| assets.landerlab.io/base.css | 54.230.111.125 | | 8.7 kB |
URL assets.landerlab.io/base.css IP 54.230.111.125:0
File typeASCII text, with very long lines (8731) Hash7f6de4e86d84bcbfd919f155e7545439 e7d9a7a418519c3fbce6de3c85775087cba93b49 8d8c59c2712df25a26ecd01739496e49c3514a9341fa3cd21cfa98627ba6efa2
GET /base.css HTTP/1.1
Host: assets.landerlab.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 8732
last-modified: Sat, 29 May 2021 19:05:04 GMT
x-amz-version-id: 0sEXTlrAazg9KkJm7sv1lqt808WfgxiL
accept-ranges: bytes
server: AmazonS3
date: Tue, 28 Nov 2023 19:40:21 GMT
etag: "7f6de4e86d84bcbfd919f155e7545439"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OrQjipYVL2Giua8gy_rBAFy2NaV7SmHws3geNK4S80hIxKiIHruXjA==
age: 31894
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fmoney2.png | 188.114.96.1 | | 15 kB |
URL happy-u.vip/spin%26win%2Fimg%2Fmoney2.png IP 188.114.96.1:0
File typePNG image data, 188 x 175, 8-bit colormap, non-interlaced\012- data Hash33a46fd94559ceccba9d33ebfc4d1c1a c437ab044cc78e0048e82858d25981b8df999071 e708ed44fede34f269246840660a3ea4140b69b2c9a72da25598282be738f49e
GET /spin%26win%2Fimg%2Fmoney2.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: image/png
content-length: 15347
x-amz-id-2: vowR9ihdclqFdwZ+JVwBOerPw3rZIGUbMwRLdieUZPv0xT8Q+JZ86nEb5eY35VJQ5nO96jR5fCE=
x-amz-request-id: PWQYTW6ZCDJKF7W2
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "33a46fd94559ceccba9d33ebfc4d1c1a"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jyujiDM0qrim7h4fMlrCM69NT3V9qGu0DXYTMojXGqX0BBFLQhK5mxis%2B0sL5BW4WaMKDixaGzl6SdAbpPmX532orzZOt0xncz2E4lI1jWOzhqglkZZaCI71p%2BhLxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0a985b50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fmoney3.png | 188.114.96.1 | | 15 kB |
URL happy-u.vip/spin%26win%2Fimg%2Fmoney3.png IP 188.114.96.1:0
File typePNG image data, 210 x 122, 8-bit colormap, non-interlaced\012- data Hashf6ec085c09ae14790f0c87579920ab7e 03940b6f52212b2540f914373a75bc9f65ad93fc 5dab0b8f8091a69139fc1a5f094fbe79f0de5169419248e5defc1f55becad23b
GET /spin%26win%2Fimg%2Fmoney3.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: image/png
content-length: 14791
x-amz-id-2: imyE9hbuq/GyscbAYGG1pu1xbTs4wfgVOdyX6FE2Qb4qjuWwIt70sO2Cnpfee7uD01Qng+ShI9Q=
x-amz-request-id: E1DCWDYAM77D1TVE
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "f6ec085c09ae14790f0c87579920ab7e"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=csrmB3aH5PyWUE6DgPOypb6hIQ%2B%2BA5BL15djJAZNIM81m7Kofn3MkuP%2B5Eye8L%2F3NBqWEAL5KHsOIut4uSnHLVW2T%2FNGnlBsht0wP2%2B0%2Fz4uYNOWPewHySeRG1ZchQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0a986b50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fstvol.png | 188.114.96.1 | | 80 kB |
URL happy-u.vip/spin%26win%2Fimg%2Fstvol.png IP 188.114.96.1:0
File typePNG image data, 214 x 252, 8-bit/color RGBA, non-interlaced\012- data Hash4557da2f7c0ddbd00efa7360b638bb2b 3785b22cb6a4da51d3925ebff2fd9a91f0667603 3ec5c11c5d7b20788dcd462ea1d6b3c7c5e255c28ff14e721fe9db8d05b3ea44
GET /spin%26win%2Fimg%2Fstvol.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: image/png
content-length: 80092
x-amz-id-2: tAfPD+GCN2MOI664t7KiinfWAVsLge4cBI5aDO8vPa6E8xdyjm92WwpRfygBDNtAx2szupbJK9E=
x-amz-request-id: 01HA2XC3SND0QYNS
