Overview

URL microsoftt.boxmode.io/
IP209.192.137.208
ASNSERVERS-COM
Location United States
Report completed2022-09-25 10:10:58 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-09-24 2 microsoftt.boxmode.io/ Office365
2022-09-24 2 microsoftt.boxmode.io/ Office365
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-25 2 microsoftt.boxmode.io/ Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-09-25 2 boxmode.io Sinkholed
2022-09-25 2 boxmode.io Sinkholed


Files

No files detected



Passive DNS (14)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-09-25 05:02:41 UTC 23.36.77.32
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-25 05:42:52 UTC 143.204.55.110
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-25 04:51:16 UTC 34.117.237.239
mnemonic passive DNS microsoftt.boxmode.io (2) 0 2022-09-24 15:45:45 UTC 2022-09-25 00:15:13 UTC 209.192.137.208 Domain (boxmode.io) ranked at: 297683
mnemonic passive DNS ocsp.pki.goog (6) 175 2017-06-14 07:23:31 UTC 2022-09-25 04:54:16 UTC 142.250.74.3
mnemonic passive DNS fonts.gstatic.com (2) 0 2014-08-29 13:43:22 UTC 2022-09-25 04:49:39 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-25 04:17:50 UTC 93.184.220.29
mnemonic passive DNS storage.boxmode.com (23) 0 2020-03-11 21:21:47 UTC 2022-09-23 16:57:03 UTC 205.185.216.10 Unknown ranking
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-25 05:07:25 UTC 35.165.143.157
mnemonic passive DNS source.boxmode.com (6) 0 2020-12-21 14:10:40 UTC 2022-09-23 04:38:26 UTC 209.192.137.207 Unknown ranking
mnemonic passive DNS img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-09-24 04:22:29 UTC 34.120.237.76
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-25 05:48:33 UTC 143.204.55.36
mnemonic passive DNS fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-09-25 08:17:33 UTC 142.250.74.10
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-25 04:32:42 UTC 142.250.74.72


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 209.192.137.208

Date UQ / IDS / BL URL IP
2022-11-28 19:49:08 +0000
0 - 0 - 3 dfbfgbfgbf.boxmode.io/ 209.192.137.208
2022-11-28 17:45:25 +0000
0 - 0 - 3 rackspacepang.boxmode.io/ 209.192.137.208
2022-11-26 21:59:33 +0000
0 - 0 - 6 attservicealert.boxmode.io/ 209.192.137.208
2022-11-26 11:51:45 +0000
0 - 0 - 4 yahoomail0732.boxmode.io/ 209.192.137.208
2022-11-24 21:49:57 +0000
0 - 0 - 6 attyahoo0908.boxmode.io/ 209.192.137.208

Last 5 reports on ASN: SERVERS-COM

Date UQ / IDS / BL URL IP
2022-11-29 11:39:27 +0000
0 - 0 - 1 go.gkrtmc.com/rd.html?go=chikaveronika.com/63 (...) 172.255.248.105
2022-11-29 07:38:44 +0000
0 - 0 - 1 specialistinsensitive.com/ 173.233.139.164
2022-11-29 07:37:10 +0000
0 - 0 - 2 lightssyrupdecree.com/pixel/pure 173.233.139.164
2022-11-29 07:19:30 +0000
0 - 0 - 0 rabidamoral.com 173.233.137.36
2022-11-29 07:18:31 +0000
0 - 0 - 0 widespreadgabblewear.com 173.233.137.52

Last 5 reports on domain: boxmode.io

Date UQ / IDS / BL URL IP
2022-11-28 19:49:08 +0000
0 - 0 - 3 dfbfgbfgbf.boxmode.io/ 209.192.137.208
2022-11-28 17:45:25 +0000
0 - 0 - 3 rackspacepang.boxmode.io/ 209.192.137.208
2022-11-26 21:59:33 +0000
0 - 0 - 6 attservicealert.boxmode.io/ 209.192.137.208
2022-11-26 11:51:45 +0000
0 - 0 - 4 yahoomail0732.boxmode.io/ 209.192.137.208
2022-11-24 21:49:57 +0000
0 - 0 - 6 attyahoo0908.boxmode.io/ 209.192.137.208

