walter-larence.com/930d73d8-518c-4b72-abde-919d336d6369
18.193.146.82302 Found 0 B URL User Request GET HTTP/2 walter-larence.com/930d73d8-518c-4b72-abde-919d336d6369
IP 18.193.146.82:443
Certificate IssuerLet's Encrypt
Subjectwalter-larence.com
Fingerprint68:03:79:D9:A0:7F:E4:02:56:2B:FE:6D:ED:3E:B4:E7:06:A6:D4:84
ValidityFri, 24 Nov 2023 06:53:56 GMT - Thu, 22 Feb 2024 06:53:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /930d73d8-518c-4b72-abde-919d336d6369 HTTP/1.1
Host: walter-larence.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sun, 03 Dec 2023 16:33:04 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://happy-u.vip/free-spins-ke?cep=4UOO6wsYzYI-xdrSS5XdKY0DDeDQLb42tMEexfD99VBTexOru1sutvUbJY49zfi-tOI3uU2PeB2Z-PoVxB_Y4DcxlTxZJ2tom6obzN7ibaJNk4JNixqxSmzhafnq_fxtSJRb_X6RnMALnHcHOqcYm_zcsob_Ijk32dJn6aosFtVLTPVT6V3ynw9dKND9K2X_bYJGYKg2Y6YMYXFlPbPE34lIP8qyd0sgbapHFcVwca9u16VVOXMl68fkcWz2z_DYWYUU4yRHJN4TyLl8qxR4UjhZpHM6vUUOEBzQVA7aq7k77KtvCht8wGctKV3p-yQUTGc8KGwc0vyagWyuDaYNz_bUmWnyrO7TMDKidzPn7fxjeGCMAgkQkzOf7DZi1fdB&lptoken=1744016c622a29f984a1
pragma: no-cache
set-cookie: 930d73d8-518c-4b72-abde-919d336d6369-v4=nNgZfBU2zR21WZaNuSYNYyhpGKI0ZYnJiBboG6Z-HGU; Max-Age=86400; Expires=Mon, 04-Dec-2023 16:33:04 GMT; Domain=walter-larence.com; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=SIen0Vhow3AXZ-kYu8tHfixDJ3wNnk_egnhs0nUsFdaMh2nTP0U6kTHu-t0IF-DBB-22poQ3X8p9OybMiUjSvc5jpu3IP2V6FUQ8UeuW1KiiJvfnkw7b5DjowXwnmqog1Us0-TqjLOPxjRYElK1-26vvKqKGmelhnm29JdSzgHvzRh1fEW7RlzMpg2_RneJsHz7lnn-NY8uIo-UP5lK4xsJsufpfgxnOizlOGjleCG8fc4eqotWvnes79dsp28LmswcnJnFBzrfbWlOo6ErK8vwAln8REJteFse2Kc2Q5lQTvP4YXEnd_2NfbRA4VKMBJRJnhB5H80pvR9LD8R5GvqTe5SrB1RP8aIOWLRPSNiY9rycq00eo52V1gd04aJgW; Max-Age=86400; Expires=Mon, 04-Dec-2023 16:33:04 GMT; Domain=walter-larence.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fimages%2FCA.png
188.114.96.1200 OK 36 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2FCA.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash d94d1d2fc9120c693a66d99b01362e24
465d9725e53ec9a6e4bf2a8e26fb4b5b7e01562d
0b5f254d8aba31c96211fbd731c9f5984973c203135435f5430cf05c542b5b70
GET /free-spins-ke%2Fimages%2FCA.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 16:33:04 GMT
content-type: image/png
content-length: 36535
x-amz-id-2: 7HfX9lbJ7Cmg6mH4DLb5XwhU+HjntwxWo8PyphUBBhZMK1nmtIYHOgLhpPiItXeGRQ3iw4snQfo=
x-amz-request-id: 6DWEP1G0E02KWVDZ
last-modified: Thu, 02 Jun 2022 12:59:31 GMT
etag: "d94d1d2fc9120c693a66d99b01362e24"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GL5DXc9NzKfsXJYG1H6t%2BeroRFmdSXM51fyN4G01khGDD9cGCFB4laS7XXeWKcytNGLoQmL8FEgj2GzD0OLg8dcSsu%2BIU9kC5NC1bVxQXyPDVUD2hTjuv1ZC6q4tWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd35957e33b4ed-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-start.png
188.114.96.1200 OK 26 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-start.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash f491647556e492de92530b48827690aa
6296c44299f5acb17cb2c06e37391a70672b1fd3
efb819d37f19ec7505d9602488ce97868d84e1c7929ce83e308e23f02d97b95d
GET /free-spins-ke%2Fimages%2Fslot-start.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 16:33:04 GMT
content-type: image/png
