Overview

URLmessage.okaynotification.com/js2/o/nw/nn_championstoday/index.html
IP 104.21.84.214 ()
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-11 21:53:11 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (14)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
r3.o.lencr.org (9) 344 2020-12-02T09:52:13Z 2023-03-10T05:09:10Z 3042 7977 23.36.77.32
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-10T05:10:00Z 782 2373 34.102.187.140
specializedlink.com (29) 65789 2020-01-03T12:18:07Z 2023-03-10T11:54:16Z 10615 72846 46.4.25.9
e1.o.lencr.org (2) 6159 2021-08-20T09:36:30Z 2023-03-10T11:39:59Z 676 1458 23.36.76.226
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-10T05:10:04Z 3246 57489 34.120.237.76
www.googletagmanager.com (2) 75 2013-05-22T04:07:37Z 2023-03-10T13:03:15Z 700 88892 142.250.74.168
www.google-analytics.com (2) 40 2012-10-03T03:04:21Z 2023-03-10T13:35:34Z 674 41370 142.250.74.174
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-10T05:10:02Z 606 127 44.236.232.139
message.okaynotification.com (5) 622378 2022-03-05T19:27:15Z 2023-03-09T09:12:37Z 1595 48476 172.67.197.41
ocsp.digicert.com (2) 86 2012-05-21T09:02:23Z 2023-03-10T13:49:44Z 682 1594 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-10T05:12:35Z 413 5844 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-10T05:10:00Z 333 229 34.117.237.239
ocsp.pki.goog (3) 175 2018-07-01T08:43:07Z 2023-03-10T05:11:10Z 1029 2097 142.250.74.3
sms.okaynotification.com (2) 0 2022-06-05T01:27:25Z 2023-03-09T09:02:35Z 850 1498 104.21.84.214

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-11 medium sms.okaynotification.com/js2/o/nw/nn_championstoday/index.html Malware
2022-11-11 medium sms.okaynotification.com/js2/o/nw/nn_championstoday/inc.js Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.21.84.214
Date UQ / IDS / BL URL IP
2023-05-24 17:29:08 UTC 0 - 0 - 3 undefined.okaynotification.com/js2/v/oscars/i (...) 104.21.84.214
2023-03-07 22:52:48 UTC 0 - 0 - 2 ewwtghtyfg.cfd/ 104.21.84.214
2023-03-03 06:17:20 UTC 0 - 2 - 32 xsuit-godboys.my.id/?fbclid=PAAaaMA1aexFZH6uK (...) 104.21.84.214
2023-02-08 17:24:00 UTC 0 - 0 - 2 readnow.okaynotification.com/js2/o/nw/n5/inde (...) 104.21.84.214
2023-01-18 08:05:55 UTC 0 - 0 - 4 message.okaynotification.com/js2/v/n/squirted (...) 104.21.84.214


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-05-30 13:58:39 UTC 3 - 0 - 4 goth00dynssl.com/ 188.114.97.1
2023-05-30 13:58:21 UTC 0 - 1 - 0 yaepo.paidjump.top/ 172.67.209.22
2023-05-30 13:56:09 UTC 0 - 0 - 11 allofficepage.msnrdr02.com/?email=zpaulson@gr (...) 104.21.57.9
2023-05-30 13:55:57 UTC 0 - 2 - 0 urlp.cc/4qdrm64bh2j1 104.18.21.5
2023-05-30 13:55:45 UTC 0 - 0 - 1 t4.propelhive.org/aff_c?offer_id=437&aff_id=1 (...) 172.67.181.47


Last 5 reports on domain: okaynotification.com
Date UQ / IDS / BL URL IP
2023-05-27 05:42:42 UTC 0 - 0 - 1 argument.okaynotification.com/ 188.114.97.1
2023-05-27 01:27:52 UTC 0 - 0 - 3 decrease.okaynotification.com/js2/o/gp/en/n1/ (...) 188.114.97.1
2023-05-27 01:27:19 UTC 0 - 0 - 2 new.okaynotification.com/js2/o/gp/en/n1/index.html 188.114.96.1
2023-05-27 01:25:47 UTC 0 - 0 - 4 communication.okaynotification.com/js2/t/vide (...) 188.114.97.1
2023-05-27 01:25:39 UTC 0 - 0 - 4 note.okaynotification.com/js2/t/video3/index.html 172.67.197.41


