walter-larence.com/930d73d8-518c-4b72-abde-919d336d6369/2
18.193.146.82302 Found 0 B URL User Request GET HTTP/2 walter-larence.com/930d73d8-518c-4b72-abde-919d336d6369/2
IP 18.193.146.82:443
Certificate IssuerLet's Encrypt
Subjectwalter-larence.com
Fingerprint68:03:79:D9:A0:7F:E4:02:56:2B:FE:6D:ED:3E:B4:E7:06:A6:D4:84
ValidityFri, 24 Nov 2023 06:53:56 GMT - Thu, 22 Feb 2024 06:53:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /930d73d8-518c-4b72-abde-919d336d6369/2 HTTP/1.1
Host: walter-larence.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sun, 03 Dec 2023 15:40:31 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://happy-u.vip/free-spins-ke?cep=kgScPT_0yUlmyhTBqTZEQw7ABqugWmd6qO8s_Y2RSES1M1xLvr8SeYkHW5NJ7YweoKYeh1DyHTOu-EOYfJUSWwD_RsNEz6Oo5Tw4gJRaAysOyc9v4BkNLSGoxqtPOQbmIwEd08-ieL6FyC-l_UiNixejgkX4zmg4oMF1Xl6fGbbfX3sLpQwytrPXgIXoVJ52ugrUm7ejnB8-wruGnnPI8ZFusF66mQr2woj7v-NXbysXprYt7DSfpuUGBwKIVMAu2i0xxDIluk9lsCqAEL3TNvKhySYUYPL7EAGldLYiml6bebX4HzhvAN8W33ZgcYTIopxqZEnzwx9h1ERw9ypgp8ZxbBLIoD8CfXLrj5AUvXPjZKVaJ3knKU5BT4zGRSgX&lptoken=173e0110616898323190
pragma: no-cache
set-cookie: 930d73d8-518c-4b72-abde-919d336d6369-v4=_qU2WqK9DCYmPYpejo7-gBJeFM-dC_CIhjp890SZ0hY; Max-Age=86400; Expires=Mon, 04-Dec-2023 15:40:31 GMT; Domain=walter-larence.com; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=kuFH8RAgebe8EMJWzawPAkYLVmRViGJyFqBf4sf6CE_ZMVm7h726VdeCoQNVnthOtU2ZrM4u5mTMmN4_8vafZajdJjGgzZMa0QCqe2KUvvNg0eHDN7uwBk_esc03c8Y-UHyYJS1Sp_gvQjLMkSa73v8DywLvTch3EVrWwhEym33aiDw7DH_xosunvLpdVENBnqhiQgFpjA76E0kZtY8N2YeORUhObBIWlUOaHRMlQ02RUtKfZ-JtN-YlHlWt65dfTDL3aG4ugG-qYRuzqcs3kMwLNsz4BQhKFC2U1GDlvwryHc39UivhqaQtrs7sXA6eeQANoYtEJRoRy0pkO_Ei-DwkIddoqeLomtNI-Jiz5oAk9AQ9DTSuoSD_CuJZdxMt; Max-Age=86400; Expires=Mon, 04-Dec-2023 15:40:31 GMT; Domain=walter-larence.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
assets.landerlab.io/base.css
54.230.111.125200 OK 8.7 kB URL GET HTTP/2 assets.landerlab.io/base.css
IP 54.230.111.125:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerAmazon
Subject*.landerlab.io
FingerprintCA:55:A0:91:66:D2:49:1D:74:D9:90:B0:7E:D2:4C:B1:3A:0C:10:78
ValidityWed, 28 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (8731)
Hash 7f6de4e86d84bcbfd919f155e7545439
e7d9a7a418519c3fbce6de3c85775087cba93b49
8d8c59c2712df25a26ecd01739496e49c3514a9341fa3cd21cfa98627ba6efa2
GET /base.css HTTP/1.1
Host: assets.landerlab.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 8732
date: Sat, 02 Dec 2023 17:08:13 GMT
last-modified: Sat, 29 May 2021 19:05:04 GMT
etag: "7f6de4e86d84bcbfd919f155e7545439"
x-amz-version-id: 0sEXTlrAazg9KkJm7sv1lqt808WfgxiL
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k5ZljJwwAzfGOfkCPbJt-93YW_t00ZpSro5uXdgix6r1oH6GE1PMBg==
age: 81139
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fimages%2FCA.png
104.21.93.229200 OK 36 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2FCA.png
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash d94d1d2fc9120c693a66d99b01362e24
465d9725e53ec9a6e4bf2a8e26fb4b5b7e01562d
0b5f254d8aba31c96211fbd731c9f5984973c203135435f5430cf05c542b5b70
GET /free-spins-ke%2Fimages%2FCA.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 15:40:31 GMT
content-type: image/png
content-length: 36535
x-amz-id-2: 7HfX9lbJ7Cmg6mH4DLb5XwhU+HjntwxWo8PyphUBBhZMK1nmtIYHOgLhpPiItXeGRQ3iw4snQfo=