content-length: 26084
x-amz-id-2: HoDHrjce/VcUU2zhtpaxwQMlFMDYwWay3DqWtxcO7JGbjsNHPukTFTtad9pghVuRvpDzJffi4f4=
x-amz-request-id: 419H7YTW900JZRM6
last-modified: Thu, 02 Jun 2022 12:59:33 GMT
etag: "f491647556e492de92530b48827690aa"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6jvzE8dVaaJl6RR9MWV2%2BmziyU5Ty8UUuayxBcJzAG%2FVNgThI7SRYha2rfIziJwoKVrK0SgHOiJumRq06UnWe9u0bTvqjq20EJTCU0hwR58LeU3mJ0Y6GZGzEE%2FZyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd35957e35b4ed-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke?cep=4UOO6wsYzYI-xdrSS5XdKY0DDeDQLb42tMEexfD99VBTexOru1sutvUbJY49zfi-tOI3uU2PeB2Z-PoVxB_Y4DcxlTxZJ2tom6obzN7ibaJNk4JNixqxSmzhafnq_fxtSJRb_X6RnMALnHcHOqcYm_zcsob_Ijk32dJn6aosFtVLTPVT6V3ynw9dKND9K2X_bYJGYKg2Y6YMYXFlPbPE34lIP8qyd0sgbapHFcVwca9u16VVOXMl68fkcWz2z_DYWYUU4yRHJN4TyLl8qxR4UjhZpHM6vUUOEBzQVA7aq7k77KtvCht8wGctKV3p-yQUTGc8KGwc0vyagWyuDaYNz_bUmWnyrO7TMDKidzPn7fxjeGCMAgkQkzOf7DZi1fdB&lptoken=1744016c622a29f984a1
188.114.96.1302 Found 94 kB URL User Request GET HTTP/2 happy-u.vip/free-spins-ke?cep=4UOO6wsYzYI-xdrSS5XdKY0DDeDQLb42tMEexfD99VBTexOru1sutvUbJY49zfi-tOI3uU2PeB2Z-PoVxB_Y4DcxlTxZJ2tom6obzN7ibaJNk4JNixqxSmzhafnq_fxtSJRb_X6RnMALnHcHOqcYm_zcsob_Ijk32dJn6aosFtVLTPVT6V3ynw9dKND9K2X_bYJGYKg2Y6YMYXFlPbPE34lIP8qyd0sgbapHFcVwca9u16VVOXMl68fkcWz2z_DYWYUU4yRHJN4TyLl8qxR4UjhZpHM6vUUOEBzQVA7aq7k77KtvCht8wGctKV3p-yQUTGc8KGwc0vyagWyuDaYNz_bUmWnyrO7TMDKidzPn7fxjeGCMAgkQkzOf7DZi1fdB&lptoken=1744016c622a29f984a1
IP 188.114.96.1:443
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
Hash 1dbcb703ede3be0d31b0a200e33c5e5d
5c2473e7fc38939b0ab73bbbabe249c279f71d72
132c660b7495ad04d40e72d35a404d453e4f41ea73d548c876f19418c668b294
GET /free-spins-ke?cep=4UOO6wsYzYI-xdrSS5XdKY0DDeDQLb42tMEexfD99VBTexOru1sutvUbJY49zfi-tOI3uU2PeB2Z-PoVxB_Y4DcxlTxZJ2tom6obzN7ibaJNk4JNixqxSmzhafnq_fxtSJRb_X6RnMALnHcHOqcYm_zcsob_Ijk32dJn6aosFtVLTPVT6V3ynw9dKND9K2X_bYJGYKg2Y6YMYXFlPbPE34lIP8qyd0sgbapHFcVwca9u16VVOXMl68fkcWz2z_DYWYUU4yRHJN4TyLl8qxR4UjhZpHM6vUUOEBzQVA7aq7k77KtvCht8wGctKV3p-yQUTGc8KGwc0vyagWyuDaYNz_bUmWnyrO7TMDKidzPn7fxjeGCMAgkQkzOf7DZi1fdB&lptoken=1744016c622a29f984a1 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 03 Dec 2023 16:33:04 GMT
content-type: text/html; charset=utf-8
x-amz-error-code: Found
x-amz-error-message: Resource Found
x-amz-request-id: 8APH6ZYGPTCN23FD
x-amz-id-2: 1aKV2b9QmI9DPsajqMz5/2U9B/OEqQpA18R3HdmaNn/rGz5k36fDuBE2yNuXwl55PtZhH3fh1f0=
location: /free-spins-ke/
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A7aYtI%2BwiIlsGC5VruKfxDCJ9hOPGDvUuJoV6CJ4Cto9wsUSpAFh6egtFhAf1CxnnLI5AQ5ERmybZLj%2BIMZ1qFo8uVzKOXIgkA53iCDeSc5iGe7gUHZTrs4dAv2Wdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd3590fe9d5685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-1.png
188.114.96.1200 OK 20 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-1.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 1fbd2b26e61236d5bcfdfeb6adbd2c8c
c9034272d28dab018b73f1967a679c734f987a1f
c402c36eb8d623b618261d40846e63c130de1e78720ab5578eae1d645198c963
GET /free-spins-ke%2Fimages%2Fslot-result-1.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 16:33:04 GMT
content-type: image/png
content-length: 20370
x-amz-id-2: HkwJmvNgaOkjw1PA9RpupDjH4UkIsuIFFHorbuyA0s/u8YOJYS/8HbAu7MBYrKW6DR4MMnGLRNo=
