happy-u.vip/welcomebonusng%2Fimages%2Fslot-spin.gif
188.114.97.1200 OK 88 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fimages%2Fslot-spin.gif
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type GIF image data, version 89a, 410 x 279\012- data
Hash 617c16c5e04c8603dd7f157862b1c682
1306296f9a666a7fc50f339a2a924ce8a3a18169
7f8e36cf7ac437d7c42440ef5f522c8e27adb06348b573192308038fa7c1dc7e
GET /welcomebonusng%2Fimages%2Fslot-spin.gif HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: image/gif
content-length: 87599
x-amz-id-2: kyXk9VY8RH8aUy569k6qopxIa2d7NMJ6V7GRhmTPAYWtvB8BoCL+JyvZ+YcOnv+PF8hJyTHlJ2M=
x-amz-request-id: 1PMSRKVAV1Z1DZC5
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: "617c16c5e04c8603dd7f157862b1c682"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e5jBy3YoyB3vlfxbVlm8ay5xn1jQEMQqETtsu%2BayJ%2FEv1hL3Lllvz3qdxD9I%2BD28A12KRHBDGUrfg0yzIXqEiFuWT5%2FiQVBQLBHo0Qf59X4vES4rIn87D9T2Gm9K8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b1f983e5689-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/welcomebonusng%2Fimages%2Fred-arrow-right.png
188.114.97.1200 OK 1.4 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fimages%2Fred-arrow-right.png
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 881bdc037be8895ba5d8d53456890e7e
4e105c89e2a1475520bb74c9c20bf2f9e906fcb3
9f8160d6380fef91c8eadecc6e8e59e93e3f5c40be7963018c8104bef4354d8f
GET /welcomebonusng%2Fimages%2Fred-arrow-right.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: image/png
content-length: 1362
x-amz-id-2: 7otU0lDzdQlGVUy1sLuFwYbbTrgQovHsjLW7eBXKc474dZMfdba34qX9fPjGnrMh34dbu3c1aZk=
x-amz-request-id: 1PMRER88KC7ET8CN
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: "881bdc037be8895ba5d8d53456890e7e"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=398CLya5iT04owKY4Ld4LQjqBOHDJkznv1XztrTEjKQlhX1LMc7sFCCKdYLCTuusyMbb%2BIYea9L2YnmqQq2CR4Q%2Bo7vX1kFhWKzid33ABZrNZ9HNpVm6XicX6KoYfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b1fa8475689-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/welcomebonusng%2Fimages%2Fred-arrow-left.png
188.114.97.1200 OK 1.3 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fimages%2Fred-arrow-left.png
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 92d3e482cacea857c5dfaf9fa3a21dfb
3f12c410c77d763cc4719ec367a18417b8300758
4a688dc66588e8e86e98ccadb318fa2aca3fd6e2444aac783278b982f3e47eef
GET /welcomebonusng%2Fimages%2Fred-arrow-left.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: image/png
content-length: 1334
x-amz-id-2: 7s/P+SOmBipdptMXsVTs03YEJBrxIpOequLd7oy71NXHS0ArfIvVljEhjK030pM0F89u0hvWw3o=
x-amz-request-id: TQHZ45M25TN7PG9R
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: "92d3e482cacea857c5dfaf9fa3a21dfb"
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gkMUVaUsWVPvCgTuPBn%2B8QRDJtDU%2Br2dUiAqVvPGHV2arS%2B7aXCA3ePBYGBWZ7xvDq7ICJcNr%2Bhf7MzdP7ituTTeKTzKeLY3IzwXEHenMDmDir5t3RI1CwOXHvARIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b1fa8455689-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/welcomebonusng%2Fimages%2FCA.png
188.114.97.1200 OK 3.4 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fimages%2FCA.png
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x512, components 3\012- data
Hash 6bbcfc2f8ef9e4182638bd02f42e0997
c300f77340b0a0f3980e0aacc8f029b248f4b76e
0d103145f41b63b6946e0a9a67044f3d4860d1ee2187bac3fb5e3a3baaeac530
GET /welcomebonusng%2Fimages%2FCA.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: image/jpeg
content-length: 3368
x-amz-id-2: f5VysowZYMs83fJ+MQHU2hWnUeSkSiPap1ANnAm+aij8h1D7OSW4dgebu6zmUjef1ryWZFdb0Ws=
x-amz-request-id: TQHRPGWRCHBMA7SC
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: "6bbcfc2f8ef9e4182638bd02f42e0997"
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vlbhZfl9GzsYSgbrtGJA8gNfUb5%2BAyZqR1Nwe%2FzK%2FYrdOPXyn%2BDKH%2BMvv3R%2FnDIQ7KyD5e%2F6HdY39bzQ9CaRFGGRKOuj%2BHeloS7vH%2B5W%2BS16w4gnT%2B9SDlsv4mwMNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b1f983b5689-OSL
alt-svc: h3=":443"; ma=86400
my.rtmark.net/img.gif?f=sync&lr=1&partner=0a350bc0889a7b2acce256aa3727691f5f4acb584d5d320e5f8daa79087f6f64
