{"report_id":"de874ddc-97d3-437b-8f4d-069fe466dfbf","version":6,"status":"done","tags":[],"date":"2023-12-05T20:08:30Z","url":{"schema":"http","addr":"walter-larence.com/c31fd236-727d-4fd2-97b4-8d8ce3e0aef7","fqdn":"walter-larence.com","domain":"walter-larence.com","tld":"com"},"ip":{"addr":"18.193.146.82","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke/","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"title":"Win Free Spins"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T08:56:47Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"walter-larence.com","ip":{"addr":"18.193.146.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2019-03-14","domain_rank":208176,"first_seen":"2019-03-30 11:22:48","last_seen":"2023-12-05 08:16:32","alert_count":0,"request_count":1,"received_data":1423,"sent_data":521,"comment":"","tags":null,"fingerprints":null},{"fqdn":"happy-u.vip","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"2019-12-18","domain_rank":0,"first_seen":"2019-12-18 14:12:42","last_seen":"2023-12-05 08:16:32","alert_count":0,"request_count":18,"received_data":468629,"sent_data":9174,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets.landerlab.io","ip":{"addr":"54.230.111.7","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-07-03","domain_rank":484499,"first_seen":"2020-11-05 05:28:34","last_seen":"2023-12-05 07:56:43","alert_count":0,"request_count":1,"received_data":9238,"sent_data":424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"notix.io","ip":{"addr":"139.45.240.92","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2020-08-20","domain_rank":14765,"first_seen":"2020-08-20 15:14:00","last_seen":"2023-12-04 09:49:50","alert_count":1,"request_count":2,"received_data":145914,"sent_data":904,"comment":"","tags":null,"fingerprints":null},{"fqdn":"oungimuk.net","ip":{"addr":"139.45.197.251","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-02-06","domain_rank":335656,"first_seen":"2021-02-10 05:25:40","last_seen":"2023-12-05 05:19:36","alert_count":0,"request_count":2,"received_data":27711,"sent_data":1010,"comment":"","tags":null,"fingerprints":null},{"fqdn":"track.landerlab.io","ip":{"addr":"104.18.16.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-03","domain_rank":818681,"first_seen":"2021-07-23 11:29:47","last_seen":"2023-12-05 08:16:32","alert_count":0,"request_count":1,"received_data":890,"sent_data":470,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2023-12-05","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"notix.io/ent/current/enot.min.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}]},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"e2ccc5eb24f72889c34031ba7e7e6968","sha1":"c3b1d0bc1b79ec98ceebec72d09a0d1d0817f60b","sha256":"51816618bafa3a0d603560f8d43748aed9a516f2d41023787e1c4b49256c3200","sha512":"76c9c41417c89b7654f52e3d963c2453e1485b75fdd80d61cdd877090bdd28c202c00bb4f92bd6a225c30bc0ba1177e56f780f7358cc3978ec8a9d2911da3f7b","ssdeep":"","tlshash":"f3f0000033c00c3c000c0030030c00000c3f3c3c00300003000000330300000c300c00","size":322,"data":"","first_seen":"2023-05-04T19:32:59Z","last_seen":"2024-08-21T08:56:22.872206Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notix.io/ent/current/enot.min.js","fqdn":"notix.io","domain":"notix.io","tld":"io"},"ip":{"addr":"139.45.240.92","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ec57c87dbac3f07e59e5d74ae3421e4","sha1":"70121f1541a1961d7b87544001d612f18ad04243","sha256":"e1d529afcbb911c99bb039ba39c7fb6716275b97650ae816a90fc03f256542bb","sha512":"2c7649f28378009c66f4aefd02559d8c9e9b164f6c7deb014b6c2f0c2f08d97764c85fb7105a77ca5adceb35046c4b2828e74863b725b2c25ce99af7c599a92a","ssdeep":"1536:Ay52kbAGZsFvXQUWMTSVozYZ8Z+oDFsX/m/j8KOhQRSbsAY1AdniNake42N3pzN7:N2kbavoMTSVozYZ8Z+ouX/feR2Yeli01","tlshash":"9ae3988176e0ec9e07d7b776b73ba0d1e44b1a6c39c4890bd181fc50199d22beae95f0","size":144887,"data":"","first_seen":"2023-11-29T11:39:02Z","last_seen":"2023-12-08T03:48:58Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke/","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b818be8ab6790b4b9ee65f423cf5f41","sha1":"1b17b6a85413b069bc81667e4ddc97e65a989e5f","sha256":"b068a0cb42b4a0c6ce3d9b83c5a20288380fdc0e8bd433bc270cd16a6695f32c","sha512":"f0b2a61612d20c7ddfe59af6c1b67804fd8982a243584a003d8f4fd728a3047c3cfad10b9a7f6e1b9f078d0a34ff08e5bb298c710b7a1b4a866176933d4e4d46","ssdeep":"","tlshash":"4af0a3471460703b29974a1db787961937fb30c05e80359266316c3c4a7b71f059dbdf","size":438,"data":"","first_seen":"2023-03-08T08:02:53Z","last_seen":"2024-08-21T08:56:22.873802Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke/","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a27a79c569d6f8d21da059cfcbf88e0","sha1":"33bde2d716e6bbe4058a0f8994c780a48d25787d","sha256":"96c5e25724dec359fca6ea85c6485a9f12129292cbf4c4ce537db5e4642220a9","sha512":"0cc2a0b89d23a16fe865f88560012eeab8c67b3dd48c1c1bab3b0dd5bc271f2ed95314b838df666961a92c50ff1e1b248d313527acad60cf80e9b277411738e7","ssdeep":"","tlshash":"d64185693198f4b61539a0da207fd78ff2b4111af499a4e1910bec542c3ec9007b6ded","size":2072,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2024-08-21T09:43:24.001626Z","times_seen":455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke/","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"aaa8094d159f2eb478c4b0ae980396b3","sha1":"9d64cef54ba9f2d31d1497adcb0ceec66b8674c3","sha256":"69ab8cfee0110535b4125c8b77e5ab6f493829a94e60499c32da8f95cc71a484","sha512":"27d10663e1567e5a778d76b6325716d028567cff496aac04ac5cf285f9cbb2953b687bfe9e017b08196a4949441893cd8ef0d76231cdd0b5bc2dcc003664cdb7","ssdeep":"96:pIFNbqsqBaQFm/eI6Q/eIYb0EuAgReIYVkZrXgCKY5:pIFNbqsqBa6weI6eeIYb0EudReIYS5gk","tlshash":"f191b408f6d72e515133753c4f2f9088aa752a1fb509ee88b91f4fd48f5a129c8b2a49","size":4284,"data":"","first_seen":"2023-03-07T01:23:43Z","last_seen":"2024-12-24T01:55:39.942445Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke/","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"45c5589e039ce9af84fedc2389a9a4ed","sha1":"bedbff74d155bc641db49937f47c710a855da5b8","sha256":"531ab2305ce2d762f9e2d1002008f56025b0b4e39070ede781eda96787ed5b1a","sha512":"d46e8be78a53e233ae7659faed14f5a858325fe94d1cb763d13aff5ca4352cb4bb70be568651319f7b4ccd804d760bd2cf97bb656d08e2f43378146315e8c0ad","ssdeep":"","tlshash":"9211c048fdee28710d1e37d21f1a01646661aa535bc16687b98c07903f25cced7f9bb4","size":1043,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2024-12-24T01:55:39.94371Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