x-amz-request-id: CT282MX3CJX4HS43
last-modified: Thu, 02 Jun 2022 12:59:32 GMT
etag: "1fbd2b26e61236d5bcfdfeb6adbd2c8c"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JD31XE%2Ftv0PknXi3ZBoJmYVQoHzGmaFLQhmEIHToIpaCmkaWuuG6gXY4vct4yxmRVm%2Fb7tzCmKy%2B%2FL%2BKylPZxEYAf7HNo4HKXUCsX8uYTBvjaggVTtOakTjcqJjU7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd35957e3fb4ed-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-2.png
188.114.96.1200 OK 27 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-result-2.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash b6ca0bfea4d0cec334f128f5c2c44cff
f6dc006902542a929187af718d9f6a244e5472b5
b09b477eb93ed896b8e52a2f746e435695dbef2a1259987bae4fbea3c35b5435
GET /free-spins-ke%2Fimages%2Fslot-result-2.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 16:33:04 GMT
content-type: image/png
content-length: 26733
x-amz-id-2: y7wLKizm6HURVWdAVwQkz+/JUOUvLy8yLpQspIqxekaIvZtO8L5P+1Vnib608WLCDxZycK5BrgA=
x-amz-request-id: X3RZ50XRVGY8RAGQ
last-modified: Thu, 02 Jun 2022 12:59:32 GMT
etag: "b6ca0bfea4d0cec334f128f5c2c44cff"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uAB8s%2BguUVwu%2FKUy735cOuFeIRwOP1zUBo3L9jPYJe2sBOc1J%2FAHexEplCDMs6MLneafuWCx4T3A7fWmfMVRSRZ%2FDpmYQ1drIQpN%2BeE0tbpUGL0wDhYgbWpmarlC3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd35957e4eb4ed-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fslot-win.png
188.114.96.1200 OK 14 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-win.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 939b6a73c96383ac0842317037f3a0f0
0654b62431c8ba522833950b8166d7a16e2a6b56
b8f1ec0ac028bd024af2cf57b63b07069b2f4a41e61c1577e968ca5d7ba72837
GET /free-spins-ke%2Fimages%2Fslot-win.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 16:33:04 GMT
content-type: image/png
content-length: 14391
x-amz-id-2: SLS92mdgsZig22sKXdMlx61oNkcnPCOsDPl2yf9nlHeKlmdHBv31DymwVlgV3hZGvUcqibOQ9/w=
x-amz-request-id: X3RSNTGS2ZHA3T7H
last-modified: Thu, 02 Jun 2022 12:59:33 GMT
etag: "939b6a73c96383ac0842317037f3a0f0"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U1nJCDUGYBgmt0BKfPXDWAqxiUT2bRmmTi%2BZNr6n3nVhdhvk28P8uaRBH8KIxCgzn4OiT8mfjOCTPm%2BW2UxQNzAQ2gFt8JRCZ0w1e4NIokT83c5ZgfDk2M7uhLaXcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd35958e62b4ed-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-left.png
188.114.96.1200 OK 1.3 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-left.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 92d3e482cacea857c5dfaf9fa3a21dfb
3f12c410c77d763cc4719ec367a18417b8300758
4a688dc66588e8e86e98ccadb318fa2aca3fd6e2444aac783278b982f3e47eef
GET /free-spins-ke%2Fimages%2Fred-arrow-left.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 16:33:04 GMT
content-type: image/png
content-length: 1334
x-amz-id-2: cuAeLnowYMiq1EmmJ4BhIp+Rt3+z3Um4UQeJGOcYWOF+lsq0OUwBC9nJ4oTmn1HVNSxPdKViVv8=
x-amz-request-id: GP1PCHRTR4CJBEZ0
last-modified: Thu, 02 Jun 2022 12:59:33 GMT
etag: "92d3e482cacea857c5dfaf9fa3a21dfb"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WMgWTmLyZRyUlHBu95EW8d7EJiAEfE%2Fjpt0uDBgTLI0b3vjCR%2FOEeJOFKgBRtJ1TrrJMHxWpaxlzA2c5AdKUmtxMr65jHRZn01didHar6B%2BXwHrHSKLjAdo4CZd5kg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd35958e65b4ed-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-right.png
