happy-u.vip/free-spins-ke%2Fimages%2FCA.png
188.114.96.1200 OK 36 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2FCA.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash d94d1d2fc9120c693a66d99b01362e24
465d9725e53ec9a6e4bf2a8e26fb4b5b7e01562d
0b5f254d8aba31c96211fbd731c9f5984973c203135435f5430cf05c542b5b70
GET /free-spins-ke%2Fimages%2FCA.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:25:14 GMT
content-type: image/png
content-length: 36535
x-amz-id-2: 7HfX9lbJ7Cmg6mH4DLb5XwhU+HjntwxWo8PyphUBBhZMK1nmtIYHOgLhpPiItXeGRQ3iw4snQfo=
x-amz-request-id: 6DWEP1G0E02KWVDZ
last-modified: Thu, 02 Jun 2022 12:59:31 GMT
etag: "d94d1d2fc9120c693a66d99b01362e24"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JCMsJqs1dBwM8FeMK1U%2BdNfThXqd7u805qfamFY8atfrJou1Up9czL%2B6cMKKQEbIVMaKZpmeqD4z4CGf9vjKwn6ZxSNmED15VbA0mU3xZFFlH2YxUoMysITh%2FZjpCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e50dbcebb529-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke?cep=HV1jly9ECKoM3fym9AOWQ5OV9UTS9jvknlwFuuRiCzAGiVnDEdNkL9hiLSmSG8UsaXCg6WrncQxuNY3y3go6yI7ijVvd2fQWC1aRrEUSA8zmuFYV1rcvnJUdxlKb1BaNvHTOAAaAAbTsODhcdWfYS4JJ1X69Ptno4jLEZJYcN64H6sWJbbKASuf1SBwztM3rfKoiU3s7lVi_BevY03GUwC8MZKR6bhwhx/free-spins-ke//free-spins-ke//free-spins-ke/
188.114.96.1302 Found 88 kB URL User Request GET HTTP/2 happy-u.vip/free-spins-ke?cep=HV1jly9ECKoM3fym9AOWQ5OV9UTS9jvknlwFuuRiCzAGiVnDEdNkL9hiLSmSG8UsaXCg6WrncQxuNY3y3go6yI7ijVvd2fQWC1aRrEUSA8zmuFYV1rcvnJUdxlKb1BaNvHTOAAaAAbTsODhcdWfYS4JJ1X69Ptno4jLEZJYcN64H6sWJbbKASuf1SBwztM3rfKoiU3s7lVi_BevY03GUwC8MZKR6bhwhx/free-spins-ke//free-spins-ke//free-spins-ke/
IP 188.114.96.1:443
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
Hash b3fd087340972096d22d4060c03dcf03
3c1978444989d7cdca6c16c77a7fa860887be0cf
97df2c095a8db85deb28c7d50a329bb5e8a434137f814aaed845ce81a86820c2
GET /free-spins-ke?cep=HV1jly9ECKoM3fym9AOWQ5OV9UTS9jvknlwFuuRiCzAGiVnDEdNkL9hiLSmSG8UsaXCg6WrncQxuNY3y3go6yI7ijVvd2fQWC1aRrEUSA8zmuFYV1rcvnJUdxlKb1BaNvHTOAAaAAbTsODhcdWfYS4JJ1X69Ptno4jLEZJYcN64H6sWJbbKASuf1SBwztM3rfKoiU3s7lVi_BevY03GUwC8MZKR6bhwhx/free-spins-ke//free-spins-ke//free-spins-ke/ HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 02 Dec 2023 13:25:13 GMT
content-type: text/html; charset=utf-8
x-amz-error-code: Found
x-amz-error-message: Resource Found
x-amz-request-id: VWA8M49QNDDWNAWZ
x-amz-id-2: Lp7SkUarClUjrXTH0HW+luC7oMRSyeZbx58MX5SDGPK5mw6Q2ZQsp5fDkeMnaH1iPXTTQc8Indg=
location: /free-spins-ke/
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mw7YVF85J8KJTSbX8xkTuDJol2AZYyykHUqECZhVwUHGFG8Z24RWVaBkG%2BcpuKxKcnFoJTl5dXubTlGuu%2BVHStnaqcWVybL4tnzHEeFDTcZaNTWgtfPvkKI%2FPWklGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e509bb771c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-left.png
188.114.96.1200 OK 1.3 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-left.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 92d3e482cacea857c5dfaf9fa3a21dfb
