assets.landerlab.io/base.css
54.230.111.7200 OK 8.7 kB URL GET HTTP/2 assets.landerlab.io/base.css
IP 54.230.111.7:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerAmazon
Subject*.landerlab.io
FingerprintCA:55:A0:91:66:D2:49:1D:74:D9:90:B0:7E:D2:4C:B1:3A:0C:10:78
ValidityWed, 28 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (8731)
Hash 7f6de4e86d84bcbfd919f155e7545439
e7d9a7a418519c3fbce6de3c85775087cba93b49
8d8c59c2712df25a26ecd01739496e49c3514a9341fa3cd21cfa98627ba6efa2
GET /base.css HTTP/1.1
Host: assets.landerlab.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 8732
last-modified: Sat, 29 May 2021 19:05:04 GMT
x-amz-version-id: 0sEXTlrAazg9KkJm7sv1lqt808WfgxiL
accept-ranges: bytes
server: AmazonS3
date: Thu, 07 Dec 2023 01:46:33 GMT
etag: "7f6de4e86d84bcbfd919f155e7545439"
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: C8ST2udqAK_d32NZZtX9l4oT-83gsrpvbp5ULpP78q9seOpmtOFVVg==
age: 60762
X-Firefox-Spdy: h2
happy-u.vip/spin2win%2Fimg%2F2cvxag0tb945z8wi3hlo.png
188.114.97.1200 OK 125 kB URL GET HTTP/2 happy-u.vip/spin2win%2Fimg%2F2cvxag0tb945z8wi3hlo.png
IP 188.114.97.1:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 867 x 468, 8-bit/color RGBA, non-interlaced\012- data
Size 125 kB (124744 bytes)
Hash e04fee898592269da379a0d70cb76e76
142b42540a7f3d644f7dc061867f2b754fdb9e65
5c42e9030657c1043259bb823c47703ce9279024db6bee1d96e9e55520309c99
GET /spin2win%2Fimg%2F2cvxag0tb945z8wi3hlo.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 18:39:14 GMT
content-type: image/png
content-length: 124744
x-amz-id-2: X0FhJRMTCjhZRaJcjB5i3dkMFa0sOfP3h4F0hmPdy/w/xrTi0hIBiUvxON9P6UDo6+V8kLWycj4=
x-amz-request-id: JFYX6PVB4992SWZW
last-modified: Sun, 04 Jun 2023 14:41:39 GMT
etag: "e04fee898592269da379a0d70cb76e76"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 6931
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OUKucWqHyaXgnbldgiStzbOg9w4jQTP%2FbJvPVeeSNtEp69GluJgE0QfRzLM7iZ%2FP0h883l7Ozmv44lRrlGo39xUfEa%2F599JTyJM48a9iwfPBweIhgWP%2BAK61giQ0Rg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ee3e5cb2cb4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
happy-u.vip/spin2win%2Fimg%2Fpointer.png
188.114.97.1200 OK 23 kB URL GET HTTP/2 happy-u.vip/spin2win%2Fimg%2Fpointer.png
IP 188.114.97.1:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 265 x 133, 8-bit/color RGBA, non-interlaced\012- data
Hash 0eefbef8c10d7eaf4439abc814ef08ca
3a651a3ec4ae6cf02029ac3df2ea9413cd1846af
a976617eac03d776487dd15431f06db8426f673d5745beba8a0aefbe5308f740
GET /spin2win%2Fimg%2Fpointer.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 18:39:14 GMT
content-type: image/png
content-length: 23050
x-amz-id-2: zOfPjUOjNIdAgZFPibYP94r65jlZ8NcKnAd56dcsXHX7mz2f/mOl2cDy+9aZmpfLDBnC/Ohj72o=