Last 1 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-11-05 01:30:45 +0000
0 - 0 - 5 microsoftt.boxmode.io/ 209.192.137.208


JavaScript

Executed Scripts (16)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (56)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 25 Sep 2022 09:14:55 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7snvohDoPrMyx6YbFprV2ySxLEZGG9Rxu0YXYbAareH3rwwShorBwA==
Age: 3352


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5713
Expires: Sun, 25 Sep 2022 11:46:00 GMT
Date: Sun, 25 Sep 2022 10:10:47 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rueSxoYa6xxuDHiUHOxA9ql8pXpuxDE4wz-TMjZrcjJQ219tzLMAQw==
age: 20133
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 25 Sep 2022 10:10:47 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 25 Sep 2022 10:04:17 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sun, 25 Sep 2022 10:12:25 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7WtW1MPyK6PJBzhFFeYJrk0oGhT9M_n6Q5F13iEzZtFA08cI6eaEsA==
Age: 390


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3624
Cache-Control: 'max-age=158059'
Date: Sun, 25 Sep 2022 10:10:48 GMT
Last-Modified: Sun, 25 Sep 2022 09:10:24 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /10825989086/pages/home.css HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 7652
Last-Modified: Sat, 24 Sep 2022 11:44:44 GMT
Accept-Ranges: bytes
ETag: W/"632eedac-8f81"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="home.css"
X-HW: 1664100648.dop206.sk1.t,1664100648.cds235.sk1.shn,1664100648.dop206.sk1.t,1664100648.cds218.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (36737), with no line terminators
Size:   7652
Md5:    c34879fd93a0e5c03f5720a3c1a8d85a
Sha1:   91a03a8cb4ee8f86d59f73a54ebbcf7bc62321cc
Sha256: 1a1437c20c441cc29e0ad2bdfd69c86782643850e72b1cff5e3db2b0045ae671
                                        
                                            GET /9968257296/extension/form/3.2.0/index.css HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 2821
Last-Modified: Thu, 30 Dec 2021 08:26:50 GMT
Accept-Ranges: bytes
ETag: W/"61cd6d4a-2ff7"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.css"
X-HW: 1664100648.dop213.sk1.t,1664100648.cds068.sk1.shn,1664100648.dop213.sk1.t,1664100648.cds256.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (12279), with no line terminators
Size:   2821
Md5:    5ff7d147b276fc2e5ce2db0c513e2369
Sha1:   28930bb4384aaeacb12b5a81a2144397beb2a426
Sha256: fed2a20c983c943fb76bb2e610f2b579e8935be5f3dcfdf49a02bf4ff5b98484
                                        
                                            GET /9968262673/extension/top-banner/3.2.1/index.css HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 431
Last-Modified: Thu, 30 Dec 2021 08:27:06 GMT
Accept-Ranges: bytes
ETag: "61cd6d5a-3c0"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.css"
X-HW: 1664100648.dop013.sk1.t,1664100648.cds262.sk1.shn,1664100648.dop013.sk1.t,1664100648.cds251.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (960), with no line terminators
Size:   431
Md5:    13cdb1c754d751b0cface95d38d40f1f
Sha1:   230b4dfa4e88f2b0f16fe9486b8d6a02232c2c11
Sha256: 60fd7a8f416fb60fbb4780632150b4de5963332b91a76beb988b17419a6e9ff2
                                        
                                            GET /9968190464/extension/container/3.2.0/index.css HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 466
Last-Modified: Fri, 12 Nov 2021 13:06:39 GMT
Accept-Ranges: bytes
ETag: W/"618e66df-529"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.css"
X-HW: 1664100648.dop221.sk1.t,1664100648.cds264.sk1.shn,1664100648.dop221.sk1.t,1664100648.cds018.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (1321), with no line terminators
Size:   466
Md5:    4e2fc0cf4ca71ba4125770b629446cb5
Sha1:   8291280205808903080c3b6558b3dbb2ca716c27
Sha256: e3d38750fa3dd157222b10fe40d0be505b361be52f3850bf080a19016fa83e11
                                        