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "4557da2f7c0ddbd00efa7360b638bb2b"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XA%2BvsvwdMYrK7nmhur8N%2Fsbzb2DWvZS0nN0IQ0VPpWrx7rXtRRVd9vgEpJ8poPLvBqq6yJ0A85fU2Rp210lJ%2Bhr8AY7DiZ0xYzDQJaBs1eF1Q%2FTDtAylO66RC7UUGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0a984b50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fwheel_light.png | 188.114.96.1 | 200 OK | 18 kB |
URL GET HTTP/2happy-u.vip/spin%26win%2Fimg%2Fwheel_light.png IP 188.114.96.1:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjecthappy-u.vip Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4 ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File typePNG image data, 965 x 966, 8-bit colormap, non-interlaced\012- data Hashedeb31c62d628ef34a0f0c5b3554d594 11495ef54dde7e4cf3cdc26181ca14575e2d0b4b 869dbc5a7aaca071575fe6e8762dcacb850c58018e5b1a74d863defa6bee6aae
GET /spin%26win%2Fimg%2Fwheel_light.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: image/png
content-length: 18151
x-amz-id-2: fHPigmQWWpRPbMFfByMBeV8WSL8GThjopcxSVKNowj5mQY8Nh/9iOOK/A4NWafgzfCG8Cjyg0ko=
x-amz-request-id: E1D6623WK8X1KZ92
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "edeb31c62d628ef34a0f0c5b3554d594"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dgg6WjGruX5aK8Ki9p%2FWlHIGmmULch6q3cypfSZqy%2FwURayCIJ77KpqP8XytJ06PYNmo%2F6DWLfEHhbPZpImV%2FCmfKWCHxbmgWu4d1WnsaGGg1LnHqPesrF%2BD%2Bst7xQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0a98ab50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fstep_2.png | 188.114.96.1 | | 3.2 kB |
URL happy-u.vip/spin%26win%2Fimg%2Fstep_2.png IP 188.114.96.1:0
File typePNG image data, 108 x 111, 8-bit colormap, non-interlaced\012- data Hash88b54e36c16566349015201acea3e3c5 443a733f5621540a00f5fdc561c09affe3e1f6f5 655ecf68b848084f26959dc99c6d0943ee4ae36c9c8f3bd37b54534dc7329deb
GET /spin%26win%2Fimg%2Fstep_2.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: image/png
content-length: 3222
x-amz-id-2: /Ymc8ho/xCpHu8F+JOa855VFJ3dQBwjYG9GTSPHPB07otUoXNvNpu/40uL22TE3KbvomUqGBKSs=
x-amz-request-id: 4BAR7VH30CASFE3Q
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "88b54e36c16566349015201acea3e3c5"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b3BjOyAkiWppM53bS9at1yKmGwsGA3M8OgXs87fdjq%2FONeV1qWkta50z8cvhSL56njmDcwivLlnZm0HRs06f4BjC%2BpJpLwZm1H%2BTSgai4s%2FK6yIVgMgsj9m9kFRR4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0a98eb50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fbtn_wheel.png | 188.114.96.1 | 200 OK | 40 kB |
URL GET HTTP/2happy-u.vip/spin%26win%2Fimg%2Fbtn_wheel.png IP 188.114.96.1:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjecthappy-u.vip Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4 ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File typePNG image data, 265 x 265, 8-bit colormap, non-interlaced\012- data Hashc87017b2b02d607b3828a8bcc27c1425 9e4fec96867a51707cbcfb0e3a07b9bad80b7da7 d6d90af492ef59fdce23e82fd182345df86a8fcc5804b8a25046d7f18c0b7203
GET /spin%26win%2Fimg%2Fbtn_wheel.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: image/png
content-length: 39728
x-amz-id-2: XmLFD5IdSYKOS97AcDAEmj8V1VAUeYM7vA/bP/nCA/vsWRyb8G3rDic+7KyFNQqXuX8d0UXEKQs=
x-amz-request-id: Q5AQTCZ3470ZRBDA
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "c87017b2b02d607b3828a8bcc27c1425"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jEH20DtdS7QctM6AX1qtM5C2LL9IEgHx7%2FCzeCC47b8UAQkCl6WxalmZFG3j%2BC0vJ%2BleGGp4bYG0sKnnD2tA9ME1VE0Z8llveAkh%2FpQw5sgpguW910dj%2Fwq4cfdRFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0a98cb50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fwinner_arrow.png | 188.114.96.1 | | 74 kB |