fjs%2Fjquery.min.js","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"723e11a50995eef960d59451910e2cb4","sha1":"76e617c6f9bad2602bdea1c20d50ba7c89a55097","sha256":"ae34fd2197cffa02b5b7a753c262c1bbb3560afb92e403a1d59e935d8a320b41","sha512":"c20c91a8b57251913660b7fa832c4f6d81717516897c0c7a706051b6592c028a2a8490927f910d958238585329091e6a264d9f1c6adaa6de53f2d6e65676a05c","ssdeep":"1536:BYE1JkoiB9JqZdXXe9JJ3ygoIq6zrU5SFc/VkZ4BptqGgPaS9FPwlLRv5PpSELIb:n8pMPTpt/0auFPwlLjLhoVQx4a98HrF","tlshash":"bf93d7d9b6d6706287b734a851bf410bb17a98dab80c4ca0f058c8e47e74e9d507bf2d","size":97099,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-18T15:11:55.264935Z","times_seen":398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke/","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"083c5ca24af8678b16c9bc8ded7977b5","sha1":"5800d3c90abeaf622704cfa556a768f11c1766dd","sha256":"c118877df597b75ddefc0c3b0bc3aeabf50cc53a76eb5d3eb1539f87eab47092","sha512":"8c3b724d153bc9982bf2bd5aff530798aba5da2145300ba8e54691b425983a72e21f9152bd837ae6d96a8a0455d3b9e7dbfcf840212701e49cd8ba709366c76c","ssdeep":"","tlshash":"fe514b0877e7506875b7703727ef948078b1b41b514ecf443e8cbad08f64264d4e6ba9","size":2836,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2024-12-24T01:55:39.945117Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.landerlab.io/p/606dc316bd12e800113ca177?lander_id=1e08f60282cd55a61321314ef22873f5","fqdn":"track.landerlab.io","domain":"landerlab.io","tld":"io"},"ip":{"addr":"104.18.16.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T07:02:54.111055Z","times_seen":15047221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke/","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"d81165fc9afd09ec7c2212dcd1becc2c","sha1":"d8b750ac90bc6e5e551a25c8e023154138b5ec58","sha256":"e761d68347a1ce54af3ca0bf44d2175ce13c645a013ce18dea26a87faee03240","sha512":"c4e08215e0332625fe5acd5a0cb83968307d77b304cce96620a04f4680da36874647e8f375e34aca140b424b2e5809edb1ae73193aaa2fd7fac81143dcb84237","ssdeep":"","tlshash":"9131872bb6b301584eb3107b8b3b224d3539c0136469ed083c9de6a46f7064266ee7f6","size":1572,"data":"","first_seen":"2023-03-07T01:23:43Z","last_seen":"2024-12-24T01:55:39.946523Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oungimuk.net/pfe/current/micro.tag.min.js?z=4336991\u0026sw=/sw-check-permissions-77596.js","fqdn":"oungimuk.net","domain":"oungimuk.net","tld":"net"},"ip":{"addr":"139.45.197.251","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ccd2d5882a06f293d07510ac91c92e6","sha1":"b44dc0eaa03981adb70d3313e728f9359c1d21c1","sha256":"9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba","sha512":"fddc1b3dbd07ff0fc03156101d5db8b8f3dd5f61c44e1a6c48ba6c50132dbfd32f9dda05f4aaab1bf2791de55a019f5f991a93282ad6cac1f89de5f5b7d8c535","ssdeep":"768:EbCTuXSpS9v04L37efBm+Zv2bN3H1CXQR0wZWbIJh1UMmvjCeZskk4Nci0:nML37efBbvkZDaOocJ","tlshash":"71c2b7b6f86db86423e12cc7543f1148657ad5a9fa6a74f0d1096ab2347200bb2f3fd4","size":27007,"data":"","first_seen":"2023-11-02T09:44:53Z","last_seen":"2024-08-20T21:23:50.961937Z","times_seen":8998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke/","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cb415debaeb012b69dfbc9878bbdcde","sha1":"02e4988e47e643442fbe3c70655a4b881fcfb704","sha256":"42ad5f3b77aff7dea0c553bb0741fc12a438901efe71514dd76b3692f28c5d85","sha512":"b92afda57f052dd7f4fb987de6a36d21a8ce0ed6b8cb4f4ab8806bd7a6e9482dcdcfcdcdae8ee8ad0c33c5ea86c828c58e5ed67295212a75177b83d9504bf2cc","ssdeep":"","tlshash":"55d0950d06a15470910731f3f47bd9583032010b5000509539cdcd94df14fdf400176e","size":290,"data":"","first_seen":"2023-03-08T08:02:53Z","last_seen":"2024-08-21T08:56:22.878782Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke/","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad3576329a48ac4d4ce70ab79aea01aa","sha1":"07436b4524d9355b73ede3648db2373a69616689","sha256":"69126f96b5d99a462a772afd0199b431b7943ee64aeb68adaa4dfec470364649","sha512":"8e732126027b56b21c90ecf4261995a23d2ac4ec89b447229425d291bd19a7334c4acfbeec179a186e1250c8b77297adb8993fb40fc8b6dd8051e15d5e630a44","ssdeep":"","tlshash":"aaf0ec7749e710744143a672277f159018b3142b9444cdcdbdedc618cf699a7548bff0","size":497,"data":"","first_seen":"2023-03-08T08:02:53Z","last_seen":"2024-08-21T08:56:22.879376Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"walter-larence.com/c31fd236-727d-4fd2-97b4-8d8ce3e0aef7","fqdn":"walter-larence.com","domain":"walter-larence.com","tld":"com"},"ip":{"addr":"18.193.146.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T20:08:15.826Z","timestamp":1701806895826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walter-larence.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Nov 2023 06:53:56 GMT","end":"Thu, 22 Feb 2024 06:53:55 GMT"},"fingerprint":{"sha1":"68:03:79:D9:A0:7F:E4:02:56:2B:FE:6D:ED:3E:B4:E7:06:A6:D4:84","sha256":"A7:C1:8A:5C:2B:57:6D:69:90:10:5D:EF:0D:E2:E4:C3:F0:19:A5:0A:D4:73:03:87:AF:23:7A:4D:61:39:B4:6C"}}},"request":{"raw":"GET /c31fd236-727d-4fd2-97b4-8d8ce3e0aef7 HTTP/1.1\r\nHost: walter-larence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 20:08:09 GMT\r\ncontent-length: 0\r\ncache-control: no-store, no-cache, pre-check=0, post-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nlocation: https://happy-u.vip/free-spins-ke?cep=pyAsU1wlvCYBhI9jKsq7OpyTzQLUBEH8KRiwpS0uO7IqwdGDJcEvTg1dQOoqNItVLh2qh7N-NX099YV8qZzCtq86bH7ssylOs490KINKbaEdhTCqPRICEqmuDuqyFdzU0qF8m7EdyfPMfio20VahtZrVDYJkiY6zC8LWV4Cj2HMy-Ab3Hg1ezKd52qZtZntCiWYKm7-h-dRtY4UH50VKN_JoZ1ucU186fa7s-QUq_WxhjVnpaYf7zFTQMb7xihdeaZo_mVYg3Rvzi_dMsWl6mbmr1Pep_GVP6ypjvxKyOO2UXRRykQ10DtWW4Mq5AEw0RKhAKQYkSZ8k4Xv9QhWAATpMPHiTiR3f8Ajk43Og3LW09Ly_g_TMtWRZu15tK5PY\u0026lptoken=17ba019d802086848999\r\npragma: no-cache\r\nset-cookie: c31fd236-727d-4fd2-97b4-8d8ce3e0aef7-v4=RSrdnGsgOpvSoX_eJ3aJrqIWKmloRw1Ax1SBEdkn9G4; Max-Age=86400; Expires=Wed, 06-Dec-2023 20:08:09 GMT; Domain=walter-larence.com; Path=/; Secure; HttpOnly;SameSite=None\ncep-v4=35c1wNmc-_BlOK9A1Yp4HKKtS16gsFtbBQZ6p44vm-OmSzdAHsKY_8EFEUeOpEIw4UGcZHKGJvA4ZefeHBjKiMg1_3jwFxO-LA_RuY4qZgID-Kj-2TF-zkKK5awvtwvcHK2CxuO34UtOn3qwiM26s1UIDifwYjwhfnS503abZmS7pgvnQNjWQ-MiSb6T1nvZFfzFQhkAGWKYT7bHW6LovkbEknqo7O4PDiA6fxLtvvj8TGnWOJ-EZQMjd_ENsJQ2e0uRZlE4IubkZKVcPmi50kuOI8zmg7fRWA0ncqUqvehMZNuvJVbSVxKg4vqw7IMQj_DtkCTg59xzb2fhSl435kwy66stAHQHwWunXuj2h7EuFSbTf5GZcLEeF96IdVN6; Max-Age=86400; Expires=Wed, 06-Dec-2023 20:08:09 