x-amz-request-id: 6DWEP1G0E02KWVDZ
last-modified: Thu, 02 Jun 2022 12:59:31 GMT
etag: "d94d1d2fc9120c693a66d99b01362e24"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4gnk%2FBaDJN5ZFL9IR37Og1GhuVJ9o%2FfKeClvrObIUXjAnJNbEXtWW0MLiGvSjXMMwvk%2Bs9bcBTGoTud0RybvKmDSTqt6sILiEC8aO9TRWR05Vz7fjuYjLdNfPGn6Cw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89adc0bb51d-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-start.png
104.21.93.229200 OK 26 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-start.png
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash f491647556e492de92530b48827690aa
6296c44299f5acb17cb2c06e37391a70672b1fd3
efb819d37f19ec7505d9602488ce97868d84e1c7929ce83e308e23f02d97b95d
GET /free-spins-ke%2Fimages%2Fslot-start.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 15:40:31 GMT
content-type: image/png
content-length: 26084
x-amz-id-2: HoDHrjce/VcUU2zhtpaxwQMlFMDYwWay3DqWtxcO7JGbjsNHPukTFTtad9pghVuRvpDzJffi4f4=
x-amz-request-id: 419H7YTW900JZRM6
last-modified: Thu, 02 Jun 2022 12:59:33 GMT
etag: "f491647556e492de92530b48827690aa"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r5eHf0U3C48jng%2FevQbTsdFogXvG%2FGoSfCazWgPIMEIyafWUdYCRPMJ6fELOoAbdXTUjoNA4GX%2B9y%2FBPfGYRSXqVBoc3ulPSSMIwyWZJ5DUgu%2F3wt7ENPVQJkGS1fQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89adc15b51d-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-spin.gif
104.21.93.229200 OK 88 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-spin.gif
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type GIF image data, version 89a, 410 x 279\012- data
Hash 617c16c5e04c8603dd7f157862b1c682
1306296f9a666a7fc50f339a2a924ce8a3a18169
7f8e36cf7ac437d7c42440ef5f522c8e27adb06348b573192308038fa7c1dc7e
GET /free-spins-ke%2Fimages%2Fslot-spin.gif HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 15:40:31 GMT
content-type: image/gif
content-length: 87599
x-amz-id-2: mCh89CwmCzbWod4ck4O3wABtTAli/lNbG0dVvfKhM4+/gzKdlmJGgcKeWuI0Oq4ZLRRCUIp3n8k=
x-amz-request-id: X3RQSTKNRWZ2PYKT
last-modified: Thu, 02 Jun 2022 12:59:34 GMT
etag: "617c16c5e04c8603dd7f157862b1c682"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=txVluNn0nnKoqnWpo1djfrolFgOPb%2B%2BSNWlvIw7taYSjzmR%2BWQF4%2Fy0HKwKddYry5cuy49sXCDDNjUFUGhhPI6JaLkVS87AFTga70cWFMZiw1Rca10r7N6BKevz39w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89adc19b51d-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-1.png
104.21.93.229200 OK 20 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-1.png
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 1fbd2b26e61236d5bcfdfeb6adbd2c8c
c9034272d28dab018b73f1967a679c734f987a1f
c402c36eb8d623b618261d40846e63c130de1e78720ab5578eae1d645198c963
GET /free-spins-ke%2Fimages%2Fslot-result-1.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 15:40:31 GMT
content-type: image/png
content-length: 20370
x-amz-id-2: HkwJmvNgaOkjw1PA9RpupDjH4UkIsuIFFHorbuyA0s/u8YOJYS/8HbAu7MBYrKW6DR4MMnGLRNo=
x-amz-request-id: CT282MX3CJX4HS43
last-modified: Thu, 02 Jun 2022 12:59:32 GMT
etag: "1fbd2b26e61236d5bcfdfeb6adbd2c8c"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1OH%2BWaT5ocO39Ox5bIv8%2BUO2KyJpuQEQ6AZEr6uECEo%2Fa1Os6XpG5MZ%2FosasWY5FAYASxtIEoPwDsY8zGX%2FOnrl4oQ7H2jMKNYe7C1BAAQX9IKMYDeTkgSDhHZQ3gQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89adc1ab51d-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-2.png