URL happy-u.vip/spin%26win%2Fimg%2Fwinner_arrow.png IP 188.114.96.1:0
File typePNG image data, 417 x 543, 8-bit/color RGBA, non-interlaced\012- data Hashc683522da9d856dee232a7af8880dcca a1650fb74577f287f4b4d56f297b523efc5a831f df42721033631f367318d3bd19ba40a73603f82413e1bab82190e75923decd5d
GET /spin%26win%2Fimg%2Fwinner_arrow.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: image/png
content-length: 74055
x-amz-id-2: qBXb5W3NG0b+jNYi6YHkgBUCnB1Q9XOgG5Ej6KpXChn2dViJFzM1QuXVGnlFhlmnPBLX2MI+sKg=
x-amz-request-id: 01H8QVF8VXVYNCDG
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "c683522da9d856dee232a7af8880dcca"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YbzfneDgFM0k7tQBj56eVf44r2hXFLe7jB2QUq6dtpd1Fha5neyzqf%2Fm3HS5le2Qm85qZHGkvSWr00dmhCtoTPd6Df1I06x%2BiRovXA2xjgSNOfjYUj2MrAlJm8dtzg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0a98bb50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fstep_3.png | 188.114.96.1 | 200 OK | 4.0 kB |
URL GET HTTP/2happy-u.vip/spin%26win%2Fimg%2Fstep_3.png IP 188.114.96.1:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjecthappy-u.vip Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4 ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File typePNG image data, 103 x 106, 8-bit colormap, non-interlaced\012- data Hash46054c1cb9438cc40e6a7aefe50a3fce ee19ae3bce0d2371565a20d1c3cac770b538cfe7 f1542e40c690aa28d39dae019ddbc2cfc16d78be8967c50efea0fce4520c6669
GET /spin%26win%2Fimg%2Fstep_3.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: image/png
content-length: 3995
x-amz-id-2: mSZUBsS73PHrODPdpdC8b4o1FTgnPkwKDYsHzlE1hW//WpSkemaICpXCeTeG922xLHMffiHoRvg=
x-amz-request-id: 01H5DJCVCDJT9N88
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "46054c1cb9438cc40e6a7aefe50a3fce"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dnDpfQIJQctT2cgaDwJeHIJwDXmuk7Eo1p63vr%2FsU%2BZln2AAWt1bY%2FjKcmjLXhRn%2FmS%2B9XtHZvA8gAohy1Q8cYgfNI7btpjqKqFqHLWNCDUgI7FOtOI5geUWPbG2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0a98fb50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fspin3.png | 188.114.96.1 | 200 OK | 99 kB |
URL GET HTTP/2happy-u.vip/spin%26win%2Fimg%2Fspin3.png IP 188.114.96.1:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjecthappy-u.vip Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4 ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File typePNG image data, 330 x 330, 8-bit/color RGBA, non-interlaced\012- data Hash75c1f347a25863cb43f7b434fe29c318 7b15b67d416f3c13628d54234535257b5d9f97ca 80dfee3fcd5987b9caf7a2939eb821a2c2ce5075d729e0cdcc942b706d3886f8
GET /spin%26win%2Fimg%2Fspin3.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: image/png
content-length: 99064
x-amz-id-2: DVKKVmuUuZJfFZztbNaKPxr2PWFzgQqushye/tSCE33n79R0eSTwNkXQ3v+bmDWGE62eRUZT6AM=
x-amz-request-id: 01H80JYNYE79YWZX
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "75c1f347a25863cb43f7b434fe29c318"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TMTRFT7IGRW93%2FJ6mC%2Bkkl2xlqgD%2F04YHaRxD2r%2Beq%2BwGKZ%2B9bJM6zB%2BABzJNKqgrxCUH0RN1PCWzhSwQPXRqtx1y7TnSFG0rNfPnGG9L82NzgAY0rBf5GN6b2IYVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0a988b50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fstep_1.png | 188.114.96.1 | | 2.7 kB |
URL happy-u.vip/spin%26win%2Fimg%2Fstep_1.png IP 188.114.96.1:0
