Overview

URLhotlive78.vip/
IP 34.124.134.248 (Singapore)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-12 22:07:08 UTC
StatusLoading report..
IDS alerts0
Blocklist alert15
urlquery alerts No alerts detected
Tags None

Domain Summary (21)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
ocsp.digicert.com (2) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 682 1815 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5855 34.160.144.191
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 391 34.117.237.239
api64.ipify.org (1) 13197 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 423 223 108.171.202.211
region1.google-analytics.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 925 559 216.239.32.36
zodiac.tw (1) 421332 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 391 69467 172.104.90.184
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 54.69.181.45
cdn.discordapp.com (1) 2474 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 447 65458 162.159.130.233
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 43770 34.120.237.76
ocsp.digicert.cn (3) 37572 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1020 3304 47.246.44.205
i02piccdn.sogoucdn.com (2) 429036 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 784 66986 14.204.51.240
www.googletagmanager.com (1) 75 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 380 77559 142.250.74.168
e1.o.lencr.org (2) 6159 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 676 1456 95.101.11.115
hotlive78.vip (42) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 12608 5600737 34.124.134.248
ocsp.pki.goog (2) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 686 1398 142.250.74.131
s1.pstatp.com (1) 299051 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 418 7609 163.171.140.79
ocsp.sectigo.com (1) 487 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 340 964 172.64.155.188
s167.daydaynews.cc (1) 528903 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 472 56062 104.21.13.162
i01piccdn.sogoucdn.com (1) 510408 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 392 23665 42.4.53.77
r3.o.lencr.org (7) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2366 6204 23.33.119.27
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 35.241.9.150

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-12 medium hotlive78.vip/ Phishing
2022-12-12 medium hotlive78.vip/js/flexible.js Phishing
2022-12-12 medium hotlive78.vip/js/newmain.js Phishing
2022-12-12 medium hotlive78.vip/js/md5.js Phishing
2022-12-12 medium hotlive78.vip/js/clipboard.js Phishing
2022-12-12 medium hotlive78.vip/kf/dist/lib/modernizr.touch.js Phishing
2022-12-12 medium hotlive78.vip/js/axios.js Phishing
2022-12-12 medium hotlive78.vip/js/crypto-js.min.js Phishing
2022-12-12 medium hotlive78.vip/js/mobile-detect.js Phishing
2022-12-12 medium hotlive78.vip/kf/dist/mfb.js Phishing
2022-12-12 medium hotlive78.vip/js/jquery-3.4.1.min.js Phishing
2022-12-12 medium hotlive78.vip/js/swiper.min.js Phishing
2022-12-12 medium hotlive78.vip/imgs/icons8-get-help.svg Phishing
2022-12-12 medium hotlive78.vip/imgs/icons8-telegram-app.svg Phishing
2022-12-12 medium hotlive78.vip/imgs/icons8-facebook-messenger.svg Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 34.124.134.248
Date UQ / IDS / BL URL IP
2023-05-31 07:41:38 UTC 0 - 2 - 0 hotlive4.net/ 34.124.134.248
2023-05-24 07:27:34 UTC 0 - 2 - 15 bblive888.com/ 34.124.134.248
2023-05-21 14:47:06 UTC 0 - 4 - 15 bblive39.vip/ 34.124.134.248
2023-05-18 04:50:18 UTC 0 - 2 - 11 hotlive022.vip/ 34.124.134.248
2023-05-15 06:22:00 UTC 0 - 4 - 17 hotlive38.net/ 34.124.134.248


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-06-02 01:37:14 UTC 0 - 31 - 0 simplifiedsolutions.biz/cgi-bin/update/check/ (...) 34.149.120.3
2023-06-02 01:30:09 UTC 0 - 0 - 10 facebooksecuritys.blogspot.co.ke/ 142.250.74.1
2023-06-02 01:28:56 UTC 0 - 0 - 5 email.mail1.onesignal.os.tc/c/eJwc0EGSmCAQQNH (...) 34.102.239.211
2023-06-02 01:27:58 UTC 0 - 1 - 0 downloads.clubdejeux.com/installateur-clubdej (...) 35.186.205.17
2023-06-02 01:27:57 UTC 0 - 1 - 0 downloads.clubdejeux.com/installateur-clubdej (...) 35.186.205.17