188.114.96.1200 OK 1.4 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fred-arrow-right.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 881bdc037be8895ba5d8d53456890e7e
4e105c89e2a1475520bb74c9c20bf2f9e906fcb3
9f8160d6380fef91c8eadecc6e8e59e93e3f5c40be7963018c8104bef4354d8f
GET /free-spins-ke%2Fimages%2Fred-arrow-right.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 16:33:04 GMT
content-type: image/png
content-length: 1362
x-amz-id-2: rA+THcGluV8iaCuG49rRNzuSRWHzh/dl6oeyLu7l/+AtibJSZUzwUDBiwme78ZXP1nxauTteozk=
x-amz-request-id: X3RXXNNTXQ7Z5AB6
last-modified: Thu, 02 Jun 2022 12:59:32 GMT
etag: "881bdc037be8895ba5d8d53456890e7e"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jR9%2BqvuOVG%2FoFEn5ugsMRoWXHFKYYq1o%2F3F3jKpva5%2F%2BTU9JmvKJ%2BrGIgTdDiBAFQuVzjEI4FLzZ%2Fwvv%2BMREUb%2BWgnZLDqKzOYfA4n%2BEA1tCO54Dh%2FwnFNoEsEpy5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd35958e69b4ed-OSL
alt-svc: h3=":443"; ma=86400
assets.landerlab.io/base.css
54.230.111.125200 OK 8.7 kB URL GET HTTP/2 assets.landerlab.io/base.css
IP 54.230.111.125:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerAmazon
Subject*.landerlab.io
FingerprintCA:55:A0:91:66:D2:49:1D:74:D9:90:B0:7E:D2:4C:B1:3A:0C:10:78
ValidityWed, 28 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (8731)
Hash 7f6de4e86d84bcbfd919f155e7545439
e7d9a7a418519c3fbce6de3c85775087cba93b49
8d8c59c2712df25a26ecd01739496e49c3514a9341fa3cd21cfa98627ba6efa2
GET /base.css HTTP/1.1
Host: assets.landerlab.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 8732
last-modified: Sat, 29 May 2021 19:05:04 GMT
x-amz-version-id: 0sEXTlrAazg9KkJm7sv1lqt808WfgxiL
accept-ranges: bytes
server: AmazonS3
date: Sat, 02 Dec 2023 20:00:22 GMT
etag: "7f6de4e86d84bcbfd919f155e7545439"
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ux8VbR6NfjzG7Hch3PV8yHncUZe9g3d05Uw5kCZsOPikfsb-XL5LCw==
age: 84293
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fsounds%2Fwin.mp3
188.114.96.1206 Partial Content 22 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fsounds%2Fwin.mp3
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural\012- data
Hash c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56
GET /free-spins-ke%2Fsounds%2Fwin.mp3 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sun, 03 Dec 2023 16:33:05 GMT
content-type: audio/mpeg
content-length: 22067
x-amz-id-2: N5y/38boThQEmPJ70pl/Ze243Y8rl1TYMHEmehKME6KUr+j1zPqcITyLH1UlJWFbWaIh+mT6ZeA=
x-amz-request-id: GQ86GW87FJCCRPF9
last-modified: Thu, 02 Jun 2022 12:59:34 GMT
etag: "c74dca6a3ab16c097234033fec7a8573"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
content-range: bytes 0-22066/22067
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lsNADDllaX5kqrAsB8nSEUknSF6GewTtJ96cAuGDwMlPFsYymb1Ae737%2FZ%2FX%2BPiRdmCm86LXhX2VcQlNUEzmC%2BH5rXPrA%2F%2Fx5dkh%2Bio1DL5XW%2BtpST1wmroEfBg7gg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd35986a37b4ed-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fsounds%2Fspin.mp3
188.114.96.1206 Partial Content 51 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fsounds%2Fspin.mp3
