| hmysocialtab.net/home/click?uc=17700101&ap=&source=&uid=b1c6600e-d447-40f4-bbe6-742466699ec0&i_id=&cid=&url=https://xhdy.visionsoftec.com/lokeke/trrdd/lzKj2u/YmRvb2xpdHRsZUBidGktdXNhLmNvbQ== | 54.198.78.154 | | 199 B |
URL hmysocialtab.net/home/click?uc=17700101&ap=&source=&uid=b1c6600e-d447-40f4-bbe6-742466699ec0&i_id=&cid=&url=https://xhdy.visionsoftec.com/lokeke/trrdd/lzKj2u/YmRvb2xpdHRsZUBidGktdXNhLmNvbQ== IP54.198.78.154:0
File typeHTML document, ASCII text, with CRLF line terminators Hash0071de981932881a6ec2d4898ee9d599 bc358713d22409ccc58ea800a761e80fee2497e3 7c0d6feef5fa2f33f6ae871cd2d450421bb61d6f377a0870274638511a1c96dd
GET /home/click?uc=17700101&ap=&source=&uid=b1c6600e-d447-40f4-bbe6-742466699ec0&i_id=&cid=&url=https://xhdy.visionsoftec.com/lokeke/trrdd/lzKj2u/YmRvb2xpdHRsZUBidGktdXNhLmNvbQ== HTTP/1.1
Host: hmysocialtab.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 24 Apr 2024 18:23:31 GMT
content-type: text/html; charset=utf-8
content-length: 199
location: https://xhdy.visionsoftec.com/lokeke/trrdd/lzKj2u/YmRvb2xpdHRsZUBidGktdXNhLmNvbQ==
cache-control: private
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| xhdy.visionsoftec.com/lokeke/trrdd/lzKj2u/YmRvb2xpdHRsZUBidGktdXNhLmNvbQ== | 65.108.125.53 | | 1.8 kB |
URL xhdy.visionsoftec.com/lokeke/trrdd/lzKj2u/YmRvb2xpdHRsZUBidGktdXNhLmNvbQ== IP65.108.125.53:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, Unicode text, UTF-8 text, with very long lines (794) Hashfa6e3d6c4568e2cae86485b889c16560 f224833ac6dcb7cbfa305625e8e5789e759ded8c 15548d2d460f5a717fa0bde1ad2dbd13da4798ab83fad8053f9af57ea64928b0
GET /lokeke/trrdd/lzKj2u/YmRvb2xpdHRsZUBidGktdXNhLmNvbQ== HTTP/1.1
Host: xhdy.visionsoftec.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/8.1.28
content-type: text/html;charset=UTF-8
content-length: 1766
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 18:23:33 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.1.0/jquery.min.js | 104.17.24.14 | 200 OK | 27 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.1.0/jquery.min.js IP104.17.24.14:443
Requested byhttps://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /ajax/libs/jquery/3.1.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://x-boxed.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 18:23:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 27198
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1514f"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4060967
expires: Mon, 14 Apr 2025 18:23:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NrHGpT3KULP302tEJ5o%2BTg97SMGmGISN2zPWDPvy43kzMYKztS%2FoGu4MEdCmWqenv9NgaHl43HTpO6YaLp5Axq0kDfvr%2B4UxzFnpgw3UZ6N3wsPlb%2BkJ5rRyy2j0FHLr7orRmMSG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879820474d7d56c5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/c9YMDpstwYbAHlgdSi | 104.21.64.217 | | 2.5 kB |
URL x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/c9YMDpstwYbAHlgdSi IP104.21.64.217:0
File typeJavaScript source, ASCII text, with very long lines (1118) Hash2bf660e5eadb6b81a81bf0cc4d3ba29e 6c23fe8590ec545332639fce0d4dc039dc74043e 767a75d852657a8f88a948afbf416c0595e190c6064d6baee40b158709551296