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-29 09:20:16 UTC 0 - 0 - 7 message.okaynotification.com/js2/o/nw/nn_cham (...) 188.114.97.1
2022-11-27 02:42:26 UTC 0 - 0 - 4 message.okaynotification.com/js2/o/nw/nn_cham (...) 104.21.84.214
2022-11-11 20:19:00 UTC 0 - 0 - 3 message.okaynotification.com/js2/o/nw/nn_cham (...) 104.21.84.214
2022-11-08 06:57:36 UTC 0 - 0 - 2 message.okaynotification.com/js2/o/nw/nn_cham (...) 172.67.197.41
2022-09-15 11:32:14 UTC 0 - 0 - 1 message.okaynotification.com/js2/o/nw/nn_cham (...) 104.21.84.214

JavaScript

Executed Scripts (6)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (67)


Request Response
                                        
                                            GET /js2/o/nw/nn_championstoday/index.html HTTP/1.1 
Host: message.okaynotification.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             172.67.197.41
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Date: Fri, 11 Nov 2022 21:53:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 09 Oct 2020 15:47:14 GMT
Vary: Accept-Encoding
Expires: Sat, 11 Nov 2023 21:53:00 GMT
Cache-Control: max-age=31536000
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8uGneRZhv%2Fe0LC24Mq9wRG9UL1yvaWYkeeQn5047q4FCF4E4QXvoN9l8fLqsHcaEHqJi0KWPiY%2Fb9XjknJ4JOi%2B9%2FnpL180yLZpPfM4OxC%2B7VG0U%2FU%2Bu%2BDFfVkgN86NAHtUQjB1%2FwI5wyDFvsyoY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 768a42180d3ab4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (953)
Size:   2930
Md5:    a6908c020f8c06003e62e0d9eb589a39
Sha1:   1ce5c7fdf4f95791947f9c90b4e9ba2af6706ad0
Sha256: 7982a69de90fb6beb2db7aa34802821fd85121a6eab37eeca86220efe90c90ab
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7209
Expires: Fri, 11 Nov 2022 23:53:09 GMT
Date: Fri, 11 Nov 2022 21:53:00 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5926
Cache-Control: max-age=137833
Date: Fri, 11 Nov 2022 21:53:00 GMT
Etag: "636e247f-1d7"
Expires: Sun, 13 Nov 2022 12:10:13 GMT
Last-Modified: Fri, 11 Nov 2022 10:31:27 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 11 Nov 2022 21:43:57 GMT
cache-control: public,max-age=3600
age: 543
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4736bac84ca28f2b1e961159fb4ea098
Sha1:   1319612979f53896fcfeacd4215c2715d4951e4c
Sha256: 5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "ED5C27510100FFC4481BE474EBCB020D147C645BEB110604D5284EEEB8B97C02"
Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10379
Expires: Sat, 12 Nov 2022 00:45:59 GMT
Date: Fri, 11 Nov 2022 21:53:00 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: WHuVMqb2gHn30B1sb8u4cdDpHNl0ljzWvbbGHbWGSjqJUa/G0jeDYEfm/2p6hy4yEgPiERSJwh0=
x-amz-request-id: F2TR67WF1QG6SESQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 11 Nov 2022 21:12:43 GMT
age: 2417
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /js2/o/nw/nn_championstoday/inc.js HTTP/1.1 
Host: message.okaynotification.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