File typePNG image data, 81 x 110, 8-bit colormap, non-interlaced\012- data Hash850c3d9f4d757d15f2147c7d68b5e20d 922f9457476e6f5d782229f173924a2a7886d085 03da024f8f5b7023f71fce55952db0173fb143e0ec481b15963e32612e8f032a
GET /spin%26win%2Fimg%2Fstep_1.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: image/png
content-length: 2687
x-amz-id-2: XuJZfrL7b4MdV17aGSD/JEP5Oq7RnT3E1AFHaP8/zfSirjH6LXXM4GKCYo3kidWYe8WyU0iuISo=
x-amz-request-id: 01H3H9D1EDVVP812
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "850c3d9f4d757d15f2147c7d68b5e20d"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bjgmtH4HAwMg0gXmn8QENc%2BIrT88wGzxY1hyC5nm8ufSP0N6SGIPS68szweK6RCOW3W2qonvs3ih%2BJIVx823Xm%2B98Ky0XMz%2F7Efjz9oqhmbS3fvGuh%2BopCDCQFCq%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0a98db50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fstep_4.png | 188.114.96.1 | 200 OK | 4.0 kB |
URL GET HTTP/2happy-u.vip/spin%26win%2Fimg%2Fstep_4.png IP 188.114.96.1:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjecthappy-u.vip Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4 ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File typePNG image data, 109 x 112, 8-bit colormap, non-interlaced\012- data Hash6a13f0d5f0fed8f549d633b277ad0840 26403b4bb0be30f2b003046e85222128d41873ca bfbc534d9172bbbb51ad185e0afc51bfd5a7f3069ca39e01943cc11c9413aa69
GET /spin%26win%2Fimg%2Fstep_4.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: image/png
content-length: 3989
x-amz-id-2: l69vVeNjkhmd2dd03j6AI89NFK+S9DTmeojPNiHUp4a8+H+MEap1/ZfBKEb5lrdBjkqwHhUzw60=
x-amz-request-id: 01H3QJRA1FE7EN1B
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "6a13f0d5f0fed8f549d633b277ad0840"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fk%2BP3t2bujpghzHtBYXyGGCjR2LaMJcgJh7eNwULUY1aFHzSW0ijFKbkYIwJGKX5l3dIBxWHolGhtAyUwex0Lp%2BXzo2x0Wb8qv2eiuO3FjUkINKoeY4%2FxmOTkutgRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0b990b50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fwheel.png | 188.114.96.1 | | 448 kB |
URL happy-u.vip/spin%26win%2Fimg%2Fwheel.png IP 188.114.96.1:0
File typePNG image data, 968 x 968, 8-bit colormap, non-interlaced\012- data Size448 kB (448429 bytes) Hash51a35905a65384f268990ba38d230810 e40595533b61b9f9d9f9a3570801f0a26bfb0bc1 8fcd41361300d27c1afeea4a91739641eb75f6c3005aaadf99aa5daac1f58c57
GET /spin%26win%2Fimg%2Fwheel.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: image/png
content-length: 448429
x-amz-id-2: inX/ZyTdIBBEWH6HHYsGyjifMbDgE7zMnb6NQ5LMEf3ONN9rCUTGW3YfTJ0Fwmhh20+zV1HbbAk=
x-amz-request-id: 01H9P2DYT69BMXJ3
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "51a35905a65384f268990ba38d230810"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XaCNtZZHRUR4TCwqfoX7AI85vCJhJAURWBKbnuz6i2JwhQFPrv4ZqOyc1mvwkbq9k8ATNKr6cl5rs8Hey5xONTh1DkUyrK2p09VnA%2FoFsM1XycnQuCsjUHmLD1QXxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0a987b50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fsmoke.png | 188.114.96.1 | | 293 kB |
URL happy-u.vip/spin%26win%2Fimg%2Fsmoke.png IP 188.114.96.1:0
File typePNG image data, 2560 x 577, 8-bit colormap, non-interlaced\012- data Size293 kB (292941 bytes) Hash17f0097a7c4c10d6505cbf39fb81c11b 98fb91e8d8f576fecb74acfd9d102440e9a7517c d05615a5b1bc605b7a84df5b91caf93d47b4fe20a56198a213aea9db1089933b
GET /spin%26win%2Fimg%2Fsmoke.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:55 GMT
content-type: image/png
content-length: 292941
x-amz-id-2: E+XzTv3PeksYwCeLF02NpCar2ihuo5zZggxsgbdeIpBwfRU2lefu73E8ovBROhDgLRFtmd5uLVc=
x-amz-request-id: 2TEZPX7AZ8JCF1Z7