                                            GET /9970071474/extension/loader/3.2.2/index.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 51550
Last-Modified: Fri, 31 Dec 2021 00:48:47 GMT
Accept-Ranges: bytes
ETag: W/"61ce536f-271a5"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.js"
X-HW: 1664100648.dop230.sk1.t,1664100648.cds003.sk1.shn,1664100648.dop230.sk1.t,1664100648.cds021.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   51550
Md5:    9b571b622d4421849e56271177286a7a
Sha1:   437573cdc69133ab9d0ea96f4794524ddbf49539
Sha256: 57a0c4405244065eafb3b69f9b3f25211c14d8b4940c10a753cdcb8bf9cc1a42
                                        
                                            GET /9968190488/extension/image/3.2.0/index.css HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 535
Last-Modified: Thu, 30 Dec 2021 08:12:51 GMT
Accept-Ranges: bytes
ETag: W/"61cd6a03-56f"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.css"
X-HW: 1664100648.dop206.sk1.t,1664100648.cds235.sk1.shn,1664100648.dop206.sk1.t,1664100648.cds261.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (1391), with no line terminators
Size:   535
Md5:    534e1a5e096526c92f9452d9ff07d1d4
Sha1:   ca6df5759e523a327ae14deec01ad7937945ed19
Sha256: 309ab3510cb78acd0bfceb6d5581a89ad0600fa440f74d64fc19dddb40743035
                                        
                                            GET /9970071468/extension/loader/3.2.2/oldExtensionsLoader.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 45140
Last-Modified: Fri, 05 Nov 2021 12:41:21 GMT
Accept-Ranges: bytes
ETag: W/"61852671-203f5"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="oldExtensionsLoader.js"
X-HW: 1664100648.dop018.sk1.t,1664100648.cds017.sk1.shn,1664100648.dop018.sk1.t,1664100648.cds248.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   45140
Md5:    7d13e0516c9b93c386fb7ca1f6bf74b8
Sha1:   850dfb14778520cc60a278a955ddf898bc54d842
Sha256: d54d3cc1c519002fa9eb58caf730ff38b7db8895304f31aabf734f574f2a390e
                                        
                                            GET /9968192270/extension/text/3.2.1/index.css HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 400
Last-Modified: Thu, 25 Nov 2021 12:03:31 GMT
Accept-Ranges: bytes
ETag: W/"619f7b93-a84"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.css"
X-HW: 1664100648.dop213.sk1.t,1664100648.cds068.sk1.shn,1664100648.dop213.sk1.t,1664100648.cds258.sk1.c


--- Additional Info ---
Magic:  assembler source, ASCII text, with very long lines (2692), with no line terminators
Size:   400
Md5:    bcab6606fa87259d0732b649f58cc00c
Sha1:   17ab4d1ec46a47223e6f3bb0415be52b048a0a24
Sha256: 0bab8e2d05ff9bad819c6d2eaaf8fdadfe607086861091bbe2edf91243c5dc44
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /10826000678/t%C3%A9l%C3%A9chargement.png?profile=original HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/png;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Length: 1936
Last-Modified: Sat, 24 Sep 2022 11:56:18 GMT
Accept-Ranges: bytes
ETag: "632ef062-790"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="t l chargement.png"
X-HW: 1664100648.dop230.sk1.t,1664100648.cds003.sk1.shn,1664100648.dop230.sk1.t,1664100648.cds010.sk1.c


--- Additional Info ---
Magic:  PNG image data, 336 x 150, 8-bit colormap, non-interlaced\012- data
Size:   1936
Md5:    3d0e169214d9791bfd278769f1d5dcd0
Sha1:   2ae9e9b57c048fce6fd73d4c2817bbc1da9a79c5
Sha256: 7f81ee47fa158682cfe3cb6fcaf868452f04dbd2f645878c60de6c5de8ceebad
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Wp/qd6J2K/BC4FY82KL1zw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.165.143.157
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ESenPb+NuEQIt80ijJ+USCSBwDA=

                                        
                                            GET /css2?family=Lato:ital,wght@0,300;0,400;0,700;1,300;1,400&family=Playfair+Display:ital,wght@0,400;0,700;1,400&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 25 Sep 2022 10:10:48 GMT
date: Sun, 25 Sep 2022 10:10:48 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1191
Md5:    1db6efe1915a14594c5f4438fa127559
Sha1:   0e83ffe038ff36f04fce411357a7c3f73b9cfb30
Sha256: 0abd95990d06c92dbad3292e40c4b7d484284222bcf129f808883968d32d6cd0
                                        