Last 3 reports on domain: hotlive78.vip
Date UQ / IDS / BL URL IP
2022-09-16 11:55:35 UTC 0 - 0 - 25 hotlive78.vip/ 128.1.44.155
2022-12-12 22:07:08 UTC 0 - 0 - 15 hotlive78.vip/ 34.124.134.248
2022-09-05 08:09:48 UTC 0 - 0 - 25 hotlive78.vip/ 128.1.44.155


No other reports with similar screenshot

JavaScript

Executed Scripts (15)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (80)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2336
Expires: Mon, 12 Dec 2022 22:45:53 GMT
Date: Mon, 12 Dec 2022 22:06:57 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "4846D047A23903856BD113D02639CE7E08A1E40030151D302295B2D12DF98FFC"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16520
Expires: Tue, 13 Dec 2022 02:42:17 GMT
Date: Mon, 12 Dec 2022 22:06:57 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 12 Dec 2022 21:33:43 GMT
age: 1994
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bf0c602d32b3c14606f22a86183b5e3c
Sha1:   6eabd8d83475eba731968abe1a05a8bfd272f160
Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5890
Expires: Mon, 12 Dec 2022 23:45:07 GMT
Date: Mon, 12 Dec 2022 22:06:57 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: FV32VnuvZNNKbi6dSSXAbyN3ilzEoc7624aObA2DmZENI8GvfmCDR9p5EnO26cNhZpIkFK64ElsRB8xR+ufmdA==
x-amz-request-id: HZ9QF63Q0DXVTTC3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 12 Dec 2022 21:51:39 GMT
age: 918
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 12 Dec 2022 22:06:57 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:57 GMT
Last-Modified: Fri, 28 Oct 2022 10:42:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb20d-3569"
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size:   3978
Md5:    6d18355234354eee11af246f6431714e
Sha1:   228c308c940f65333e9de73e70d4b6f011f96b5a
Sha256: deeaa7bb71d63c80fe99f54332bce678ddb0ec5b1c9b5e37206342fdac3efbb8

Blocklists:
  - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 12 Dec 2022 22:06:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=G-NMQZ5ZQV8E HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hotlive78.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 12 Dec 2022 22:06:57 GMT
expires: Mon, 12 Dec 2022 22:06:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76842
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (22462)
Size:   76842
Md5:    1b46e3b931428d6d442fc848fc7d238a
Sha1:   5d55b0fb37ba28cf5111a29f420ecdfeb66bb501
Sha256: b455a9ddbe99cc5fff8dffc3ce80d3cb9a8224c2929971c7dcf3b1d0c7966197
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 12 Dec 2022 22:06:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 346
ETag: "D6155C31DB05CE8FA1E29B6F806132FEFD6D9511A4B1BF4E7947ACB78EA0518B"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=655
Expires: Mon, 12 Dec 2022 22:17:52 GMT
Date: Mon, 12 Dec 2022 22:06:57 GMT
Connection: keep-alive

                                        
                                            GET /css/m.css HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:57 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb17a-63b7"
Expires: Tue, 13 Dec 2022 10:06:57 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF, LF line terminators
Size:   5286
Md5:    16261ac238029acfedf1a5dfd1e60d59
Sha1:   c7e844ab3cf5907a6a333c0929a1546bcee726aa
Sha256: 0dd8fcbfe0cfdeb530ab9a1c0b5f04e7f633b610b79169083c20cf6c4c5c9f96
                                        
                                            GET /css/swiper.min.css HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:57 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb17b-56ad"
Expires: Tue, 13 Dec 2022 10:06:57 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (1467), with CRLF, LF line terminators
Size:   3742
Md5:    1dc88e7343536b78fb6680865e5f204a
Sha1:   4ae87307b6dad22922644c8bf8375ee13169a5ef
Sha256: 987d591891eca26aa57207b238b8b2bf6967d6c68b7247beed4eee445e891fc8
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 12 Dec 2022 21:07:56 GMT
age: 3541
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /js/flexible.js HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:57 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb167-9b1"
Expires: Tue, 13 Dec 2022 10:06:57 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (2435), with CRLF line terminators
Size:   1084
Md5:    afc653aa2a002a71095b6900dcbebb02
Sha1:   b13c33af769cc52a41f57a32563a9796557c606f
Sha256: 129d7e79c3842a6a3434e191660f6f133bd1ed0ffad150a024cacd06a7d90aff