3f12c410c77d763cc4719ec367a18417b8300758
4a688dc66588e8e86e98ccadb318fa2aca3fd6e2444aac783278b982f3e47eef
GET /free-spins-ke%2Fimages%2Fred-arrow-left.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:25:14 GMT
content-type: image/png
content-length: 1334
x-amz-id-2: cuAeLnowYMiq1EmmJ4BhIp+Rt3+z3Um4UQeJGOcYWOF+lsq0OUwBC9nJ4oTmn1HVNSxPdKViVv8=
x-amz-request-id: GP1PCHRTR4CJBEZ0
last-modified: Thu, 02 Jun 2022 12:59:33 GMT
etag: "92d3e482cacea857c5dfaf9fa3a21dfb"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7ws9VVQh5KGm6%2B2eCWcjWRxMFMGGVfPnHMZq%2F2%2BPTXMsCNchiYEZGQQPnpCmdC3s9hA4NMs87c%2BQpqPCVvrNs6GW4ODEiWjvErT7dO%2B%2Ba5g7Lb%2BVj5I4JxI1kFqJJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e50dbcf3b529-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-2.png
188.114.96.1200 OK 27 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-2.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash b6ca0bfea4d0cec334f128f5c2c44cff
f6dc006902542a929187af718d9f6a244e5472b5
b09b477eb93ed896b8e52a2f746e435695dbef2a1259987bae4fbea3c35b5435
GET /free-spins-ke%2Fimages%2Fslot-result-2.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:25:14 GMT
content-type: image/png
content-length: 26733
x-amz-id-2: y7wLKizm6HURVWdAVwQkz+/JUOUvLy8yLpQspIqxekaIvZtO8L5P+1Vnib608WLCDxZycK5BrgA=
x-amz-request-id: X3RZ50XRVGY8RAGQ
last-modified: Thu, 02 Jun 2022 12:59:32 GMT
etag: "b6ca0bfea4d0cec334f128f5c2c44cff"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zueHM1pxrY%2FpZ%2FVYcdRZBvn70BUY13%2BvYiLzG8njRmGj8IT23PrCcxP%2F1VOAbmxd%2Fp%2B6aUxISXZQEWLVGuNsdW4GJD39icD7L%2F313UMUv1N%2BFMdq1%2FTNAwyHUnIycA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e50dbcf1b529-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-right.png
188.114.96.1200 OK 1.4 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-right.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 881bdc037be8895ba5d8d53456890e7e
4e105c89e2a1475520bb74c9c20bf2f9e906fcb3
9f8160d6380fef91c8eadecc6e8e59e93e3f5c40be7963018c8104bef4354d8f
GET /free-spins-ke%2Fimages%2Fred-arrow-right.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:25:14 GMT
content-type: image/png
content-length: 1362
x-amz-id-2: rA+THcGluV8iaCuG49rRNzuSRWHzh/dl6oeyLu7l/+AtibJSZUzwUDBiwme78ZXP1nxauTteozk=
x-amz-request-id: X3RXXNNTXQ7Z5AB6
last-modified: Thu, 02 Jun 2022 12:59:32 GMT
etag: "881bdc037be8895ba5d8d53456890e7e"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pp8jMEHx1Q6kSD0vhSmFTQlAZKN4krtrsMfruDiKRZDrpBBRN0TKky8%2FPbL2XkFuT3Nqv9EmBYtR6CInWidgvAUrMRrkXYsBG8YF%2BKsvGmXd2wCrypo1aRIZx%2Fmv4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e50dbcf4b529-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-win.png
188.114.96.1200 OK 14 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-win.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 939b6a73c96383ac0842317037f3a0f0
0654b62431c8ba522833950b8166d7a16e2a6b56
b8f1ec0ac028bd024af2cf57b63b07069b2f4a41e61c1577e968ca5d7ba72837