                                            GET /10825994273/assets/subscribe-bg.jpg HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://storage.boxmode.com/10825989086/pages/home.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: image/jpeg;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Length: 92575
Last-Modified: Wed, 29 Dec 2021 13:13:22 GMT
Accept-Ranges: bytes
ETag: "61cc5ef2-1699f"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="subscribe-bg.jpg"
X-HW: 1664100648.dop230.sk1.t,1664100648.cds003.sk1.shn,1664100648.dop230.sk1.t,1664100648.cds204.sk1.c


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1703x635, components 3\012- data
Size:   92575
Md5:    e2da50c4839786aa38096c723b290e3b
Sha1:   414e37b22b2781fa1fbd6132fd8ecafb6aaebc15
Sha256: e74caaa3f43c8ba553f0a5130d8702530b7876f3fb0c98fdf4699e1c6a360a7e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-MSKLDHV HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 10:10:48 GMT
server: Google Tag Manager
content-length: 1582
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Size:   1582
Md5:    f07df138451562b43769e9d194f839f8
Sha1:   fb6fbdf80d60b42dde6c966fccab92bf63997ae4
Sha256: 1852605084c192c70098fbe32b77a5eff533d82b5ca483bfa1773de3cef8235d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 21:14:36 GMT
expires: Tue, 19 Sep 2023 21:14:36 GMT
cache-control: public, max-age=31536000
age: 478572
last-modified: Mon, 18 Jul 2022 19:06:36 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data
Size:   35764
Md5:    60f23230f1a8d5c3b7d25b73f5b5ce23
Sha1:   ed08ada85d017893b9bcb8224e99154c6708f5d2
Sha256: 22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
                                        
                                            GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:10:21 GMT
expires: Wed, 20 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 406827
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size:   23580
Md5:    e1b3b5908c9cf23dfb2b9c52b9a023ab
Sha1:   fcd4136085f2a03481d9958cc6793a5ed98e714c
Sha256: 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /9968262858/assets/Inter-Regular.ttf HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: application/octet-stream;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Length: 278284
Last-Modified: Mon, 13 Apr 2020 12:14:50 GMT
Accept-Ranges: bytes
ETag: "5e9457ba-43f0c"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="Inter-Regular.ttf"
X-HW: 1664100648.dop003.sk1.t,1664100648.cds214.sk1.shn,1664100648.dop003.sk1.t,1664100648.cds224.sk1.pr


--- Additional Info ---
Magic:  TrueType Font data, 13 tables, 1st "GDEF", 28 names, Microsoft, language 0x409, Copyright 2019 The Inter project authorsInterRegularInter Regular:2019:aca7606f2Inter RegularVer\012- data
Size:   278284
Md5:    54610ee01fa0621378878142c3442177
Sha1:   2450d4d91c1f8d4397fc12ba1d559be15e4e1d09
Sha256: b02e565207c8d42459ad8e3795babf8a9f3fe337508da7f0c74b60ab6f8f81e7
                                        
                                            GET /9968262482/assets/Inter-Medium.ttf HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: application/octet-stream;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Length: 284956
Last-Modified: Tue, 30 Jun 2020 13:35:37 GMT
Accept-Ranges: bytes
ETag: "5efb3fa9-4591c"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="Inter-Medium.ttf"
X-HW: 1664100648.dop014.sk1.t,1664100648.cds227.sk1.shn,1664100648.dop014.sk1.t,1664100648.cds065.sk1.pr