104.21.93.229200 OK 27 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-2.png
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash b6ca0bfea4d0cec334f128f5c2c44cff
f6dc006902542a929187af718d9f6a244e5472b5
b09b477eb93ed896b8e52a2f746e435695dbef2a1259987bae4fbea3c35b5435
GET /free-spins-ke%2Fimages%2Fslot-result-2.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 15:40:31 GMT
content-type: image/png
content-length: 26733
x-amz-id-2: y7wLKizm6HURVWdAVwQkz+/JUOUvLy8yLpQspIqxekaIvZtO8L5P+1Vnib608WLCDxZycK5BrgA=
x-amz-request-id: X3RZ50XRVGY8RAGQ
last-modified: Thu, 02 Jun 2022 12:59:32 GMT
etag: "b6ca0bfea4d0cec334f128f5c2c44cff"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bInjFSy9KJwAVWs6C9WLARndzYYcWOBdQhp0O0C3W11N4ABvFfBqIOk5eI8DWoCaRyT2grW9T7NLq1rdPhFZPCGOg87opUdiMI3%2F6xUyGduQSdoug5e%2BHDYO0OHDWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89adc1cb51d-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-win.png
104.21.93.229200 OK 14 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-win.png
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 939b6a73c96383ac0842317037f3a0f0
0654b62431c8ba522833950b8166d7a16e2a6b56
b8f1ec0ac028bd024af2cf57b63b07069b2f4a41e61c1577e968ca5d7ba72837
GET /free-spins-ke%2Fimages%2Fslot-win.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 15:40:31 GMT
content-type: image/png
content-length: 14391
x-amz-id-2: SLS92mdgsZig22sKXdMlx61oNkcnPCOsDPl2yf9nlHeKlmdHBv31DymwVlgV3hZGvUcqibOQ9/w=
x-amz-request-id: X3RSNTGS2ZHA3T7H
last-modified: Thu, 02 Jun 2022 12:59:33 GMT
etag: "939b6a73c96383ac0842317037f3a0f0"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ykFDUwRiDk3ue2AtXl%2BJ95an1%2F8QK11zyfmFSmlCJ8xTrxDwQExzlcQnoQgDvPp9DK66FllokNuCz7Hv5luEnlss%2BvJAOIfDllrq9TVIefrrxAewJx3VbvHkswMhXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89adc1db51d-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-left.png
104.21.93.229200 OK 1.3 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-left.png
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 92d3e482cacea857c5dfaf9fa3a21dfb
3f12c410c77d763cc4719ec367a18417b8300758
4a688dc66588e8e86e98ccadb318fa2aca3fd6e2444aac783278b982f3e47eef
GET /free-spins-ke%2Fimages%2Fred-arrow-left.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 15:40:31 GMT
content-type: image/png
content-length: 1334
x-amz-id-2: cuAeLnowYMiq1EmmJ4BhIp+Rt3+z3Um4UQeJGOcYWOF+lsq0OUwBC9nJ4oTmn1HVNSxPdKViVv8=
x-amz-request-id: GP1PCHRTR4CJBEZ0
last-modified: Thu, 02 Jun 2022 12:59:33 GMT
etag: "92d3e482cacea857c5dfaf9fa3a21dfb"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=COypOrO0CMK%2FG1%2BEV%2FTRkHBgIZGhwOYKUV4e%2BwGtYGB3bltQrO7QOk3NwkAi2dg2kwkQhfbzYIj8xXb1M%2BA6%2FbS%2BNDo4hpZA4K%2FA7yZyLPi39c9Fs3d%2FLQHMKMHtwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89aec35b51d-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-right.png
104.21.93.229200 OK 1.4 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-right.png
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 881bdc037be8895ba5d8d53456890e7e
4e105c89e2a1475520bb74c9c20bf2f9e906fcb3
9f8160d6380fef91c8eadecc6e8e59e93e3f5c40be7963018c8104bef4354d8f
GET /free-spins-ke%2Fimages%2Fred-arrow-right.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 15:40:31 GMT
content-type: image/png