GET /free-spins-ke%2Fimages%2Fslot-win.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:25:14 GMT
content-type: image/png
content-length: 14391
x-amz-id-2: SLS92mdgsZig22sKXdMlx61oNkcnPCOsDPl2yf9nlHeKlmdHBv31DymwVlgV3hZGvUcqibOQ9/w=
x-amz-request-id: X3RSNTGS2ZHA3T7H
last-modified: Thu, 02 Jun 2022 12:59:33 GMT
etag: "939b6a73c96383ac0842317037f3a0f0"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PxkRh25QWD%2BFjQfOFwEnqWCN%2FQS8lSyeqbzxMeuRJCdD0nnUH%2BKRXDo3KsO%2FPbnLkeJHoGVLoBQWowDRYS9bdjiOzIDCH2phzhf%2FsnSvlDsdveWvepaB1yHx9GbKVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e50dbcf2b529-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-1.png
188.114.96.1200 OK 20 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-1.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 1fbd2b26e61236d5bcfdfeb6adbd2c8c
c9034272d28dab018b73f1967a679c734f987a1f
c402c36eb8d623b618261d40846e63c130de1e78720ab5578eae1d645198c963
GET /free-spins-ke%2Fimages%2Fslot-result-1.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:25:14 GMT
content-type: image/png
content-length: 20370
x-amz-id-2: HkwJmvNgaOkjw1PA9RpupDjH4UkIsuIFFHorbuyA0s/u8YOJYS/8HbAu7MBYrKW6DR4MMnGLRNo=
x-amz-request-id: CT282MX3CJX4HS43
last-modified: Thu, 02 Jun 2022 12:59:32 GMT
etag: "1fbd2b26e61236d5bcfdfeb6adbd2c8c"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gCPyx4mrCcTvqZ363YGfs3eJ888fXrzszuqbZGByZ0%2Ff%2FGqqGFsOJWq0W1tXjw9X1dGkDpKAzbWyeNCOyoVO5rtMAJOkMVK%2F3nIFANysalvfHYjNfFSdufHuuMdGqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e50dbcf0b529-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-start.png
188.114.96.1200 OK 26 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-start.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash f491647556e492de92530b48827690aa
6296c44299f5acb17cb2c06e37391a70672b1fd3
efb819d37f19ec7505d9602488ce97868d84e1c7929ce83e308e23f02d97b95d
GET /free-spins-ke%2Fimages%2Fslot-start.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:25:14 GMT
content-type: image/png
content-length: 26084
x-amz-id-2: HoDHrjce/VcUU2zhtpaxwQMlFMDYwWay3DqWtxcO7JGbjsNHPukTFTtad9pghVuRvpDzJffi4f4=
x-amz-request-id: 419H7YTW900JZRM6
last-modified: Thu, 02 Jun 2022 12:59:33 GMT
etag: "f491647556e492de92530b48827690aa"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r8aERCm1rk373fhO%2FSUUq29j3BOqVTI6eft6pzqfCb1uBEQVLq6f%2BtuIMxSh8VZgfOroC9No7rGWaC3v9Q8vLSqCOBCSxSX8adcrfV4sZ3OXzPwRQU0IziQPdOMMBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e50dbcedb529-OSL
alt-svc: h3=":443"; ma=86400
assets.landerlab.io/base.css
54.230.111.125200 OK 8.7 kB URL GET HTTP/2 assets.landerlab.io/base.css
IP 54.230.111.125:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerAmazon
Subject*.landerlab.io
FingerprintCA:55:A0:91:66:D2:49:1D:74:D9:90:B0:7E:D2:4C:B1:3A:0C:10:78
ValidityWed, 28 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (8731)
Hash 7f6de4e86d84bcbfd919f155e7545439