GMT; Domain=walter-larence.com; Path=/; Secure; HttpOnly;SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T07:02:54.111055Z","times_seen":15047221,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":66,"dns":2,"connect":26,"send":0,"wait":28,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fimages%2Fslot-spin.gif","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:16.767Z","timestamp":1701806896767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fimages%2Fslot-spin.gif HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:10 GMT\r\ncontent-type: image/gif\r\ncontent-length: 87599\r\nx-amz-id-2: mCh89CwmCzbWod4ck4O3wABtTAli/lNbG0dVvfKhM4+/gzKdlmJGgcKeWuI0Oq4ZLRRCUIp3n8k=\r\nx-amz-request-id: X3RQSTKNRWZ2PYKT\r\nlast-modified: Thu, 02 Jun 2022 12:59:34 GMT\r\netag: \"617c16c5e04c8603dd7f157862b1c682\"\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=OVkg4%2BoWZWlTQk%2Fo4pX9eDEh3u4qTpDBLGY6hZs6If%2F97peFLmcYsTXq94tWhheUCwB8P5sn2OXNKh9I8OTavbkXvPFDj%2FvgKuCqjnZn6H2GHkxxG8gfFfT9ey%2Bg2g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6b6f235687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87599,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 410 x 279\\012- data","md5":"617c16c5e04c8603dd7f157862b1c682","sha1":"1306296f9a666a7fc50f339a2a924ce8a3a18169","sha256":"7f8e36cf7ac437d7c42440ef5f522c8e27adb06348b573192308038fa7c1dc7e","sha512":"11841bc480fafa36398a499a9dc25aa95a41c846f6ec804c0e7b1be16c96dbee9902ccb9b7df103d82082f79cc6d36cbfb67668239c3da3dc0994072af226b08","ssdeep":"1536:Zf5ObbcZZ6IbSBVcEVmW3USVEqKw+dwnKXcww9mLVgweLqC2WTKHnO7q:GbbKTGBNmWLDb+dwn5vmuwehTKHr","tlshash":"2483022eb62277015a0aead50116bda6f24b0bd65ff54c27d18c826b6b1c8f47d0385e","first_seen":"2023-04-30T22:49:53Z","last_seen":"2026-03-01T08:46:49.454229Z","times_seen":605,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-1.png","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:16.775Z","timestamp":1701806896775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fimages%2Fslot-result-1.png HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 20370\r\nx-amz-id-2: HkwJmvNgaOkjw1PA9RpupDjH4UkIsuIFFHorbuyA0s/u8YOJYS/8HbAu7MBYrKW6DR4MMnGLRNo=\r\nx-amz-request-id: CT282MX3CJX4HS43\r\nlast-modified: Thu, 02 Jun 2022 12:59:32 GMT\r\netag: \"1fbd2b26e61236d5bcfdfeb6adbd2c8c\"\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=llYsVqPWURnnUZQpr3RczpbBg9WC5AkzwY%2F41PpRyMnrR4LGxlAzQL2ifvM2BZibPfxc1pn62dHoyeGYc7klOHPpjpVk%2FFLEOf%2FGxwrgk09ErDawvXcRnARGbIbKyg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6b6f275687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 410 x 279, 8-bit colormap, non-interlaced\\012- data","md5":"1fbd2b26e61236d5bcfdfeb6adbd2c8c","sha1":"c9034272d28dab018b73f1967a679c734f987a1f","sha256":"c402c36eb8d623b618261d40846e63c130de1e78720ab5578eae1d645198c963","sha512":"d0d9c4305423e6f845fed621fbf754bdb67411bc8c7b40b7b77a8dd265a5e6ec36625937ad4b6e55dac54d0b442c93a79f4ede38d2757ee0a9d18914c08b83ea","ssdeep":"384:l+GhXbknysZOQaJhoYctuBrswRiv4Kk73yyfTVwk/5ZZLj776Qeeo4:kGRbO5ZOXLc+RXKkGybP5pLf","tlshash":"d992e1f45ac8a1c14f107f68efff65d8ef002165ae9e6d534c29f5db3469440e2aa443","first_seen":"2023-04-30T22:56:53Z","last_seen":"2026-03-01T08:46:49.470053Z","times_seen":335,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fimages%2FCA.png","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:16.754Z","timestamp":1701806896754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fimages%2FCA.png HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 36535\r\nx-amz-id-2: 7HfX9lbJ7Cmg6mH4DLb5XwhU+HjntwxWo8PyphUBBhZMK1nmtIYHOgLhpPiItXeGRQ3iw4snQfo=\r\nx-amz-request-id: 6DWEP1G0E02KWVDZ\r\nlast-modified: Thu, 02 Jun 2022 12:59:31 GMT\r\netag: \"d94d1d2fc9120c693a66d99b01362e24\"\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ClVmymExi%2Fw0Hd13Cd7ooDMChGi%2B5S0QiBEMUBcfsys4FsITv4Iku0Tne57H8DaC2fNpDUXu8xs18Fx9ERu%2FhCCO73%2FoA9tveybBrRP5ZdxNZy9NgHbYMO%2Bs8R%2FgZg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6b6f1d5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\\012- data","md5":"d94d1d2fc9120c693a66d99b01362e24","sha1":"465d9725e53ec9a6e4bf2a8e26fb4b5b7e01562d","sha256":"0b5f254d8aba31c96211fbd731c9f5984973c203135435f5430cf05c542b5b70","sha512":"489ec7067915192aa726d3f3a6c39494b55bf01f597a27e12656357bc54636cbc85dbad7cbb9440f14ab757dcdf6d2f1b998d137130a838efe6ba87e2321d3ae","ssdeep":"768:Rs4aANJwkin2moksywU7TrEDa8MrxPuZ9skp3bpgOWbXVOkRywKtaw:qANJwkK2moZyJ7XtB3kp5WbFOkYMw","tlshash":"29f2f2dc34a8fc5d3f78d2744ba633dd3b6057600673c265a729f147669ac2948b862c","first_seen":"2023-05-04T19:32:59Z","last_seen":"2024-08-21T08:56:22.846556Z","times_seen":97,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke?cep=pyAsU1wlvCYBhI9jKsq7OpyTzQLUBEH8KRiwpS0uO7IqwdGDJcEvTg1dQOoqNItVLh2qh7N-NX099YV8qZzCtq86bH7ssylOs490KINKbaEdhTCqPRICEqmuDuqyFdzU0qF8m7EdyfPMfio20VahtZrVDYJkiY6zC8LWV4Cj2HMy-Ab3Hg1ezKd52qZtZntCiWYKm7-h-dRtY4UH50VKN_JoZ1ucU186fa7s-QUq_WxhjVnpaYf7zFTQMb7xihdeaZo_mVYg3Rvzi_dMsWl6mbmr1Pep_GVP6ypjvxKyOO2UXRRykQ10DtWW4Mq5AEw0RKhAKQYkSZ8k4Xv9QhWAATpMPHiTiR3f8Ajk43Og3LW09Ly_g_TMtWRZu15tK5PY\u0026lptoken=17ba019d802086848999","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T20:08:15.987Z","timestamp":1701806895987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke?cep=pyAsU1wlvCYBhI9jKsq7OpyTzQLUBEH8KRiwpS0uO7IqwdGDJcEvTg1dQOoqNItVLh2qh7N-NX099YV8qZzCtq86bH7ssylOs490KINKbaEdhTCqPRICEqmuDuqyFdzU0qF8m7EdyfPMfio20VahtZrVDYJkiY6zC8LWV4Cj2HMy-Ab3Hg1ezKd52qZtZntCiWYKm7-h-dRtY4UH50VKN_JoZ1ucU186fa7s-QUq_WxhjVnpaYf7zFTQMb7xihdeaZo_mVYg3Rvzi_dMsWl6mbmr1Pep_GVP6ypjvxKyOO2UXRRykQ10DtWW4Mq5AEw0RKhAKQYkSZ8k4Xv9QhWAATpMPHiTiR3f8Ajk43Og3LW09Ly_g_TMtWRZu15tK5PY\u0026lptoken=17ba019d802086848999 HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 05 Dec 2023 20:08:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-amz-error-code: Found\r\nx-amz-error-message: Resource Found\r\nx-amz-request-id: HBWDMD3VZG6E2FVN\r\nx-amz-id-2: p6iF1Sm6UHMMirGia/jwZGIWtzAPhNWhrK3ZhfaXi8Kxg9uZDy0A+zCL0+mbsyCLkp/WGHATlJ0=\r\nlocation: /free-spins-ke/\r\ncf-cache-status: BYPASS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=JuWuXxv0QLeTGcciFrsLNoQ7pIT09e0g8CrOFFLFliGMOjLPOdvtzm6010EPrji2AAlRG3L7c0SR1CsLVmqPEahrffUSH8PvKnnzdp2XC5HJ5VUMU3O%2B52vmgoL5%2BQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb670ea756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":26397,"size_decoded":0,"mime_type":"text/html","magic":"data","md5":"1815c158f3adbe48a73f523b7166db5a","sha1":"8512ebc3d026dec1e4884304082191a262f3c26c","sha256":"358ea599e01032804ac559b07e4e1a83518ded1325acb7d096b7bccdac432afd","sha512":"99a2f54c75847075588048a363da18cdfeb9c4f018c67ae6eff496f88c42fd3c2784637fa38c972d363b629bf2bb07ab791db6011ae564a0ec194de84690ca84","ssdeep":"384:1ac5+GqP/3bR0ponxV07LgJ17+sXiYTJqWlBbMbEylCewR3Sw+eR8hchPaQCb:wcQ3/3bKpoY7L23i3O4PwRUhcPjK","tlshash":"9fc2e1d740eba06b15d055367b0a42c23fbdb101d6e270a3960282997daa0bb747c8bd","first_seen":"2023-12-05T21:08:31Z","last_seen":"2023-12-05T21:08:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":50,"dns":39,"connect":1,"send":0,"wait":133,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fimages%2Fslot-win.png","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:16.783Z","timestamp":1701806896783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fimages%2Fslot-win.png HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 14391\r\nx-amz-id-2: SLS92mdgsZig22sKXdMlx61oNkcnPCOsDPl2yf9nlHeKlmdHBv31DymwVlgV3hZGvUcqibOQ9/w=\r\nx-amz-request-id: X3RSNTGS2ZHA3T7H\r\nlast-modified: Thu, 02 Jun 2022 12:59:33 GMT\r\netag: \"939b6a73c96383ac0842317037f3a0f0\"\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=h82d9fhiUFpgNws5YB5LNBjiQWqb4QF5cX6VnRjx5XQ6%2FIuwfs1zN13wBIvy%2FCQzpskbRe%2FsD0Qle23pBJDrRZVobegst0hmVguQD4lpns%2FeJrZX5DMGjWQDf2m0OA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6b7f2c5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14391,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 410 x 279, 8-bit colormap, non-interlaced\\012- data","md5":"939b6a73c96383ac0842317037f3a0f0","sha1":"0654b62431c8ba522833950b8166d7a16e2a6b56","sha256":"b8f1ec0ac028bd024af2cf57b63b07069b2f4a41e61c1577e968ca5d7ba72837","sha512":"971edadbeb3617df3b8294a8c270d0e29ad4829d1ba3c4e620bfe90e00e3c7a9f36ef3ebe94dbd442cff09423b65cd9f4a10017237eae0e96051a949152c773c","ssdeep":"384:Gjn+MLNoRKuSNxnuYYrZwoC+7ZOj8BCQljfV+:SvumYZwPmZWqjfV+","tlshash":"fa52cfd2dfd54c8bc7862ae84eef2f670d044c3890699d366527733e489c935e44d1b9","first_seen":"2023-04-30T22:56:53Z","last_seen":"2026-03-01T08:46:49.471956Z","times_seen":338,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-right.png","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:16.788Z","timestamp":1701806896788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fimages%2Fred-arrow-right.png HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1362\r\nx-amz-id-2: rA+THcGluV8iaCuG49rRNzuSRWHzh/dl6oeyLu7l/+AtibJSZUzwUDBiwme78ZXP1nxauTteozk=\r\nx-amz-request-id: X3RXXNNTXQ7Z5AB6\r\nlast-modified: Thu, 02 Jun 2022 12:59:32 GMT\r\netag: \"881bdc037be8895ba5d8d53456890e7e\"\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=9yWdKTpswED%2FXFAQjjyl5iAnA2YiPioVWnVjVEt3g3A%2BQCvKgk8lqVigXd%2FVQp%2BGJlfAjQFJj6eXwWTQzmOumt%2FNOBNEl756TucU73ToXYxGWgVCiMFSZujWcOK7pQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6b7f365687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1362,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced\\012- data","md5":"881bdc037be8895ba5d8d53456890e7e","sha1":"4e105c89e2a1475520bb74c9c20bf2f9e906fcb3","sha256":"9f8160d6380fef91c8eadecc6e8e59e93e3f5c40be7963018c8104bef4354d8f","sha512":"57c794fca967d0fb12a54b80d5717d2f48762eb92979c3c611d886f78600cc6f9d593ccdd385a1d51a03f6e1799f3e9f201f0c717e64006c4032187759cc3984","ssdeep":"","tlshash":"02210887abcb6c3fcb30a34b2b15a443d56242810b3a4840a8bf5164aae8716c04595a","first_seen":"2023-04-30T22:56:53Z","last_seen":"2026-03-01T08:46:49.461132Z","times_seen":336,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-2.png","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:16.781Z","timestamp":1701806896781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fimages%2Fslot-result-2.png HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 26733\r\nx-amz-id-2: hi0o42OuLC7MYdKgPvzsp5RShXJhC1sQhYbhosevLvVtlIowyMG2Jf/lru2Mjv8sYitEmZ0hYAw=\r\nx-amz-request-id: 6SX5QEH8YK3XMCEH\r\nlast-modified: Thu, 02 Jun 2022 12:59:32 GMT\r\netag: \"b6ca0bfea4d0cec334f128f5c2c44cff\"\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=PbBdXlUMSOB7zSYbyc4rvbDOYu4XGQppvh5WPVEK8%2ByVjbbnaqHDvzDuCt5urj2MYdsRjB4WhDNSPdYusJRUzvXHWM5oKrENnWcBWk%2FMKHdkl6BfXCff%2F8XQHfNsLw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6b7f2b5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 410 x 279, 8-bit colormap, non-interlaced\\012- data","md5":"b6ca0bfea4d0cec334f128f5c2c44cff","sha1":"f6dc006902542a929187af718d9f6a244e5472b5","sha256":"b09b477eb93ed896b8e52a2f746e435695dbef2a1259987bae4fbea3c35b5435","sha512":"1e7fb42f6b834baffd8a009716112addb47f9677d5a1989c11a6a19b1ffe12fe65db70beeb17016b9396e986a52ba44a8058e886e9ce064e6aec4c1d33f5f652","ssdeep":"384:bN8Qd2IwFeQ6BqBrZJ2cPOciB5VSepIRcxLtk/USEKv749klL5Izfq73vZ:6NijBkJ27ciDNHLtksT9kM+3vZ","tlshash":"dac2f16b150261638166df2402b3d33e78efb698b14ca10b5d4ae1e57362a4cc7a36df","first_seen":"2023-04-30T22:56:53Z","last_seen":"2026-03-01T08:46:49.437146Z","times_seen":334,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-left.png","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:16.786Z","timestamp":1701806896786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fimages%2Fred-arrow-left.png HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1334\r\nx-amz-id-2: cuAeLnowYMiq1EmmJ4BhIp+Rt3+z3Um4UQeJGOcYWOF+lsq0OUwBC9nJ4oTmn1HVNSxPdKViVv8=\r\nx-amz-request-id: GP1PCHRTR4CJBEZ0\r\nlast-modified: Thu, 02 Jun 2022 12:59:33 GMT\r\netag: \"92d3e482cacea857c5dfaf9fa3a21dfb\"\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=0qmZmi449Mnyj6QLdWaAf4iFr9YoXRiFEVOynJ%2B0vJ8hdET077E5Iv8%2B4%2F9bXif5lP%2Bjvps40o1PkL%2FqkdJsqdUv%2Bwbu2gQaBI55L2OCHqFVsyLfUEGzLY99Vp8NJA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6b7f2f5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced\\012- data","md5":"92d3e482cacea857c5dfaf9fa3a21dfb","sha1":"3f12c410c77d763cc4719ec367a18417b8300758","sha256":"4a688dc66588e8e86e98ccadb318fa2aca3fd6e2444aac783278b982f3e47eef","sha512":"16dbc54e123e8bbe83026519d12088f082841f15edec6b67c009a3bf7c22cfd5538763ff9fda803f33835340037f1991d043443a9dfd96369ea461a95debfd20","ssdeep":"","tlshash":"c721d5b676611015f914e09cba68ea08af13330377776f009833ac740e317010494fe2","first_seen":"2023-04-30T22:56:53Z","last_seen":"2026-03-01T08:46:49.440507Z","times_seen":336,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.landerlab.io/base.css","fqdn":"assets.landerlab.io","domain":"landerlab.io","tld":"io"},"ip":{"addr":"54.230.111.7","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:16.746Z","timestamp":1701806896746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.landerlab.