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "17f0097a7c4c10d6505cbf39fb81c11b"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 15
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YLFB9eTw9YW9zxzl7tvtpugJUmw%2BWYDdgrbfwAWJ6f2GV6G%2Fn9jCh96ItJaBys4TTkdXEptgKvtsU29G6W0KiI6ktV25l1kAyKfKl9uZjvfisAZOEC88Epohi3qocQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0c994b50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fmoney1.png | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/2happy-u.vip/spin%26win%2Fimg%2Fmoney1.png IP 188.114.96.1:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjecthappy-u.vip Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4 ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File typePNG image data, 193 x 162, 8-bit colormap, non-interlaced\012- data Hash1fcd1a5c5b958e13c4157c2fb4fc143a 9cfc70a0649bd2e1efb8a3bb9a65ef6cea135e44 32d7302323a126f8cc9b7bc004799872d52a6c5e5767dc254ff85958f761dc12
GET /spin%26win%2Fimg%2Fmoney1.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:55 GMT
content-type: image/png
content-length: 14903
x-amz-id-2: 6L44HNBRGeeUDlt/1C7399rrlmns02QVcM58qyjYI3lEM7WIyE7N5f/Wu6AvUhcchoD1AQ5OSbg=
x-amz-request-id: 01H5C7Q7SY569PM5
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "1fcd1a5c5b958e13c4157c2fb4fc143a"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 15
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ovHPUU8jYagTPdEb9LXNMeKstCgR4aXURea5iJMdSXV5s%2FxJnr8zZR%2Bo%2BICohh521MubDhoLGc%2BFFybHerSm5ZinaiNpyrqWV5%2FL8XRmaAWELf6G9d5HDg%2FlS1GfYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0d99ab50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fautomaton.png | 188.114.96.1 | | 263 kB |
URL happy-u.vip/spin%26win%2Fimg%2Fautomaton.png IP 188.114.96.1:0
File typePNG image data, 488 x 490, 8-bit/color RGBA, non-interlaced\012- data Size263 kB (262867 bytes) Hash995430d5b02826431ffd5748d3191ff8 82912afc0d28555af50918ddda280c4ca1c2789e fa7b07a3aa0021ee773ff693ac70539a405ef7e7c9048a4db2c79c435962e6f4
GET /spin%26win%2Fimg%2Fautomaton.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:55 GMT
content-type: image/png
content-length: 262867
x-amz-id-2: mNPwam9vKfhyLEqquKrEWMp21WjjG2Y9GujAZmz/c4ILOBACcOHmgf1YbSfuGCtqV3x/zvZ6MPg=
x-amz-request-id: AE54XKFZ69GCXVAS
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "995430d5b02826431ffd5748d3191ff8"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 15
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xy%2BFlVmRVtfN316QIXCEo8836n%2BWy016OEl3PT%2Bwe6NXcrHpBzJElxI3nIGoce4edG3eVYukrhM%2B0vr0VHNcKrhKopjGup49E7UH4HrlWtt0dIEMp8VU0UdIw3kXKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0d998b50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/spin%26win%2Fimg%2Fcase.png | 188.114.96.1 | | 54 kB |
URL happy-u.vip/spin%26win%2Fimg%2Fcase.png IP 188.114.96.1:0
File typePNG image data, 372 x 359, 8-bit colormap, non-interlaced\012- data Hash3a6da6e8f2fbd5a6a068f6f6910af428 d94a9203f2d141e68e2568309e7a04df4646fbfc 321df497056c3f496f76a0be33db8a099741375bff3f529bffbc8552d4e2263d
GET /spin%26win%2Fimg%2Fcase.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:55 GMT
content-type: image/png
content-length: 53547
x-amz-id-2: wfQAldQRIlj3cyu9RSlCHH0VvLArYAI9H0THG8SB0MmJori8M+nf29bGY29/DaxeAODWb2Bovzc=
x-amz-request-id: 01H8EZZQAEQNYV07
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: "3a6da6e8f2fbd5a6a068f6f6910af428"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 15