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo\012- data
Hash 390bca8d165546a8097b8951d2f400d4
1385d88b3aeee07bc51e7955fbcb9ed7586ebdec
cdb080d348cd2222fbe1d5b54da2f9db8fdca881570a9c82899082203b000b78
GET /free-spins-ke%2Fsounds%2Fspin.mp3 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sun, 03 Dec 2023 16:33:05 GMT
content-type: audio/mpeg
content-length: 51290
x-amz-id-2: CANkmzF5RFkOGQsEBlljct0vxETiOOOg5xxoxuF9mmxLFo+4lYfLT8W2lffGlbDuRXHvZS2uzk0=
x-amz-request-id: 2EKB7RW82RKJMT05
last-modified: Thu, 02 Jun 2022 12:59:34 GMT
etag: "390bca8d165546a8097b8951d2f400d4"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
content-range: bytes 0-51289/51290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BTYIcppzmn5R2D94fNlsD%2FH4dV0RLCl4wLrRtGFV%2FVqWL6QK7eX9dHTNQJDIcLAX4WNOff7VwLmiwmxFdNxrAL5H%2FlsqXI4s8o6thFYBY4PMCfErhO812YhXSaYHkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd35986a3ab4ed-OSL
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke%2Fsounds%2Falert.mp3
188.114.96.1206 Partial Content 8.8 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fsounds%2Falert.mp3
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc
GET /free-spins-ke%2Fsounds%2Falert.mp3 HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Sun, 03 Dec 2023 16:33:05 GMT
content-type: audio/mpeg
content-length: 8802
x-amz-id-2: whUT3PMNyu53r8qqyzWZchvIZ8+SZEIdIdurny2pEifqB7VNawBbqc5/mTE+3g1qv1cG0nCifPQ=
x-amz-request-id: GQ871E5GFDRBDJYA
last-modified: Thu, 02 Jun 2022 12:59:33 GMT
etag: "6d2d3da2ea28ace816fa4a138829dc18"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
content-range: bytes 0-8801/8802
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bxSTO7EGmeCTQGUBxME4OAAeefHEDNDwhzT0VSdD6RaFvwF4N0%2BMUq5qoWCt7oK5dcfOPulS5kQrOr3fVv5eHW9ab9MD%2Fjv6Ft%2FAt3yMWbRh62ZSipCsdoQgnBQXww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd35986a36b4ed-OSL
alt-svc: h3=":443"; ma=86400
notix.io/settings?appId=1004e573f6298b494995e0539d8329e&ver=0.15.19
139.45.240.92200 OK 327 B URL GET HTTP/2 notix.io/settings?appId=1004e573f6298b494995e0539d8329e&ver=0.15.19
IP 139.45.240.92:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjectnotix.io
Fingerprint68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D
ValidityFri, 15 Sep 2023 11:38:16 GMT - Thu, 14 Dec 2023 11:38:15 GMT
File type JSON data\012- , ASCII text, with very long lines (327), with no line terminators
Hash bf0f59f119686c0890d2a8be8df6cb23
f232d08bf915c9010c041dd6500398d997446f70
10af8d0b199fb5fc141f14782014cb5ba7e1bfbfbc8f3459a62ab3024bd28fea
GET /settings?appId=1004e573f6298b494995e0539d8329e&ver=0.15.19 HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy-u.vip/
Origin: https://happy-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 16:33:05 GMT
content-type: application/json; charset=utf-8
content-length: 327
access-control-allow-origin: https://happy-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
track.landerlab.io/p/606dc316bd12e800113ca177?lander_id=1e08f60282cd55a61321314ef22873f5
104.18.17.6200 OK 0 B URL GET HTTP/2 track.landerlab.io/p/606dc316bd12e800113ca177?lander_id=1e08f60282cd55a61321314ef22873f5
IP 104.18.17.6:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerCloudflare, Inc.
