b0513728d04938bf0ac8204fce88d6c90e10ed5cb75212813
GET /9970071465/react.production.min.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:59 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 4688
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Thu, 30 Sep 2021 09:41:38 GMT
Accept-Ranges: bytes
ETag: "61558652-2b6e"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="react.production.min.js"
X-HW: 1669664937.dop207.sk1.t,1669664937.cds210.sk1.shn,1669664939.dop207.sk1.t,1669664939.cds223.sk1.pr
storage.boxmode.com/9970071656/react-dom.production.min.js
205.185.216.10200 OK 45 kB URL HTTP/1.1 storage.boxmode.com/9970071656/react-dom.production.min.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1b305514eb0310c27f370925d7799faf
c152e5f85f796f15ff61f6a8c03ffa2598f3c283
e4b2cfcffdb1eff1a803b8820afa2516e0bed4c0ed6cb20722b9716e35d94c91
GET /9970071656/react-dom.production.min.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:59 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 45330
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Thu, 30 Sep 2021 09:41:38 GMT
Accept-Ranges: bytes
ETag: "61558652-1cfaa"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="react-dom.production.min.js"
X-HW: 1669664937.dop207.sk1.t,1669664937.cds210.sk1.shn,1669664939.dop207.sk1.t,1669664939.cds208.sk1.pr
storage.boxmode.com/9970071853/render.js
205.185.216.10200 OK 77 kB URL HTTP/1.1 storage.boxmode.com/9970071853/render.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6d0eca414905691f327967ac98b5b0ed
ca791ca8c712671a4e62d5930ac63ec49a298553
201a4c4db21df9363c5472650a3a17d5621e0851e3459a196d9b3689aad98b41
GET /9970071853/render.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:48:59 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 77109
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Fri, 31 Dec 2021 00:48:57 GMT
Accept-Ranges: bytes
ETag: W/"61ce5379-3a156"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="render.js"
X-HW: 1669664937.dop207.sk1.t,1669664937.cds210.sk1.shn,1669664939.dop207.sk1.t,1669664939.cds246.sk1.c
storage.boxmode.com/9970071298/react-dom-server.browser.production.min.js
205.185.216.10200 OK 8.1 kB URL HTTP/1.1 storage.boxmode.com/9970071298/react-dom-server.browser.production.min.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (19865), with no line terminators
Hash 890a4bf97d06006f58f9df5bf841e133
77a72e85fb51989c5d159f16c967a533279b3969
41f29b41f96dc629e817a9007385f5e34a6bf8bf7b2505cdb247c137c24bdea5
GET /9970071298/react-dom-server.browser.production.min.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dfbfgbfgbf.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:49:00 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 8095
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Tue, 06 Jul 2021 10:26:42 GMT
Accept-Ranges: bytes
ETag: "60e42fe2-4d99"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="react-dom-server.browser.production.min.js"
X-HW: 1669664937.dop009.sk1.t,1669664937.cds259.sk1.shn,1669664937.dop009.sk1.t,1669664940.cds215.sk1.pr
storage.boxmode.com/9968262866/extension/top-banner/3.2.1/index.js
205.185.216.10200 OK 64 kB URL HTTP/1.1 storage.boxmode.com/9968262866/extension/top-banner/3.2.1/index.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash a6ea3544410a5ed3f14729d28978aa05
8e3260acf8a99fb5f226a13d158e01865ee8799c
86887a8f85a1e29ce9b619c96331481f9069914a5f5c7a5ab1b2562cc1e9c50e
GET /9968262866/extension/top-banner/3.2.1/index.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:49:00 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 64340
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Thu, 30 Dec 2021 08:27:06 GMT
Accept-Ranges: bytes
ETag: W/"61cd6d5a-2f3ce"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.js"
X-HW: 1669664938.dop211.sk1.t,1669664938.cds018.sk1.shn,1669664940.dop211.sk1.t,1669664940.cds232.sk1.c
source.boxmode.com/2.0/extension/image/3.2.0
209.192.137.207200 OK 71 kB URL HTTP/2 source.boxmode.com/2.0/extension/image/3.2.0
IP 209.192.137.207:0
Hash cb3d4061990446a329eb3dc7d2305edc
f12ef37757877607fff1e492699d0f5690e04a43
513b56661251b7b0fca48f7f44c3fe5e55a752eb9a2729c42b4539c61aa3ec4e
GET /2.0/extension/image/3.2.0 HTTP/1.1
Host: source.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dfbfgbfgbf.boxmode.io/
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 19:49:00 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: 02cfcd4dec60e2f08e00975668390748
xn-request-flow-type: ext