content-length: 1362
x-amz-id-2: rA+THcGluV8iaCuG49rRNzuSRWHzh/dl6oeyLu7l/+AtibJSZUzwUDBiwme78ZXP1nxauTteozk=
x-amz-request-id: X3RXXNNTXQ7Z5AB6
last-modified: Thu, 02 Jun 2022 12:59:32 GMT
etag: "881bdc037be8895ba5d8d53456890e7e"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E4P199nQabAjXP%2BBNQfYc2vmbGPhc24hvPg1y9fn74MYCf75dwIDg2bqHaNKPpb79a5SC4dJgBiWpt0FMvcGwS2Uwzo%2B9J6c%2BTbBtQe0pUzzrEWD0KcdEJBn1FVr1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89aec38b51d-OSL
alt-svc: h3=":443"; ma=86400
track.landerlab.io/p/606dc316bd12e800113ca177?lander_id=1e08f60282cd55a61321314ef22873f5
104.18.17.6200 OK 0 B URL GET HTTP/2 track.landerlab.io/p/606dc316bd12e800113ca177?lander_id=1e08f60282cd55a61321314ef22873f5
IP 104.18.17.6:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerCloudflare, Inc.
Subjectlanderlab.io
FingerprintE5:19:57:65:1C:8A:4A:59:2F:10:FC:CE:EC:7C:74:C3:C9:6E:04:49
ValidityFri, 07 Apr 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/606dc316bd12e800113ca177?lander_id=1e08f60282cd55a61321314ef22873f5 HTTP/1.1
Host: track.landerlab.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 15:40:32 GMT
content-length: 0
cache-control: no-cache
set-cookie: worker_cookie=N4Igdgpg7g+gFgSwC4wQExALhGgDATgDYAOAdgBYAmAWgGNTSBma8gIwDNzr9SJjr2uCAFYAjO3atS+fIxAAaEADcEAZ2SoM2UREKjGaCLWqjDwlpVbMAhj36U0pQu1LFWacnoXK1GpAgBbCFUkawCABywQSlxKZlEaXEYAFVFhTHJcTEZKADpRUVIALW8VdSQAewAnTSi8WmIhRnwWYnZCFhIIalZ8Vn5cQkZyNEpna1p8dm9aMPDrBABzMFrsQkG0WkZRQncEvlxcAsZZwtJvMArDGFo4BbAsAG0AXUU1GEgoLHZrABtVCAAXyAA==; Expires=Mon, 04 Dec 2023 15:40:32 GMT; Domain=track.landerlab.io; Path=/; SameSite=None; Secure
__cf_bm=UwAUrcoFgkJeUohbiNe_uKVOsL4NGEMXoCUt.Vjd9YM-1701618032-0-AQkZJlRrWF25GCz/RbVU0mqcrweBAAMkv9VnvHIjetX0BS9jz0Lz01ToWEjIIL9KjdPE/iyHC7Sf4xyddXX20EA=; path=/; expires=Sun, 03-Dec-23 16:10:32 GMT; domain=.track.landerlab.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89cabfe5688-OSL
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fsounds%2Fwin.mp3
104.21.93.229206 Partial Content 22 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fsounds%2Fwin.mp3
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural\012- data
Hash c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56
GET /free-spins-ke%2Fsounds%2Fwin.mp3 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sun, 03 Dec 2023 15:40:32 GMT
content-type: audio/mpeg
content-length: 22067
x-amz-id-2: N5y/38boThQEmPJ70pl/Ze243Y8rl1TYMHEmehKME6KUr+j1zPqcITyLH1UlJWFbWaIh+mT6ZeA=
x-amz-request-id: GQ86GW87FJCCRPF9
last-modified: Thu, 02 Jun 2022 12:59:34 GMT
etag: "c74dca6a3ab16c097234033fec7a8573"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
content-range: bytes 0-22066/22067
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=If0NbBcxKtmjg4PJb7Y0cbgC5i9rbEuRUKPuxr1ooSX2BoFGHxIFlLqvKX9Yjqj6vVY6cOwaFBs87H18a9wmT0IZsd1QkOhjI3NxyVyr3In3LH6vn7v2RNgOJ0A8jA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89d4ffab51d-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fsounds%2Falert.mp3
104.21.93.229206 Partial Content 8.8 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fsounds%2Falert.mp3
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc
GET /free-spins-ke%2Fsounds%2Falert.mp3 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sun, 03 Dec 2023 15:40:32 GMT
content-type: audio/mpeg