GET /50c91156-9ab8-49a3-b441-198d71a44934/c9YMDpstwYbAHlgdSi HTTP/1.1
Host: x-boxed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xhdy.visionsoftec.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 18:23:38 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
set-cookie: PHPSESSID=7sgojpu7ddl931efgs7npu3ipj; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UmxLESF3k6Tj%2BzpbzLOCyL8SI5%2BPbFvSk3N%2Bv3COoeShFMlN7%2BpLeZdCXSX1KYkx3Hnvy6Lz4UCQyiESG652nhSG4WDeh6BQKXm4dARSI8kaSv0vEO7Dl1%2F%2BEmsk5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798200d6b641c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| x-boxed.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.21.64.217 | 302 Found | 0 B |
URL GET HTTP/3x-boxed.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.21.64.217:443
Requested byhttps://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com CertificateIssuerGoogle Trust Services LLC Subjectx-boxed.com Fingerprint89:E7:BA:E3:CC:FA:96:5C:6B:62:8D:80:2A:B9:AB:A7:A6:2D:C6:D1 ValiditySat, 20 Apr 2024 08:13:04 GMT - Fri, 19 Jul 2024 08:13:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: x-boxed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7sgojpu7ddl931efgs7npu3ipj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Wed, 24 Apr 2024 18:23:44 GMT
content-length: 0
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M0DRlm%2FASDo6SxfLU8Rb7UYIgtRtDmH2%2B%2B09oLaeUcXFXlNLHTCO%2BoN453zJ92BuJ%2FbB3tIxM8VymO5uR548nYRoS5tY3MF%2F0vHZskc2pjw3bK%2F1xK%2F%2FZ%2BKWRUgc%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8798204f687356b1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/images/arrow_left.svg | 104.21.64.217 | 200 OK | 943 B |
URL GET HTTP/3x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/images/arrow_left.svg IP104.21.64.217:443
Requested byhttps://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?LzUwYzkxMTU2LTlhYjgtNDlhMy1iNDQxLTE5OGQ3MWE0NDkzNC82RiRYZUNZXWEtfFQkc0k5Vn5DdlkmfipSOCwtRDNjbGpbY2wzdmd8VWFIViU3Qlt5KGlNV3ZvY3RHNVklM0MxdHhDMkslN0Q5UWxUaVc5NSU3RCU3QkNISTh5LShIJTYwN05nR0Vnelg4QUNnZWtIXWwkZUhJSHFSV3M4dTclNUVCVVFFJTNFWU5UdiU2ME10Z21fZW1LLkwxQ25jTUclN0JHfmc2RnZBR1V1LSU3Ql1rVnYqKnFpaF1iJTdCRzJVc2R4Wnw4eV9ickc4LiU1RS1HblM1RklCZE51Z0xrXSkoUndoSVkoJTVFTGhGNzRZV2RdJER3MUh6TUxDOVFvR0VaRTRbY1dzYSZpJEZ3b00lNUUlM0Vbaylwb0olM0NiL2dVTmtSeU9UT25URXJVRGVvRE9MST82RiRYZUNZXWEtfFQkc0k5Vn5DdlkmfipSOCwtRDNjbGpbY2wzdmd8VWFIVntbeShpTVd2b2N0RzVZJTNDMXR4QzJLfTlRbFRpVzk1fXtDSEk4eS0oSGA3TmdHRWd6WDhBQ2dla0hdbCRlSElIcVJXczh1N15CVVFFJTNFWU5UdmBNdGdtX2VtSy5MMUNuY01He0d+ZzZGdkFHVXUte11rVnYqKnFpaF1ie0cyVXNkeFp8OHlfYnJHOC5eLUduUzVGSUJkTnVnTGtdKShSd2hJWSheTGhGNzRZV2RdJER3MUh6TUxDOVFvR0VaRTRbY1dzYSZpJEZ3b01eJTNFW2spcG9KJTNDYg==bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com CertificateIssuerGoogle Trust Services LLC Subjectx-boxed.com Fingerprint89:E7:BA:E3:CC:FA:96:5C:6B:62:8D:80:2A:B9:AB:A7:A6:2D:C6:D1 ValiditySat, 20 Apr 2024 08:13:04 GMT - Fri, 19 Jul 2024 08:13:03 GMT
File typeSVG Scalable Vector Graphics image Hasha9cc2824ef3517b6c4160dcf8ff7d410 8db9aebad84ca6e4225bfdd2458ff3821cc4f064 34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58