139.45.195.8200 OK 43 B URL GET HTTP/2 my.rtmark.net/img.gif?f=sync&lr=1&partner=0a350bc0889a7b2acce256aa3727691f5f4acb584d5d320e5f8daa79087f6f64
IP 139.45.195.8:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&lr=1&partner=0a350bc0889a7b2acce256aa3727691f5f4acb584d5d320e5f8daa79087f6f64 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=62356a3fcc1a477bb87dae836251cf61; expires=Sat, 30 Nov 2024 06:43:27 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/p.js?f=sync&lr=1&partner=0a350bc0889a7b2acce256aa3727691f5f4acb584d5d320e5f8daa79087f6f64
139.45.195.8200 OK 697 B URL GET HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=0a350bc0889a7b2acce256aa3727691f5f4acb584d5d320e5f8daa79087f6f64
IP 139.45.195.8:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
Hash fa258c548bd3d5ed3f588719b8195342
01b29b1ab21a23c45244fb0f21fc5370f71c9563
6f8951b5d352b0afba59856374fb9ec05e157d729ceccbaf3939f7b27bf0954a
GET /p.js?f=sync&lr=1&partner=0a350bc0889a7b2acce256aa3727691f5f4acb584d5d320e5f8daa79087f6f64 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
happy-u.vip/welcomebonusng%2Fimages%2Fslot-start.png
188.114.97.1200 OK 26 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fimages%2Fslot-start.png
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash f491647556e492de92530b48827690aa
6296c44299f5acb17cb2c06e37391a70672b1fd3
efb819d37f19ec7505d9602488ce97868d84e1c7929ce83e308e23f02d97b95d
GET /welcomebonusng%2Fimages%2Fslot-start.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: image/png
content-length: 26084
x-amz-id-2: 1suxzTJOLQao/2LPdGX/wegTnM/zN13gfmkSmXsPe+VkWK7tjm0ZeypLIT+lWKYk7Cz5k6G/XXY=
x-amz-request-id: TQHXPA984GZXZVF0
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: "f491647556e492de92530b48827690aa"
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ab9NE2%2FVoIp6OAZw344gmKh%2BGO6sPILwh3zuiY9wrf21OqQf97tGJM%2F2wsoIx%2BAYms1rIQmpg0sFjT0j8fYCzACYwv7wBUk760%2BZbDLPSi7B%2BnGFhuL0aECGzdstwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b1f983d5689-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/welcomebonusng%2Fimages%2Fslot-win.png
188.114.97.1200 OK 14 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fimages%2Fslot-win.png
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 939b6a73c96383ac0842317037f3a0f0
0654b62431c8ba522833950b8166d7a16e2a6b56
b8f1ec0ac028bd024af2cf57b63b07069b2f4a41e61c1577e968ca5d7ba72837
GET /welcomebonusng%2Fimages%2Fslot-win.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: image/png
content-length: 14391
x-amz-id-2: VBzJh+MaJ6eOrEmWp9XiLhq74t6bUaQLtX8z4bhCwSvGfOeiU/iKyAft/KMtnHlJeMkkM/hDEFU=
x-amz-request-id: TQHHP16MXFG2DF56
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: "939b6a73c96383ac0842317037f3a0f0"
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eUBKVfGg11EKIFxVbzfIlrZtNliPkd1ha%2Fe3iYwKz09ASmINTiHSWWZwidg1eQUeOE%2B08R0TCxZ6qHPdLBlCUpw2H%2FbmD3W%2B8IiJg5BpcNrp69cOGTXgXR65wb1Nlw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b1f98435689-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/welcomebonusng%2Fimages%2Fslot-result-1.png
188.114.97.1200 OK 20 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fimages%2Fslot-result-1.png
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 1fbd2b26e61236d5bcfdfeb6adbd2c8c
c9034272d28dab018b73f1967a679c734f987a1f
c402c36eb8d623b618261d40846e63c130de1e78720ab5578eae1d645198c963
GET /welcomebonusng%2Fimages%2Fslot-result-1.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: image/png
content-length: 20370
x-amz-id-2: uivKM+zj7nnJSA2fumsFRKqQUuePLtqegN/xWyHgLxwwtrReyXfzE6g4nrzJGU5m5C9IYbOS8kg=
x-amz-request-id: TQHRR0E51X92Q8RT
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: "1fbd2b26e61236d5bcfdfeb6adbd2c8c"
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fEBlqF9OuqMoxTqOUXmzT8hXVr3BivCy%2BIG1NuJRUuTqd2DvC49jUQFuNNUW0dkQ4WWOWgkFqTy%2BwriZYjM%2Fq7HBOrRu6eD8%2FD5lwdUHh1DBoDPMBUmjMoEYFlMBog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b1f983f5689-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/welcomebonusng%2Fimages%2Fslot-result-2.png