e7d9a7a418519c3fbce6de3c85775087cba93b49
8d8c59c2712df25a26ecd01739496e49c3514a9341fa3cd21cfa98627ba6efa2
GET /base.css HTTP/1.1
Host: assets.landerlab.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 8732
last-modified: Sat, 29 May 2021 19:05:04 GMT
x-amz-version-id: 0sEXTlrAazg9KkJm7sv1lqt808WfgxiL
accept-ranges: bytes
server: AmazonS3
date: Fri, 01 Dec 2023 20:34:14 GMT
etag: "7f6de4e86d84bcbfd919f155e7545439"
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iuxhSofZvs4FdxHuB9nNqYO0D-eui4fEIGegvJD8wKQNChhBpW0nkQ==
age: 63888
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fsounds%2Fwin.mp3
188.114.96.1206 Partial Content 22 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fsounds%2Fwin.mp3
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural\012- data
Hash c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56
GET /free-spins-ke%2Fsounds%2Fwin.mp3 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sat, 02 Dec 2023 13:25:15 GMT
content-type: audio/mpeg
content-length: 22067
x-amz-id-2: N5y/38boThQEmPJ70pl/Ze243Y8rl1TYMHEmehKME6KUr+j1zPqcITyLH1UlJWFbWaIh+mT6ZeA=
x-amz-request-id: GQ86GW87FJCCRPF9
last-modified: Thu, 02 Jun 2022 12:59:34 GMT
etag: "c74dca6a3ab16c097234033fec7a8573"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
content-range: bytes 0-22066/22067
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TAafzaSGCZF8ARrBNcm5X2hYWMp%2FPSYLRGBClHWJ6sFG%2BLkSBbI87EK5gZw4Q%2FpfeQF%2BfBrtZhpMyTyVtyxsPlZdz3pYFUyKVMRkpU%2F0HqL14ha%2FXQYtjf%2Fueug%2BaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e5139c64b529-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fsounds%2Falert.mp3
188.114.96.1206 Partial Content 8.8 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fsounds%2Falert.mp3
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc
GET /free-spins-ke%2Fsounds%2Falert.mp3 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sat, 02 Dec 2023 13:25:15 GMT
content-type: audio/mpeg
content-length: 8802
x-amz-id-2: whUT3PMNyu53r8qqyzWZchvIZ8+SZEIdIdurny2pEifqB7VNawBbqc5/mTE+3g1qv1cG0nCifPQ=
x-amz-request-id: GQ871E5GFDRBDJYA
last-modified: Thu, 02 Jun 2022 12:59:33 GMT
etag: "6d2d3da2ea28ace816fa4a138829dc18"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
content-range: bytes 0-8801/8802
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dSOYp79upwgODoZGMq%2BP%2FmZLVNlKw6mzvk0y%2B0t4b5nquqRx1id%2BVUFqao5ykST1Dk2YEuvpvEEERQaoT2t29DXVbQ39yQ8EmvQ3M0GjerjHL1cwdd9%2Ft1jkq7US7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e5139c62b529-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fsounds%2Fspin.mp3
188.114.96.1206 Partial Content 51 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fsounds%2Fspin.mp3
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo\012- data
Hash 390bca8d165546a8097b8951d2f400d4
1385d88b3aeee07bc51e7955fbcb9ed7586ebdec
cdb080d348cd2222fbe1d5b54da2f9db8fdca881570a9c82899082203b000b78
