GET /click.php HTTP/1.1
Host: threatnotify.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Jul 2025 04:42:03 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
strict-transport-security: max-age=31536000
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=GiiMOLY4zdN98mnGFnMgpCdkxwuth0k7hsy4jp%2BnidxrH8q8r7b2O4dA7IIBHexvoh60a9qglhaSak93I2UxEJ7FYArUroaAp4eUbqYA4g%3D%3D"}]}
cf-cache-status: DYNAMIC
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server-timing: cfCacheStatus;desc="DYNAMIC", cfEdge;dur=14,cfOrigin;dur=171
content-encoding: br
cf-ray: 96178ccb6c6956a3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: threatnotify.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://threatnotify.help/click.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Jul 2025 04:42:04 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
strict-transport-security: max-age=31536000
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=XzNsKNGq8%2BAM1txlcZHKkG7mfhYVG4EhKYqxyRKUKO50LKx2TCilc68lPqGNr5SH5bmJqI0%2FNZuTkrTJuRmNvDsuPf6g4OGGVeC2KpyN7w%3D%3D"}]}
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Sat, 19 Jul 2025 04:42:04 GMT
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
content-encoding: br
cf-ray: 96178ccede3956a3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2