x-amz-request-id: P19P0GN90W4NKJKX
last-modified: Sun, 04 Jun 2023 14:41:39 GMT
etag: "0eefbef8c10d7eaf4439abc814ef08ca"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k4fwhstn%2Fo37J8Nznx%2BQQaxwn57N7DecARTlA7eiSqTZ4h4AIrlH5zxTVLMsMazIX6smFU8UdzmEmwfrXQntr4tBs96lY1pqnYYjOHLDu6NcgK8jKwMbtuucH1q%2B6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ee3e5cb2bb4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
happy-u.vip/spin2win%2Fimg%2Fspin_wheel.png
188.114.97.1200 OK 300 kB URL GET HTTP/2 happy-u.vip/spin2win%2Fimg%2Fspin_wheel.png
IP 188.114.97.1:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 718 x 718, 8-bit/color RGBA, non-interlaced\012- data
Size 300 kB (299863 bytes)
Hash e1bf1c906a87c2454f418ebf3d27beee
f1adb9977dcfe2228b806e9aa36fd72ee1b63fc1
e3c6f661ff6103dbf682712d2e60d324bf9807090434d653c3fd4d5f23f27770
GET /spin2win%2Fimg%2Fspin_wheel.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 18:39:14 GMT
content-type: image/png
content-length: 299863
x-amz-id-2: RDHVmoseNXYLxwuZkpo1pZFoxwb5z66VjWQvTU/EZIXjEF12SAMt6oD+HUmVXMqhlM7KVeqfufg=
x-amz-request-id: P19G23QD5TB23Y5X
last-modified: Sun, 04 Jun 2023 14:41:39 GMT
etag: "e1bf1c906a87c2454f418ebf3d27beee"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KZD8UOXNF1U%2Fs7IeXv7fLcBFWUFwq4WbZyH3PLRc3EkkeKuFs799%2FochPg%2Fp%2B8t55Mld%2FBS3pT4QAl7RCp3hbC9ywrUKLLBS%2BkYUahderAChk3ny8Nx5Uz%2BHWM7YGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ee3e5cb29b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
deefauph.com/pfe/current/micro.tag.min.js?z=4620078&sw=/sw-check-permissions-0a6ea.js
139.45.197.251200 OK 11 kB URL GET HTTP/2 deefauph.com/pfe/current/micro.tag.min.js?z=4620078&sw=/sw-check-permissions-0a6ea.js
IP 139.45.197.251:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerLet's Encrypt
Subjectdeefauph.com
FingerprintC9:BF:8F:4B:E8:EB:DC:8F:83:22:79:96:21:1A:B7:59:F3:02:A6:28
ValiditySat, 28 Oct 2023 05:38:23 GMT - Fri, 26 Jan 2024 05:38:22 GMT
File type ASCII text, with very long lines (27007), with no line terminators
Hash 5ccd2d5882a06f293d07510ac91c92e6
b44dc0eaa03981adb70d3313e728f9359c1d21c1
9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba
GET /pfe/current/micro.tag.min.js?z=4620078&sw=/sw-check-permissions-0a6ea.js HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 18:39:15 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-697f"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
track.landerlab.io/p/606dc316bd12e800113ca177?lander_id=9500885da67c0f6f240f184f270a7baf
104.18.17.6200 OK 0 B URL GET HTTP/2 track.landerlab.io/p/606dc316bd12e800113ca177?lander_id=9500885da67c0f6f240f184f270a7baf
IP 104.18.17.6:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerCloudflare, Inc.