GET /free-spins-ke%2Fsounds%2Fspin.mp3 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sat, 02 Dec 2023 13:25:15 GMT
content-type: audio/mpeg
content-length: 51290
x-amz-id-2: CANkmzF5RFkOGQsEBlljct0vxETiOOOg5xxoxuF9mmxLFo+4lYfLT8W2lffGlbDuRXHvZS2uzk0=
x-amz-request-id: 2EKB7RW82RKJMT05
last-modified: Thu, 02 Jun 2022 12:59:34 GMT
etag: "390bca8d165546a8097b8951d2f400d4"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
content-range: bytes 0-51289/51290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aqdOzug1UAtJ9JJS1%2BF0%2Fo2irvvW%2FPGeUDG13YKTau7X3xgsozm3we1%2FqmmHi920qBDP8Mu1w1AJw%2BYIZRnLNx5h9uY5ygGFBNtzHr30coV2wN2VMJL2ICSfKjarSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e5139c65b529-OSL
alt-svc: h3=":443"; ma=86400
notix.io/settings?appId=1004e573f6298b494995e0539d8329e&ver=0.15.19
139.45.240.92200 OK 327 B URL GET HTTP/2 notix.io/settings?appId=1004e573f6298b494995e0539d8329e&ver=0.15.19
IP 139.45.240.92:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjectnotix.io
Fingerprint68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D
ValidityFri, 15 Sep 2023 11:38:16 GMT - Thu, 14 Dec 2023 11:38:15 GMT
File type JSON data\012- , ASCII text, with very long lines (327), with no line terminators
Hash bf0f59f119686c0890d2a8be8df6cb23
f232d08bf915c9010c041dd6500398d997446f70
10af8d0b199fb5fc141f14782014cb5ba7e1bfbfbc8f3459a62ab3024bd28fea
GET /settings?appId=1004e573f6298b494995e0539d8329e&ver=0.15.19 HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy-u.vip/
Origin: https://happy-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 13:25:15 GMT
content-type: application/json; charset=utf-8
content-length: 327
access-control-allow-origin: https://happy-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
oungimuk.net/zone?&pub=0&zone_id=4336991&is_mobile=false&domain=happy-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
139.45.197.251200 OK 0 B URL POST HTTP/2 oungimuk.net/zone?&pub=0&zone_id=4336991&is_mobile=false&domain=happy-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
IP 139.45.197.251:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjectoungimuk.net
Fingerprint52:49:91:AA:04:62:59:A1:7D:AA:95:42:75:F3:62:7E:D8:66:82:DA
ValiditySun, 24 Sep 2023 05:45:36 GMT - Sat, 23 Dec 2023 05:45:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4336991&is_mobile=false&domain=happy-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://happy-u.vip
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 13:25:15 GMT
content-length: 0
x-trace-id: ab0c3804a24f99e5a0c59feb917101fb
access-control-allow-origin: https://happy-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
track.landerlab.io/p/606dc316bd12e800113ca177?lander_id=1e08f60282cd55a61321314ef22873f5
104.18.17.6200 OK 0 B URL GET HTTP/2 track.landerlab.io/p/606dc316bd12e800113ca177?lander_id=1e08f60282cd55a61321314ef22873f5
IP 104.18.17.6:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerCloudflare, Inc.