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /js/newmain.js HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:57 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb169-16ea"
Expires: Tue, 13 Dec 2022 10:06:57 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with CRLF, LF line terminators
Size:   2171
Md5:    65629c172e8677d103813c76930e10a9
Sha1:   4976f50ae8a6092b6078abc7bdfca451b71dd949
Sha256: 691199115b1241f8038a8deb315fb2708c9f03fc2590a46e530aea456f87e4a1

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /js/md5.js HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:57 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb168-2d26"
Expires: Tue, 13 Dec 2022 10:06:57 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   3422
Md5:    fcecd72140f300d5c3e7a13d5b27a291
Sha1:   6e6c10786ad218bd421e4adc5919056744026ccc
Sha256: 0222f71f04b4d17dfbbf62059c0a01b2ccc9b309224098e8549ffde1f76cd084

Blocklists:
  - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5064
Cache-Control: max-age=131057
Date: Mon, 12 Dec 2022 22:06:58 GMT
Etag: "6396ef2b-1d7"
Expires: Wed, 14 Dec 2022 10:31:15 GMT
Last-Modified: Mon, 12 Dec 2022 09:06:51 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=93265
Date: Mon, 12 Dec 2022 22:06:58 GMT
Etag: "63966f53-2d7"
Expires: Wed, 14 Dec 2022 00:01:23 GMT
Last-Modified: Mon, 12 Dec 2022 00:01:23 GMT
Server: nginx
Content-Length: 727

                                        
                                            GET /cdn/expire-1-M/font-awesome/4.6.0/css/font-awesome.min.css HTTP/1.1 
Host: s1.pstatp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hotlive78.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             163.171.140.79
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Mon, 12 Dec 2022 22:06:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 01 Jan 2023 07:11:52 GMT
Server: nginx
Last-Modified: Wed, 02 Mar 2022 05:21:18 GMT
ETag: W/"621efece-7057"
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
x-tt-trace-host: 0138a4113b8e06ae89faf4428e40c5283e742a4cb68a3b736b2b292c51246967103caf92edb167e64c7fffb6fe16bfabd989bdbd499ec6207ac0669bcc7ee08402cec36b5868bd95d028e1075799e3cf3f91b2ccf9d26a580622758ccdb08a355a4913fb825b220978728f4fdc8aba9df9
X-Cache-new: HIT
Age: 1
X-Via: 1.1 PSzjnbsxjm101:4 (Cdn Cache Server V2.0), 1.1 PShnlhwt2nf39:7 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1vj92:4 (Cdn Cache Server V2.0)
x-response-cache: edge_hit
server-timing: cdn-cache;desc=hit,edge;dur=0
x-tt-trace-tag: id=01;cdn-cache=hit;type=static
X-Ws-Request-Id: 6397a602_PShlamstdAMS1vj92_47388-25159
Ws-S2h-Acc-Level: 1
Timing-Allow-Origin: *
X-Response-Cinfo: 91.90.42.154


--- Additional Info ---
Magic:  ASCII text, with very long lines (28596)
Size:   6591
Md5:    43daacfa7c905c71f929e2e01e6c72bb
Sha1:   d876d0b56e5bf5c7ca6e38e66c23b46f169572bb
Sha256: 7b0bb91fde48bb02c2e9fe0f704eaa35a868b4e591d9c1e76b8f1dfd6dbc22d3
                                        
                                            GET /js/clipboard.js HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb167-6191"
Expires: Tue, 13 Dec 2022 10:06:58 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (849)
Size:   6311
Md5:    0e2e0b7f32259de61fdcb160edd598eb
Sha1:   69464357cbf44f99606eda0143659b4de7eca435
Sha256: df49db5c6021dab863b9a5493328ab1fc40d0ddb7d2bcdc763c92babd10fa116