                                        
                                             172.67.197.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Fri, 11 Nov 2022 21:53:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 16 Aug 2021 15:15:52 GMT
Vary: Accept-Encoding
ETag: W/"611a8128-3385"
Expires: Sat, 11 Nov 2023 20:18:49 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 5651
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3NH6KXuoSsOMkzKbtVdoK1pMewBNENmWmond5KU9lcrNBcK140X9%2FSXyrqwYdnmVicZYakkzn47o0uTb2emNHq9CNL8ocstg4XQyHLEzsd1GFPa2AbG2QNFZTNm%2BaijH%2Foh3943dIAUFGcoW9j7t"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 768a4219df7bb4f4-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   3427
Md5:    ed5a3fd7626d36e257fb84f471df44e2
Sha1:   c96ed2e9b67ab61c2496acf4d523002801ce239e
Sha256: b53e5fad7a35e79d2fe487f70a5e6056cd97d334d740824b1e3f751d7d766c2f
                                        
                                            GET /js2/o/nw/nn_championstoday/imgs/warning.png HTTP/1.1 
Host: message.okaynotification.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

                                        
                                             172.67.197.41
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Fri, 11 Nov 2022 21:53:00 GMT
Content-Length: 6816
Connection: keep-alive
Last-Modified: Thu, 21 May 2020 16:38:53 GMT
ETag: "5ec6ae9d-1aa0"
Expires: Sat, 30 Sep 2023 19:45:55 GMT
Cache-Control: max-age=31536000
CF-Cache-Status: HIT
Age: 3636425
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gdh4Fn4I0fX5XPVl9YAD94qxmSRl6ZeFUArGw7VSV%2BeQtVVwFYeIBQ%2FMuRbmOrL8KXJPP5G3BSZt6EBUi3G00sXBYrQxtL96JhoLh%2FYNdbtaTlLIB0NB3DhI96f7dujR68mxl5Kz5pfxrCuO2fGy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 768a4219e9a0b4f1-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   6816
Md5:    823ab8b66356d28a336f30fa1cf34936
Sha1:   20cc45ded8c972483cef6659d63d20a8dfcf98f0
Sha256: b6ab13a0b83b383454496eb435ba062a85720494d1eb8ae0b47403ce2828b1e4
                                        
                                            GET /js2/o/nw/nn_championstoday/imgs/3.jpeg HTTP/1.1 
Host: message.okaynotification.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

                                        
                                             172.67.197.41
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Fri, 11 Nov 2022 21:53:00 GMT
Content-Length: 31502
Connection: keep-alive
Last-Modified: Thu, 21 May 2020 16:38:53 GMT
ETag: "5ec6ae9d-7b0e"
Expires: Sat, 30 Sep 2023 19:45:55 GMT
Cache-Control: max-age=31536000
CF-Cache-Status: HIT
Age: 3636425
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4PCAnpujEjbVl21yd5iOnd9zkvcXVru%2BOSs%2Byn45Ou6aAQ9jvcC9dfuhBIfibpspDoe4q%2Bu4P8d%2FCR9ctXqQB7ff%2BzLXvymllvZ%2FbBXapX3Y8iY1N6z8DRdYfSPOBdFDjyGL1T9ShmjHmmMko0WG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 768a4219ef41b50b-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 476x341, components 3\012- data
Size:   31502
Md5:    6e4de3a55bb7b5ba34176fa51c40293c
Sha1:   7f9f8051f534f6a352d6b177cd713eda96a5b706
Sha256: 59b2084b73a17e4c5d978b2ca48ecbf69db4a52e0a6a888e68a02cda70c13240
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Fri, 11 Nov 2022 21:53:00 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 21:53:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=UA-117424918-2 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 11 Nov 2022 21:53:00 GMT
expires: Fri, 11 Nov 2022 21:53:00 GMT
cache-control: private, max-age=900
last-modified: Fri, 11 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43686
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   43686
Md5:    635ddb91f2cf901ee2564844eeec70e7
Sha1:   771e05b6af94eee711ec97c9d60bc7e8d1110cf9
Sha256: 3321e8c46b2e94f7e2962b60f5d953eb15f8480a2523fb77f96d0ad250461490
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 21:53:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6B4ED580D5B37FEE5964ABB05F50D2C125D3B3DBCDCDA8773668D9CEF969B79E"
Last-Modified: Fri, 11 Nov 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 12 Nov 2022 03:53:00 GMT
Date: Fri, 11 Nov 2022 21:53:00 GMT
Connection: keep-alive