Subjectlanderlab.io
FingerprintE5:19:57:65:1C:8A:4A:59:2F:10:FC:CE:EC:7C:74:C3:C9:6E:04:49
ValidityFri, 07 Apr 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/606dc316bd12e800113ca177?lander_id=1e08f60282cd55a61321314ef22873f5 HTTP/1.1
Host: track.landerlab.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 13:25:15 GMT
content-length: 0
cache-control: no-cache
set-cookie: worker_cookie=N4Igdgpg7g+gFgSwC4wQExALhAYwGwAsA7AKwCcOARgLQQDMAHDQQExEvUCGAjARNQAY8abiQFoB3OjjogANCABuCAM7JUGbAwISCAMzLdanPQOrEBOagzKVmTbmioCbOIvKWr1SBAFsIKkicvgAOWCAsAix01NwcUQAqUpgsJJiiAHSE3ABaHspqSAD2AE4a4RJodnT01HjSVqzcnNYQEDR2LHgCEEKceDgMHjjBIZwIAOZg5djdwjLceJQiLBAMApJSI9xE7gpgRWgQMDhw42BYANoAugqqMJBQWHqcADYqEAC+QA=; Expires=Sun, 03 Dec 2023 13:25:15 GMT; Domain=track.landerlab.io; Path=/; SameSite=None; Secure
__cf_bm=iEc_1_b3WRjaRyvpNDvpZ3QhGrnVSlVdYpS.kXKL1Lk-1701523515-0-AQpHP9CRVBpolCWUtcaKl85PAHDZQ4tT3x0aUQNJwVeND62KbVfIAyiQklXjSpbvGGK9k9OzzWzJ0mwh8AePoDI=; path=/; expires=Sat, 02-Dec-23 13:55:15 GMT; domain=.track.landerlab.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e514aee256b5-OSL
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fjs%2Fjquery.min.js
188.114.96.1200 OK 97 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fjs%2Fjquery.min.js
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (32063)
Hash 723e11a50995eef960d59451910e2cb4
76e617c6f9bad2602bdea1c20d50ba7c89a55097
ae34fd2197cffa02b5b7a753c262c1bbb3560afb92e403a1d59e935d8a320b41
GET /free-spins-ke%2Fjs%2Fjquery.min.js HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:25:14 GMT
content-type: application/javascript
x-amz-id-2: mZ7+FMZog6Diy6fVKiAaFjWbCqWwV7MQPf86ZZuy0kO7F2a3NBjmDNrMLE3NQn63J9nS+ii/Pjw=
x-amz-request-id: X3RJ2MSDQJCMJ84E
last-modified: Thu, 02 Jun 2022 12:59:31 GMT
etag: W/"723e11a50995eef960d59451910e2cb4"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mB3rIqjsxKMaxK%2FAVTycpbx9qdDtKXe2p%2FwmdfHP5HeEmthbJjzj1sxVt272yWHysyoYBzhpoWEjkPQy9Mt3GCw1UO%2BXxlY3dyyzSlFavgs9ZklomsxPVYG8GHZUTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e50dbcf5b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke/
188.114.96.1200 OK 22 kB URL User Request GET HTTP/2 happy-u.vip/free-spins-ke/
IP 188.114.96.1:443
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3238)
Hash 153504c8e5f4dd8f207b65a4e299bb16
6eaa94ee7283551988a0e50fc018d1d262d9d69a
9f2ce1fb98a5f899d3ed7c56fab134ee414f6d4d190b92f59d1bea21add46917
GET /free-spins-ke/ HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 13:25:14 GMT
content-type: text/html
x-amz-id-2: CDs6GMIDfinplf6kRrddbe6a2MTL4awsaQuLveun9kpL45H3CEwpRB/Ki9X6crXsyiKjWslkWbA=
x-amz-request-id: GP1TPKBAJ2ENYY9F
last-modified: Wed, 24 Aug 2022 13:49:50 GMT
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XY1va9p%2FpVGRF1%2B7WmIxGylcFxIXsJROzLH1hRtj9QLv2snIx%2BVdmlwdPOve7V5HvtHEgBGwaCqtqzGRjbyP%2F1pddQEQpApZQvqNvFEV5XVIQ3%2Bo6fa8WXRr9hPsLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e50a8c821c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
oungimuk.net/pfe/current/micro.tag.min.js?z=4336991&sw=/sw-check-permissions-77596.js
139.45.197.251200 OK 27 kB URL GET HTTP/2 oungimuk.net/pfe/current/micro.tag.min.js?z=4336991&sw=/sw-check-permissions-77596.js