Subjectlanderlab.io
FingerprintE5:19:57:65:1C:8A:4A:59:2F:10:FC:CE:EC:7C:74:C3:C9:6E:04:49
ValidityFri, 07 Apr 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/606dc316bd12e800113ca177?lander_id=9500885da67c0f6f240f184f270a7baf HTTP/1.1
Host: track.landerlab.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 18:39:15 GMT
content-length: 0
cache-control: no-cache
set-cookie: worker_cookie=N4Igdgpg7g+gFgSwC4wQExALhAVgMYQAMAnCQGYC0EEAzDhQCwBGeAjBQBwDsAbF5wCY8aAIZoGXNGx4gANCABuCAM7JUGbAIE4yAsnkpkmxDowGE8FJtZ6MmNYiIhouhfDTmKVapAgC2EMpIIn4ADlgg5gI0FKwCFIRcACqsHJgOmKw4AHQCrAwAWp5KqkgA9gBO6hHc3GRkxEwUaCyUDIRkpiIiDVRMPAwMxDRoOkw4nnghoSIIAOZg1dg8hDxSNKw8TGhxEByEhKysNFOsXFyeYGVoEDB4cLNgWADaALryKjCQUFhkIgA2yggAF8gA===; Expires=Fri, 08 Dec 2023 18:39:15 GMT; Domain=track.landerlab.io; Path=/; SameSite=None; Secure
__cf_bm=DZOBIbxaZc72Ys3syTi8ZWAg.nxTA0r0majSzBH6_k8-1701974355-0-AaPszdhk1vLq+XbGh95NCRiHm9d6jKD61oBXhq7Uin/Mx/lKJhhEuJiwzocch4LGNAveTSQ8QZzig7fMSDCM/2Y=; path=/; expires=Thu, 07-Dec-23 19:09:15 GMT; domain=.track.landerlab.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ee3e7ee8756c9-OSL
X-Firefox-Spdy: h2
happy-u.vip/spin2win%2Fcss%2Fbootstrap.min.css
188.114.97.1200 OK 121 kB URL GET HTTP/2 happy-u.vip/spin2win%2Fcss%2Fbootstrap.min.css
IP 188.114.97.1:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (65371)
Size 121 kB (121200 bytes)
Hash ec3bb52a00e176a7181d454dffaea219
6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68
f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /spin2win%2Fcss%2Fbootstrap.min.css HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 18:39:14 GMT
content-type: text/css
x-amz-id-2: YnP0Nx+42ed2hcuO1snRgwloBhKGklWxQCSqV2NZ2XXOemZQg651tg2VTehjM8hefdXJUvv5G64=
x-amz-request-id: P19MYA7H1J033YF7
last-modified: Sun, 04 Jun 2023 14:41:39 GMT
etag: W/"ec3bb52a00e176a7181d454dffaea219"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tm0O%2BI%2FGu7V9dPEo3FWlMhG3GOg0vPTmVyMkB42NHQmJjp2krCWTq8%2F9483RxtZlW30PUs5SpqDFwiEASr8wA3Aqme4e3O5FlLKJaH0YzI7gaE6y%2FWKEsOOs3jqFjg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ee3e5cb30b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
smiling-u.vip/sweep-spinner-2?cep=jYkH46eh69TeBBvxZS3do4CNJc7BwsY8T62CJhzW0UdSxm7Kd_e7glX3fN8Z11wOUxA5zBkRRuGAXlbb6zDZLalArTANHrCcyRIke92L3bVv1iNXhEneRjsPf_-nVCIHKF3nyACuP_q62Uc93J_SSlSJMQNF5ywfAig_HhElOyp5-arIABy4vCuex5Jec0nzZ4X691QBPjK_pxYms1hcJ0ZXEri0LPYJqjcn3Af_hEROxmpcZEO3ZWI54146kzywmUAp-Awgk3fzrJQRyYqMaCS6DDOHacKJhrChpEc6p_U9jwcH57AavH6wjxCuKyX1kGBaeMFLZQvfUvQZg1f3g8ncTum6dr3l0O3bUlT2gfMI4tSz412iH4mLx3qSfBN3yq6AWlWd3of4sRyw54qG3A&lptoken=1774013b94f9033039dc/sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2/
104.21.83.224302 Found 6.5 kB URL User Request GET HTTP/2 smiling-u.vip/sweep-spinner-2?cep=jYkH46eh69TeBBvxZS3do4CNJc7BwsY8T62CJhzW0UdSxm7Kd_e7glX3fN8Z11wOUxA5zBkRRuGAXlbb6zDZLalArTANHrCcyRIke92L3bVv1iNXhEneRjsPf_-nVCIHKF3nyACuP_q62Uc93J_SSlSJMQNF5ywfAig_HhElOyp5-arIABy4vCuex5Jec0nzZ4X691QBPjK_pxYms1hcJ0ZXEri0LPYJqjcn3Af_hEROxmpcZEO3ZWI54146kzywmUAp-Awgk3fzrJQRyYqMaCS6DDOHacKJhrChpEc6p_U9jwcH57AavH6wjxCuKyX1kGBaeMFLZQvfUvQZg1f3g8ncTum6dr3l0O3bUlT2gfMI4tSz412iH4mLx3qSfBN3yq6AWlWd3of4sRyw54qG3A&lptoken=1774013b94f9033039dc/sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2/