GET /50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/images/arrow_left.svg HTTP/1.1
Host: x-boxed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7sgojpu7ddl931efgs7npu3ipj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:23:44 GMT
content-type: image/svg+xml
last-modified: Fri, 29 Mar 2024 18:31:30 GMT
etag: W/"201-614d0d932c480"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kVjkE8IFY4F1kLTH2fNG45PUGCcOXat8Tfu8fx75EjDNgeVxsLSCf9T1yYUObbz6Q8JdhLFD0kcVuau6K8RcCdffdJYgfiYAgwEAv6zaWncE1vg0GvzPCFJgCbYikw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879820472c3e56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| x-boxed.com/cdn-cgi/challenge-platform/h/b/jsd/r/87982032b99056b1 | 104.21.64.217 | 200 OK | 0 B |
URL POST HTTP/3x-boxed.com/cdn-cgi/challenge-platform/h/b/jsd/r/87982032b99056b1 IP104.21.64.217:443
Requested byhttps://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?LzUwYzkxMTU2LTlhYjgtNDlhMy1iNDQxLTE5OGQ3MWE0NDkzNC82RiRYZUNZXWEtfFQkc0k5Vn5DdlkmfipSOCwtRDNjbGpbY2wzdmd8VWFIViU3Qlt5KGlNV3ZvY3RHNVklM0MxdHhDMkslN0Q5UWxUaVc5NSU3RCU3QkNISTh5LShIJTYwN05nR0Vnelg4QUNnZWtIXWwkZUhJSHFSV3M4dTclNUVCVVFFJTNFWU5UdiU2ME10Z21fZW1LLkwxQ25jTUclN0JHfmc2RnZBR1V1LSU3Ql1rVnYqKnFpaF1iJTdCRzJVc2R4Wnw4eV9ickc4LiU1RS1HblM1RklCZE51Z0xrXSkoUndoSVkoJTVFTGhGNzRZV2RdJER3MUh6TUxDOVFvR0VaRTRbY1dzYSZpJEZ3b00lNUUlM0Vbaylwb0olM0NiL2dVTmtSeU9UT25URXJVRGVvRE9MST82RiRYZUNZXWEtfFQkc0k5Vn5DdlkmfipSOCwtRDNjbGpbY2wzdmd8VWFIVntbeShpTVd2b2N0RzVZJTNDMXR4QzJLfTlRbFRpVzk1fXtDSEk4eS0oSGA3TmdHRWd6WDhBQ2dla0hdbCRlSElIcVJXczh1N15CVVFFJTNFWU5UdmBNdGdtX2VtSy5MMUNuY01He0d+ZzZGdkFHVXUte11rVnYqKnFpaF1ie0cyVXNkeFp8OHlfYnJHOC5eLUduUzVGSUJkTnVnTGtdKShSd2hJWSheTGhGNzRZV2RdJER3MUh6TUxDOVFvR0VaRTRbY1dzYSZpJEZ3b01eJTNFW2spcG9KJTNDYg==bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com CertificateIssuerGoogle Trust Services LLC Subjectx-boxed.com Fingerprint89:E7:BA:E3:CC:FA:96:5C:6B:62:8D:80:2A:B9:AB:A7:A6:2D:C6:D1 ValiditySat, 20 Apr 2024 08:13:04 GMT - Fri, 19 Jul 2024 08:13:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/87982032b99056b1 HTTP/1.1
Host: x-boxed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 14326
Origin: https://x-boxed.com
DNT: 1
Connection: keep-alive
Referer: https://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com
Cookie: PHPSESSID=7sgojpu7ddl931efgs7npu3ipj
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:23:44 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=S2KkIHT.g8s95cFffJEYNsrQ3PSx3RM.hyOY5.CjZIo-1713983024-1.0.1.1-iLR7Pdgk0XIqGGP5XKCC3xIOSdoYhGwthPvMW34gBfwA5eqm3RkFxE5xYE8a6frScd_NO3kAJs.LP2rnN4h4ug; path=/; expires=Thu, 24-Apr-25 18:23:44 GMT; domain=.x-boxed.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XAz7SBlZJtz9MnpJ%2BkvXZCQNAK4A3ava0NBm6dd4LGKKCqrB1HXBketSMwZXVP5MPhxvy3U68w2exoYbouHoBAPlvBm%2FPVpNzirwJTXQe5TkwWlc1hPYIkgpj0Kc%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87982050aa0056b1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/images/passwrd.png | 104.21.64.217 | 200 OK | 902 B |
URL GET HTTP/3x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/images/passwrd.png IP104.21.64.217:443