X-Firefox-Spdy: h2
storage.boxmode.com/9968190287/extension/container/3.2.0/index.js
205.185.216.10200 OK 77 kB URL HTTP/1.1 storage.boxmode.com/9968190287/extension/container/3.2.0/index.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0918d84e8b1f06bf76348f038e92d8a1
79fdd8683a352dab838159d5210884f821e04bab
8348fd353f239ef3a3e1bc44b1410dba7663f5c2c97fb46eebdb6cccf1a73c44
GET /9968190287/extension/container/3.2.0/index.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:49:00 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 76992
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Thu, 30 Dec 2021 08:12:59 GMT
Accept-Ranges: bytes
ETag: W/"61cd6a0b-3a143"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.js"
X-HW: 1669664938.dop211.sk1.t,1669664938.cds018.sk1.shn,1669664940.dop211.sk1.t,1669664940.cds229.sk1.c
storage.boxmode.com/9968192252/extension/text/3.2.1/index.js
205.185.216.10200 OK 64 kB URL HTTP/1.1 storage.boxmode.com/9968192252/extension/text/3.2.1/index.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash a1023d2369d62264aa9d760026450c8c
cdf114e81494365dbc6426ba5b26b4542b49e499
434aa503c486e1c103c892ee7feb4db0fc2350b447c950ccdc30a149ff309436
GET /9968192252/extension/text/3.2.1/index.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:49:00 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 63993
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Thu, 30 Dec 2021 08:13:09 GMT
Accept-Ranges: bytes
ETag: W/"61cd6a15-2f18f"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.js"
X-HW: 1669664938.dop211.sk1.t,1669664938.cds018.sk1.shn,1669664940.dop211.sk1.t,1669664940.cds216.sk1.c
source.boxmode.com/2.0/extension/top-banner/3.2.1
209.192.137.207200 OK 1.1 kB URL HTTP/2 source.boxmode.com/2.0/extension/top-banner/3.2.1
IP 209.192.137.207:0
Hash d9fbcc61a333d1c712406e58adbca0b7
d177385a30fb15aee4bdffcf19ef8d948675c0ae
fc4e96fc013987675fd7e1aa46e420af054f718837b3db04bcb6c69271411dea
GET /2.0/extension/top-banner/3.2.1 HTTP/1.1
Host: source.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dfbfgbfgbf.boxmode.io/
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 19:49:00 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: b0051b94adc9a199b439bb20e4cefdbb
xn-request-flow-type: ext
X-Firefox-Spdy: h2
source.boxmode.com/2.0/extension/text/3.2.1
209.192.137.207200 OK 1.8 kB URL HTTP/2 source.boxmode.com/2.0/extension/text/3.2.1
IP 209.192.137.207:0
Hash 6f6b7b927553e4b2adadf0e2a74436f7
63f800d265195717ead01f1c02043f98ccda5cf8
43b77ea90fb94c6030a51589bbdaf5cb927edd5105308a6846cb6deb6c010389
GET /2.0/extension/text/3.2.1 HTTP/1.1
Host: source.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dfbfgbfgbf.boxmode.io/
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 19:49:00 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: b63c01a94680bf5d79889e46f4791e78
xn-request-flow-type: ext
X-Firefox-Spdy: h2
source.boxmode.com/2.0/extension/container/3.2.0
209.192.137.207200 OK 5.4 kB URL HTTP/2 source.boxmode.com/2.0/extension/container/3.2.0
IP 209.192.137.207:0
Hash 8322be72ce1d69e40e5e8a4dbf2c0238
277e8da863067f404bad6ce40411ed8ba7177fad
88f3c6f08e657249b214af85e94b5cf584643bf6e4fe62b65a51086f10b4c18a
GET /2.0/extension/container/3.2.0 HTTP/1.1
Host: source.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dfbfgbfgbf.boxmode.io/
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 19:49:00 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: fc73663d0d510cbb2ba704ad7f6c01b5
xn-request-flow-type: ext
X-Firefox-Spdy: h2
storage.boxmode.com/9968257855/extension/form/3.2.0/config.js
205.185.216.10200 OK 47 kB URL HTTP/1.1 storage.boxmode.com/9968257855/extension/form/3.2.0/config.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash a17c8641ea327061904a82521c2ce967
7e58d87c75b664d0ee3ba05a2bd8b31525abb334
a150ea71de7cebfa00b40f701701a5274bf6304d959bbe476f40426602b442bb
GET /9968257855/extension/form/3.2.0/config.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:49:00 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 47117
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Fri, 05 Nov 2021 12:41:09 GMT
Accept-Ranges: bytes
ETag: "61852665-25a19"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="config.js"
X-HW: 1669664940.dop207.sk1.shc,1669664940.dop207.sk1.t,1669664940.cds226.sk1.pr
storage.boxmode.com/9968191899/extension/text/3.2.1/config.js