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://message.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:00 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://message.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: message.okaynotification.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: jjj=1

                                        
                                             172.67.197.41
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                            
Date: Fri, 11 Nov 2022 21:53:00 GMT
Content-Length: 1
Connection: keep-alive
Last-Modified: Wed, 22 May 2019 17:07:05 GMT
ETag: "5ce581b9-1"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 4695
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1hq7A3u%2BP%2F8TWVhfkDuKUDmZ%2FnPyvLgQQae0L8Bduj7nh9x%2FT2TqSm6yb9eqb5PKD1MQH%2FhkAh%2B5%2F4QJKyzuyodraVpDY5oZXsTXl%2BxNufgAIFN5gdL3FtoM6y%2FGsu3IBUqVofl%2FCTHQnlFJtJGw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 768a421c5a2fb50b-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    68b329da9893e34099c7d8ad5cb9c940
Sha1:   adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
Sha256: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 11 Nov 2022 20:41:09 GMT
expires: Fri, 11 Nov 2022 22:41:09 GMT
cache-control: public, max-age=7200
age: 4311
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "DC0FE04DE130DE0E59CDECB8EE032222796B479BD0C8FF3A1CF211016C438D65"
Last-Modified: Fri, 11 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15949
Expires: Sat, 12 Nov 2022 02:18:49 GMT
Date: Fri, 11 Nov 2022 21:53:00 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 11 Nov 2022 21:24:58 GMT
cache-control: public,max-age=3600
age: 1683
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "DC0FE04DE130DE0E59CDECB8EE032222796B479BD0C8FF3A1CF211016C438D65"
Last-Modified: Fri, 11 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15948
Expires: Sat, 12 Nov 2022 02:18:49 GMT
Date: Fri, 11 Nov 2022 21:53:01 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 21:53:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6000
Cache-Control: max-age=132831
Date: Fri, 11 Nov 2022 21:53:01 GMT
Etag: "636e10ac-1d7"
Expires: Sun, 13 Nov 2022 10:46:52 GMT
Last-Modified: Fri, 11 Nov 2022 09:06:52 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /gtag/js?id=UA-117424918-2 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 11 Nov 2022 21:53:01 GMT
expires: Fri, 11 Nov 2022 21:53:01 GMT
cache-control: private, max-age=900
last-modified: Fri, 11 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43680
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   43680
Md5:    62b63e2ed67907ad7e118d71acf71ee6
Sha1:   d069d637f8ac8b5611ae31c49c0c159dcdc5079c
Sha256: 83439a9dce35b5fdb6db4f3126230bbcbc2be009f13c812e12c36ed28ca3cec3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6B4ED580D5B37FEE5964ABB05F50D2C125D3B3DBCDCDA8773668D9CEF969B79E"
Last-Modified: Fri, 11 Nov 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21599
Expires: Sat, 12 Nov 2022 03:53:00 GMT
Date: Fri, 11 Nov 2022 21:53:01 GMT
Connection: keep-alive

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sms.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:01 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://sms.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 11 Nov 2022 20:41:09 GMT
expires: Fri, 11 Nov 2022 22:41:09 GMT
cache-control: public, max-age=7200
age: 4312
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Y8Aga106gRn0QmLk1K2SKQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             44.236.232.139
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DN/9i94hypa9SGlW6xU+RO9TIUc=