IP 104.21.83.224:443
Certificate IssuerLet's Encrypt
Subjectsmiling-u.vip
FingerprintDC:C6:BA:2E:C0:35:45:B8:AA:D6:33:93:BD:FA:A9:C0:B6:43:2E:A0
ValidityMon, 23 Oct 2023 11:49:28 GMT - Sun, 21 Jan 2024 11:49:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sweep-spinner-2?cep=jYkH46eh69TeBBvxZS3do4CNJc7BwsY8T62CJhzW0UdSxm7Kd_e7glX3fN8Z11wOUxA5zBkRRuGAXlbb6zDZLalArTANHrCcyRIke92L3bVv1iNXhEneRjsPf_-nVCIHKF3nyACuP_q62Uc93J_SSlSJMQNF5ywfAig_HhElOyp5-arIABy4vCuex5Jec0nzZ4X691QBPjK_pxYms1hcJ0ZXEri0LPYJqjcn3Af_hEROxmpcZEO3ZWI54146kzywmUAp-Awgk3fzrJQRyYqMaCS6DDOHacKJhrChpEc6p_U9jwcH57AavH6wjxCuKyX1kGBaeMFLZQvfUvQZg1f3g8ncTum6dr3l0O3bUlT2gfMI4tSz412iH4mLx3qSfBN3yq6AWlWd3of4sRyw54qG3A&lptoken=1774013b94f9033039dc/sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2//sweep-spinner-2/ HTTP/1.1
Host: smiling-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 07 Dec 2023 18:39:14 GMT
content-type: text/html; charset=utf-8
x-amz-error-code: Found
x-amz-error-message: Resource Found
x-amz-request-id: D8VJ1FQCEBWT287B
x-amz-id-2: 5NThXXIKRiylTdVrYygzGeIbz320MEoXxGqyLQro4jSf16vd640MZogpwUYMRTTP1osPkYybytc=
location: /sweep-spinner-2/
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c2YxEd4xBO%2BZ0U7i5UPIifeC55Dy%2FAJcTrs60wNaGdytHTRUoQF3f3k%2FpayD1ukEiXezT%2BgMywVY%2FjaoUoXi95TzRmtb3YnGnbLbrfyfoUGhKKRSFEYkGkW0bgOtXNeW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ee3e03ddf0b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
happy-u.vip/spin2win%2Fcss%2Fmain.css
188.114.97.1200 OK 5.6 kB URL GET HTTP/2 happy-u.vip/spin2win%2Fcss%2Fmain.css
IP 188.114.97.1:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (5554), with no line terminators
Hash 788d6b0c599c78339d8457484a6b2c4d
10610a39e7b2d11824ed517d4afb69bce0f2dc1b
6e0736ed4f2c0f28665ea6cfe69d19baa943c75529d82177017a104e81975140
GET /spin2win%2Fcss%2Fmain.css HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 18:39:14 GMT
content-type: text/css
cf-bgj: minify
etag: W/"788d6b0c599c78339d8457484a6b2c4d"
last-modified: Sun, 04 Jun 2023 14:41:39 GMT
x-amz-id-2: kk4/B+CfMENJyqLM5pYtiBwYYJLMh77ZxZw8vLXRyHvwbp1plUg9F4yE4GQ6I+UJ+Rm72MJLj/U=
x-amz-request-id: P19T3A1Q32A453E6
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nYgtvGFWxPkV6Xv8lgE%2FmRcDA4iCXSYsE83OfRqQ4WaP2gvcO3k0OF0BY2%2FP7PcAPY0CYmeMxIEWU2th9gkx0cyDuAF8vjTNA%2FVWahBy9kFYTLRwFddfsHKA2N4iPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ee3e5cb27b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
happy-u.vip/spin2win%2Fjs%2Fjquery.min.js
188.114.97.1200 OK 90 kB URL GET HTTP/2 happy-u.vip/spin2win%2Fjs%2Fjquery.min.js
IP 188.114.97.1:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (65447)
Hash 7c14a783dfeb3d238ccd3edd840d82ee
ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b
80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0
GET /spin2win%2Fjs%2Fjquery.min.js HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 18:39:14 GMT
content-type: application/javascript
x-amz-id-2: 24Lvb23bY6SScecmvoKdldAciYliFzWpz7rAVQ0Vg2GkGt3d5YmIyySvQudDJVvElysT7jr0UhM=