Subjectlanderlab.io
FingerprintE5:19:57:65:1C:8A:4A:59:2F:10:FC:CE:EC:7C:74:C3:C9:6E:04:49
ValidityFri, 07 Apr 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/606dc316bd12e800113ca177?lander_id=1e08f60282cd55a61321314ef22873f5 HTTP/1.1
Host: track.landerlab.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 16:33:05 GMT
content-length: 0
cache-control: no-cache
set-cookie: worker_cookie=N4Igdgpg7g+gFgSwC4wQExALhARgCwDsBATABxoEC0ArAMbUDMleARhZaayxzkabQDZiEagE4WIADQgAbggDOyVBmw401AAy1iBAIY1WVPDgbUOulqI4RRBAaN21dpPVNkKlSBAFsI8pLreAA5YIMQaxEw4xJQaDAAqOAKYDAyYGtQAdHjEogBabnKKSAD2AE7KoRosLAK6xHgAZpQ6xDjMjfaUooRUNngRApYMjQwS0k7BuggA5mCV2AIaAmi0DEls0RCkGho4Jk68BG5gJWgQMLRw02BYANoAutIKMJBQWI26ADbyEAC+QA===; Expires=Mon, 04 Dec 2023 16:33:05 GMT; Domain=track.landerlab.io; Path=/; SameSite=None; Secure
__cf_bm=E4WqcLq7uIu40dK37wpdLV_2vvIsjBPXs8WgGnQ4K2E-1701621185-0-Af+6Hr+o9JraEOE6V0TWZDVrqM41a3jsAT/LCO+o+6HvjWc+nG+q1yDPPc4Afn/XA+1sP+jnA5zYzcnScNmpMX8=; path=/; expires=Sun, 03-Dec-23 17:03:05 GMT; domain=.track.landerlab.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd359889265697-OSL
X-Firefox-Spdy: h2
oungimuk.net/zone?&pub=0&zone_id=4336991&is_mobile=false&domain=happy-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
139.45.197.251200 OK 0 B URL POST HTTP/2 oungimuk.net/zone?&pub=0&zone_id=4336991&is_mobile=false&domain=happy-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
IP 139.45.197.251:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjectoungimuk.net
Fingerprint52:49:91:AA:04:62:59:A1:7D:AA:95:42:75:F3:62:7E:D8:66:82:DA
ValiditySun, 24 Sep 2023 05:45:36 GMT - Sat, 23 Dec 2023 05:45:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4336991&is_mobile=false&domain=happy-u.vip&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://happy-u.vip
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 16:33:05 GMT
content-length: 0
x-trace-id: 471a6f7c69e407be675e22116994ffd1
access-control-allow-origin: https://happy-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fcss%2Fstyle.css
188.114.96.1200 OK 11 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fcss%2Fstyle.css
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (10941), with no line terminators
Hash cb2e0fe2fe90d7572bf48419ecf1ee65
285568da5113f9203628287222cfbb469d0c2171
b3a3eb6e06b9f50fb0a3434a8c4033a496d5d37b6abaa83eb02b41ec66204de0
GET /free-spins-ke%2Fcss%2Fstyle.css HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 16:33:04 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=13222
etag: W/"538445a521226e69b9c4231a52ad5e79"
last-modified: Thu, 02 Jun 2022 12:59:32 GMT
x-amz-id-2: +tU/BSjpobN5fvgg4wbFtFDaM4FffXnvWyWIt/wRCaXZvbEE8/AYYKyFUHkg8lmafVlTXG8ppho=
x-amz-request-id: CT27F2CRHJX957PP
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ANnTOYQbggzFXq5TzG0XhqG0kVptF62%2FUH%2BkxIdFKm2GnVZ%2F9CHr07NatvApqs7GqyVaM1Y9prC2mw5%2B5wnYweWqcs%2FsPZa0ICkTK0zSIN3kFxascRJoVyE08GIWcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd35956e30b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
oungimuk.net/pfe/current/micro.tag.min.js?z=4336991&sw=/sw-check-permissions-77596.js
139.45.197.251200 OK 27 kB URL GET HTTP/2 oungimuk.net/pfe/current/micro.tag.min.js?z=4336991&sw=/sw-check-permissions-77596.js
IP 139.45.197.251:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjectoungimuk.net
Fingerprint52:49:91:AA:04:62:59:A1:7D:AA:95:42:75:F3:62:7E:D8:66:82:DA
ValiditySun, 24 Sep 2023 05:45:36 GMT - Sat, 23 Dec 2023 05:45:35 GMT
File type ASCII text, with very long lines (27007), with no line terminators
Hash 5ccd2d5882a06f293d07510ac91c92e6
b44dc0eaa03981adb70d3313e728f9359c1d21c1
9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba