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://notice.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:01 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://notice.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sms.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:01 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://sms.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://notice.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:01 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://notice.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://click.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:02 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://click.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   6302
Md5:    74f103de2713afeddac08073bd676562
Sha1:   d7427599606f017f7b91381b905b5601945973ed
Sha256: 08fc28145c7608a46c1bc3c2cc3a30ac08dc1ea9c5434e0ff7547f71ba005ed9
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://update.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:02 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://update.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   2875
Md5:    2f9dd5daf18526054e45d8abb537b513
Sha1:   7a760bd5a7422322ccf71b0a1e5772ed3ee2e726
Sha256: 7cd65b71b4975db0cb51f01e419d80c5da3911ae7e1f9da37d6a05a60b5b8573
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://now.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:02 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://now.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3072
Expires: Fri, 11 Nov 2022 22:44:14 GMT
Date: Fri, 11 Nov 2022 21:53:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3072
Expires: Fri, 11 Nov 2022 22:44:14 GMT
Date: Fri, 11 Nov 2022 21:53:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3072
Expires: Fri, 11 Nov 2022 22:44:14 GMT
Date: Fri, 11 Nov 2022 21:53:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3072
Expires: Fri, 11 Nov 2022 22:44:14 GMT
Date: Fri, 11 Nov 2022 21:53:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3072
Expires: Fri, 11 Nov 2022 22:44:14 GMT
Date: Fri, 11 Nov 2022 21:53:02 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6f7d2f5-4807-4bbd-a3db-7a239962aca5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5583
x-amzn-requestid: e844f42a-e87e-4e61-8c97-137c07c5ae28
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNeQ9Ho7IAMF5_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63687739-62c44d2f7d23632e74895bd8;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 03:10:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uHlIN1IVGCFUVl5lx5pFSux0YncseT2HQjiwFDL9eaEaBa9CdnCl8g==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 07:47:38 GMT
age: 50724
etag: "691f59b65ca9fde4f59bbf96b37071e07351f190"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5583
Md5:    85c6f450b38f41a2fb924d6d9a9cbff8
Sha1:   691f59b65ca9fde4f59bbf96b37071e07351f190
Sha256: c8f877488a2cf65f0d9829384fd4113847722a1b4df94b6b1d5788699689722c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4094512-9a5a-47aa-9796-9f630fb1c13f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8581
x-amzn-requestid: 385174fe-153f-448f-be5e-9ea3b5757ff9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ4u1EYOIAMFncA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d6e5e-6084a34f58df22037275e676;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 21:34:22 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MhIq0Vdxah99pPo_O7gkhrq9Nekkxld2lv0955wr0yJzcP3g6LAH8g==
via: 1.1 dfc972676b24a6d23251d4f298dfa08c.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:47:09 GMT
age: 353
etag: "e0d1ebb35a16c686eae3d31eb85ac72278459b05"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8581
Md5:    13f7b6eea163326da8c58ae5c09efccd
Sha1:   e0d1ebb35a16c686eae3d31eb85ac72278459b05
Sha256: 13f2f428acb7806808d957a8167ab2c139a5d0f59798671465717f2b39b914a9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e7dc40a-e47f-44b5-b3b4-87b10cd8669d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10671
x-amzn-requestid: 1b6053eb-64ac-4c24-a750-c1b8cd69157f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJEh8GxPoAMFhPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366b472-56c6a3bc07ec89ab56d4f3bd;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 19:07:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qJeWGvC4DM_d3k66OHN2V19elou-xoSNkep1BNalBO0NtKyQtAFzNQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 04:30:53 GMT
age: 62529
etag: "5fe340bf33ac219f6a3d44810f31d0a8796c83a9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10671
Md5:    e72f32944d6f03e005f7b6f3e87d8c72
Sha1:   5fe340bf33ac219f6a3d44810f31d0a8796c83a9
Sha256: bcdcba30210d276996d0fe749bbfc69d666ae11ddfbfdb57307e4bb4d6e43d1f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c9847f2-3b5e-4950-9792-a512af36da58.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6517
x-amzn-requestid: 7884aa37-c94f-49d4-b6a4-c6bd66026d2c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apxD3EeYIAMFYAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a2ee5-337e8e0949f5020713fcab58;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 07:10:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kXRfJbLr7ErTvJIW0rjpcqxHA0zvN6XOPrszlIzXBgaJkJGWzkoyGw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:48:37 GMT
age: 265
etag: "96de8f2627e1103c5e6beb5d64cdbc09f97fce82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6517
Md5:    f29164fb4dd64d9ce60566fbebd40f0a
Sha1:   96de8f2627e1103c5e6beb5d64cdbc09f97fce82
Sha256: 8eba6095edfed1ee1402c050727f81b8a9942625fd1c9cbb3bac4e51ee178577
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad1abae5-6437-44bf-8428-756b825e5be6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8294
x-amzn-requestid: 5dab4522-fca9-4ada-ad6f-3305c9686315
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ4u3H7PoAMF02g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d6e5e-756c150c40fe6fff3ae7a609;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 21:34:22 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FXIS1Gr_-3RUm6WPZCVcjaefD3hehHV-IwO-ieFeUqeoPAE7vajlsg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:47:09 GMT
age: 353
etag: "815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8294
Md5:    88c9931a009690991e73c5b37a1aa085
Sha1:   815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0
Sha256: 74e70391889e4b46742033b1d5daccfec415ba2ee999e429d1013fd4a1ebc61a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5530631-4859-4685-8ab3-a5b1013cd2cb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 11527
x-amzn-requestid: a2a00c3d-12f7-412b-ba02-6bda7aa60586