188.114.97.1200 OK 27 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fimages%2Fslot-result-2.png
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash b6ca0bfea4d0cec334f128f5c2c44cff
f6dc006902542a929187af718d9f6a244e5472b5
b09b477eb93ed896b8e52a2f746e435695dbef2a1259987bae4fbea3c35b5435
GET /welcomebonusng%2Fimages%2Fslot-result-2.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: image/png
content-length: 26733
x-amz-id-2: xbKxJdJvXNw+P0DM3917hNpvGPsrJSEkrqJYatN3LGo90y4c74R5Sq6IOFfTvks2WcNmVaaMD2Q=
x-amz-request-id: TQHJ136F9SRRW5GF
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: "b6ca0bfea4d0cec334f128f5c2c44cff"
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Goos1fUfvc4853JgcOXhG9MDX52AvONvfuc7izTkyaKNIboOQw3rAeaw1p3dwrQIU6Y%2BpdlCcR4IggN%2Bsmpi5Sxp3f%2FXPbTNKiHydrvN2ZRbhhkSdjc0Yz3F4QsZZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b1f98425689-OSL
alt-svc: h3=":443"; ma=86400
assets.landerlab.io/base.css
54.230.111.7200 OK 8.7 kB URL GET HTTP/2 assets.landerlab.io/base.css
IP 54.230.111.7:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerAmazon
Subject*.landerlab.io
FingerprintCA:55:A0:91:66:D2:49:1D:74:D9:90:B0:7E:D2:4C:B1:3A:0C:10:78
ValidityWed, 28 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (8731)
Hash 7f6de4e86d84bcbfd919f155e7545439
e7d9a7a418519c3fbce6de3c85775087cba93b49
8d8c59c2712df25a26ecd01739496e49c3514a9341fa3cd21cfa98627ba6efa2
GET /base.css HTTP/1.1
Host: assets.landerlab.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 8732
last-modified: Sat, 29 May 2021 19:05:04 GMT
x-amz-version-id: 0sEXTlrAazg9KkJm7sv1lqt808WfgxiL
accept-ranges: bytes
server: AmazonS3
date: Thu, 30 Nov 2023 19:40:28 GMT
etag: "7f6de4e86d84bcbfd919f155e7545439"
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CRjRZKTSZEGpz_Wgb7P0otWmUlvL7CUSWBWqo4Xa5XjI4iTQ-1-vbA==
age: 39780
X-Firefox-Spdy: h2
happy-u.vip/welcomebonusng%2Fsounds%2Fspin.mp3
188.114.97.1206 Partial Content 51 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fsounds%2Fspin.mp3
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo\012- data
Hash 390bca8d165546a8097b8951d2f400d4
1385d88b3aeee07bc51e7955fbcb9ed7586ebdec
cdb080d348cd2222fbe1d5b54da2f9db8fdca881570a9c82899082203b000b78
GET /welcomebonusng%2Fsounds%2Fspin.mp3 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Fri, 01 Dec 2023 06:43:28 GMT
content-type: audio/mpeg
content-length: 51290
x-amz-id-2: QDXQELZ3lEpCxCYUEvLIZwuzM2qFthSLrcunTXtLIC8lJaLmBz/rc4pNh/yYBwYCN89Cktxhfl0=
x-amz-request-id: 1PMH9T2NN34MBH34
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: "390bca8d165546a8097b8951d2f400d4"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
content-range: bytes 0-51289/51290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3RRgyKKZ3XDML6q2aiF6jiJhWO06KoVn2VyyvLZ5Wx2vUpl5yoeLZSEtVLBwUO%2B3NGjOPX0oH%2BuuHuCQMM7iEPIyfrSKCSNEDPlFwPPVJ5zaIVpf7gbealaHUKJRig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b23cabf5689-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/welcomebonusng%2Fsounds%2Falert.mp3
188.114.97.1206 Partial Content 8.8 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fsounds%2Falert.mp3
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc
GET /welcomebonusng%2Fsounds%2Falert.mp3 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Fri, 01 Dec 2023 06:43:28 GMT
content-type: audio/mpeg
content-length: 8802
x-amz-id-2: W500vQzHPhFuMCMPCIGQ/d2kLb5OvNlU2wVI8a0gL9WnvrHFwsotXuIu1s4q2PYaOOSuIg0sacI=
x-amz-request-id: R31V8QH5D3RAKFBJ
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: "6d2d3da2ea28ace816fa4a138829dc18"
cache-control: max-age=2592000
cf-cache-status: MISS
content-range: bytes 0-8801/8802
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dbe9kTO9CP3dqHmjRffls4d98MADKClwAc%2FRlQmWOGvH1L%2Fy5zflEgbfeL7b2GDkfhI4rYzu6%2B2vo9JTRN6607QIJGQo0MVZG95cxm3Lvq7llTXCbbWgWwq8nbPRFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b23cabd5689-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/welcomebonusng%2Fsounds%2Fwin.mp3
188.114.97.1206 Partial Content 22 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fsounds%2Fwin.mp3
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural\012- data