GET /pfe/current/micro.tag.min.js?z=4336991&sw=/sw-check-permissions-77596.js HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 16:33:05 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 13:38:02 GMT
etag: W/"65649bba-697f"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fjs%2Fjquery.min.js
188.114.96.1200 OK 97 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fjs%2Fjquery.min.js
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (32063)
Hash 723e11a50995eef960d59451910e2cb4
76e617c6f9bad2602bdea1c20d50ba7c89a55097
ae34fd2197cffa02b5b7a753c262c1bbb3560afb92e403a1d59e935d8a320b41
GET /free-spins-ke%2Fjs%2Fjquery.min.js HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 16:33:04 GMT
content-type: application/javascript
x-amz-id-2: mZ7+FMZog6Diy6fVKiAaFjWbCqWwV7MQPf86ZZuy0kO7F2a3NBjmDNrMLE3NQn63J9nS+ii/Pjw=
x-amz-request-id: X3RJ2MSDQJCMJ84E
last-modified: Thu, 02 Jun 2022 12:59:31 GMT
etag: W/"723e11a50995eef960d59451910e2cb4"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q2Xk4VYAzk2QkLFwbZ02%2BxHbM8g1ElN58bnJeLFltirhT4A321pDI91ndkNJbh%2BjwxZ62c2%2BKV%2F1sZTgdEx2ltT5PMyOAEERANFvt3NGPX9vQMesFbmJZ8QjjxvUNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd3595ae7ab4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
happy-u.vip/sw-check-permissions-77596.js
188.114.96.1200 OK 443 B URL GET HTTP/3 happy-u.vip/sw-check-permissions-77596.js
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type ASCII text, with very long lines (462), with no line terminators
Hash f0543799885fb5c86ac7c6bc29b508bc
ac3e9ae5ba4844ecfc9865ba1e7a9fbd32903eca
cb3fae5a8368bfba7e04d0df02732899f4edf1fd4e69a99938350a91bf590a32
GET /sw-check-permissions-77596.js HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 16:33:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=566
etag: W/"44d972e91b04c00bb67c0a08024625c4"
last-modified: Wed, 24 Aug 2022 13:50:20 GMT
x-amz-id-2: LniQnjFwRDJGl/Qzaa2mly7RbyC4H4tl4CPXKpoNV9oL1FTvvyS1oqO+27uzpRZRbYnnhToJrYs=
x-amz-request-id: 2EK3NV8G3KFHB4Z7
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jBjdoiCSTW3bm3cPuS4xFUFYnBFWnAgZ%2BTkjx5eyy8vneQ3aXipALeSGjZdafJXVYN%2BC1fFEu9ykwGEKLaRl4aU9dfKjntEWlrP%2BmrVLnyb5%2BaDNRApiAJx61XBX0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd359a3d39b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
notix.io/ent/current/enot.min.js
139.45.240.92200 OK 145 kB URL GET HTTP/2 notix.io/ent/current/enot.min.js
IP 139.45.240.92:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjectnotix.io
Fingerprint68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D
ValidityFri, 15 Sep 2023 11:38:16 GMT - Thu, 14 Dec 2023 11:38:15 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 145 kB (144887 bytes)
Hash 5ec57c87dbac3f07e59e5d74ae3421e4
70121f1541a1961d7b87544001d612f18ad04243
e1d529afcbb911c99bb039ba39c7fb6716275b97650ae816a90fc03f256542bb
Analyzer Verdict Alert Public Nextron YARA rules malware Unique code from Jetriz, Swid & Jeniva of the Tetris framework
GET /ent/current/enot.min.js HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 16:33:05 GMT
content-type: application/javascript
last-modified: Wed, 29 Nov 2023 20:55:06 GMT
etag: W/"6567a52a-235f7"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
happy-u.vip/images/arrow.png
188.114.96.1404 Not Found 351 B URL GET HTTP/3 happy-u.vip/images/arrow.png
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (365), with no line terminators
Hash 13bcdaf09ea93120d1f4355319888fc5
04ceff087021a6ba02d43218ea025afcef2fefa6
c03edba84f253bb0362c15e6c65a50bcfac991642fc6f3945fa25498d738e628