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jun 2023 00:00:00 GMT","end":"Fri, 26 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CA:55:A0:91:66:D2:49:1D:74:D9:90:B0:7E:D2:4C:B1:3A:0C:10:78","sha256":"70:6B:AE:2C:A7:53:6F:2E:C5:8B:0A:4A:B8:59:C9:92:07:DA:D3:93:60:7B:5C:C7:25:E7:EC:72:D4:3D:A9:52"}}},"request":{"raw":"GET /base.css HTTP/1.1\r\nHost: assets.landerlab.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 8732\r\ndate: Tue, 05 Dec 2023 01:46:23 GMT\r\nlast-modified: Sat, 29 May 2021 19:05:04 GMT\r\netag: \"7f6de4e86d84bcbfd919f155e7545439\"\r\nx-amz-version-id: 0sEXTlrAazg9KkJm7sv1lqt808WfgxiL\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: auoFWimOW_DcUgVTXa5rB3g_X0TmUQK63i-2yxcLjOXfe0oJSa2_tQ==\r\nage: 66108\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8732,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8731)","md5":"7f6de4e86d84bcbfd919f155e7545439","sha1":"e7d9a7a418519c3fbce6de3c85775087cba93b49","sha256":"8d8c59c2712df25a26ecd01739496e49c3514a9341fa3cd21cfa98627ba6efa2","sha512":"57d74d36b15dea011057e2475bac0dcb5622b5b150cdb024f30e9b84af0b3638355ae8b456f46ffc2dcb2dc8026ca359574e9eede64523cec018fd02bc6d6315","ssdeep":"96:QpcjvAUtj4RZRwF/gWkccWyKe3zLMNRo4nX+XHVCQjVjo0Iuw67Qr4X2BYs5Yb:QuvAUtA/O5lNC4Xm5YzPUGKs5Yb","tlshash":"fe029b11883d722ba037cada70d0b4fa6429340e7bf3ddd7f7aa1e11c56a5d60862d07","first_seen":"2023-04-05T14:09:32Z","last_seen":"2026-05-11T05:28:36.981519Z","times_seen":821,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":155,"dns":156,"connect":1,"send":0,"wait":4,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fsounds%2Falert.mp3","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:17.231Z","timestamp":1701806897231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fsounds%2Falert.mp3 HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Tue, 05 Dec 2023 20:08:11 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 8802\r\nx-amz-id-2: KtKPSsWrStu3HAvinXw+AnJpwB7nKmHCHZ+iolQ4yhYK86G8Q6YoN+XVmv6fCcNgRfOpmQaIb/c=\r\nx-amz-request-id: 6SXA70EQ7852902K\r\nlast-modified: Thu, 02 Jun 2022 12:59:33 GMT\r\netag: \"6d2d3da2ea28ace816fa4a138829dc18\"\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\ncontent-range: bytes 0-8801/8802\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=UqfeKuC76EnstV94X7qLYwxrZnJNuXHHVI3sMQO9nAz3k07%2F2ly29yl9uZMJZLzOv%2BEMS%2Baa9kvxzaHjMp2vKGLefVU0Y8dEUpzMyr5J%2BL9KhWV6rJxE2fQdgDa9uA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6e7c135687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":8802,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\\012- data","md5":"6d2d3da2ea28ace816fa4a138829dc18","sha1":"606e0ec3d7fb05c69f16233cfe1ff0a0ee760505","sha256":"d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc","sha512":"69b4b77a4233d081deeca7a19f9234c24aeab11390988c222119356f5bad406aed28c0ec25e9881031b51a930171f52c954f376e635defe10f244530d749895e","ssdeep":"192:JN+X8ssZf/IQc5Vkm77EheIp9mLOrEZoz:vS2/PKNxdSnz","tlshash":"5f027c75b97b2ec0c1025a3b175007936860aebb2d4eec5a9ddb7c8405f1382bd02923","first_seen":"2023-04-05T06:26:19Z","last_seen":"2026-05-03T05:39:47.51485Z","times_seen":4930,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fsounds%2Fspin.mp3","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:17.234Z","timestamp":1701806897234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fsounds%2Fspin.mp3 HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Tue, 05 Dec 2023 20:08:11 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 51290\r\nx-amz-id-2: CANkmzF5RFkOGQsEBlljct0vxETiOOOg5xxoxuF9mmxLFo+4lYfLT8W2lffGlbDuRXHvZS2uzk0=\r\nx-amz-request-id: 2EKB7RW82RKJMT05\r\nlast-modified: Thu, 02 Jun 2022 12:59:34 GMT\r\netag: \"390bca8d165546a8097b8951d2f400d4\"\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\ncontent-range: bytes 0-51289/51290\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=FVX0UwQYgt6LOa04sApd782vtPpZxDk3rLzGsMf0GFr6B6hFz%2FG7ZiyB%2Be4C1a5xPxFUDWS3UVlxesVLwtkgIQZ6fBlAX2bJBVwgC0WxuShnEU6Ec%2FUZptnSIFoGgA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6e7c185687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":51290,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo\\012- data","md5":"390bca8d165546a8097b8951d2f400d4","sha1":"1385d88b3aeee07bc51e7955fbcb9ed7586ebdec","sha256":"cdb080d348cd2222fbe1d5b54da2f9db8fdca881570a9c82899082203b000b78","sha512":"b30884ea6629e960d5c515610d412cf28a57e2efb06ad715a99d3f92cfb26c828c29a66d2c25c62f01ada089bd7646736594868d156b10944cdc63e234438f9b","ssdeep":"768:xpUL8bOitCSPfYmEs6GzNr42J6RgVBPtgUaKXR1OD/FnXWYL63ntq91ADy:7bVDxP6iV8yR1OdXWYLMKJ","tlshash":"2e33f15a01e43ab0fd120afa6d638e70cb194a42471887d5e927cff70c37a61e3a0695","first_seen":"2023-04-07T07:54:57Z","last_seen":"2026-01-04T00:03:15.369824Z","times_seen":1531,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fsounds%2Fwin.mp3","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:17.232Z","timestamp":1701806897232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fsounds%2Fwin.mp3 HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Tue, 05 Dec 2023 20:08:11 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 22067\r\nx-amz-id-2: N5y/38boThQEmPJ70pl/Ze243Y8rl1TYMHEmehKME6KUr+j1zPqcITyLH1UlJWFbWaIh+mT6ZeA=\r\nx-amz-request-id: GQ86GW87FJCCRPF9\r\nlast-modified: Thu, 02 Jun 2022 12:59:34 GMT\r\netag: \"c74dca6a3ab16c097234033fec7a8573\"\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\ncontent-range: bytes 0-22066/22067\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=V6e0TAJENIZPEmc7CLQ91ChFk33%2FsT9oiNDP2Qo5DNGvnIznI6SJR19DOVQbZNnb9CU5GGXwj%2BMY%2BfVD9Lgwc3h0UYZZM5Vw3V4ykUJQ2S0e5Bi1ia%2FgqpvHnFdnaw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6e7c145687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":22067,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains:\\012- MPEG ADTS, layer III,  v2.5,  24 kbps, 11.025 kHz, Monaural\\012- data","md5":"c74dca6a3ab16c097234033fec7a8573","sha1":"a6e73f993b73d589b9688a0679bdac39028017a0","sha256":"79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56","sha512":"e430e3778112d152e10e733dcfd0891e7e38187beee75c5e3fe838d27db7e7b886195360973d7866d8e7cbd7000a22e2e04890fe948c6e4230956b204b752f36","ssdeep":"384:PJOhauDHHYPMGU6F8B0fSAL267AutinkRCxC8xm:PIDDYPMEs0fLV7/t0kRAW","tlshash":"18a2bf28a4c42950f0a1e43325df2d146e275ce75af1de41739e5802ef272b93925b6f","first_seen":"2023-04-05T13:44:39Z","last_seen":"2026-05-03T05:39:47.518616Z","times_seen":656,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notix.io/settings?appId=1004e573f6298b494995e0539d8329e\u0026ver=0.15.19","fqdn":"notix.io","domain":"notix.io","tld":"io"},"ip":{"addr":"139.45.240.92","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:17.472Z","timestamp":1701806897472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notix.io","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Sep 2023 11:38:16 GMT","end":"Thu, 14 Dec 2023 11:38:15 GMT"},"fingerprint":{"sha1":"68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D","sha256":"09:A8:C2:87:1C:48:1E:F9:18:90:A9:C7:E2:BC:76:77:BD:FB:3D:D9:6A:16:67:59:7C:F4:17:42:7F:DD:A9:2C"}}},"request":{"raw":"GET /settings?appId=1004e573f6298b494995e0539d8329e\u0026ver=0.15.19 HTTP/1.1\r\nHost: notix.