x-amz-request-id: JFYRAH5CVHKJBAK5
last-modified: Sun, 04 Jun 2023 14:41:39 GMT
etag: W/"7c14a783dfeb3d238ccd3edd840d82ee"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LiL8z1gnogeyA9xdcSEa0GMsx6uG7e90DNhOSDPGrs%2BaiKwKlqGdw19Cdh93FqSs0TISsUi5nEbeBahwxQ7Y6B6ZVHWIcJ02nFxFUYhaCnyjU%2FAUZebQrLn2LgKpSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ee3e5cb2fb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
smiling-u.vip/sw-check-permissions-0a6ea.js
104.21.83.224404 Not Found 364 B URL GET HTTP/3 smiling-u.vip/sw-check-permissions-0a6ea.js
IP 104.21.83.224:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerLet's Encrypt
Subjectsmiling-u.vip
FingerprintDC:C6:BA:2E:C0:35:45:B8:AA:D6:33:93:BD:FA:A9:C0:B6:43:2E:A0
ValidityMon, 23 Oct 2023 11:49:28 GMT - Sun, 21 Jan 2024 11:49:27 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (378), with no line terminators
Hash 6fc1c0ea0daeb9319715977bfc200b1c
cfa232b11ee4518e7c11e0dcbd12c465ffae1e41
21c456166f1e84e4c20c2debbe10da8a6899cf60a0a3a56976b9ec91b55c0cb7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sw-check-permissions-0a6ea.js HTTP/1.1
Host: smiling-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/sweep-spinner-2/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 07 Dec 2023 18:39:15 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: 1TBVVN8BGJHWTBP7
x-amz-id-2: 8DlPoGY2HS7mxRiLJrpwT08NCtS/ONmL5wsedVJ3k84wSG895nNe+JrHbsbxUFMZfef2U2KnZjQ=
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pS%2BOyn5Gos%2BeRP4uk2jAapJgIie0R9TQNRQheD6vGOQ%2BVpRqzL1GCG6fax4A69epg12jtbYXVTB9NxiW5zkAz7b8Rqcm1E0XkwNQo7Oq4j2AbYpPaMYGwkOxYjVQEOzm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ee3ea1894b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
smiling-u.vip/sweep-spinner-2/
104.21.83.224200 OK 6.5 kB URL User Request GET HTTP/2 smiling-u.vip/sweep-spinner-2/
IP 104.21.83.224:443
Certificate IssuerLet's Encrypt
Subjectsmiling-u.vip
FingerprintDC:C6:BA:2E:C0:35:45:B8:AA:D6:33:93:BD:FA:A9:C0:B6:43:2E:A0
ValidityMon, 23 Oct 2023 11:49:28 GMT - Sun, 21 Jan 2024 11:49:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6823), with no line terminators
Hash 95917d8afc44217a798c25c235b80b3d
75a0753037e30f9daebd52cdca1619a90cbc4689
9213bfa2ce28b53e977714d8f4c5e20f8d69ff44805330d739f165a0e46483be
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sweep-spinner-2/ HTTP/1.1
Host: smiling-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 18:39:14 GMT
content-type: text/html
x-amz-id-2: q5K+gvCVo2IE67q61EO3QBf0zdIplGP6OLgyuG+btwfEQlbi2KsWdljN8jSK7X7OimnJy3hXEzM=
x-amz-request-id: B951NT1Z3RWS0R70
last-modified: Wed, 12 Jul 2023 11:59:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 5918
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xyLZjKIWTPg%2F%2B2jjf89NpHBADiPowh5u5YPBO9cu2enjomAVnyz0Mv7HjMuTKcZ5JA6GqzbCZwQKWeAtW6Ky0qrgGvPZwGJi47MgrWr5yI58cAPvHbFUGqKP8dNBq05w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ee3e12ea00b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
happy-u.vip/spin2win%2Fjs%2Fcount_down.js
188.114.97.1200 OK 907 B URL GET HTTP/2 happy-u.vip/spin2win%2Fjs%2Fcount_down.js