GET /images/arrow.png HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke%2Fcss%2Fstyle.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sun, 03 Dec 2023 16:33:05 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: XM20XAQ7HPZA22X5
x-amz-id-2: BzMxhnfAFUfvTiZ10Hlk/Lp3OLnleYIApYtblDDyZD6STBIv8Bkza/I2oItym+CzBpJhyLXHmfs=
cache-control: max-age=2592000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lbdvj%2FmZwW7CNi2rU6PzxNCHp4wHmTcDMTT9DMFgPK%2FBEaowoIpjNF0TrcF20tOastfQk7daPbnGJFHdfqX0%2BXIfzidDFIdS0dLKIcsuAqTIgL16tMoN%2BXtwUliHjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd359758ceb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
happy-u.vip/favicon.ico
188.114.96.1404 Not Found 346 B IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (360), with no line terminators
Hash cc13305b3d758564121d4db172e39991
789d9003a32eacfc0ae938810e29ff9e7c17933b
72c8ce5706fad7ea16c43ef342e70863943bc3931cd18dbbf9977210c37d4734
GET /favicon.ico HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sun, 03 Dec 2023 16:33:05 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: XM2DS3NDV5YBQC3G
x-amz-id-2: wPhIVci21/aIN+dPsrGkzIU07yCcymeVL+7jMY3DUSrqn/XXrMz9KbfGnfGcw+DBtzdhxH0hmPU=
cache-control: max-age=2592000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VaxBUnyWxei7yuyovE9iZ22leRHTvqHY%2FC4LshNnqoWLDlbhphdSjFN0%2FAUZpRUkdl8vHaV2OINTMbsLHqVNOLQ1Z3B%2FyHw1T1abQ%2B02rocXyi8uY9iIsZOeKAC8iA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd359a3d35b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
happy-u.vip/free-spins-ke/
188.114.96.1200 OK 22 kB URL User Request GET HTTP/2 happy-u.vip/free-spins-ke/
IP 188.114.96.1:443
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3238)
Hash 153504c8e5f4dd8f207b65a4e299bb16
6eaa94ee7283551988a0e50fc018d1d262d9d69a
9f2ce1fb98a5f899d3ed7c56fab134ee414f6d4d190b92f59d1bea21add46917
GET /free-spins-ke/ HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 16:33:04 GMT
content-type: text/html
x-amz-id-2: CDs6GMIDfinplf6kRrddbe6a2MTL4awsaQuLveun9kpL45H3CEwpRB/Ki9X6crXsyiKjWslkWbA=
x-amz-request-id: GP1TPKBAJ2ENYY9F
last-modified: Wed, 24 Aug 2022 13:49:50 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zghNSE0CBUeYZ5ZQmPTJLuH9asGdiq19gq5W9rkvG3H3jc%2BMDhe2SATSSMQpv8atycLoAF3CzIUhXOOXNQq2tKimc20%2FmbpbeT9Xg%2BgQd14OlWLOb4bHrphvFiwj4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd3591d8375685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
happy-u.vip/free-spins-ke%2Fimages%2Fslot-spin.gif
188.114.96.1200 OK 88 kB URL GET HTTP/3 happy-u.vip/free-spins-ke%2Fimages%2Fslot-spin.gif
IP 188.114.96.1:443
Requested by https://happy-u.vip/free-spins-ke/
Certificate IssuerLet's Encrypt
Subjecthappy-u.vip
Fingerprint60:D2:E0:0E:6D:F6:F0:3F:A6:B5:F1:91:7E:E3:90:90:29:80:0A:E4
ValidityThu, 26 Oct 2023 05:54:28 GMT - Wed, 24 Jan 2024 05:54:27 GMT
File type GIF image data, version 89a, 410 x 279\012- data
Hash 617c16c5e04c8603dd7f157862b1c682
1306296f9a666a7fc50f339a2a924ce8a3a18169
7f8e36cf7ac437d7c42440ef5f522c8e27adb06348b573192308038fa7c1dc7e
GET /free-spins-ke%2Fimages%2Fslot-spin.gif HTTP/1.1
Host: happy-u.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://happy-u.vip/free-spins-ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 16:33:04 GMT
content-type: image/gif
content-length: 87599
x-amz-id-2: mCh89CwmCzbWod4ck4O3wABtTAli/lNbG0dVvfKhM4+/gzKdlmJGgcKeWuI0Oq4ZLRRCUIp3n8k=
x-amz-request-id: X3RQSTKNRWZ2PYKT
last-modified: Thu, 02 Jun 2022 12:59:34 GMT
etag: "617c16c5e04c8603dd7f157862b1c682"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lCJTeoitSKj75p8otqrOjeFO2zYeHjTO%2FcywUEKBcElO%2F84lhb07s1oazaqe49%2FC9a0UjNvoRR2kml4JD%2FmECIdbDY086sTqtNaRrXATADYpE8w4aabN5ypdqD0Jlw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fd35957e38b4ed-OSL
alt-svc: h3=":443"; ma=86400