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /kf/dist/lib/modernizr.touch.js HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb165-bb9"
Expires: Tue, 13 Dec 2022 10:06:58 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with CRLF, LF line terminators
Size:   1419
Md5:    5773255f50c5343e3c7c308ff2e7f6e3
Sha1:   3a69235388990f3c65f32dc4f2329b901ebb3ea1
Sha256: 03d9e67142344d5d84533146911a0bf14298091d11b9c2341d4c5abefb1260f8

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /js/axios.js HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:57 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb166-b47d"
Expires: Tue, 13 Dec 2022 10:06:57 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   13017
Md5:    e320e4108b1107bc4ac492ed37ea10a1
Sha1:   2783bd6e716c231f6c26943d1257ca5bcb135b66
Sha256: f439ee4f1a4c3bd6aab0e3eb15cfbb5e729723980eed7997a85280178fb08eb8

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /js/crypto-js.min.js HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:57 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb167-11c44"
Expires: Tue, 13 Dec 2022 10:06:57 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   23140
Md5:    52d3eada479c35c52078b9872effa30e
Sha1:   9aa0a219b02599b3e2b11aaa73c3f5e8bce0fda9
Sha256: fa26558cf1f523a8a37dff199dced37b76723d82a1da1aee4aca23ab918100ec

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /kf/css/index.css HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb166-1ea1"
Expires: Tue, 13 Dec 2022 10:06:58 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with CRLF, LF line terminators
Size:   2078
Md5:    4a5a15ec61e224b465a8c041ac5a9b01
Sha1:   52b2030b8273f715d95179207d03e60bfc9570f7
Sha256: 990c6f4aefa1e7cd4031e037d8038f21219ab8c09b6a1827d163bdc0d2ec30d5
                                        
                                            GET /js/mobile-detect.js HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:57 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb169-10ef1"
Expires: Tue, 13 Dec 2022 10:06:57 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (5442)
Size:   25114
Md5:    b838e337e4b4a6778b7addffdea9f4e8
Sha1:   e11b8e0f7fe07536ac4e7f5b4c3d931d50a7f214
Sha256: 8ace32ef0021efb3a72195edcb240b9dad9b831388caaccf094710fc0986e09d

Blocklists:
  - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 346
ETag: "D6155C31DB05CE8FA1E29B6F806132FEFD6D9511A4B1BF4E7947ACB78EA0518B"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=654
Expires: Mon, 12 Dec 2022 22:17:52 GMT
Date: Mon, 12 Dec 2022 22:06:58 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: n0CPOf36bP3VOLuD3oKvUQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             54.69.181.45
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ecTatLSBok1xwriQDoTONRIic5Y=

                                        
                                            GET /kf/dist/mfb.css HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb164-8a78"
Expires: Tue, 13 Dec 2022 10:06:58 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (318), with CRLF line terminators
Size:   5139
Md5:    da2cfe82377e95c38f84893d777fd3ab
Sha1:   819f3e67aa62b6dd9b3ff7700f094ddc93bc52ce
Sha256: bc81cc7f9322982a3bc8905d2a648638d40563c47a26dd1f331644330dc930e5
                                        
                                            GET /kf/dist/mfb.js HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb164-9fd"
Expires: Tue, 13 Dec 2022 10:06:58 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   1117
Md5:    af2a254793ff0fdfc25ce2474ec9ef70
Sha1:   2dfb34fea687cc938b3d6afc069f06d20ecd99ff
Sha256: bc130342e8dcd8dd93e50b4b8c4e163a699f02aa59933890a6161aba5593b6eb

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /js/jquery-3.4.1.min.js HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb168-15851"
Expires: Tue, 13 Dec 2022 10:06:58 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   34489
Md5:    45088a63622db0550345f7aa58c3e3bb
Sha1:   4bf834aedeaac7a1919bdb5b6ee17419b9181171
Sha256: c7ca6923bc404e521d3690b3a2e7464c3c6e3e6bc618ca7cd7d6910fb188938f

