| happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743 |  143.204.55.20 | 301 Moved Permanently | 167 B |
URL User Request GET HTTP/1.1happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743 IP143.204.55.20:80
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashf5d40b7259645010f9a248858ad14178 b3051d17a6ec8c9e166bf09a62b48261ab86957b 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743 HTTP/1.1
Host: happy-mobi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 20 Apr 2023 22:46:37 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743
X-Cache: Redirect from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sjqgNOz8WzDfRg3ilS3QSubmRUi0pfWUR28tjolA-iWfZMaDLo38jQ==
|
|
| ocsp.r2m02.amazontrust.com/ | 143.204.48.16 | | 471 B |
URL ocsp.r2m02.amazontrust.com/ IP143.204.48.16:0
Hashf8b34f9ed2b50da0df20b803774d3531 72ef96075974cb2f301886e8b7b69e7e6c161e42 f0795a7cf817ea7a59fb80371f2775cac0217c7bea475d50e63dea7808301ae6
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Thu, 20 Apr 2023 22:46:37 GMT
Etag: "643b6217-1d7"
Server: ECAcc (dcb/7339)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: q3vRd9kkTP32CFMMkyPmyD4vWZkRMlb2PKyGJlTiPQeUTm31CdfJUw==
|
|
| happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/loading2.gif | 143.204.55.100 | 200 OK | 37 kB |
URL GET HTTP/2happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/loading2.gif IP143.204.55.100:443
Requested byhttps://happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743 CertificateIssuerAmazon Subjectpro-mobi.net FingerprintB2:5D:E9:75:6B:0D:BC:13:7C:9E:E0:5D:D0:71:EC:63:DE:EC:91:1C ValidityMon, 13 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File typeGIF image data, version 89a, 70 x 70\012- data Hashc26c3f849a5b578ed5494ade3dfb6837 add1f2224f425c034f040973e83edd798f0727a9 3dfebea695e74f95113339686c6167ecd8e05afb20d69e3fd74d2acc8689e39b
GET /2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/loading2.gif HTTP/1.1
Host: happy-mobi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 37009
date: Thu, 20 Apr 2023 17:37:55 GMT
server: nginx/1.22.1
last-modified: Sat, 12 Mar 2016 19:28:38 GMT
etag: "56e46de6-9091"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fQazUPrQMeAAroFkic3bs-Po-vI-lECcX2vrlHoHeiKCnh2XJaHgsQ==
age: 18522
X-Firefox-Spdy: h2
|
|
| happy-mobi.net/sw-check-permissions-4e1e4.js?var=7bce3d95-fbc2-4733-b33b-11807aef8307&ymid=wn9or1jpg9bmdj5kie7bteoi | 143.204.55.100 | 200 OK | 566 B |
URL GET HTTP/2happy-mobi.net/sw-check-permissions-4e1e4.js?var=7bce3d95-fbc2-4733-b33b-11807aef8307&ymid=wn9or1jpg9bmdj5kie7bteoi IP143.204.55.100:443
Requested byhttps://happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743 CertificateIssuerAmazon Subjectpro-mobi.net FingerprintB2:5D:E9:75:6B:0D:BC:13:7C:9E:E0:5D:D0:71:EC:63:DE:EC:91:1C ValidityMon, 13 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash4926ad62fc01ecfbe8225653b1202737 bf4b858281bc7a6d5c73a37b1b27434e94b4c1b4 cdaee50cc9d7ae2fad4d3b4fce6e3e2590ace2be29110373f550ce11f8ab98bd
GET /sw-check-permissions-4e1e4.js?var=7bce3d95-fbc2-4733-b33b-11807aef8307&ymid=wn9or1jpg9bmdj5kie7bteoi HTTP/1.1
Host: happy-mobi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 566
server: nginx/1.22.1
last-modified: Sat, 04 Mar 2023 03:34:54 GMT
accept-ranges: bytes
date: Thu, 20 Apr 2023 19:44:34 GMT
etag: "6402bc5e-236"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 54_Wd1lKnWN2Re2Dsc776-0NEKJ6QxhiO0uP1JyZDmsi-XsmNch_pw==
age: 10924
X-Firefox-Spdy: h2
|
|
| deefauph.com/zone?&pub=0&zone_id=5101589&is_mobile=false&domain=happy-mobi.net&var=7bce3d95-fbc2-4733-b33b-11807aef8307&ymid=wn9or1jpg9bmdj5kie7bteoi&var_3=&var_4=&dsig=&action=prerequest |  139.45.197.251 | 200 OK | 0 B |
URL POST HTTP/2deefauph.com/zone?&pub=0&zone_id=5101589&is_mobile=false&domain=happy-mobi.net&var=7bce3d95-fbc2-4733-b33b-11807aef8307&ymid=wn9or1jpg9bmdj5kie7bteoi&var_3=&var_4=&dsig=&action=prerequest IP139.45.197.251:443
Requested byhttps://happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743 CertificateIssuerLet's Encrypt Subjectdeefauph.com Fingerprint60:C6:D8:6D:EE:19:03:8F:4B:76:3E:56:1D:55:FC:0F:5E:AD:BF:23 ValidityThu, 02 Mar 2023 05:16:03 GMT - Wed, 31 May 2023 05:16:02 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=5101589&is_mobile=false&domain=happy-mobi.net&var=7bce3d95-fbc2-4733-b33b-11807aef8307&ymid=wn9or1jpg9bmdj5kie7bteoi&var_3=&var_4=&dsig=&action=prerequest HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://happy-mobi.net