--- Additional Info ---
Magic:  TrueType Font data, 13 tables, 1st "GDEF", 30 names, Microsoft, language 0x409, Copyright 2019 The Inter project authorsInter MediumRegularInter Medium:2019:aca7606f2Inter Medi\012- data
Size:   284956
Md5:    ddd056b0ae58cec13dd9a7c1d8a2d01f
Sha1:   386779f5d49071119f4f8ef6ffd1ce2e777c481b
Sha256: 314d5a1f97cacaab0f8f20b6d4a37c7a8a9c5e9be031d460dffe5f14ad21bc6a
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: microsoftt.boxmode.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         209.192.137.208
HTTP/2 200 OK
content-type: image/png;charset=UTF-8
                                        
date: Sun, 25 Sep 2022 10:10:48 GMT
content-length: 728
access-control-allow-origin: *
access-control-allow-methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
access-control-allow-headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
access-control-allow-credentials: true
last-modified: Wed, 12 Feb 2020 09:06:27 GMT
content-disposition: inline; filename="favicon-32.png"
etag: "5e43c013-2d8"
cache-control: must-revalidate
access-control-expose-headers: Content-Disposition
accept-ranges: bytes
server: Unknown
x-request-id: 611d401c209808c3903535b5da120dc4
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   728
Md5:    60f42b257489abb0a300e73c1a259650
Sha1:   35a82ed9f59e49686c29dd1c999f506c5af40e61
Sha256: f5a2be97aa9c20631c0e168a19b47537d00c83fb1e8eb9cd68d2f76a42225d26

Alerts:
  Blocklists:
    - openphish: Office365
    - quad9: Sinkholed
                                        
                                            GET /9970071478/chipmunk.min.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:48 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 102631
Last-Modified: Thu, 28 Oct 2021 08:12:35 GMT
Accept-Ranges: bytes
ETag: W/"617a5b73-44d99"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="chipmunk.min.js"
X-HW: 1664100648.dop230.sk1.t,1664100648.cds003.sk1.shn,1664100648.dop230.sk1.t,1664100648.cds251.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   102631
Md5:    6bafd29cc57a423669440bc4ef01a047
Sha1:   6c1feecb09196d2c6f3a8698d6238bb74331956c
Sha256: 1e2052575193d09c6d5658319aecae60f2580a54e59fdd59219694efa193107b
                                        
                                            GET /9970071465/react.production.min.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 4688
Last-Modified: Thu, 30 Sep 2021 09:41:38 GMT
Accept-Ranges: bytes
ETag: W/"61558652-2b6e"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="react.production.min.js"
X-HW: 1664100648.dop230.sk1.t,1664100648.cds003.sk1.shn,1664100649.dop230.sk1.t,1664100649.cds223.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (11118), with no line terminators
Size:   4688
Md5:    7ae3db562006fef9bacf498f4e15bd2c
Sha1:   ee37589dc6fc763b44c00cde51bbf7509d68c73d
Sha256: c72fffa40b0e1f9b0513728d04938bf0ac8204fce88d6c90e10ed5cb75212813
                                        
                                            GET /9970071656/react-dom.production.min.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 45330
Last-Modified: Thu, 30 Sep 2021 09:41:38 GMT
Accept-Ranges: bytes
ETag: W/"61558652-1cfaa"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="react-dom.production.min.js"
X-HW: 1664100648.dop230.sk1.t,1664100648.cds003.sk1.shn,1664100649.dop230.sk1.t,1664100649.cds208.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   45330
Md5:    1b305514eb0310c27f370925d7799faf
Sha1:   c152e5f85f796f15ff61f6a8c03ffa2598f3c283
Sha256: e4b2cfcffdb1eff1a803b8820afa2516e0bed4c0ed6cb20722b9716e35d94c91
                                        
                                            GET /9970071853/render.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 77109
Last-Modified: Fri, 31 Dec 2021 00:48:57 GMT
Accept-Ranges: bytes
ETag: W/"61ce5379-3a156"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="render.js"
X-HW: 1664100648.dop230.sk1.t,1664100648.cds003.sk1.shn,1664100649.dop230.sk1.t,1664100649.cds246.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   77109
Md5:    6d0eca414905691f327967ac98b5b0ed
Sha1:   ca791ca8c712671a4e62d5930ac63ec49a298553
Sha256: 201a4c4db21df9363c5472650a3a17d5621e0851e3459a196d9b3689aad98b41
                                        
                                            GET /9970071298/react-dom-server.browser.production.min.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftt.boxmode.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 8095
Last-Modified: Tue, 06 Jul 2021 10:26:42 GMT
Accept-Ranges: bytes
ETag: "60e42fe2-4d99"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="react-dom-server.browser.production.min.js"
X-HW: 1664100648.dop018.sk1.t,1664100648.cds017.sk1.shn,1664100649.dop018.sk1.t,1664100649.cds215.sk1.pr