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /js/swiper.min.js HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Last-Modified: Fri, 28 Oct 2022 10:39:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb16a-21d03"
Expires: Tue, 13 Dec 2022 10:06:58 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (65280)
Size:   41097
Md5:    d5f9930e928fdff2666cf39d8a81107c
Sha1:   a7ce3649f1aa7acb42061a5ef77f26e51a82b225
Sha256: af58c2d320dfa9639e99738f1aea290ce75bd4c2a021fbf322e6a0916f397d4a

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /attachments/918179438494101527/982120155549171792/ezgif.com-gif-maker_1.gif HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hotlive78.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             162.159.130.233
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 12 Dec 2022 22:06:58 GMT
content-length: 63949
cf-ray: 7789c5317e24b50f-OSL
accept-ranges: bytes
age: 530137
cache-control: public, max-age=31536000
etag: "6a9b65f5842fb48ee85e3a0041646eeb"
expires: Tue, 12 Dec 2023 22:06:58 GMT
last-modified: Fri, 03 Jun 2022 03:14:52 GMT
vary: Accept-Encoding
cf-cache-status: HIT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-goog-generation: 1654226092027513
x-goog-hash: crc32c=JsDU/w==, md5=aptl9YQvtI7oXjoAQWRu6w==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 63949
x-guploader-uploadid: ADPycduEvmgUUqPWwhSGII2JJrPdhMrRM2JCE7m9SPFxSoml5WKbh2KlKmrkHWPyRMd9yhHL_Qv33W6YrAo3r3FSQZA1uWj3ao80
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
set-cookie: __cf_bm=vZLa_4aAsRZNKUe9SL5WEkl5MAYXlz4NrPE4hEQ9REI-1670882818-0-AS0HonW0+73i5i1WGIV85VEJ7yGBmnNjb6OkpMA1zT/EjlTfFVe1wQvYyuL5uhzhUx4q2jTVkMK08hUqFAEJpeE=; path=/; expires=Mon, 12-Dec-22 22:36:58 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3ysfm5Hhz84JZ0ZkmIKn8BkokdOLMnw%2BTUj%2BIJQMVJWJnhYvPeQc3cAPuAUXO8vWm4M%2FPD%2BpgQPgTh1LUgNuuc4pvnX2mS649qpsRXacfbTW6Nz1MupkXhVkixdLXjrWGX%2BRpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 320 x 45\012- data
Size:   63949
Md5:    6a9b65f5842fb48ee85e3a0041646eeb
Sha1:   1647ab6b5f176f62c278ca44cd2cbe2bdc21e9c4
Sha256: c4f70f6858fdd0a42526af2debba7d4d2fd2920852bdafc3a23346b183b2c431
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 12 Dec 2022 22:06:59 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 11 Dec 2022 09:46:08 GMT
Expires: Sun, 18 Dec 2022 09:46:07 GMT
Etag: "8e3d2a9097155f85a7ae37ffacbc4830ab989e26"
Cache-Control: max-age=473347,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7789c533cb7bb4eb-OSL

                                        
                                            GET /imgs/9999/5.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Content-Length: 98801
Last-Modified: Fri, 28 Oct 2022 10:39:42 GMT
Connection: keep-alive
ETag: "635bb16e-181f1"
Expires: Wed, 11 Jan 2023 22:06:58 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x960, components 3\012- data
Size:   98801
Md5:    85adb27b65698f03b09917acfde58026
Sha1:   86f0a49e98a0db0287998a6e9f9f110090f5beda
Sha256: baae228c59df098caf413fb29b6a3e0f1f4e1db5d8f121a45feaf93ee2732294
                                        
                                            GET /imgs/9999/8.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Content-Length: 81454
Last-Modified: Fri, 28 Oct 2022 10:39:44 GMT
Connection: keep-alive
ETag: "635bb170-13e2e"
Expires: Wed, 11 Jan 2023 22:06:58 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 594x960, components 3\012- data
Size:   81454
Md5:    4cf6a694ec92a3c07f9d01e86d90f172
Sha1:   74c9df9b786711fbf0d99070bcfa24e80fe58e96
Sha256: 222a1ea2bbda18bfacf529f40d74b5ec9062917ef698696c556a5a065083f067
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "FEE26142CC96938E50E5BF4CC737BFA57D6C739FDFCE82B2B287F12E52993C16"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 13 Dec 2022 04:06:59 GMT
Date: Mon, 12 Dec 2022 22:06:59 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: api64.ipify.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: http://hotlive78.vip
Connection: keep-alive
Referer: http://hotlive78.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             108.171.202.211
HTTP/1.1 200 OK
Content-Type: text/plain
                                            