Requested byhttps://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com CertificateIssuerGoogle Trust Services LLC Subjectx-boxed.com Fingerprint89:E7:BA:E3:CC:FA:96:5C:6B:62:8D:80:2A:B9:AB:A7:A6:2D:C6:D1 ValiditySat, 20 Apr 2024 08:13:04 GMT - Fri, 19 Jul 2024 08:13:03 GMT
File typePNG image data, 69 x 34, 8-bit/color RGBA, non-interlaced Hash4f2a1d382216546e2c3bc620497fd4e3 f785ec5967b5666387304f779306f9c3e3359ff4 105c03d3360cdb953585482374b2cc953d090741037502b0609629f5bb0135b7
GET /50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/images/passwrd.png HTTP/1.1
Host: x-boxed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7sgojpu7ddl931efgs7npu3ipj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:23:44 GMT
content-type: image/png
content-length: 902
last-modified: Fri, 29 Mar 2024 18:31:30 GMT
etag: "386-614d0d932c480"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6tNZqE6WUIKd5WBfkYDgf2MOvCt7Dpa9dWV9lAr%2FKE18wiPBYZAxYaHScTJYcGQENm6J1Wc6YiBHhasm%2Fw8gppXKwu3NlkpKxzY1xluezEhoVL9j3MWb9efj2YSmkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8798204f585b56b1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/images/ellipsis_grey.svg | 104.21.64.217 | 200 OK | 915 B |
URL GET HTTP/3x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/images/ellipsis_grey.svg IP104.21.64.217:443
Requested byhttps://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com CertificateIssuerGoogle Trust Services LLC Subjectx-boxed.com Fingerprint89:E7:BA:E3:CC:FA:96:5C:6B:62:8D:80:2A:B9:AB:A7:A6:2D:C6:D1 ValiditySat, 20 Apr 2024 08:13:04 GMT - Fri, 19 Jul 2024 08:13:03 GMT
File typeSVG Scalable Vector Graphics image Hashe9eb3d9d41a12691cb11c879e6c2496b abb562c0507590160c5f98cd76d2bc718fd3dd96 08fedd198eef9c747fdf870c2fa47dfc651f0bbc41959cd083c28eb017ee105e
GET /50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/images/ellipsis_grey.svg HTTP/1.1
Host: x-boxed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7sgojpu7ddl931efgs7npu3ipj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:23:44 GMT
content-type: image/svg+xml
last-modified: Fri, 29 Mar 2024 18:31:30 GMT
etag: W/"393-614d0d932c480"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YVCi1d7oTngeDd0KeQKNDCOznvjNldUJzDgjF1HTvpSVs%2FAMSqiK15GxNYSkqzpVuhvHpAiuebdYjK3Jf2PjuzWRhSdJX%2FOJTml64hWeTaCkBUcDGaUBvam1d3pYEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879820472c3f56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| x-boxed.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 104.21.64.217 | 200 OK | 1.2 kB |
URL GET HTTP/3x-boxed.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP104.21.64.217:443
Requested byhttps://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com CertificateIssuerGoogle Trust Services LLC Subjectx-boxed.com Fingerprint89:E7:BA:E3:CC:FA:96:5C:6B:62:8D:80:2A:B9:AB:A7:A6:2D:C6:D1 ValiditySat, 20 Apr 2024 08:13:04 GMT - Fri, 19 Jul 2024 08:13:03 GMT
File typeHTML document, ASCII text, with very long lines (1271), with no line terminators Hash40d981045a7516cdadd00e8dccc9c58d 8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3 71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: x-boxed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7sgojpu7ddl931efgs7npu3ipj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:23:43 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 20:54:07 GMT