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNfYZHXhIAMFVYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63687902-593d2a380bac7a567af893d3;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 03:18:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: -4aHIcRGJA05uxZs2HkLI5SBdino1x_a5dIH9soWfxKe1mVNhwpglA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 09:59:00 GMT
age: 42842
etag: "d43bb27911013930ed09d9609a71d737e0838556"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11527
Md5:    1ae1fe42d639643009ccee5a7ef770fd
Sha1:   d43bb27911013930ed09d9609a71d737e0838556
Sha256: d5fc8515f49a0b90e083f6a6025c3dc71dba286e15d5b3f841772d60d2e68fb2
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://read.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:03 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://read.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://readnow.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:03 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://readnow.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   3427
Md5:    7fc5576d175afdea4495ab0925461c51
Sha1:   226e387d8ce9bea75932cb7bd8d94528b6938315
Sha256: 2fba28bc5b21d2d983e1833335de896babb3f75d82e711f3706446a44ce65b92
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://unread.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:03 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://unread.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://first.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:03 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://first.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://clik.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:04 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://clik.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   3427
Md5:    7fc5576d175afdea4495ab0925461c51
Sha1:   226e387d8ce9bea75932cb7bd8d94528b6938315
Sha256: 2fba28bc5b21d2d983e1833335de896babb3f75d82e711f3706446a44ce65b92
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://information.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:04 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://information.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   3427
Md5:    7fc5576d175afdea4495ab0925461c51
Sha1:   226e387d8ce9bea75932cb7bd8d94528b6938315
Sha256: 2fba28bc5b21d2d983e1833335de896babb3f75d82e711f3706446a44ce65b92
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://important.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:04 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://important.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   3427
Md5:    7fc5576d175afdea4495ab0925461c51
Sha1:   226e387d8ce9bea75932cb7bd8d94528b6938315
Sha256: 2fba28bc5b21d2d983e1833335de896babb3f75d82e711f3706446a44ce65b92
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://big.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:05 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://big.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   3427
Md5:    7fc5576d175afdea4495ab0925461c51
Sha1:   226e387d8ce9bea75932cb7bd8d94528b6938315
Sha256: 2fba28bc5b21d2d983e1833335de896babb3f75d82e711f3706446a44ce65b92
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://crit.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:05 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://crit.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   3427
Md5:    7fc5576d175afdea4495ab0925461c51
Sha1:   226e387d8ce9bea75932cb7bd8d94528b6938315
Sha256: 2fba28bc5b21d2d983e1833335de896babb3f75d82e711f3706446a44ce65b92
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://directive.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:05 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://directive.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   3427
Md5:    7fc5576d175afdea4495ab0925461c51
Sha1:   226e387d8ce9bea75932cb7bd8d94528b6938315
Sha256: 2fba28bc5b21d2d983e1833335de896babb3f75d82e711f3706446a44ce65b92
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://letter.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:06 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://letter.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   6302
Md5:    74f103de2713afeddac08073bd676562
Sha1:   d7427599606f017f7b91381b905b5601945973ed
Sha256: 08fc28145c7608a46c1bc3c2cc3a30ac08dc1ea9c5434e0ff7547f71ba005ed9
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://memo.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:06 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://memo.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   9177
Md5:    256a580b3a8bb02f6d8701c921419663
Sha1:   c0bc6650b289cad823c9f02e2bf92d1e513047ce
Sha256: 427deee1c552281fc6e0e474419e430f18937b022549b6587219662eedd06f1a
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://memorandum.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:06 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://memorandum.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:06 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://news.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   3427
Md5:    7fc5576d175afdea4495ab0925461c51
Sha1:   226e387d8ce9bea75932cb7bd8d94528b6938315
Sha256: 2fba28bc5b21d2d983e1833335de896babb3f75d82e711f3706446a44ce65b92
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://note.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:07 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://note.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:07 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://word.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cannonball.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:07 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://cannonball.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   2875
Md5:    2f9dd5daf18526054e45d8abb537b513
Sha1:   7a760bd5a7422322ccf71b0a1e5772ed3ee2e726
Sha256: 7cd65b71b4975db0cb51f01e419d80c5da3911ae7e1f9da37d6a05a60b5b8573
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bulletin.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:07 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://bulletin.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://warning.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:08 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://warning.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://alert.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:08 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://alert.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  data
Size:   3427
Md5:    7fc5576d175afdea4495ab0925461c51
Sha1:   226e387d8ce9bea75932cb7bd8d94528b6938315
Sha256: 2fba28bc5b21d2d983e1833335de896babb3f75d82e711f3706446a44ce65b92
                                        