Hash c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56
GET /welcomebonusng%2Fsounds%2Fwin.mp3 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Fri, 01 Dec 2023 06:43:28 GMT
content-type: audio/mpeg
content-length: 22067
x-amz-id-2: /EsKwl9+Tiv8C2ZsEgpWvy6jEWTL2rrYiHopXlGaaEZdnxVY8dfSjTlFJwkD5Gs1W4CIeAXOzSI=
x-amz-request-id: R31T5X09KJDMGFZ1
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: "c74dca6a3ab16c097234033fec7a8573"
cache-control: max-age=2592000
cf-cache-status: MISS
content-range: bytes 0-22066/22067
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wlQHtGf1jitNfvRY6vVRM36cSfvw5bDxR0cQVjS8pz4nZV44sulEHp6gRkZ%2FN%2Fr0OMKUTWQwvwD1Mrj7XmDwi0vv0b2cQWzWbp7uT%2FlDx%2F5XZwy5fEoBSETCYBwJ2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b23cabe5689-OSL
alt-svc: h3=":443"; ma=86400
unphionetor.com/vctx?t=74797
139.45.197.236204 No Content 0 B URL GET HTTP/2 unphionetor.com/vctx?t=74797
IP 139.45.197.236:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint46:96:96:C4:89:FE:94:81:BA:9E:28:0E:FC:39:7E:53:BB:70:36:1F
ValiditySun, 19 Nov 2023 15:58:51 GMT - Sat, 17 Feb 2024 15:58:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /vctx?t=74797 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://happy-u.vip
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Fri, 01 Dec 2023 06:43:28 GMT
access-control-allow-origin: https://happy-u.vip
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
notix.io/ent/current/enot.min.js
139.45.240.92200 OK 44 kB URL GET HTTP/2 notix.io/ent/current/enot.min.js
IP 139.45.240.92:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjectnotix.io
Fingerprint68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D
ValidityFri, 15 Sep 2023 11:38:16 GMT - Thu, 14 Dec 2023 11:38:15 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 664b79e8bfa6cfb34bf988c191ca6264
4b1dfa464b595eac9c3c426ee7ad43b2368c67e8
cc314f9772080834f49109ab25c30404d0274a9509c41635e1255cbdbe0f44bf
GET /ent/current/enot.min.js HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 06:43:28 GMT
content-type: application/javascript
last-modified: Wed, 29 Nov 2023 16:35:15 GMT
etag: W/"65676843-235f7"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
datatechone.com/log/add?cid=26637248-53b0-40e0-be00-f41eec243bb1
37.48.68.71204 No Content 0 B URL POST HTTP/1.1 datatechone.com/log/add?cid=26637248-53b0-40e0-be00-f41eec243bb1
IP 37.48.68.71:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerSectigo Limited
Subjectdatatechone.com
Fingerprint8E:B7:22:E4:97:95:3C:60:FC:7C:41:39:A6:B7:B7:E2:48:B2:D0:18
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=26637248-53b0-40e0-be00-f41eec243bb1 HTTP/1.1
Host: datatechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1340
Origin: https://happy-u.vip
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.19.10
Date: Fri, 01 Dec 2023 06:43:28 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
happy-u.vip/welcomebonusng%2Fjs%2Fjquery.min.js
188.114.97.1200 OK 42 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fjs%2Fjquery.min.js
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (32063)
Hash 723e11a50995eef960d59451910e2cb4
76e617c6f9bad2602bdea1c20d50ba7c89a55097
ae34fd2197cffa02b5b7a753c262c1bbb3560afb92e403a1d59e935d8a320b41
GET /welcomebonusng%2Fjs%2Fjquery.min.js HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: application/javascript
x-amz-id-2: G5lAYVB7phB46HWjFhKJdNsvArT3x0kTYqtx3LE/Dt1tYtDWn7CZGAyd4YlZyDdWDMP40rfa3eo=
x-amz-request-id: TQHW7BTTVYFSDHNJ
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: W/"723e11a50995eef960d59451910e2cb4"
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Do5ccF0SYaQaU9LwLIyUnngkOF%2BIG33GNYLxR9PGiS%2BvLV5FiD7JqgprVD6bsLST%2B3d5Z5eSxdL3JKwqxcMeFa1E571vudn8nNo3mDzA6YcGZoTd2rgXKBc0ZtpzlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b1fa84e5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/img.gif?f=sync&partner=0a350bc0889a7b2acce256aa3727691f5f4acb584d5d320e5f8daa79087f6f64&ttl=&rurl=https%3A%2F%2Fhappy-u.vip%2Fwelcomebonusng%2F