etag: W/"6622d9ef-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9S%2FbpcH4H1xkyeNZyNwF1CVoXvyEOkPspZxKt4LDNvxwFwWeWummReWQZf8VJvv%2FZNHu8llmgPC5RgV%2FxuKo6bRzZfbEoXkjLCSGNi%2BkVCUzh5KProz5g1jBqlgs5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879820472c4056b1-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 26 Apr 2024 18:23:43 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com | 104.21.64.217 | 200 OK | 28 kB |
URL User Request GET HTTP/3x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com IP104.21.64.217:443
CertificateIssuerGoogle Trust Services LLC Subjectx-boxed.com Fingerprint89:E7:BA:E3:CC:FA:96:5C:6B:62:8D:80:2A:B9:AB:A7:A6:2D:C6:D1 ValiditySat, 20 Apr 2024 08:13:04 GMT - Fri, 19 Jul 2024 08:13:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | suspicious | Suspicious - Anti-debugging code |
GET /50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?LzUwYzkxMTU2LTlhYjgtNDlhMy1iNDQxLTE5OGQ3MWE0NDkzNC82RiRYZUNZXWEtfFQkc0k5Vn5DdlkmfipSOCwtRDNjbGpbY2wzdmd8VWFIViU3Qlt5KGlNV3ZvY3RHNVklM0MxdHhDMkslN0Q5UWxUaVc5NSU3RCU3QkNISTh5LShIJTYwN05nR0Vnelg4QUNnZWtIXWwkZUhJSHFSV3M4dTclNUVCVVFFJTNFWU5UdiU2ME10Z21fZW1LLkwxQ25jTUclN0JHfmc2RnZBR1V1LSU3Ql1rVnYqKnFpaF1iJTdCRzJVc2R4Wnw4eV9ickc4LiU1RS1HblM1RklCZE51Z0xrXSkoUndoSVkoJTVFTGhGNzRZV2RdJER3MUh6TUxDOVFvR0VaRTRbY1dzYSZpJEZ3b00lNUUlM0Vbaylwb0olM0NiL2dVTmtSeU9UT25URXJVRGVvRE9MST82RiRYZUNZXWEtfFQkc0k5Vn5DdlkmfipSOCwtRDNjbGpbY2wzdmd8VWFIVntbeShpTVd2b2N0RzVZJTNDMXR4QzJLfTlRbFRpVzk1fXtDSEk4eS0oSGA3TmdHRWd6WDhBQ2dla0hdbCRlSElIcVJXczh1N15CVVFFJTNFWU5UdmBNdGdtX2VtSy5MMUNuY01He0d+ZzZGdkFHVXUte11rVnYqKnFpaF1ie0cyVXNkeFp8OHlfYnJHOC5eLUduUzVGSUJkTnVnTGtdKShSd2hJWSheTGhGNzRZV2RdJER3MUh6TUxDOVFvR0VaRTRbY1dzYSZpJEZ3b01eJTNFW2spcG9KJTNDYg==bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com HTTP/1.1
Host: x-boxed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/gUNkRyOTOnTErUDeoDOLI?6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV{[y(iMWvoctG5Y%3C1txC2K}9QlTiW95}{CHI8y-(H`7NgGEgzX8ACgekH]l$eHIHqRWs8u7^BUQE%3EYNTv`Mtgm_emK.L1CncMG{G~g6FvAGUu-{]kVv**qih]b{G2UsdxZ|8y_brG8.^-GnS5FIBdNugLk])(RwhIY(^LhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM^%3E[k)poJ%3Cb
Cookie: PHPSESSID=7sgojpu7ddl931efgs7npu3ipj
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:23:43 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
vary: Accept-Encoding
access-control-allow-headers: Content-Type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PuRyJ4KneaWsB5qhiEth8cTbCenCXImZJ6jcRGH8Md8gnBUICLL6Nvv5QSiPr3tBDwD%2F5%2FyRjCD%2FSxUiTSbLifFiCHdAOI2mO0uWsDCKSmitW8yaJR72Wn%2Fh%2F90QRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87982032b99056b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/css/style.css | 104.21.64.217 | 200 OK | 98 kB |
URL GET HTTP/3x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/css/style.css IP104.21.64.217:443