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a9OKCA7W721w9U92R25YQNU66Iknb6L6ecekCTcxo5qgpjN8z2UqboR0bOkwk%2F7DYyQmpuN%2Fx4jupuHTy7dEthctaRRaZu%2FgKH4i%2Bc%2BBk7KDSCT3EQ4VQrsRUqj4SQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0d999b50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| loadingscripts.com/progress_p/pwa_links/default_scripts/notification.js | 185.246.188.125 | | 2.8 kB |
URL loadingscripts.com/progress_p/pwa_links/default_scripts/notification.js IP 185.246.188.125:0
File typeASCII text, with very long lines (2801), with no line terminators Hash01a2c61eb40ce8e341a0801f78da7735 1cb39b0674bc20c3208c16c53c131e74704759ed 03d593cbf7b72d3c70caedac0c0259330ce8b1a45b708e92e3f19245b6ca9929
GET /progress_p/pwa_links/default_scripts/notification.js HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Wed, 29 Nov 2023 04:31:55 GMT
Content-Type: application/javascript
Content-Length: 2801
Last-Modified: Fri, 24 Mar 2023 17:31:52 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "641dde88-af1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| loadingscripts.com/progress_p/pwa_links/main/dating/black_notif/1/pwa_custom.js | 185.246.188.125 | | 972 B |
URL loadingscripts.com/progress_p/pwa_links/main/dating/black_notif/1/pwa_custom.js IP 185.246.188.125:0
File typeASCII text, with CRLF line terminators Hashc8145780bc34228f8a6dde8cc465395b 4e5bd6d7d497448117e0e463bfe454782046c102 6b17e488a6a95f1ff8de24513d6cf36e3376fadc1fdcc7e620a74091db2e6166
GET /progress_p/pwa_links/main/dating/black_notif/1/pwa_custom.js HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Wed, 29 Nov 2023 04:31:55 GMT
Content-Type: application/javascript
Content-Length: 972
Last-Modified: Thu, 27 Apr 2023 19:51:55 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "644ad25b-3cc"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| happy-u.vip/spin%26win%2Fjs%2Fjquery.min.js | 188.114.96.1 | 200 OK | 32 kB |
URL GET HTTP/2happy-u.vip/spin%26win%2Fjs%2Fjquery.min.js IP 188.114.96.1:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjecthappy-u.vip Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4 ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File typeASCII text, with very long lines (32058) Hashc9f5aeeca3ad37bf2aa006139b935f0a 1055018c28ab41087ef9ccefe411606893dabea2 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
GET /spin%26win%2Fjs%2Fjquery.min.js HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: application/javascript
x-amz-id-2: rcK36DoYTo945nU+G4E5kQEtzHtXrPEX0UeLOOFZBCOz6Nuwddj0nxR63rnPFWK7qdvBMhPgppw=
x-amz-request-id: 01H6H1SD33GNFPAB
last-modified: Fri, 05 May 2023 15:33:21 GMT
etag: W/"c9f5aeeca3ad37bf2aa006139b935f0a"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 14
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BiQ18PfQ18Kf3swUbb5H8Z%2FwL47eUthHdHfX0Ykshnx8q7QID0ydHzwIW%2BjYT1M6lQg6q7FQDxJuIeZKO8rawEo0EBwLqAb%2F0AJwQbCYV356%2BRQbsmiMSPF03ppCuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0a97eb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| loadingscripts.com/progress_p/pwa_links/main/dating/black_notif/1/letter.png | 185.246.188.125 | 200 OK | 42 kB |
URL GET HTTP/1.1loadingscripts.com/progress_p/pwa_links/main/dating/black_notif/1/letter.png IP 185.246.188.125:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjectloadingscripts.com FingerprintEA:CB:E6:D6:B4:94:0C:67:75:83:D4:1C:2E:D3:D5:BD:25:40:E0:8F ValidityTue, 24 Oct 2023 06:32:19 GMT - Mon, 22 Jan 2024 06:32:18 GMT
