other

malicious

e-commerce

Within the commercial generic top-level domain (.com), 'www.boxlunch.com' is registered, featuring subdomain 'www'. Count 8 characters in 'boxlunch' holding two vowels versus six consonants. Breaking it apart gives 2 words: box, lunch. Average segment length settles at 4 characters. 'box' is most common in English usage. You will also see it in Chinese (Pinyin) and Dutch contexts.

html/b6/eb/b6eb7997-192c-401c-8aea-793b6e57b7b1.html.gz

script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=YUoUUTypwfOQEYCrePjWViyo.E1IBk8UKHTc_CI92yI-1761956635-1.0.1.1-bGZoH4xlk00uyHB1SmhFS_zMxD8FrV3Iax9q7R1lzC2NtprSWCmNiONmKz699GfCQntRfQu1sZ_NBHYEuxxGPSUahk4hgW5mYDbV4e.uMYwYZkFOuuBga5f7Q5gL8.QBRGpQ0Ok1eIhE5VUsDGbSoYCbx8XkoujMojSINBCMqk5OHl3aEQ2uKnnZ9q5kj492; report-to cf-csp-endpoint

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Network Solutions, LLC

BOXLUNCH.COM

Abuse-C Role

Criteo Network Operations Center

CRITEO-MNT

CRITEO-EUROPE-INFRA

HSTS

Cloudflare Bot Management

Cloudflare

Untitled

✅ Low Risk - https://www.boxlunch.com/product/the-lord-of-the-rings-three-elven-adjustable-ring-set/35548019.html?srsltid=AfmBOoovGvA09AfF60MqBcRggXdl7-7iOCkNguCkxy_ZYqQPWGMMezge

Requests	IP Address	Location	AS Autonomous System
34	178.250.1.39	France	AS44788Criteo Technology SAS
3	3.161.82.89	United States	AS16509AMAZON-02
3	13.226.244.2	United States	AS16509AMAZON-02
3	65.9.175.66	United States	AS16509AMAZON-02
3	65.9.175.118	United States	AS16509AMAZON-02
3	104.17.137.184	United States	AS13335CLOUDFLARENET
3	142.250.186.100	United States	AS15169GOOGLE
3	35.190.43.134	United States	AS396982GOOGLE-CLOUD-PLATFORM
3	34.249.102.146	Dublin, Leinster, Ireland	AS16509AMAZON-02
3	3.171.214.104	United States	AS16509AMAZON-02
175	48	-	-

Security Scan Report: www.boxlunch.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History