Requested byhttps://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com CertificateIssuerGoogle Trust Services LLC Subjectx-boxed.com Fingerprint89:E7:BA:E3:CC:FA:96:5C:6B:62:8D:80:2A:B9:AB:A7:A6:2D:C6:D1 ValiditySat, 20 Apr 2024 08:13:04 GMT - Fri, 19 Jul 2024 08:13:03 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashec6f808e2db5a81f69cf34d2321430b6 78bd6e9599607926472881d31d38a75785c1e270 f360565d5eb99983582c07bc506f372db00ffa3e4187779bd520214fe0fce646
GET /50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/css/style.css HTTP/1.1
Host: x-boxed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7sgojpu7ddl931efgs7npu3ipj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:23:44 GMT
content-type: text/css
last-modified: Fri, 29 Mar 2024 18:31:30 GMT
etag: W/"17ccd-614d0d932c480-gzip"
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TZbR3sk0ZvE0Ny1Y1L70dmWhyeQ2IDvhN%2BVturucGse2sCGXogQEUWsPrDiO7MceofClE7TFj8Y8vStsY0LZSRcy%2BHyu09Rcb4b3a%2FmLMHe2KQhfx9qWl8VJnVq5Cw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879820472c3b56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/images/favicon.ico | 104.21.64.217 | 200 OK | 1.2 kB |
URL GET HTTP/3x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/images/favicon.ico IP104.21.64.217:443
Requested byhttps://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com CertificateIssuerGoogle Trust Services LLC Subjectx-boxed.com Fingerprint89:E7:BA:E3:CC:FA:96:5C:6B:62:8D:80:2A:B9:AB:A7:A6:2D:C6:D1 ValiditySat, 20 Apr 2024 08:13:04 GMT - Fri, 19 Jul 2024 08:13:03 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash7cdd5a7e87e82d145e7f82358f9ebd04 265104cad00300e4094f8ce6a9edc86e54812ead 5d91563b6acd54468ae282083cf9ee3d2c9b2daa45a8de9cb661c2195b9f6cbf
GET /50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/images/favicon.ico HTTP/1.1
Host: x-boxed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7sgojpu7ddl931efgs7npu3ipj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:23:45 GMT
content-type: image/vnd.microsoft.icon
last-modified: Fri, 29 Mar 2024 18:31:30 GMT
etag: W/"47e-614d0d932c480"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2FFwOX4%2BiiNzHA%2BlK6s9a65zJ0af%2Bvl8Auuac9WErR15KPajjgQtjz6DuH%2FRdiaGz7rmU7LOTx4DlGnxbjciXbwI7gNo4eIhFB8E0QBBfEZnUBM68koWJElLnHxVXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8798205079b156b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg | 13.107.246.53 | 200 OK | 1.9 kB |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4b5c228b4faba433d06ec569ed855b2d a7d3882b93e332460e7c59510a6a811ef011983f eb19d76cd1fad39abf0f2778991883a5cf9ff560117ce8f7c64124e71471b4ed
GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 18:23:44 GMT
content-type: image/svg+xml
content-length: 673
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 12 Feb 2020 22:01:30 GMT
etag: 0x8D7B0071D86E386
x-ms-request-id: 17eae9f5-a01e-0050-2b96-9486ad000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T182344Z-16c4f695cc5hfq6f949ffdfmq000000000tg00000000eqz0
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| secure.aadcdn.microsoftonline-p.com/ests/2.1.8148.16/content/images/microsoft_logo.svg?x=ee5c8d9fb6248c938fd0dc19370e90bd | 13.107.246.53 | 200 OK | 3.7 kB |