File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data Hashd1eda75f805d2c02b8f86980b0a04095 18daeb15400f2b462b27d7ae0b985c56dda9fa4c 5dcadd14cef952e0c630aeed75a30ecfa2df9708397b9a74d19f7d66dfa72146
GET /progress_p/pwa_links/main/dating/black_notif/1/letter.png HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Wed, 29 Nov 2023 04:31:55 GMT
Content-Type: image/png
Content-Length: 42049
Last-Modified: Fri, 24 Mar 2023 17:31:52 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "641dde88-a441"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| happy-u.vip/spin%26win%2Fcss%2Fstyle.css | 188.114.96.1 | 200 OK | 5.9 kB |
URL GET HTTP/2happy-u.vip/spin%26win%2Fcss%2Fstyle.css IP 188.114.96.1:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjecthappy-u.vip Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4 ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File typeASCII text, with very long lines (34543), with no line terminators Hash66f48d8b4e47acaf765c709c81df64d8 b73c3b29218bce12a768f9eb5daff6dd9e47e59a 5723be5f763462c3d18431ea31d2545bad9551a517db74e1c94a0e9ec1b3d432
GET /spin%26win%2Fcss%2Fstyle.css HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:55 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=40962
etag: W/"3b2e568b4ac4601cd6d906345e500eaa"
last-modified: Fri, 05 May 2023 15:33:21 GMT
x-amz-id-2: mzAa9Z93QhM2fz4JzAo3GUJvHGLqhAydtYd1RQHdM+e9tcycY+/c4LyNz5sjKDaKikzJZL1XnJM=
x-amz-request-id: 01H8YK48EHPEK98A
cache-control: max-age=2592000
cf-cache-status: HIT
age: 15
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ewBUqE6xjNsKe3JxyJu%2ByDFd23isA1H%2FoCAZXQqC5z%2BJnrr3YREXn7UhDQpdIw8HDfkS244HkbYugb4iwI%2FDEb7YNOx2S%2Fc9nDS%2F16IqOqll4btYIrqsLABphCPn6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb0d99bb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| notix.io/settings?appId=1005ccb3a649acfe880fe0b0be66876&ver=0.15.18 | 139.45.240.92 | 200 OK | 466 B |
URL GET HTTP/2notix.io/settings?appId=1005ccb3a649acfe880fe0b0be66876&ver=0.15.18 IP 139.45.240.92:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjectnotix.io Fingerprint68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D ValidityFri, 15 Sep 2023 11:38:16 GMT - Thu, 14 Dec 2023 11:38:15 GMT
File typeJSON data\012- , Unicode text, UTF-8 text, with very long lines (451), with no line terminators Hashca2c9a4c0d7a6ff6a59c12ca4abd3cfa 4cd214b5c1c8d7b5aae4dc79e32f163af0ec575c 9bd931d5358ba106157159a0b2b6044061af8f491a1b78884fcde1089a514dbe
GET /settings?appId=1005ccb3a649acfe880fe0b0be66876&ver=0.15.18 HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://smiling-u.vip/
Origin: https://smiling-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 29 Nov 2023 04:31:49 GMT
content-type: application/json; charset=utf-8
content-length: 466
access-control-allow-origin: https://smiling-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| | 104.21.83.224 | 200 OK | 38 kB |
URL User Request GET HTTP/2IP 104.21.83.224:443
CertificateIssuerLet's Encrypt Subjectsmiling-u.vip FingerprintDC:C6:BA:2E:C0:35:45:B8:AA:D6:33:93:BD:FA:A9:C0:B6:43:2E:A0 ValidityMon, 23 Oct 2023 11:49:28 GMT - Sun, 21 Jan 2024 11:49:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /spin&win/ HTTP/1.1
Host: smiling-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:31:54 GMT
content-type: text/html
x-amz-id-2: woLP/dg7znwfE4Re8yoC3jQl+xDhp7yTXjN4DiQ3622vKNpChoG2n4ktUJ3vmFX90ThzIKl8IZA=