Connection: keep-alive
Referer: https://happy-mobi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 20 Apr 2023 22:46:38 GMT
content-length: 0
x-trace-id: f97a765be10fab7a540e40b390347d92
access-control-allow-origin: https://happy-mobi.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| deefauph.com/pfe/current/micro.tag.min.js?z=5101589&ymid=wn9or1jpg9bmdj5kie7bteoi&var=7bce3d95-fbc2-4733-b33b-11807aef8307&sw=/sw-check-permissions-4e1e4.js | 139.45.197.251 | 200 OK | 42 kB |
URL GET HTTP/2deefauph.com/pfe/current/micro.tag.min.js?z=5101589&ymid=wn9or1jpg9bmdj5kie7bteoi&var=7bce3d95-fbc2-4733-b33b-11807aef8307&sw=/sw-check-permissions-4e1e4.js IP139.45.197.251:443
Requested byhttps://happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743 CertificateIssuerLet's Encrypt Subjectdeefauph.com Fingerprint60:C6:D8:6D:EE:19:03:8F:4B:76:3E:56:1D:55:FC:0F:5E:AD:BF:23 ValidityThu, 02 Mar 2023 05:16:03 GMT - Wed, 31 May 2023 05:16:02 GMT
File typeC source, ASCII text, with very long lines (41570), with no line terminators Hash5afe3646f268f49bd2a063f9ec0efd4f d12d96d586b34fa522ad118c26ac6701c4700ca2 c734274419dbd49612802b50ef522945bd1bdf8a9ee8cd5ced9de248dadbcac7
GET /pfe/current/micro.tag.min.js?z=5101589&ymid=wn9or1jpg9bmdj5kie7bteoi&var=7bce3d95-fbc2-4733-b33b-11807aef8307&sw=/sw-check-permissions-4e1e4.js HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://happy-mobi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 20 Apr 2023 22:46:38 GMT
content-type: application/javascript
last-modified: Wed, 19 Apr 2023 12:46:05 GMT
etag: W/"643fe28d-a262"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/js-2rs.js | 143.204.55.100 | 200 OK | 2.3 kB |
URL GET HTTP/2happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/js-2rs.js IP143.204.55.100:443
Requested byhttps://happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743 CertificateIssuerAmazon Subjectpro-mobi.net FingerprintB2:5D:E9:75:6B:0D:BC:13:7C:9E:E0:5D:D0:71:EC:63:DE:EC:91:1C ValidityMon, 13 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (2516), with no line terminators Hashb28a2640d0fa5b67a2e1e7ee9977ea5c 6d8afb40ae1f5a8f4e104c0d47a8ec39a1c93c47 5948216979c5197ce96319131444195779aa241e8062d529180989d08651d8aa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/js-2rs.js HTTP/1.1
Host: happy-mobi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 20 Apr 2023 01:50:51 GMT
server: nginx/1.22.1
last-modified: Sun, 25 Sep 2022 14:58:46 GMT
etag: W/"63306ca6-910"
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9omFVVZyAOcUi_AjFhZIEBTJZ5XSTGMcvIHn3hVunTq_kXZmq9Gfbg==
age: 75346
X-Firefox-Spdy: h2
|
|
| happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/jquery-3.6.0.min.js | 143.204.55.100 | 200 OK | 90 kB |
URL GET HTTP/2happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/jquery-3.6.0.min.js IP143.204.55.100:443
Requested byhttps://happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743 CertificateIssuerAmazon Subjectpro-mobi.net FingerprintB2:5D:E9:75:6B:0D:BC:13:7C:9E:E0:5D:D0:71:EC:63:DE:EC:91:1C ValidityMon, 13 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/jquery-3.6.0.min.js HTTP/1.1
Host: happy-mobi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://happy-mobi.net/2sp/mob/et/gg9335game/age21-btn-p-amh-mc-2sp/?campaign_name=ET+PPR+R+BL-m+ETLK+2sp&lander_name=Gg+et/gg9335game/age21-btn-p-amh-mc-2sp/&clickid=wn9or1jpg9bmdj5kie7bteoi&source=7bce3d95-fbc2-4733-b33b-11807aef8307&cep=9PQG3wVY79gQDZ9mXammqIOqFXkgoimM4PG2GsUJ9mZwcsq8I92h-Lw6dQHDH_RWPXH6RES-yHZ_n5zi2RE_PjeJ2uHRPyfr-_pA9hAqr6YSN_QL5xUzPe87_CWNRp4MgMmNBbLXOBldzr5QeEn2d5Mc-htAKodhU8UzkrRQy6gceCjL6QEp7rKxogtb1CnrBzMxCuf1eenkcQCYHM0uGnp-GdRS53_d5aF7LqoDYm38nKiOwvP_39eJOwN4OZQGi4uIbeaNsZtungHK_9WRbXcBg92XOizNRhE9mYtzVUBQ5i5Ndg5m7CZI3XqRCcZiy0ueVFVUC0UHg1zXwnImS_cfaVcscu4ENooqbm9gbkt_zScQKG8RZuTiphMnoGm9&lptoken=16ee67f9309828996743
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 20 Apr 2023 01:50:51 GMT
server: nginx/1.22.1
last-modified: Thu, 06 Jan 2022 15:49:08 GMT
etag: W/"61d70f74-15d9d"
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Qyj6mvhN4PMAQZ08yzzOLwYD4DbasNBBhAUZga2qg-BHp2RSWkD6Xg==
age: 75346
X-Firefox-Spdy: h2
|
|