content-length: 8802
x-amz-id-2: whUT3PMNyu53r8qqyzWZchvIZ8+SZEIdIdurny2pEifqB7VNawBbqc5/mTE+3g1qv1cG0nCifPQ=
x-amz-request-id: GQ871E5GFDRBDJYA
last-modified: Thu, 02 Jun 2022 12:59:33 GMT
etag: "6d2d3da2ea28ace816fa4a138829dc18"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
content-range: bytes 0-8801/8802
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C9iCcrYVMPpydksycEoAPCXaSugpmtsXTvRLIsfzm5F64HnuynCYAGX3bPIg3annw8J3R6MxeZkEmx7Nn%2BvEdkEA%2F94CVMX7Zk0RXjkjf28zGu9H9e5W%2FL0NGygR8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89d4ff6b51d-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fsounds%2Fspin.mp3
104.21.93.229206 Partial Content 51 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fsounds%2Fspin.mp3
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo\012- data
Hash 390bca8d165546a8097b8951d2f400d4
1385d88b3aeee07bc51e7955fbcb9ed7586ebdec
cdb080d348cd2222fbe1d5b54da2f9db8fdca881570a9c82899082203b000b78
GET /free-spins-ke%2Fsounds%2Fspin.mp3 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sun, 03 Dec 2023 15:40:32 GMT
content-type: audio/mpeg
content-length: 51290
x-amz-id-2: CANkmzF5RFkOGQsEBlljct0vxETiOOOg5xxoxuF9mmxLFo+4lYfLT8W2lffGlbDuRXHvZS2uzk0=
x-amz-request-id: 2EKB7RW82RKJMT05
last-modified: Thu, 02 Jun 2022 12:59:34 GMT
etag: "390bca8d165546a8097b8951d2f400d4"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
content-range: bytes 0-51289/51290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PZb1DU%2F36q85PtaRCb8aNEZlotNzoL7jA0UuYp%2FpKUxWgwnwQKlm2vEq4GfWvnuiQ0wUvS0HFsFGBOhQVmW3r9Jb7lCmYAwnGMPCYWDqI%2FO5sOnKOBwM41y%2BVHex%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89d4ffeb51d-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/images/arrow.png
104.21.93.229404 Not Found 12 kB URL GET HTTP/3 happy-u.vip/images/arrow.png
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash bbf78fed6c9fdac3817a7e091e59434b
93e0e347f0909b69a11e14550e712d7dcb1cb53e
ba10c0610550cb7a06e731151fc31a187c311fb43291c49deddec80d6d03719a
GET /images/arrow.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke%2Fcss%2Fstyle.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sun, 03 Dec 2023 15:40:32 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: H7QMSTFXM1RD8DC9
x-amz-id-2: KMHCLyiH170FTd/96XpM6Xd4ynD6RmMC4wHoYVTTP1c4VI48ezaGjchdINODjZwZ89ykSZ/GPD0=
cache-control: max-age=2592000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KUtZH4ZahiM0YIDkD%2F%2ByeAFvCnF76AWS%2BJuPnly4U8IdCesdFxFi7kAq1RhTYP5KxTFcWulV%2Bh8M4GmHqQkwdoq8URDFJJWjKV18qQDyW%2FkMntrf8Kt2T70Iwod%2Ftw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89c6e9ab51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
oungimuk.net/zone?&pub=0&zone_id=4336991&is_mobile=false&domain=happy-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
139.45.197.251200 OK 0 B URL POST HTTP/2 oungimuk.net/zone?&pub=0&zone_id=4336991&is_mobile=false&domain=happy-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
IP 139.45.197.251:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjectoungimuk.net
Fingerprint52:49:91:AA:04:62:59:A1:7D:AA:95:42:75:F3:62:7E:D8:66:82:DA
ValiditySun, 24 Sep 2023 05:45:36 GMT - Sat, 23 Dec 2023 05:45:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4336991&is_mobile=false&domain=happy-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://happy-u.vip