139.45.195.8200 OK 43 B URL GET HTTP/2 my.rtmark.net/img.gif?f=sync&partner=0a350bc0889a7b2acce256aa3727691f5f4acb584d5d320e5f8daa79087f6f64&ttl=&rurl=https%3A%2F%2Fhappy-u.vip%2Fwelcomebonusng%2F
IP 139.45.195.8:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=0a350bc0889a7b2acce256aa3727691f5f4acb584d5d320e5f8daa79087f6f64&ttl=&rurl=https%3A%2F%2Fhappy-u.vip%2Fwelcomebonusng%2F HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Cookie: ID=62356a3fcc1a477bb87dae836251cf61
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 06:43:28 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=62356a3fcc1a477bb87dae836251cf61; expires=Sat, 30 Nov 2024 06:43:28 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
bigrourg.net/zone?&pub=0&zone_id=4427780&is_mobile=false&domain=happy-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
139.45.197.251200 OK 0 B URL POST HTTP/2 bigrourg.net/zone?&pub=0&zone_id=4427780&is_mobile=false&domain=happy-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
IP 139.45.197.251:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjectbigrourg.net
FingerprintEA:D3:15:22:CA:CB:F4:AF:A3:1F:1C:F4:69:D1:A2:65:B9:50:6F:0F
ValiditySat, 28 Oct 2023 05:34:54 GMT - Fri, 26 Jan 2024 05:34:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4427780&is_mobile=false&domain=happy-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1
Host: bigrourg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://happy-u.vip
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 06:43:28 GMT
content-length: 0
x-trace-id: 7fc308c2b1430f241440c424efd7b82c
access-control-allow-origin: https://happy-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=74797&bid=undefined&aid=undefined
139.45.197.236204 No Content 0 B URL POST HTTP/2 unphionetor.com/vbl?t=74797&bid=undefined&aid=undefined
IP 139.45.197.236:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint46:96:96:C4:89:FE:94:81:BA:9E:28:0E:FC:39:7E:53:BB:70:36:1F
ValiditySun, 19 Nov 2023 15:58:51 GMT - Sat, 17 Feb 2024 15:58:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /vbl?t=74797&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://happy-u.vip
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 01 Dec 2023 06:43:28 GMT
access-control-allow-origin: https://happy-u.vip
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
happy-u.vip/images/arrow.png
188.114.97.1404 Not Found 351 B URL GET HTTP/3 happy-u.vip/images/arrow.png
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (365), with no line terminators
Hash 4f50deba5c997e1c10668f0c45c5c669
ccdb8cdac5b428a7d6026923c342d206a337e399
545bd59ce9a57c9636030d31753fbaf7deab0b89c9707e3e42e8beba3d7c5362
GET /images/arrow.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng%2Fcss%2Fstyle.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 01 Dec 2023 06:43:28 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: TQHVQB9GTPPJE385
x-amz-id-2: E9F94QGj1NsIvAlSR+uEgAaNpNU/h0xLZ+xehrMlawKUUPXvKdCmnvNlamiKDK0S/1Vm8Xh9I5Q=
cache-control: max-age=2592000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WebAkio6K54gj1et%2F%2Bdj2VutIAObd1P5cRhcj%2Bof%2Fko6Yn8%2BOBr5viieI38SMFx731YWh4FqqL5YdSqoa9TTXmfoUMvLQECFc5Ma60l53FdvPzgRJwngYioWvvIXOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b234a505689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
bigrourg.net/pfe/current/micro.tag.min.js?z=4427780&sw=/sw-check-permissions-930b5.js
139.45.197.251200 OK 27 kB URL GET HTTP/2 bigrourg.net/pfe/current/micro.tag.min.js?z=4427780&sw=/sw-check-permissions-930b5.js
IP 139.45.197.251:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjectbigrourg.net
FingerprintEA:D3:15:22:CA:CB:F4:AF:A3:1F:1C:F4:69:D1:A2:65:B9:50:6F:0F
ValiditySat, 28 Oct 2023 05:34:54 GMT - Fri, 26 Jan 2024 05:34:53 GMT
File type ASCII text, with very long lines (27007), with no line terminators
Hash 5ccd2d5882a06f293d07510ac91c92e6
b44dc0eaa03981adb70d3313e728f9359c1d21c1
9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba
GET /pfe/current/micro.tag.min.js?z=4427780&sw=/sw-check-permissions-930b5.js HTTP/1.1
Host: bigrourg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 06:43:28 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 13:38:02 GMT