--- Additional Info ---
Magic:  ASCII text, with very long lines (19865), with no line terminators
Size:   8095
Md5:    890a4bf97d06006f58f9df5bf841e133
Sha1:   77a72e85fb51989c5d159f16c967a533279b3969
Sha256: 41f29b41f96dc629e817a9007385f5e34a6bf8bf7b2505cdb247c137c24bdea5
                                        
                                            GET /9968262866/extension/top-banner/3.2.1/index.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 64340
Last-Modified: Thu, 30 Dec 2021 08:27:06 GMT
Accept-Ranges: bytes
ETag: W/"61cd6d5a-2f3ce"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.js"
X-HW: 1664100648.dop014.sk1.t,1664100648.cds227.sk1.shn,1664100649.dop014.sk1.t,1664100649.cds232.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   64340
Md5:    a6ea3544410a5ed3f14729d28978aa05
Sha1:   8e3260acf8a99fb5f226a13d158e01865ee8799c
Sha256: 86887a8f85a1e29ce9b619c96331481f9069914a5f5c7a5ab1b2562cc1e9c50e
                                        
                                            GET /2.0/extension/top-banner/latest/3 HTTP/1.1 
Host: source.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://microsoftt.boxmode.io/
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         209.192.137.207
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 25 Sep 2022 10:10:49 GMT
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: a33a289672326bd05629a6670afd68f2
xn-request-flow-type: ext
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- data
Size:   47745
Md5:    d9e108f4ddf85e978d3e52de26ba4ca7
Sha1:   af7cd2e65c7f11e7e06a71534edd2248e24d027e
Sha256: 3932bf6e8da7cc0aa1c28dd51c095501de27041a14ab26f4346746ca4abdec42
                                        
                                            GET /9968190287/extension/container/3.2.0/index.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 76992
Last-Modified: Thu, 30 Dec 2021 08:12:59 GMT
Accept-Ranges: bytes
ETag: W/"61cd6a0b-3a143"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.js"
X-HW: 1664100649.dop228.sk1.shc,1664100649.dop228.sk1.t,1664100649.cds229.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   76992
Md5:    0918d84e8b1f06bf76348f038e92d8a1
Sha1:   79fdd8683a352dab838159d5210884f821e04bab
Sha256: 8348fd353f239ef3a3e1bc44b1410dba7663f5c2c97fb46eebdb6cccf1a73c44
                                        
                                            GET /9968257492/extension/form/3.2.0/index.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 90093
Last-Modified: Thu, 30 Dec 2021 08:26:49 GMT
Accept-Ranges: bytes
ETag: W/"61cd6d49-44298"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="index.js"
X-HW: 1664100649.dop216.sk1.shc,1664100649.dop216.sk1.t,1664100649.cds202.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   90093
Md5:    ed36c3edf1ddbff9d664c9d57119e7cd
Sha1:   a03031e527d96a535253248665039fb41c7ed830
Sha256: cb040be894a99943599d7319c902c6957fe95f5d9bc4d24bdbcf356242a0686e
                                        
                                            GET /9968190467/extension/container/3.2.0/config.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 25580
Last-Modified: Thu, 18 Nov 2021 13:32:54 GMT
Accept-Ranges: bytes
ETag: W/"61965606-13488"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="config.js"
X-HW: 1664100648.dop014.sk1.t,1664100648.cds227.sk1.shn,1664100649.dop014.sk1.t,1664100649.cds261.sk1.c

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3641
Expires: Sun, 25 Sep 2022 11:11:30 GMT
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: keep-alive