IP 188.114.97.1:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (936), with no line terminators
Hash e6f56d1fb2ba8717d528d583908a32bc
09d52dde47a15590794f3a82174d96b339ffbf13
dd6c33c0fec0651cb08b639522fd5f170bef2c12bbdfb5ac2c731b5f149205f0
GET /spin2win%2Fjs%2Fcount_down.js HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 18:39:14 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1229
etag: W/"fc01db2be817b3fb3184f98127ff0277"
last-modified: Sun, 04 Jun 2023 14:41:39 GMT
x-amz-id-2: RAQzKaCy3uzTah+20ilKJi6eaS47VILDzOr51WuIRCCxYw0YBVp7S17Fd/VNQ+rcq6YP+3H2VbU=
x-amz-request-id: P19RZS5WP9TTNNVT
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z1jZH2CswVSQaL0ztTUHar5EKHTSSZe%2FqMo3q%2Fo3ZBrvv%2FWKICzASxCg85ybf4tH4Ps9E48wKMn7zfQS%2Fh6YhigH5z6pzf%2FHPf6yaCyDxxVt2Og3lUokxJ9FSRcp0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ee3e5cb2eb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
deefauph.com/zone?&pub=0&zone_id=4620078&is_mobile=false&domain=smiling-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
139.45.197.251200 OK 0 B URL POST HTTP/2 deefauph.com/zone?&pub=0&zone_id=4620078&is_mobile=false&domain=smiling-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
IP 139.45.197.251:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerLet's Encrypt
Subjectdeefauph.com
FingerprintC9:BF:8F:4B:E8:EB:DC:8F:83:22:79:96:21:1A:B7:59:F3:02:A6:28
ValiditySat, 28 Oct 2023 05:38:23 GMT - Fri, 26 Jan 2024 05:38:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4620078&is_mobile=false&domain=smiling-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://smiling-u.vip
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 18:39:15 GMT
content-length: 0
x-trace-id: 924d0f15e8bb2bbad9faa804ca107c76
access-control-allow-origin: https://smiling-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
smiling-u.vip/favicon.ico
104.21.83.224404 Not Found 346 B URL GET HTTP/3 smiling-u.vip/favicon.ico
IP 104.21.83.224:443
Requested by https://smiling-u.vip/sweep-spinner-2/
Certificate IssuerLet's Encrypt
Subjectsmiling-u.vip
FingerprintDC:C6:BA:2E:C0:35:45:B8:AA:D6:33:93:BD:FA:A9:C0:B6:43:2E:A0
ValidityMon, 23 Oct 2023 11:49:28 GMT - Sun, 21 Jan 2024 11:49:27 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (360), with no line terminators
Hash 065832ee87b960851b449e541550b67c
19f267981524faa25cb977c77447f7648545b6d1
4a02587ab64628302cfa01506232a1f8dfe25e889868e3d0f85e1abccee55760
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: smiling-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/sweep-spinner-2/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 07 Dec 2023 18:39:15 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: 1TBZSM9PHAPA8QQ8
x-amz-id-2: mfWwOa7k6rNJ5Pnhyj2NSDbG2fYBLIjyBi55ZWc4mHhkB2C4enJfcIiyZIMtY2V5DG5l//OMgXw=
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rmYiurBnTrvYt2EabrY1s4bRwSu7Nwu9CCVKBcH94K12s377KcDMKEVXrZfFewahtcMxKNWsVEMv9%2FpDNChTCRBi9cnqBkPIK%2F1WavczXpV4doOJR3PWuKLGZuxnSGQs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ee3e92f4eb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400