etag: W/"65649bba-697f"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
happy-u.vip/welcomebonusng/
188.114.97.1200 OK 23 kB URL User Request GET HTTP/2 happy-u.vip/welcomebonusng/
IP 188.114.97.1:443
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2596)
Hash 78f8cc48a7b7681a0728cfa8751a2a95
251413b6b8a49526e754b516936fa3b6fad82ebb
bbe2c68f31b505ea87d4ee17450e7f1eed33d2f25863b2ca19df5a516d95e22a
GET /welcomebonusng/ HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: text/html
x-amz-id-2: PbzkrxpEKFeEH/PndOS8Wwqp5wNLsrG4aK9BXsN1S1W/dgYx+QmirnlD3WJ/aWjinjYvYcvKKj0=
x-amz-request-id: YWPDABBMWH9V2Z79
last-modified: Sun, 11 Jun 2023 11:07:50 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iEPOcfol11%2FPdsl3MtWlBQUNi%2F7UkVRFA34zlVu0R96ubaMhbnMK6VDC1f06ANnBYJPgi3%2Fg5a%2FwPKAox9sWFQQi1t%2Bkp6rt2Ih782zHwTNlqXL30J4kROau7VZFkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b1cacb85695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
happy-u.vip/welcomebonusng%2Fcss%2Fstyle.css
188.114.97.1200 OK 13 kB URL GET HTTP/3 happy-u.vip/welcomebonusng%2Fcss%2Fstyle.css
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
Hash 538445a521226e69b9c4231a52ad5e79
113653898486204b16bef699f7202ecbd6439e84
572ba0a7a98f61e3633c7bd3e7108dde51a8053accc6163abedf4302aebf774c
GET /welcomebonusng%2Fcss%2Fstyle.css HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: text/css
x-amz-id-2: ZK9eH8peqycU0KF5VGH0S20SHvxscTivvZtZSOm6sjztK4TTjKtY4F8sGTkKep+kl9vE+87pKhM=
x-amz-request-id: TQHR62NDV5T13GM2
last-modified: Wed, 15 Dec 2021 12:06:26 GMT
etag: W/"538445a521226e69b9c4231a52ad5e79"
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V6vU7TLSjp1OIfi0FL7KV%2B6NFAiqwnrsc6lCAQ%2FFJ2KLAFcMgHrADiNcauGrNAYQM0xadZP6pGa4FELPa1JGwZz9mK5HXczbEhEn7TpDlAMrtJk4%2BtoPwQyUEzcOog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b1f98385689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
happy-u.vip/sw-check-permissions-930b5.js
188.114.97.1200 OK 443 B URL GET HTTP/3 happy-u.vip/sw-check-permissions-930b5.js
IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (462), with no line terminators
Hash d4a4c2d0065ba5b502a5148e1182c94c
35dae247b4f28da5a56d87fc0352e3f9ec05dafc
80031388d972279ac006c41949da3b8e47a77673a91ffd27605af7306ea11d7b
GET /sw-check-permissions-930b5.js HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 06:43:28 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=566
etag: W/"f4a7c87fb630af5dace0971bc655f7e4"
last-modified: Mon, 29 May 2023 18:29:11 GMT
x-amz-id-2: jBBMq9aWFnWfdB2NIAgUzGd/yUHOjvhayPGDvQPNFM0f+8xx9cKEeTN6Js0gX9jkYOxXutBJbVY=
x-amz-request-id: JW40TV0SWP7QYMQ5
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bJ1aqawq3Nr15YvIO%2BNw4Z%2BR4ZD7xiFlXRBj3a1ILVNj5f70Q3v9A5Dl1XfzAao9nKkdDki5XOjvg08gGj3AbtUQroUBzPmJhCGSiqLneXqDxgl9c4xnQJjkD2z%2BYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b265cd85689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
happy-u.vip/welcomebonusng?cep=1PX0yK7fjQ1dXnhD29Xp2gZvrkbtLK0y9ZJz74-SrfASuZOr0kui0-8PkRW9MZGvHdu7uoHSeQFCNUFBr456VKXwLlgTI52fdZmRk3nCsddZPR3qyex0kfXQHqymaquSJeVfuDjyjR2r__phTCOM05OadU06OdwUVqm-MZTYrpBspWpmSlpGOLIT4sanBqG-ts-2posFVU0fXhPpVt92t1Of7KoXExlx_lBLU1NyvA7NFQLqEG3VRM70kwNWwNuJCaKYkAD6tbnqZVIQhW2yvw0zpPLgA2sgfIgJrI962aYMz15tAtzRoNaP3H4v7LMUiEFpQ-iTAuqyU3igRQlfFElbJwwH0VkNiyQ_WFoImvq26iEB3-aT9OSmBsYIF_1-D1H_3gW1bCkOlLsfQpEFsQ&lptoken=173d01d1411547568883
188.114.97.1302 Found 23 kB URL User Request GET HTTP/2 happy-u.vip/welcomebonusng?cep=1PX0yK7fjQ1dXnhD29Xp2gZvrkbtLK0y9ZJz74-SrfASuZOr0kui0-8PkRW9MZGvHdu7uoHSeQFCNUFBr456VKXwLlgTI52fdZmRk3nCsddZPR3qyex0kfXQHqymaquSJeVfuDjyjR2r__phTCOM05OadU06OdwUVqm-MZTYrpBspWpmSlpGOLIT4sanBqG-ts-2posFVU0fXhPpVt92t1Of7KoXExlx_lBLU1NyvA7NFQLqEG3VRM70kwNWwNuJCaKYkAD6tbnqZVIQhW2yvw0zpPLgA2sgfIgJrI962aYMz15tAtzRoNaP3H4v7LMUiEFpQ-iTAuqyU3igRQlfFElbJwwH0VkNiyQ_WFoImvq26iEB3-aT9OSmBsYIF_1-D1H_3gW1bCkOlLsfQpEFsQ&lptoken=173d01d1411547568883
IP 188.114.97.1:443