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 15:40:32 GMT
content-length: 0
x-trace-id: 699649b340850b9968d40ba7aa9180bf
access-control-allow-origin: https://happy-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
notix.io/settings?appId=1004e573f6298b494995e0539d8329e&ver=0.15.19
139.45.240.92200 OK 327 B URL GET HTTP/2 notix.io/settings?appId=1004e573f6298b494995e0539d8329e&ver=0.15.19
IP 139.45.240.92:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjectnotix.io
Fingerprint68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D
ValidityFri, 15 Sep 2023 11:38:16 GMT - Thu, 14 Dec 2023 11:38:15 GMT
File type troff or preprocessor input, ASCII text, with very long lines (367), with no line terminators
Hash c2f9043f5c5fcd297f2b47a6052cfc85
fc05b2e8ccbbdee725d55a5d83dab7d4b7a4be54
2b816affca42d0e83ea65969e17f1fad9832a74be410ac8b7d85b925d0f10ef0
GET /settings?appId=1004e573f6298b494995e0539d8329e&ver=0.15.19 HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy-u.vip/
Origin: https://happy-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 15:40:32 GMT
content-type: application/json; charset=utf-8
content-length: 327
access-control-allow-origin: https://happy-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke?cep=kgScPT_0yUlmyhTBqTZEQw7ABqugWmd6qO8s_Y2RSES1M1xLvr8SeYkHW5NJ7YweoKYeh1DyHTOu-EOYfJUSWwD_RsNEz6Oo5Tw4gJRaAysOyc9v4BkNLSGoxqtPOQbmIwEd08-ieL6FyC-l_UiNixejgkX4zmg4oMF1Xl6fGbbfX3sLpQwytrPXgIXoVJ52ugrUm7ejnB8-wruGnnPI8ZFusF66mQr2woj7v-NXbysXprYt7DSfpuUGBwKIVMAu2i0xxDIluk9lsCqAEL3TNvKhySYUYPL7EAGldLYiml6bebX4HzhvAN8W33ZgcYTIopxqZEnzwx9h1ERw9ypgp8ZxbBLIoD8CfXLrj5AUvXPjZKVaJ3knKU5BT4zGRSgX&lptoken=173e0110616898323190
104.21.93.229302 Found 22 kB URL User Request GET HTTP/2 happy-u.vip/free-spins-ke?cep=kgScPT_0yUlmyhTBqTZEQw7ABqugWmd6qO8s_Y2RSES1M1xLvr8SeYkHW5NJ7YweoKYeh1DyHTOu-EOYfJUSWwD_RsNEz6Oo5Tw4gJRaAysOyc9v4BkNLSGoxqtPOQbmIwEd08-ieL6FyC-l_UiNixejgkX4zmg4oMF1Xl6fGbbfX3sLpQwytrPXgIXoVJ52ugrUm7ejnB8-wruGnnPI8ZFusF66mQr2woj7v-NXbysXprYt7DSfpuUGBwKIVMAu2i0xxDIluk9lsCqAEL3TNvKhySYUYPL7EAGldLYiml6bebX4HzhvAN8W33ZgcYTIopxqZEnzwx9h1ERw9ypgp8ZxbBLIoD8CfXLrj5AUvXPjZKVaJ3knKU5BT4zGRSgX&lptoken=173e0110616898323190
IP 104.21.93.229:443
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /free-spins-ke?cep=kgScPT_0yUlmyhTBqTZEQw7ABqugWmd6qO8s_Y2RSES1M1xLvr8SeYkHW5NJ7YweoKYeh1DyHTOu-EOYfJUSWwD_RsNEz6Oo5Tw4gJRaAysOyc9v4BkNLSGoxqtPOQbmIwEd08-ieL6FyC-l_UiNixejgkX4zmg4oMF1Xl6fGbbfX3sLpQwytrPXgIXoVJ52ugrUm7ejnB8-wruGnnPI8ZFusF66mQr2woj7v-NXbysXprYt7DSfpuUGBwKIVMAu2i0xxDIluk9lsCqAEL3TNvKhySYUYPL7EAGldLYiml6bebX4HzhvAN8W33ZgcYTIopxqZEnzwx9h1ERw9ypgp8ZxbBLIoD8CfXLrj5AUvXPjZKVaJ3knKU5BT4zGRSgX&lptoken=173e0110616898323190 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 03 Dec 2023 15:40:31 GMT
content-type: text/html; charset=utf-8
x-amz-error-code: Found
x-amz-error-message: Resource Found
x-amz-request-id: W8V353179QJTED6B
x-amz-id-2: ddV3yh0bZLSBP78JK+HUXfzt/JSaXn81juSCxiu6kC1Lso0+Ookn2jX9YhrX7iOimSJ+jcnylpk=
location: /free-spins-ke/
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z7rlCZK5cibDZumshoCZWUFglIIw5sr6QSSVgNqxCFHLOxURk1VytMyjGd7gfqi6nJuvsR5qv9l%2Fu8KtB%2BxFAoTKQXn5siyKVxAtxZCVbSMwcJFbNwVzNprbEZg41A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce896fb8db4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fjs%2Fjquery.min.js