                                            GET /c.php HTTP/1.1 
Host: specializedlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://communication.okaynotification.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             46.4.25.9
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 11 Nov 2022 21:53:08 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://communication.okaynotification.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /js2/o/nw/nn_championstoday/index.html HTTP/1.1 
Host: sms.okaynotification.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             104.21.84.214
HTTP/2 200 OK
content-type: text/html
                                            
date: Fri, 11 Nov 2022 21:53:01 GMT
last-modified: Fri, 09 Oct 2020 15:47:14 GMT
vary: Accept-Encoding
expires: Sat, 11 Nov 2023 21:53:01 GMT
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jSotxPeUXhyKB3xZJeMd9xHFscsMR3%2BKsx7IdTI983nKxX4m1jzY5YVAN%2BtHuvJnQ3MlIxjGA51TQgi7DbYokEWeWm4e56LzoV6fSh8pHijqUmEa2NCyfLZoI6CQDE2XYsgiM%2B4LyToglJ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 768a421d58700afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - fortinet: Malware
                                        
                                            GET /js2/o/nw/nn_championstoday/inc.js HTTP/1.1 
Host: sms.okaynotification.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.21.84.214
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 11 Nov 2022 21:53:01 GMT
last-modified: Mon, 16 Aug 2021 15:15:52 GMT
vary: Accept-Encoding
etag: W/"611a8128-3385"
expires: Wed, 04 Oct 2023 21:28:49 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3284652
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W4cNxzB0RyocAqxl6KcBF7NiGMOWuO6BiIzfuJeId4PG9TeSrKOCP6oJSZhwRihinb8PWQzhnPYxdhDXG8v7PHqjVueLjpb5SFxp4MKrVQ0CT7yjg7dDKvPdvvvRzpbvgf9vBcIkqvOCAZA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 768a421e49870afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - fortinet: Malware