                                        
                                            GET /9968190676/extension/image/3.2.0/config.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 4802
Last-Modified: Thu, 28 Oct 2021 08:12:33 GMT
Accept-Ranges: bytes
ETag: W/"617a5b71-3846"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="config.js"
X-HW: 1664100649.dop228.sk1.shc,1664100649.dop228.sk1.t,1664100649.cds264.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (14406), with no line terminators
Size:   4802
Md5:    473f7af26a590ef01592c0c605cc3ca9
Sha1:   3cb0c70583e8d8df703ebcb3e882eaaa329c5923
Sha256: 961bfc9c3b621280936b556e5e6c9499e0a892bdf9e6c3844134491b7027211a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F254286e1-1c63-4609-9dfb-0eb4b9096238.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6199
x-amzn-requestid: d26f22d9-4e9b-4764-8c96-2e1c7ce36340
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y--OKHowoAMFbQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7727-7adb7c4925e6e50e13889544;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:31:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LryqVGSkKbiNOwcqXMULY9FXbOuZBBenjgGPDME3NZLZOdp5divXmw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 22:02:29 GMT
age: 43700
etag: "358e74de395352a9529ff1c17856daf8900888c5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6199
Md5:    714af732a9aa1db2b13ffb62810fd532
Sha1:   358e74de395352a9529ff1c17856daf8900888c5
Sha256: 1d2035cfcd283560ebe8494f9438e52f8d96cd092dd41cb0eb899a3f905c1e05
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c4875ff-4140-470a-943a-bc27f68957a5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7642
x-amzn-requestid: b0fc9bea-7735-43c0-a176-eae4d5000a6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y2ZPtHajIAMF8zQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632c08ca-391092bd30ae5bf9692e93ba;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 07:03:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gc7lA-XfgIAhotpUdrOaihuA2nbdMY2zNiJSHZpSN3yKPaT-k93auQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 06:00:25 GMT
age: 15024
etag: "1534aa8a5158dfa9592d65e6fb761b41c0852c58"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7642
Md5:    00c09f267aacde9465a329542463b9e5
Sha1:   1534aa8a5158dfa9592d65e6fb761b41c0852c58
Sha256: 276ff24598159f62fd7333992575834f901eea7c75a228b9c12d1c049f1df558
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3641
Expires: Sun, 25 Sep 2022 11:11:30 GMT
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda26d83a-84d6-497f-974b-e97994a82e1c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7855
x-amzn-requestid: adb39e96-18cc-4573-8fcd-45c5749559e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4WRIHwNoAMFpXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd0d3-42bce8313e08ea177f81b74d;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:17:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wUehpX1VVM08d9OLxW_-Q6ZGfVFs0ZsN9zoK-2w7VWahCUYhUyeBXA==
via: 1.1 f62c9ca47e35df5c65764381977823a6.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 03:11:47 GMT
age: 25142
etag: "47585668611fadb8bd8fa65e5e330bd3ed2f60b6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7855
Md5:    12b4e62eeac0a002ce34d748230878ca
Sha1:   47585668611fadb8bd8fa65e5e330bd3ed2f60b6
Sha256: e871981eec0c113d0ccda82fabdc84d1881828f7cba1d76c50063c22d528a85e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3641
Expires: Sun, 25 Sep 2022 11:11:30 GMT
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: keep-alive

                                        
                                            GET /2.0/extension/form/3.2.0 HTTP/1.1 
Host: source.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://microsoftt.boxmode.io/
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         209.192.137.207
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 25 Sep 2022 10:10:49 GMT
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: 5b495f9d4b0cf8abe5f8850ba670b4f3
xn-request-flow-type: ext
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- data
Size:   71858
Md5:    f2a6675810892e648b3e1080e9239abc
Sha1:   47f06c1dfde4b3e5fa7820076da88c8b4db73ac9
Sha256: a80337b1d87008361daa502d9112986862f361afba799d6ab55df54638068cee
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c48523c-250d-4030-8145-14c8967dc600.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8914
x-amzn-requestid: 8cfdc32e-f04a-4fd6-a1f1-632934a682fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_EUHqJoAMF7MQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7881-14a6d8ef126409964607e0aa;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kdF6En2vbJhRH1bkYMOuNm5XOIsT1qs3FE281N1SKn1FbyW-oNZsEw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:06 GMT
etag: "2b6e37596e88b62f288dc8e8c937fd904fae28d5"
age: 45223
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8914
Md5:    dfdacc8edea3c24dad020d7e9c11b3f4
Sha1:   2b6e37596e88b62f288dc8e8c937fd904fae28d5
Sha256: 338a44f3bcc01bdd197f037dd8f8bf58a18dea00127465488efe76fb72a6fdff
                                        