IP 139.45.197.251:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjectoungimuk.net
Fingerprint52:49:91:AA:04:62:59:A1:7D:AA:95:42:75:F3:62:7E:D8:66:82:DA
ValiditySun, 24 Sep 2023 05:45:36 GMT - Sat, 23 Dec 2023 05:45:35 GMT
File type ASCII text, with very long lines (27007), with no line terminators
Hash 5ccd2d5882a06f293d07510ac91c92e6
b44dc0eaa03981adb70d3313e728f9359c1d21c1
9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba
GET /pfe/current/micro.tag.min.js?z=4336991&sw=/sw-check-permissions-77596.js HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 13:25:15 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 13:38:02 GMT
etag: W/"65649bba-697f"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fcss%2Fstyle.css
188.114.96.1200 OK 11 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fcss%2Fstyle.css
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (10941), with no line terminators
Hash cb2e0fe2fe90d7572bf48419ecf1ee65
285568da5113f9203628287222cfbb469d0c2171
b3a3eb6e06b9f50fb0a3434a8c4033a496d5d37b6abaa83eb02b41ec66204de0
GET /free-spins-ke%2Fcss%2Fstyle.css HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:25:14 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=13222
etag: W/"538445a521226e69b9c4231a52ad5e79"
last-modified: Thu, 02 Jun 2022 12:59:32 GMT
x-amz-id-2: +tU/BSjpobN5fvgg4wbFtFDaM4FffXnvWyWIt/wRCaXZvbEE8/AYYKyFUHkg8lmafVlTXG8ppho=
x-amz-request-id: CT27F2CRHJX957PP
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hl5PTIMil8JUp7lS%2Bh46q4OTjZwJOENkZJ6fAq5zPJq00CYdK9ijvpXntrxs4HHW5hPnbGUyzt5tqYiCfcarHE2QAPGpRi5NRq9RC7szPtZWua6wzNjbOGP9XtsG2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e50dbceab529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
happy-u.vip/images/arrow.png
188.114.96.1404 Not Found 351 B URL GET HTTP/3 happy-u.vip/images/arrow.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (365), with no line terminators
Hash 64fd9363c1feeded2d25b50bae24dd5b
ed6309a6725a2fac43b4a844b1ba8788a3bcdb7b
4f6671b17c945b81e0435e0d187e5449531c173679224a44ebad03a93e93f711
GET /images/arrow.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke%2Fcss%2Fstyle.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 02 Dec 2023 13:25:15 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: 55RE8KYDV3979R5A
x-amz-id-2: 2RRCFwGq0HPdKfD9li78mTJrDn8J6gYPoLqpScXmEyP+p2FcuQXJ5VpROE/LwUesDpL3zuSIR5Q=
cache-control: max-age=2592000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gfpkcCq%2Bwg0P8MDGVYLGMbqFee0DFEnpaTp11hIBcJpKZ29JT5KmVHNgBtV5lJr%2Ff3mclJaPBxCu%2Bxn37XfFPvzjuNvo9nGiJAVgcOPJPNPODUw2vuBeThyvVzBYCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e512dbb8b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
happy-u.vip/favicon.ico
188.114.96.1404 Not Found 346 B IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (360), with no line terminators
Hash a7054daaad68c743ed809b041d842db0
aa6e86fa0824116695f7074f2008e9d9d14c5a1c
964a4067d1b330c5d14c0805685d302141781b06d76ecc4b60c8416609dc9187
GET /favicon.ico HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 02 Dec 2023 13:25:15 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: 55REEJYDVF5BH4ZV
x-amz-id-2: KqGoXb+kTDWYR1iIdBIO1h8j0Y7Ij8T0zrrZQz7M+9B/8X07OY4uP+UkNToRhqA6TfOG02sYyYE=
