ModHeader: Covert Data Exfiltration to api.stanfordstudies.com

ModHeader browser extension silently exfiltrates browsing history to api.stanfordstudies.com using AES-GCM encrypted IndexedDB. Full reverse engineering analysis.