104.21.93.229200 OK 97 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fjs%2Fjquery.min.js
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (32063)
Hash 723e11a50995eef960d59451910e2cb4
76e617c6f9bad2602bdea1c20d50ba7c89a55097
ae34fd2197cffa02b5b7a753c262c1bbb3560afb92e403a1d59e935d8a320b41
GET /free-spins-ke%2Fjs%2Fjquery.min.js HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 15:40:31 GMT
content-type: application/javascript
x-amz-id-2: mZ7+FMZog6Diy6fVKiAaFjWbCqWwV7MQPf86ZZuy0kO7F2a3NBjmDNrMLE3NQn63J9nS+ii/Pjw=
x-amz-request-id: X3RJ2MSDQJCMJ84E
last-modified: Thu, 02 Jun 2022 12:59:31 GMT
etag: W/"723e11a50995eef960d59451910e2cb4"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jvsZbuj3Td71CTQ1JWgmdr%2FAEEv0WysJTWHwgqvROiMaLhNfUz%2FJLEbyr0HWwLXCLYHjbtI27OxJ6PhMyagOSgzc42RilwZmKVZHPdW270O7i83idyndR3yAAUlmvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89aec3ab51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
notix.io/ent/current/enot.min.js
139.45.240.92200 OK 145 kB URL GET HTTP/2 notix.io/ent/current/enot.min.js
IP 139.45.240.92:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjectnotix.io
Fingerprint68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D
ValidityFri, 15 Sep 2023 11:38:16 GMT - Thu, 14 Dec 2023 11:38:15 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 145 kB (144887 bytes)
Hash 5ec57c87dbac3f07e59e5d74ae3421e4
70121f1541a1961d7b87544001d612f18ad04243
e1d529afcbb911c99bb039ba39c7fb6716275b97650ae816a90fc03f256542bb
Analyzer Verdict Alert Public Nextron YARA rules malware Unique code from Jetriz, Swid & Jeniva of the Tetris framework
GET /ent/current/enot.min.js HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 15:40:32 GMT
content-type: application/javascript
last-modified: Wed, 29 Nov 2023 20:55:06 GMT
etag: W/"6567a52a-235f7"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
oungimuk.net/pfe/current/micro.tag.min.js?z=4336991&sw=/sw-check-permissions-77596.js
139.45.197.251200 OK 27 kB URL GET HTTP/2 oungimuk.net/pfe/current/micro.tag.min.js?z=4336991&sw=/sw-check-permissions-77596.js
IP 139.45.197.251:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjectoungimuk.net
Fingerprint52:49:91:AA:04:62:59:A1:7D:AA:95:42:75:F3:62:7E:D8:66:82:DA
ValiditySun, 24 Sep 2023 05:45:36 GMT - Sat, 23 Dec 2023 05:45:35 GMT
File type ASCII text, with very long lines (27007), with no line terminators
Hash 5ccd2d5882a06f293d07510ac91c92e6
b44dc0eaa03981adb70d3313e728f9359c1d21c1
9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba
GET /pfe/current/micro.tag.min.js?z=4336991&sw=/sw-check-permissions-77596.js HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 15:40:32 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 13:38:02 GMT
etag: W/"65649bba-697f"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fcss%2Fstyle.css
104.21.93.229200 OK 11 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fcss%2Fstyle.css
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (10941), with no line terminators
Hash cb2e0fe2fe90d7572bf48419ecf1ee65
285568da5113f9203628287222cfbb469d0c2171
b3a3eb6e06b9f50fb0a3434a8c4033a496d5d37b6abaa83eb02b41ec66204de0
GET /free-spins-ke%2Fcss%2Fstyle.css HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 15:40:31 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=13222