cache-control: max-age=2592000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GIESLdsrnSLfoC5n4dFqEVqbVYGjvK9QelYtZbR%2FE8lyqPpPe5L6uDaCNBufEDA%2Fpgd6dG4V0CbzLT%2BMja9fZBZktNMPl31hUfBtKmD6InhY%2Fmbg57AeZeEKfYV9KA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e515ef8eb529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
happy-u.vip/sw-check-permissions-77596.js
188.114.96.1200 OK 443 B URL GET HTTP/3 happy-u.vip/sw-check-permissions-77596.js
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (462), with no line terminators
Hash f0543799885fb5c86ac7c6bc29b508bc
ac3e9ae5ba4844ecfc9865ba1e7a9fbd32903eca
cb3fae5a8368bfba7e04d0df02732899f4edf1fd4e69a99938350a91bf590a32
GET /sw-check-permissions-77596.js HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:25:16 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=566
etag: W/"44d972e91b04c00bb67c0a08024625c4"
last-modified: Wed, 24 Aug 2022 13:50:20 GMT
x-amz-id-2: LniQnjFwRDJGl/Qzaa2mly7RbyC4H4tl4CPXKpoNV9oL1FTvvyS1oqO+27uzpRZRbYnnhToJrYs=
x-amz-request-id: 2EK3NV8G3KFHB4Z7
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B3znZ8aRiI4L%2BsCeomuGl1Rug7cA3QeNHgUdqixQw%2FM4cbuo3MGdklxnFUUXCXqq7i06EAONCdcQqOVFAwjrJZ9KSVHTadeMfiIINwjYiPHjm6jJH%2FysgEQDUERyAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e516f9fdb529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-spin.gif
188.114.96.1200 OK 88 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-spin.gif
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type GIF image data, version 89a, 410 x 279\012- data
Hash 617c16c5e04c8603dd7f157862b1c682
1306296f9a666a7fc50f339a2a924ce8a3a18169
7f8e36cf7ac437d7c42440ef5f522c8e27adb06348b573192308038fa7c1dc7e
GET /free-spins-ke%2Fimages%2Fslot-spin.gif HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:25:14 GMT
content-type: image/gif
content-length: 87599
x-amz-id-2: mCh89CwmCzbWod4ck4O3wABtTAli/lNbG0dVvfKhM4+/gzKdlmJGgcKeWuI0Oq4ZLRRCUIp3n8k=
x-amz-request-id: X3RQSTKNRWZ2PYKT
last-modified: Thu, 02 Jun 2022 12:59:34 GMT
etag: "617c16c5e04c8603dd7f157862b1c682"
cache-control: max-age=2592000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GL6TorGfClSZMOZB%2FJaOe5%2BLeUqqnAXbBhPEijn%2B3r4rQw0t9oAVlmDko2t8TLrvrTjO%2BhUjtCv53F1GSWVGZYVJaikaKhwxKuk%2B3BlZw7d8rudUDaNrR5htNNOTTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f3e50dbcefb529-OSL
alt-svc: h3=":443"; ma=86400
notix.io/ent/current/enot.min.js
139.45.240.92200 OK 145 kB URL GET HTTP/2 notix.io/ent/current/enot.min.js
IP 139.45.240.92:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjectnotix.io
Fingerprint68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D
ValidityFri, 15 Sep 2023 11:38:16 GMT - Thu, 14 Dec 2023 11:38:15 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 145 kB (144887 bytes)
Hash 5ec57c87dbac3f07e59e5d74ae3421e4
70121f1541a1961d7b87544001d612f18ad04243
e1d529afcbb911c99bb039ba39c7fb6716275b97650ae816a90fc03f256542bb
Analyzer Verdict Alert Public Nextron YARA rules malware Unique code from Jetriz, Swid & Jeniva of the Tetris framework
GET /ent/current/enot.min.js HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 13:25:15 GMT
content-type: application/javascript
last-modified: Wed, 29 Nov 2023 16:35:15 GMT
etag: W/"65676843-235f7"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2