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /welcomebonusng?cep=1PX0yK7fjQ1dXnhD29Xp2gZvrkbtLK0y9ZJz74-SrfASuZOr0kui0-8PkRW9MZGvHdu7uoHSeQFCNUFBr456VKXwLlgTI52fdZmRk3nCsddZPR3qyex0kfXQHqymaquSJeVfuDjyjR2r__phTCOM05OadU06OdwUVqm-MZTYrpBspWpmSlpGOLIT4sanBqG-ts-2posFVU0fXhPpVt92t1Of7KoXExlx_lBLU1NyvA7NFQLqEG3VRM70kwNWwNuJCaKYkAD6tbnqZVIQhW2yvw0zpPLgA2sgfIgJrI962aYMz15tAtzRoNaP3H4v7LMUiEFpQ-iTAuqyU3igRQlfFElbJwwH0VkNiyQ_WFoImvq26iEB3-aT9OSmBsYIF_1-D1H_3gW1bCkOlLsfQpEFsQ&lptoken=173d01d1411547568883 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 01 Dec 2023 06:43:26 GMT
content-type: text/html; charset=utf-8
x-amz-error-code: Found
x-amz-error-message: Resource Found
x-amz-request-id: YWP345WW31JC3XKK
x-amz-id-2: QTvXi1rOi+o4/cXpKRLj892tSHWAsZ7tvAHAw/Wly66Ew1Zr/ZE4NhFyqLSYXqTHMVsvN/lCHaU=
location: /welcomebonusng/
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pryzDOwrV2WpliaxXhFEKMDfOvMSBsmd2hfEeHBSknn%2FtKMoLGWy%2FDZZO44cy3j5Ygjb0bOTsVRXyDJjQTKuCVJh9s0TCGFCOiaT0IppzHEm%2F5mN3REbBnrQxaB%2B2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b1bcc4f5695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
walter-larence.com/hp
18.193.146.82200 OK 382 B IP 18.193.146.82:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjectwalter-larence.com
Fingerprint68:03:79:D9:A0:7F:E4:02:56:2B:FE:6D:ED:3E:B4:E7:06:A6:D4:84
ValidityFri, 24 Nov 2023 06:53:56 GMT - Thu, 22 Feb 2024 06:53:55 GMT
File type ASCII text, with very long lines (391), with no line terminators
Hash 66b640747c41d0de4a0695e927f8f2dd
4148e7a11455d6f34c77006a8ac4f305213554d2
5dddf41468e23d8e2c6c475a5ae8a2a27f390e713b7794347e8620e0bf16ea96
GET /hp HTTP/1.1
Host: walter-larence.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 06:43:27 GMT
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
X-Firefox-Spdy: h2
propeller-tracking.com/fv.js?t=74797
139.45.197.240200 OK 0 B URL GET HTTP/2 propeller-tracking.com/fv.js?t=74797
IP 139.45.197.240:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjectpropeller-tracking.com
Fingerprint70:5D:CE:14:58:86:F4:ED:D1:17:13:90:74:C7:60:E7:CF:F3:90:9F
ValidityThu, 02 Nov 2023 20:01:09 GMT - Wed, 31 Jan 2024 20:01:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fv.js?t=74797 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
cdntechone.com/stattag.js
104.21.54.121200 OK 19 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP 104.21.54.121:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (18335)
Hash 8ec0c661780569e42736cfc20e4c69d7
0d857c9b9813975179cf323a344c934bcae598c6
38831e62c2e99f2f64b0352f13ef7daaa7c97e31dac314bb52caa89a6a7f58f5
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:46 GMT
etag: W/"64f987a2-4a29"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5324
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gb06vJCUQ7ZtIRug7TM01tgFCfpfCuHlq0p%2BtD36b%2B5lR00hvPi%2FCb4j7%2BqL4A24TE2FqDQqUW3PTp7C8RuAcTrOyfyoypjHhmw7yKUCtoOKEI8GOUm36Rd9PSJBaP6ryA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b22be91568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
happy-u.vip/favicon.ico
188.114.97.1404 Not Found 346 B IP 188.114.97.1:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (360), with no line terminators
Hash 5616538aebeabcc6f1a2afee2f899a94
2d927ceef79ab8feea5ad3fe7fc748c28a1f5050
ae0754ca6416df12e5ca9c2338a4723f1061085df102d878d855062f4c16220b
GET /favicon.ico HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/welcomebonusng/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 01 Dec 2023 06:43:28 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: R31VYNJ7B3TGZXPK
x-amz-id-2: +vVuz9AOLAqVhfmayr7IvHCLtKJ539ai8f3WeCnutgiVG1cRapt8cPdn5Nn652qnGybwZr+/m+U=
cache-control: max-age=2592000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=duxfuJCd22vVtcnzHCBEKcBKDri%2FoCu8tN7%2B5bwP6PaWKoD80CuGv7N6cSmT3OqGMMmUXZb6oRBmya%2FeblIvqWlkO5v8MJr0%2B8H0YNzGHsNIVN2oBdjnAay6DiOBZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b264cc85689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
track.landerlab.io/p/606dc316bd12e800113ca177?lander_id=8f9073aa937b4246e94a1a085541a358
104.18.16.6200 OK 0 B URL GET HTTP/2 track.landerlab.io/p/606dc316bd12e800113ca177?lander_id=8f9073aa937b4246e94a1a085541a358
IP 104.18.16.6:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerCloudflare, Inc.