x-amz-request-id: A57V2NBQZ0CMV6YN
last-modified: Sun, 02 Jul 2023 15:03:34 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 15
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O5ypgyY0CsZ8yJpYaNqGnWwdDWdconlEvs%2BSmWJwnmaze%2FweaS297nhWaPZT8kHPf1SjNyWmebE4uBUOreRGguoPqs3Vj1PMj3elbmBrST2oQuKyIrdBoU4jN%2BMFofPR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fada8f8712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-u.vip/img/bg_bottom.jpg | 188.114.96.1 | 404 Not Found | 0 B |
URL GET HTTP/3happy-u.vip/img/bg_bottom.jpg IP 188.114.96.1:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjecthappy-u.vip Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4 ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/bg_bottom.jpg HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/spin%26win%2Fcss%2Fstyle.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 29 Nov 2023 04:31:55 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: 72BJX2BG7A607ZGX
x-amz-id-2: TVa3sxxZpvHor46t1f40xFpL3l+/JQbfJq5Xx4hz9jbv4jPzeFrkYZhGmxdP7oBMK3O5afmnLjQ=
cache-control: max-age=2592000
cf-cache-status: HIT
age: 15
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m57ZwsevszDwubTYMlSbpLc%2BZuPVrep1oBgzDAfrvxIJIhGX%2BMkRBzgNNYpXxBu7Gv540PNIf6s%2FE8A49s15GinClVgUZ0N7XPaJTWKW1FZp90QT1WxuRknzyDrAtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb3f9aa569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| notix.io/ent/current/enot.min.js | 139.45.240.92 | 200 OK | 144 kB |
URL GET HTTP/2notix.io/ent/current/enot.min.js IP 139.45.240.92:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjectnotix.io Fingerprint68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D ValidityFri, 15 Sep 2023 11:38:16 GMT - Thu, 14 Dec 2023 11:38:15 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size144 kB (143573 bytes) Hash938c5b2fda0dc4bc1c5a990d82e79e04 1efdfe620289140a9829952cb1a18dc8aa741130 b75409fbfbd6f3df7d462d2e022e37627d88e83f391fea24d975e8773ecfd385
Analyzer | Verdict | Alert | Public Nextron YARA rules | malware | Unique code from Jetriz, Swid & Jeniva of the Tetris framework |
GET /ent/current/enot.min.js HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smiling-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 29 Nov 2023 04:31:48 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 11:19:10 GMT
etag: W/"65647b2e-230d5"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| happy-u.vip/img/text_bg.png | 188.114.96.1 | 404 Not Found | 0 B |
URL GET HTTP/3happy-u.vip/img/text_bg.png IP 188.114.96.1:443
Requested byhttps://smiling-u.vip/spin&win/ CertificateIssuerLet's Encrypt Subjecthappy-u.vip Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4 ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/text_bg.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/spin%26win%2Fcss%2Fstyle.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 29 Nov 2023 04:31:55 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: 72BHWR1N7Q9NP0A4
x-amz-id-2: gT11klF3heEvSWFNzPYEryIivGvJUkE2lYmWEBf5lXdOuBCanMTT2uajCDq2u9sMt9yGdrlKQvE=
cache-control: max-age=2592000
cf-cache-status: HIT
age: 15
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wLULBLBRM%2FsV9xzKhQGqt4NiJu3Cir8A0KtJVrLNaw6VFHJ2m3cnrtlqVopbPhLRK7MU5NYbSdZX5y6BFXoRHb%2FLbnWopCiYFjFAr9lMRpYiBf%2F3LAozaHTKGh2QiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d81fb3f9a9569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|