                                            GET /9968262862/extension/top-banner/3.2.1/config.js HTTP/1.1 
Host: storage.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Referer: https://storage.boxmode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         205.185.216.10
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sun, 25 Sep 2022 10:10:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 440
Last-Modified: Tue, 06 Jul 2021 10:46:23 GMT
Accept-Ranges: bytes
ETag: "60e4347f-38a"
Server: Storage
Cache-Control: must-revalidate
Access-Control-Allow-Headers: Accept, Accept-Language, Content-Language, Origin, Host, User-Agent, Referer, Accept-Encoding, Connection, hash, token, namespace, Content-Type, Content-Length, Content-Url, X-XN-Storage-Upload-Page,tags, tagNamespace
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE, HEAD
Access-Control-Expose-Headers: Content-Disposition
Content-Disposition: inline; filename="config.js"
X-HW: 1664100648.dop003.sk1.t,1664100648.cds214.sk1.shn,1664100649.dop003.sk1.t,1664100649.cds237.sk1.pr


--- Additional Info ---
Magic:  ASCII text, with very long lines (906), with no line terminators
Size:   440
Md5:    9b827e5300ad5c563c400ff976f0ead0
Sha1:   f80eef97b0b0c8976cfa0c838e4fd7d573303d9e
Sha256: e6826b195a9e2513a5fabaac7ea0a99fb85c4020c719cb49aabd3c99cae4c0c4
                                        
                                            GET /2.0/extension/container/3.2.0 HTTP/1.1 
Host: source.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://microsoftt.boxmode.io/
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         209.192.137.207
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 25 Sep 2022 10:10:49 GMT
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: bf379f88b252ceb82485eb11209b5e04
xn-request-flow-type: ext
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- data
Size:   1265
Md5:    c18f1021dc0fac7399a3a77d1b192439
Sha1:   8ab923646d2550bc93e3b7c2a6c6284f8ecefede
Sha256: 81cd3caea58f4cdc859a59b1706d15ea1f45cd441cca9267506827d6e5524275
                                        
                                            GET /2.0/extension/loader/3.2.2 HTTP/1.1 
Host: source.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://microsoftt.boxmode.io/
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         209.192.137.207
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 25 Sep 2022 10:10:48 GMT
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: 168f83cc1a9063cba9237aea1b3af186
xn-request-flow-type: ext
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /2.0/extension/top-banner/3.2.1 HTTP/1.1 
Host: source.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://microsoftt.boxmode.io/
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         209.192.137.207
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 25 Sep 2022 10:10:49 GMT
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: e381b5de1fbd300b80ef56bcab413224
xn-request-flow-type: ext
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /2.0/extension/image/3.2.0 HTTP/1.1 
Host: source.boxmode.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://microsoftt.boxmode.io/
Origin: https://microsoftt.boxmode.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         209.192.137.207
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 25 Sep 2022 10:10:49 GMT
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
server: Unknown
x-request-id: f6c6ad9066f7f8b3f5dd4f541de9cf14
xn-request-flow-type: ext
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: microsoftt.boxmode.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         209.192.137.208
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Sun, 25 Sep 2022 10:10:47 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE
access-control-allow-headers: X-Requested-With,Authorization,content-type,hash,namespace,token
access-control-allow-credentials: true
cache-control: must-revalidate
content-disposition: inline; filename="home.html"
etag: W/"632ef25d-25f5"
last-modified: Sun, 25 Sep 2022 10:10:47 GMT
server: Unknown
x-request-id: 21a155cc901b46325c889ca2e19eaf7a
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: Office365
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78aaf154-de5d-4fec-94c5-4e185b4c0cc1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4320
x-amzn-requestid: 72d102a6-8552-473f-b3f8-99450722017d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y--PmHEgIAMFXvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7730-7e4789b1723913e2500ea5f2;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:31:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4XK0s7000jxVbsu88-3ze_Mg_SqTKMDgAWKiLkc3ZCiiqGhS02Cn5w==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 22:12:06 GMT
age: 43123
etag: "1ec47b0f11a2b1173a1dcd32d541e5680b0088b1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---