URL GET HTTP/2secure.aadcdn.microsoftonline-p.com/ests/2.1.8148.16/content/images/microsoft_logo.svg?x=ee5c8d9fb6248c938fd0dc19370e90bd IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com CertificateIssuerMicrosoft Corporation Subjectsecure.aadcdn.microsoftonline-p.com FingerprintD4:8E:27:64:06:E3:A5:32:35:EF:30:22:30:78:9D:85:DF:68:95:62 ValidityTue, 27 Feb 2024 15:45:49 GMT - Fri, 21 Feb 2025 15:45:49 GMT
File typeSVG Scalable Vector Graphics image Hashd633a913e6f3b1f45774b9874dfc85e0 5ba1344048578062c93cfddfdf8458477eaca476 c1fbfbd9a81fc4d9c9539a65bdfb4c6738926b8d4681b0346706196413e92714
GET /ests/2.1.8148.16/content/images/microsoft_logo.svg?x=ee5c8d9fb6248c938fd0dc19370e90bd HTTP/1.1
Host: secure.aadcdn.microsoftonline-p.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 18:23:43 GMT
content-type: image/svg+xml
content-length: 1435
cache-control: public, max-age=604800
content-encoding: gzip
last-modified: Sat, 18 May 2019 23:35:05 GMT
etag: 0x8D6DBE974E70D87
x-ms-request-id: 11cb45d4-d01e-00b2-7217-966eca000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 20240424T182343Z-16c4f695cc5zbb4tvsgh6u01tc00000007tg000000005m3z
x-fd-int-roxy-purgeid: 50755578
x-cache: TCP_HIT
x-cache-info: L1_T2
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| x-boxed.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js | 104.21.64.217 | 200 OK | 7.9 kB |
URL GET HTTP/3x-boxed.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js IP104.21.64.217:443
Requested byhttps://x-boxed.com/50c91156-9ab8-49a3-b441-198d71a44934/6F$XeCY]a-|T$sI9V~CvY&~*R8,-D3clj[cl3vg|UaHV%7B[y(iMWvoctG5Y%3C1txC2K%7D9QlTiW95%7D%7BCHI8y-(H%607NgGEgzX8ACgekH]l$eHIHqRWs8u7%5EBUQE%3EYNTv%60Mtgm_emK.L1CncMG%7BG~g6FvAGUu-%7B]kVv**qih]b%7BG2UsdxZ|8y_brG8.%5E-GnS5FIBdNugLk])(RwhIY(%5ELhF74YWd]$Dw1HzMLC9QoGEZE4[cWsa&i$FwoM%5E%3E[k)poJ%3Cb/verify?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bCmo2cIK-IiyP-QzZF-DhnR-R1Vy8BbuDlQg_YvehM1j9nLKJyBH84VsTPwbNQl0utXI5rSxAEWifCmqG6zU3gDbh2jiAHIpUlzw9QrxTWXmOo3tGNFv6P0J8Bkc71sgVKaCy4MdnLvOI1kB7G9xhtHdiXjJrlRfc0waYmU6NTA5QFg43ECzsyb8ZP2&data=bdoolittle%40bti-usa.com CertificateIssuerGoogle Trust Services LLC Subjectx-boxed.com Fingerprint89:E7:BA:E3:CC:FA:96:5C:6B:62:8D:80:2A:B9:AB:A7:A6:2D:C6:D1 ValiditySat, 20 Apr 2024 08:13:04 GMT - Fri, 19 Jul 2024 08:13:03 GMT
File typeJavaScript source, ASCII text, with very long lines (7867), with no line terminators Hash3c235263e11b18d6962b2e325e6e9b03 3227e5f6985db09824378423e2aa694bc6fd2735 ecb9badd2ef04ccf868373eca13a4ec6e9cf40715a3d37b0fae2f1dd710e77a5
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js HTTP/1.1
Host: x-boxed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7sgojpu7ddl931efgs7npu3ipj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:23:44 GMT
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-content-type-options: nosniff
vary: accept-encoding
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qEdNYhopYUlJOvNtHovFPOJWPo%2BtPiSxh1dYV1wef7o3uFYASAW57l5Bc%2B0KWfzjRzqF4RirdpCQq0cAAAzMG2R19i9uvfsqPBz1H8mzYEMsNY6dSJ0ViFjvwpUGPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798204f888956b1-OSL
alt-svc: h3=":443"; ma=86400
|
|