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://happy-u.vip/\r\nOrigin: https://happy-u.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 20:08:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 327\r\naccess-control-allow-origin: https://happy-u.vip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":327,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON data\\012- , ASCII text, with very long lines (327), with no line terminators","md5":"bf0f59f119686c0890d2a8be8df6cb23","sha1":"f232d08bf915c9010c041dd6500398d997446f70","sha256":"10af8d0b199fb5fc141f14782014cb5ba7e1bfbfbc8f3459a62ab3024bd28fea","sha512":"085a029723b89c8deeeed820d6b2b4d21b4d6019ac5bd8727dd9ab233e515c75bef6d83eff27cba88abaddf7a00bece9e797888a840613bc4c87ad0ae3cc3a2c","ssdeep":"","tlshash":"23e07d8f50d21ad657a35673d55b0c87d0f3901c18520ab2a7f7864e009138d4782518","first_seen":"2023-11-14T06:40:49Z","last_seen":"2025-05-17T11:17:55.217327Z","times_seen":67,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oungimuk.net/zone?\u0026pub=0\u0026zone_id=4336991\u0026is_mobile=false\u0026domain=happy-u.vip\u0026var=\u0026ymid=\u0026var_3=\u0026var_4=\u0026dsig=\u0026tg=1\u0026sw=3.1.471\u0026action=prerequest","fqdn":"oungimuk.net","domain":"oungimuk.net","tld":"net"},"ip":{"addr":"139.45.197.251","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:17.492Z","timestamp":1701806897492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oungimuk.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Sep 2023 05:45:36 GMT","end":"Sat, 23 Dec 2023 05:45:35 GMT"},"fingerprint":{"sha1":"52:49:91:AA:04:62:59:A1:7D:AA:95:42:75:F3:62:7E:D8:66:82:DA","sha256":"39:8E:EE:A2:7E:6A:12:39:64:9B:A6:3D:B0:D9:A3:39:74:79:6E:C7:91:50:57:71:92:B0:72:13:F4:2B:CF:DB"}}},"request":{"raw":"POST /zone?\u0026pub=0\u0026zone_id=4336991\u0026is_mobile=false\u0026domain=happy-u.vip\u0026var=\u0026ymid=\u0026var_3=\u0026var_4=\u0026dsig=\u0026tg=1\u0026sw=3.1.471\u0026action=prerequest HTTP/1.1\r\nHost: oungimuk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://happy-u.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 20:08:11 GMT\r\ncontent-length: 0\r\nx-trace-id: 09febbc020239344115720cc5e2b2570\r\naccess-control-allow-origin: https://happy-u.vip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T07:02:54.111055Z","times_seen":15047221,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.landerlab.io/p/606dc316bd12e800113ca177?lander_id=1e08f60282cd55a61321314ef22873f5","fqdn":"track.landerlab.io","domain":"landerlab.io","tld":"io"},"ip":{"addr":"104.18.16.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:17.009Z","timestamp":1701806897009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"landerlab.io","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 07 Apr 2023 00:00:00 GMT","end":"Sat, 06 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"E5:19:57:65:1C:8A:4A:59:2F:10:FC:CE:EC:7C:74:C3:C9:6E:04:49","sha256":"ED:2E:73:4D:A7:86:0B:E8:29:30:22:71:D5:83:B6:9F:2C:49:07:93:4F:57:38:76:6C:74:DA:6C:71:AC:F9:1C"}}},"request":{"raw":"GET /p/606dc316bd12e800113ca177?lander_id=1e08f60282cd55a61321314ef22873f5 HTTP/1.1\r\nHost: track.landerlab.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:11 GMT\r\ncontent-length: 0\r\ncache-control: no-cache\r\nset-cookie: worker_cookie=N4Igdgpg7g+gFgSwC4wQExALhAYwgMzQA4BDAJhwFoBOARiLMoBZbqAGSktAIwmaIDshfO2IBWEiAA0IAG4IAzslQZsbAGxEIaAMzrulHNTQDm6tjs7UxHLjnw4SOHGPVkm0uYuVIEAWwgFJBI/AAcsEDI2MktaRjYxABUozDYiTFpaADoydXUALU95JSQAewAnFQi0NDI0GyY+MSI0amZqI0oiNhIiSlp8MWoubh0dWggyT0cwkgQAczAq7HN1NBxx/TQ4iG62TJ1HWgEBTzBStAgYHDg5sCwAbQBdGUUYSCgsfBIAGwUIAC+QA; Expires=Wed, 06 Dec 2023 20:08:11 GMT; Domain=track.landerlab.io; Path=/; SameSite=None; Secure\n__cf_bm=FedjCxufjiVTr_Rh56JWP5eIXIQWm4_3.07RTOuDgX0-1701806891-0-Af4ILWfOW0rViACL5ibQk83Fjy/mcqKqrnxHSc47oE+o8cYYp+O9vH2KuIukgeXP6Rk2t5E3c2v948TwxOc3I2o=; path=/; expires=Tue, 05-Dec-23 20:38:11 GMT; domain=.track.landerlab.io; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6e59c1b51d-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T07:02:54.111055Z","times_seen":15047221,"resource_available":true,"data":null}},"time_used":1074,"timings":{"blocked":190,"dns":156,"connect":1,"send":0,"wait":694,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/sw-check-permissions-77596.js","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:17.941Z","timestamp":1701806897941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /sw-check-permissions-77596.js HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:12 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\ncf-polished: origSize=566\r\netag: W/\"44d972e91b04c00bb67c0a08024625c4\"\r\nlast-modified: Wed, 24 Aug 2022 13:50:20 GMT\r\nx-amz-id-2: LniQnjFwRDJGl/Qzaa2mly7RbyC4H4tl4CPXKpoNV9oL1FTvvyS1oqO+27uzpRZRbYnnhToJrYs=\r\nx-amz-request-id: 2EK3NV8G3KFHB4Z7\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=41KwAovaaK7F36GW0%2Fofp0TlsAgbXC6Nmr%2B%2Bpe9O1LOyyhrCg9qGnKg1UC6R1O2nBYuKMjDNEiOSVENmNfuBs%2FvTrDZ2Y2cvDPhERFzHIrSHWdBARsL8vHwwznxZVg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb72fba15687-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":443,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (462), with no line terminators","md5":"f0543799885fb5c86ac7c6bc29b508bc","sha1":"ac3e9ae5ba4844ecfc9865ba1e7a9fbd32903eca","sha256":"cb3fae5a8368bfba7e04d0df02732899f4edf1fd4e69a99938350a91bf590a32","sha512":"a7698626fb5787d526eef02717bde750d5f3d17d1e4965a0c9d57436ad3287a5045f3781288d2c4d859fb17b2da6273746d9d157cbe836079ea7fb4a11141a69","ssdeep":"","tlshash":"82f0dcca2d80c21c07f20b525c1b2e59a07b5b4a290d70a0d46889a2b88ce6ecb174c4","first_seen":"2023-05-07T22:06:21Z","last_seen":"2024-08-21T05:37:02.10159Z","times_seen":75,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notix.io/ent/current/enot.min.js","fqdn":"notix.io","domain":"notix.io","tld":"io"},"ip":{"addr":"139.45.240.92","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:17.103Z","timestamp":1701806897103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notix.io","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Sep 2023 11:38:16 GMT","end":"Thu, 14 Dec 2023 11:38:15 GMT"},"fingerprint":{"sha1":"68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D","sha256":"09:A8:C2:87:1C:48:1E:F9:18:90:A9:C7:E2:BC:76:77:BD:FB:3D:D9:6A:16:67:59:7C:F4:17:42:7F:DD:A9:2C"}}},"request":{"raw":"GET /ent/current/enot.min.js HTTP/1.1\r\nHost: notix.