205.185.216.10200 OK 634 B URL HTTP/1.1 storage.boxmode.com/9968191899/extension/text/3.2.1/config.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (1556), with no line terminators
Hash 9db375eae0276c420c7763521cf760ec
ba92db56627bd94e6df4d968e504b68864a74749
d4545880cc47404df0d1d19e12609190646c7e7a28c826bf9d3b2dd3aff90553
GET /9968191899/extension/text/3.2.1/config.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:49:00 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 634
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Tue, 06 Jul 2021 10:33:07 GMT
Accept-Ranges: bytes
ETag: "60e43163-614"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="config.js"
X-HW: 1669664938.dop211.sk1.t,1669664938.cds018.sk1.shn,1669664940.dop211.sk1.t,1669664940.cds220.sk1.pr
storage.boxmode.com/9968190467/extension/container/3.2.0/config.js
205.185.216.10200 OK 26 kB URL HTTP/1.1 storage.boxmode.com/9968190467/extension/container/3.2.0/config.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 448d892b136564fbb9a413a9184cf4a5
3d4d13fd4fd8b2fa1e783708a1b07a4a081dbf79
5cf37be0b828476e5491382b833727e70b6667f67045299427ec8d588d65b2ad
GET /9968190467/extension/container/3.2.0/config.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:49:00 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 25580
Content-Type: text/javascript;charset=UTF-8
Last-Modified: Thu, 18 Nov 2021 13:32:54 GMT
Accept-Ranges: bytes
ETag: "61965606-13488"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="config.js"
X-HW: 1669664940.dop066.sk1.shc,1669664940.dop066.sk1.t,1669664940.cds221.sk1.pr
storage.boxmode.com/9968257492/extension/form/3.2.0/index.js
205.185.216.10200 OK 90 kB URL HTTP/1.1 storage.boxmode.com/9968257492/extension/form/3.2.0/index.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash ed36c3edf1ddbff9d664c9d57119e7cd
a03031e527d96a535253248665039fb41c7ed830
cb040be894a99943599d7319c902c6957fe95f5d9bc4d24bdbcf356242a0686e
GET /9968257492/extension/form/3.2.0/index.js HTTP/1.1
Host: storage.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 19:49:00 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 90093
Content-Type: text/javascript;charset=UTF-8
X-HW: 1669664940.dop010.sk1.shc,1669664940.dop010.sk1.t,1669664940.cds233.sk1.p
ETag: W/"61cd6d49-44298"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Last-Modified: Thu, 30 Dec 2021 08:26:49 GMT
Content-Disposition: inline; filename="index.js"
source.boxmode.com/2.0/extension/top-banner/latest/3
209.192.137.207200 OK 0 B URL HTTP/2 source.boxmode.com/2.0/extension/top-banner/latest/3
IP 209.192.137.207:0
GET /2.0/extension/top-banner/latest/3 HTTP/1.1
Host: source.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dfbfgbfgbf.boxmode.io/
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 19:49:00 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: 3699898ff4da67a745b1c338591d5ad3
xn-request-flow-type: ext
X-Firefox-Spdy: h2
dfbfgbfgbf.boxmode.io/
209.192.137.208200 OK 0 B IP 209.192.137.208:0
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: dfbfgbfgbf.boxmode.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 28 Nov 2022 19:48:57 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE
access-control-allow-headers: X-Requested-With,Authorization,content-type,hash,namespace,token
access-control-allow-credentials: true
cache-control: must-revalidate
content-disposition: inline; filename="home.html"
etag: W/"63847d68-1d67"
last-modified: Mon, 28 Nov 2022 19:48:57 GMT
server: Unknown
x-request-id: 031cf2f5a7d0bef5b65a1776c66897e1
content-encoding: gzip
X-Firefox-Spdy: h2
source.boxmode.com/2.0/extension/loader/3.2.2
209.192.137.207200 OK 0 B URL HTTP/2 source.boxmode.com/2.0/extension/loader/3.2.2
IP 209.192.137.207:0
GET /2.0/extension/loader/3.2.2 HTTP/1.1
Host: source.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dfbfgbfgbf.boxmode.io/
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 19:48:58 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: ad5c673cea7d0841445020df547ebecf
xn-request-flow-type: ext
X-Firefox-Spdy: h2
source.boxmode.com/2.0/extension/form/3.2.0
209.192.137.207200 OK 0 B URL HTTP/2 source.boxmode.com/2.0/extension/form/3.2.0
IP 209.192.137.207:0
GET /2.0/extension/form/3.2.0 HTTP/1.1
Host: source.boxmode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dfbfgbfgbf.boxmode.io/
Origin: https://dfbfgbfgbf.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 19:49:00 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: 08cd06656739af9102e15cb0a8ce9e29
xn-request-flow-type: ext
X-Firefox-Spdy: h2