etag: W/"538445a521226e69b9c4231a52ad5e79"
last-modified: Thu, 02 Jun 2022 12:59:32 GMT
x-amz-id-2: +tU/BSjpobN5fvgg4wbFtFDaM4FffXnvWyWIt/wRCaXZvbEE8/AYYKyFUHkg8lmafVlTXG8ppho=
x-amz-request-id: CT27F2CRHJX957PP
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kvNeMfx2WmNZ7ezrCNIjc4Oj0x0Vxuv3TtAC9omW7Wtf3LJeBfdzKjrWKgdqyRBOKgZXaaUwq%2FXJAzLATBCN0qsFpkmj904t%2Fs%2F%2F0jHLEFriUJsFPP7vb1CSD2nXHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89acbfcb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke/
104.21.93.229200 OK 22 kB URL User Request GET HTTP/2 happy-u.vip/free-spins-ke/
IP 104.21.93.229:443
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3238)
Hash 153504c8e5f4dd8f207b65a4e299bb16
6eaa94ee7283551988a0e50fc018d1d262d9d69a
9f2ce1fb98a5f899d3ed7c56fab134ee414f6d4d190b92f59d1bea21add46917
GET /free-spins-ke/ HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 15:40:31 GMT
content-type: text/html
x-amz-id-2: CDs6GMIDfinplf6kRrddbe6a2MTL4awsaQuLveun9kpL45H3CEwpRB/Ki9X6crXsyiKjWslkWbA=
x-amz-request-id: GP1TPKBAJ2ENYY9F
last-modified: Wed, 24 Aug 2022 13:49:50 GMT
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yYyeE4cvauMPsIw17uqteM1OqkHTpLf%2Bi3obacq6f%2B6j0XStF2ZFLhRWRtl4nmdP2zuQW50lptm1bkVvz%2FgyPs2TczO299PQWUg6h9bg8ijPQdqhOBJI1zrTqrTxDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce8980cf1b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
happy-u.vip/sw-check-permissions-77596.js
104.21.93.229200 OK 443 B URL GET HTTP/3 happy-u.vip/sw-check-permissions-77596.js
IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (462), with no line terminators
Hash f0543799885fb5c86ac7c6bc29b508bc
ac3e9ae5ba4844ecfc9865ba1e7a9fbd32903eca
cb3fae5a8368bfba7e04d0df02732899f4edf1fd4e69a99938350a91bf590a32
GET /sw-check-permissions-77596.js HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 15:40:32 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=566
etag: W/"44d972e91b04c00bb67c0a08024625c4"
last-modified: Wed, 24 Aug 2022 13:50:20 GMT
x-amz-id-2: LniQnjFwRDJGl/Qzaa2mly7RbyC4H4tl4CPXKpoNV9oL1FTvvyS1oqO+27uzpRZRbYnnhToJrYs=
x-amz-request-id: 2EK3NV8G3KFHB4Z7
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CRyY5SS3fR8a7jdsFAZpUPskuc4kBXVSiLFqCk933a3VZUWOvDtcySvt%2FQEhMnR5swqjiY4EkMULuDhXt2OILsS8Dtf3O3jbBCyO778MMM2VCqmpm9VbqjOvPTWC7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89f3aa1b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
happy-u.vip/favicon.ico
104.21.93.229404 Not Found 346 B IP 104.21.93.229:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (360), with no line terminators
Hash 5a0047ebaaff123d7e2589c2b47c5c15
0500db54b76b8af84f187eeccafac384f46c09da
e9a61bce6222248381ada01c55fd346e9e325077fdef58dbea3eca614eec4514
GET /favicon.ico HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sun, 03 Dec 2023 15:40:32 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: H7QJJWMEP9F4F0GA
x-amz-id-2: r7Unm2vxL8PPL/7h+iOOXB9+SxfXobdRYlEazYBrQR87Di/oeZ0zBm3+ELvDFzq79eRweYXNIpg=
cache-control: max-age=2592000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M6mARZhBV6UsfngbDWxGQPyYJBsf2edHM7AjTfp2qluc%2BR3GZpgIjMM6AyTzYVjHzX5C9aUIAZcfjz%2F9Tz7z0EjrI9%2Bfvfxx4Rp4flSIMCta%2FInYrM6Ts5Y%2F3yeM2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fce89fbb57b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400