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 20:08:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Nov 2023 16:35:15 GMT\r\netag: W/\"65676843-235f7\"\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144887,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5ec57c87dbac3f07e59e5d74ae3421e4","sha1":"70121f1541a1961d7b87544001d612f18ad04243","sha256":"e1d529afcbb911c99bb039ba39c7fb6716275b97650ae816a90fc03f256542bb","sha512":"2c7649f28378009c66f4aefd02559d8c9e9b164f6c7deb014b6c2f0c2f08d97764c85fb7105a77ca5adceb35046c4b2828e74863b725b2c25ce99af7c599a92a","ssdeep":"1536:Ay52kbAGZsFvXQUWMTSVozYZ8Z+oDFsX/m/j8KOhQRSbsAY1AdniNake42N3pzN7:N2kbavoMTSVozYZ8Z+ouX/feR2Yeli01","tlshash":"9ae3988176e0ec9e07d7b776b73ba0d1e44b1a6c39c4890bd181fc50199d22beae95f0","first_seen":"2023-11-29T11:39:02Z","last_seen":"2023-12-08T03:48:58Z","times_seen":193,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":154,"dns":22,"connect":33,"send":0,"wait":33,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2023-12-05","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"notix.io/ent/current/enot.min.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke/","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T20:08:16.258Z","timestamp":1701806896258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke/ HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:10 GMT\r\ncontent-type: text/html\r\nx-amz-id-2: CDs6GMIDfinplf6kRrddbe6a2MTL4awsaQuLveun9kpL45H3CEwpRB/Ki9X6crXsyiKjWslkWbA=\r\nx-amz-request-id: GP1TPKBAJ2ENYY9F\r\nlast-modified: Wed, 24 Aug 2022 13:49:50 GMT\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=D6pAUouu9h4WXCsO4MXY8glGzg1VZKhXA4kEQqy51Xqsge9InzYiky1TJmkWghxsK%2Fa2oGUKJiVmbmEzzdswpKOe5MbiGthD5nk41ciCgEIX6aeLRwATaeqX0hzcug%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb68585656bd-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21758,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3238)","md5":"153504c8e5f4dd8f207b65a4e299bb16","sha1":"6eaa94ee7283551988a0e50fc018d1d262d9d69a","sha256":"9f2ce1fb98a5f899d3ed7c56fab134ee414f6d4d190b92f59d1bea21add46917","sha512":"bae958f64e84a0be6d72cd808ce961f1d4395c72062e66dade8a837d38d5c4a4bcc674c933701978e011b5509bbf3efcb583503b71e98b7fb6be5e902228589c","ssdeep":"384:82/CiMZsS9DlunOfrIvFbpDG0Vbv1SbkrkOode9ynS13AS/:H/CiMZsSsBpS0VbNSEode9ynSNAs","tlshash":"4ca2740170ba1d21413330f9e7bfea057167a307d604ddc4749f4bf1af9aa2898667aa","first_seen":"2023-05-11T14:51:29Z","last_seen":"2024-08-21T08:56:22.869277Z","times_seen":96,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/images/arrow.png","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:17.035Z","timestamp":1701806897035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /images/arrow.png HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke%2Fcss%2Fstyle.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 05 Dec 2023 20:08:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-amz-request-id: XM7JSDZ0CYG76386\r\nx-amz-id-2: mqcVFJT+f/Lkp9dQHfHibmcmGxHDmqpTcXNIDc5JFRBXg3+iJK8D0Ca6/IR5ofWH5m+IDRFF7P4=\r\ncache-control: max-age=2592000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=OZMDb2GotsYu%2BBBUMRB7j7TIzP%2Bj59AVwvfvNmCndEoAKonBDTzhJCEwXnJELHAPIfckFAQ%2FCqFGcJ1d0UzeooHWzo9uSaEwYljwSofTrVJytA6hl9YS7VwKp5Xgjg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6d49ff5687-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":351,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (365), with no line terminators","md5":"4372326b1421bf79b07b24d81ace22ad","sha1":"b45a3fa3f93e2bd52d2419fd8f67c900b58ca3a7","sha256":"49daa5aab2344e5f7df1eff337d5387b5f49329eb0ca40595cea788296311fef","sha512":"dd794ea80cc619a168e9052c0b180b04274fb4a941279c7a920c81f1777790135027e0a956604f061835ef2e50d7c106bf0dbc2ffdca547405737f188af2ba3f","ssdeep":"","tlshash":"71e06f0c00335002a22034e977cbf283199f03fe90a82236326a05c6e0c80a86c732ce","first_seen":"2023-12-05T21:08:31Z","last_seen":"2023-12-05T21:08:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fimages%2Fslot-start.png","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:16.757Z","timestamp":1701806896757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fimages%2Fslot-start.png HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 26084\r\nx-amz-id-2: HoDHrjce/VcUU2zhtpaxwQMlFMDYwWay3DqWtxcO7JGbjsNHPukTFTtad9pghVuRvpDzJffi4f4=\r\nx-amz-request-id: 419H7YTW900JZRM6\r\nlast-modified: Thu, 02 Jun 2022 12:59:33 GMT\r\netag: \"f491647556e492de92530b48827690aa\"\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=v9ksK5abbyGY3ptonFHlTp2Poo0GzfazxGRkggH0vjzMi85874UOmKIHPH%2FRkOdQGORpdk57dWk0AH1ozuHxyWJkx27mDqqAliU6D5D481hxZ%2Bjy%2FLVh5NEX3TgvKw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6b6f1f5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 410 x 279, 8-bit colormap, non-interlaced\\012- data","md5":"f491647556e492de92530b48827690aa","sha1":"6296c44299f5acb17cb2c06e37391a70672b1fd3","sha256":"efb819d37f19ec7505d9602488ce97868d84e1c7929ce83e308e23f02d97b95d","sha512":"926b7e7fa3ec3ccd8ae9b70bfa40fe911dd2c4d43da4fce10aebb5e52c43a3a4eae761c2d277717d682f29ae8a5f38f685ea1536d877cce08be6e0a63a0dd2b9","ssdeep":"384:Vac5+GqP/3bR0ponxV07LgJ17+sXiYTJqWlBbMbEylCewR3Sw+eR8hchPaQCb:QcQ3/3bKpoY7L23i3O4PwRUhcPjK","tlshash":"3ec2e0d750eb606b15d045366b0a42c23fbdb101d6e27463960282adbdaa0bb74bc8bd","first_seen":"2023-04-30T22:56:53Z","last_seen":"2026-03-01T08:46:49.457241Z","times_seen":336,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/favicon.ico","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:17.619Z","timestamp":1701806897619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 05 Dec 2023 20:08:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-amz-request-id: XM7M24DJJHHNZ2HM\r\nx-amz-id-2: ivZvFuTjxJDzTNi6AuEwTaxm/y8/NUgWeNtm+04aJnr6eU/snxE5aH3DOdRP5dUEm3BeoyA4eEQ=\r\ncache-control: max-age=2592000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=i5l7qJUI%2BJEoYp7a55p8%2F1PDmNz9UFdiwdbGIOM5rDQu2OP%2B5tqnFIGSXqeoZl34QUbcPCnIycV8pohdEaTfsGBfWtWUkZPBzNNkZiCxpUwoUvOZhPlrTuiXyxsLuQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb70f88f5687-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":346,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (360), with no line terminators","md5":"43ac88ec8ac88b7525f7cbcc6dad8fe2","sha1":"640c63303d8f84ff916c6734a4edbcaa0719a6d3","sha256":"d1d6f03912e7823955fe2e9908f79a5981723b00bc1f0b48874af497e224fd13","sha512":"b1ea9384f1937598b973a5e39846f9f2ee6a9e88603363432394145edd59d91a1dc33cd104ffe3324ee7b5157cc1c95dcb390965d4eddfcdd57bb191eb663a41","ssdeep":"","tlshash":"aae0c01d041b45069a2034eef3c3f243514f00def0982937366a8581e4cc2b88c633ce","first_seen":"2023-12-05T21:08:31Z","last_seen":"2023-12-05T21:08:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fcss%2Fstyle.css","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:16.751Z","timestamp":1701806896751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fcss%2Fstyle.css HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:10 GMT\r\ncontent-type: text/css\r\ncf-bgj: minify\r\ncf-polished: origSize=13222\r\netag: W/\"538445a521226e69b9c4231a52ad5e79\"\r\nlast-modified: Thu, 02 Jun 2022 12:59:32 GMT\r\nx-amz-id-2: +tU/BSjpobN5fvgg4wbFtFDaM4FffXnvWyWIt/wRCaXZvbEE8/AYYKyFUHkg8lmafVlTXG8ppho=\r\nx-amz-request-id: CT27F2CRHJX957PP\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=0znASVlEYufjJIUu5WyrEPXmK8uvYtRrgRsHle2WFQCrY6aQvB9LAzggOEz2TQwzxwjH48GtpGjFx5cuHgsgNMoD0k0bvYzd5Y7Pgdm1yl0MjUiz%2BhIvISN1mM1rtw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6b6f185687-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10941,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10941), with no line terminators","md5":"cb2e0fe2fe90d7572bf48419ecf1ee65","sha1":"285568da5113f9203628287222cfbb469d0c2171","sha256":"b3a3eb6e06b9f50fb0a3434a8c4033a496d5d37b6abaa83eb02b41ec66204de0","sha512":"aaf6f30c7416272b988359b824ec051b355873263050aad4f38f16be69ff6711ed87c1cabaee3df9a3698a1cf8cb0b88d64dd7f16265615c7459b88aaf3871e0","ssdeep":"192:tYW2LGjsoTMTATznpTMTATePTMTATPTxrRTMTApv+x5VQRMOBR:qtLGcIz5cIeLcI7zc3rV+z","tlshash":"1c32133294896425f62bcdb6b250bbdd711882a3d9135bfee4b9f5f5da930e20072309","first_seen":"2023-04-27T00:22:24Z","last_seen":"2024-08-21T06:25:51.816232Z","times_seen":196,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happy-u.vip/free-spins-ke%2Fjs%2Fjquery.min.js","fqdn":"happy-u.vip","domain":"happy-u.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:16.789Z","timestamp":1701806896789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happy-u.vip","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Oct 2023 05:54:28 GMT","end":"Wed, 24 Jan 2024 05:54:27 GMT"},"fingerprint":{"sha1":"60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4","sha256":"CB:EF:2A:2D:BF:92:4C:FE:55:69:F1:BE:FA:77:6F:04:3E:9A:33:0F:B5:05:C7:0B:6D:BD:A4:22:A3:C2:E9:72"}}},"request":{"raw":"GET /free-spins-ke%2Fjs%2Fjquery.min.js HTTP/1.1\r\nHost: happy-u.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/free-spins-ke/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 20:08:10 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: +Fy3AmIpRj2BKz7Xwpph5k0hSAayTFaobu8Ue470V18b6x3fX1GOfRVAXJoAZ2CvIAtSvPW2DnM=\r\nx-amz-request-id: 6SX6MYRSASCVH1PZ\r\nlast-modified: Thu, 02 Jun 2022 12:59:31 GMT\r\netag: W/\"723e11a50995eef960d59451910e2cb4\"\r\ncache-control: max-age=2592000\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=eD2Y2CDyuUIstW%2B3FrZvsd1n6TbsaSpO%2B%2BQ3iW35r0ffae97%2FdhAYmR1foJK4Kx6LpMg4AkFA%2B6qEENEPIiktfzWPbUgpRHbuMPZdu3wBKJK0MnF8%2BHwjD%2F4k1UqGw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830eeb6b7f3a5687-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97099,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (32063)","md5":"723e11a50995eef960d59451910e2cb4","sha1":"76e617c6f9bad2602bdea1c20d50ba7c89a55097","sha256":"ae34fd2197cffa02b5b7a753c262c1bbb3560afb92e403a1d59e935d8a320b41","sha512":"c20c91a8b57251913660b7fa832c4f6d81717516897c0c7a706051b6592c028a2a8490927f910d958238585329091e6a264d9f1c6adaa6de53f2d6e65676a05c","ssdeep":"1536:BYE1JkoiB9JqZdXXe9JJ3ygoIq6zrU5SFc/VkZ4BptqGgPaS9FPwlLRv5PpSELIb:n8pMPTpt/0auFPwlLjLhoVQx4a98HrF","tlshash":"bf93d7d9b6d6706287b734a851bf410bb17a98dab80c4ca0f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-18T15:11:55.264935Z","times_seen":398,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oungimuk.net/pfe/current/micro.tag.min.js?z=4336991\u0026sw=/sw-check-permissions-77596.js","fqdn":"oungimuk.net","domain":"oungimuk.net","tld":"net"},"ip":{"addr":"139.45.197.251","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happy-u.vip/free-spins-ke/","date":"2023-12-05T20:08:17.227Z","timestamp":1701806897227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oungimuk.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Sep 2023 05:45:36 GMT","end":"Sat, 23 Dec 2023 05:45:35 GMT"},"fingerprint":{"sha1":"52:49:91:AA:04:62:59:A1:7D:AA:95:42:75:F3:62:7E:D8:66:82:DA","sha256":"39:8E:EE:A2:7E:6A:12:39:64:9B:A6:3D:B0:D9:A3:39:74:79:6E:C7:91:50:57:71:92:B0:72:13:F4:2B:CF:DB"}}},"request":{"raw":"GET /pfe/current/micro.tag.min.js?z=4336991\u0026sw=/sw-check-permissions-77596.js HTTP/1.1\r\nHost: oungimuk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://happy-u.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 20:08:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Nov 2023 17:44:23 GMT\r\netag: W/\"6564d577-697f\"\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27007,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27007), with no line terminators","md5":"5ccd2d5882a06f293d07510ac91c92e6","sha1":"b44dc0eaa03981adb70d3313e728f9359c1d21c1","sha256":"9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba","sha512":"fddc1b3dbd07ff0fc03156101d5db8b8f3dd5f61c44e1a6c48ba6c50132dbfd32f9dda05f4aaab1bf2791de55a019f5f991a93282ad6cac1f89de5f5b7d8c535","ssdeep":"768:EbCTuXSpS9v04L37efBm+Zv2bN3H1CXQR0wZWbIJh1UMmvjCeZskk4Nci0:nML37efBbvkZDaOocJ","tlshash":"71c2b7b6f86db86423e12cc7543f1148657ad5a9fa6a74f0d1096ab2347200bb2f3fd4","first_seen":"2023-11-02T09:44:53Z","last_seen":"2024-08-20T21:23:50.961937Z","times_seen":8998,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":109,"dns":23,"connect":33,"send":0,"wait":38,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}