Subjectlanderlab.io
FingerprintE5:19:57:65:1C:8A:4A:59:2F:10:FC:CE:EC:7C:74:C3:C9:6E:04:49
ValidityFri, 07 Apr 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/606dc316bd12e800113ca177?lander_id=8f9073aa937b4246e94a1a085541a358 HTTP/1.1
Host: track.landerlab.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 06:43:28 GMT
content-length: 0
cache-control: no-cache
set-cookie: worker_cookie=N4Igdgpg7g+gFgSwC4wQExALhGgLAIwn1wEMSBaCANgA41yD8L8BjWhiE63XAVgDMqVFiAA0IAG4IAzslQZsATgDsikr164AzOQCMNAAwAmBrxbLyJXKvIaIuwsX6LFvMZJlykCALYRpSCQ+AA5YIEbGOromBroAKgZUmNqYRjQAdMYGAFruUrJIAPYATvJhvMpUWtQ0JiT4+Dq4bBbqruQG/CTVyiwGWhq47ixBwSQIAOZgZdhUiWgsWrpU+GjREIaxulojusrK7mCFaBAwLHDjYFgA2gC64jIwkFBYXQA20hAAvkA=; Expires=Sat, 02 Dec 2023 06:43:28 GMT; Domain=track.landerlab.io; Path=/; SameSite=None; Secure
__cf_bm=2cXSbCBdihxCcKq6kXRpOAdoOFS5qG6luTNJP5Nxfg4-1701413008-0-ARUDPmJGKFAb7UH/JEks9XIMMkR1B6sOx54Wero6ho0rUnTuHb56JExq1UeHHsMgoAlY9lGrtIBKrFjcDuES5FY=; path=/; expires=Fri, 01-Dec-23 07:13:28 GMT; domain=.track.landerlab.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b240bdf56aa-OSL
X-Firefox-Spdy: h2
cdntechone.com/stattag.js
104.21.54.121200 OK 19 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP 104.21.54.121:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (18335)
Hash 8ec0c661780569e42736cfc20e4c69d7
0d857c9b9813975179cf323a344c934bcae598c6
38831e62c2e99f2f64b0352f13ef7daaa7c97e31dac314bb52caa89a6a7f58f5
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 06:43:27 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:46 GMT
etag: W/"64f987a2-4a29"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5324
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V4k4xttGdKrvlS6OzTEDda7SBoy2g35ZsAUEQdFKlGUvpoY9mxvYf2pzEWqbEbDKZR0WbgTEaNb1r2DD%2Fw0L18yamMZOLWVqO%2FGG0kzHvpjTcjNmGiciXjyWdgbiI4Si%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e95b22ce9d568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
notix.io/settings?appId=1004829fc61b9dab40ddbd82f794de4&ver=0.15.19
139.45.240.92200 OK 454 B URL GET HTTP/2 notix.io/settings?appId=1004829fc61b9dab40ddbd82f794de4&ver=0.15.19
IP 139.45.240.92:443
Requested by https://happy-u.vip/welcomebonusng/
Certificate IssuerLet's Encrypt
Subjectnotix.io
Fingerprint68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D
ValidityFri, 15 Sep 2023 11:38:16 GMT - Thu, 14 Dec 2023 11:38:15 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (494), with no line terminators
Hash e003f4f22e6592b9de80f80ed470d726
94782ebc557e9514decaa877d0b37d0a0e491620
4a13bf0650b3f43cffa0f01d396b2944f794b23ad57daf5514f3e29dd54f3aeb
GET /settings?appId=1004829fc61b9dab40ddbd82f794de4&ver=0.15.19 HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy-u.vip/
Origin: https://happy-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 06:43:28 GMT
content-type: application/json; charset=utf-8
content-length: 454
access-control-allow-origin: https://happy-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2