Server: nginx/1.23.1
Date: Mon, 12 Dec 2022 22:06:59 GMT
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: http://hotlive78.vip
Vary: Origin


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   12
Md5:    35b0bce9d250429df012c0426f88d0bd
Sha1:   f81d80af9cbeb0011316fbba3da8002b32251f7a
Sha256: da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9290
Expires: Tue, 13 Dec 2022 00:41:49 GMT
Date: Mon, 12 Dec 2022 22:06:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9290
Expires: Tue, 13 Dec 2022 00:41:49 GMT
Date: Mon, 12 Dec 2022 22:06:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9290
Expires: Tue, 13 Dec 2022 00:41:49 GMT
Date: Mon, 12 Dec 2022 22:06:59 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8841
x-amzn-requestid: 09b64f8e-60c0-4cf6-a0dc-15e597bd9d85
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMWH7MIAMFyow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4e-3471ee5f5a78b55c424e2c6d;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KkltHSO_YnfExbgR5cg199uOPnKy62zoMPwFfktRCpu03ImoFNMAIw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 22:37:58 GMT
age: 84541
etag: "abf58087f0e345202da088238daea85d177b431b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8841
Md5:    9051770b3587c195bea670f8820e8cfe
Sha1:   abf58087f0e345202da088238daea85d177b431b
Sha256: f687a10c0ae63699a551977e9a4ec5bc7ba606b1925178d7ed4ec6728889bb2e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5619
x-amzn-requestid: df7189d2-5cad-43a2-9511-20c5de53f710
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAEMPFCSIAMF4uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d81-729683c606fd6abc5bc70534;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2pga97qYwh0G0tlQvRwkVvA3Xm9yynDBhOATBNKLFk1IxG5PBgv4fw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:58:39 GMT
age: 500
etag: "6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5619
Md5:    9f8d3e3c9e5d2ed74c3894b4825fcc2f
Sha1:   6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da
Sha256: 9e44f93e65206ae7095cf9177296f4f528f1c2597cffa4853b7d6dcabf032796
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5530
x-amzn-requestid: adecbb8c-cec3-46a0-b32c-0026b8421fe5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4d8Fg6IAMF61g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903abf-4bcb385f27cb438c36a2cd5e;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: J2FSKW1AHhnyu2NBJDcqib3iVsOk745-dgnNgmk6T-QKcg-z5He7qw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 09:24:15 GMT
age: 45764
etag: "0d5969394b370a5c77c53ed58f55e5f8a45da3ab"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5530
Md5:    a22fc7807fb3337f0af5e546c7ad366a
Sha1:   0d5969394b370a5c77c53ed58f55e5f8a45da3ab
Sha256: 98b4f4fd27dc036697fb0328083bce6e691b7493428f3a54991087d9d1165d97
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4720
x-amzn-requestid: dd990fe1-8447-403e-b276-40889af5baa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENuF6SoAMF7oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-59b5a8f92ef6111e64e16079;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SBYH2ZqOyZx6tB8u3g3dkimaCUGSWAMQhULpYs4gWrmZ6i3_1Br_zQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:57:42 GMT
age: 557
etag: "d43cd03d5eb3e7618b6fb70c935010c2ac92ad32"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4720
Md5:    38876d760ef06c8471468c474c1e28a7
Sha1:   d43cd03d5eb3e7618b6fb70c935010c2ac92ad32
Sha256: a0747f29eb6084eef42d3c247594973b02c619c7ec56b6137e24b6d0362557a0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6311
x-amzn-requestid: 46ccaee0-bde8-4be6-9dc8-46e3ae356dc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c8xUYH10oAMF8Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394fc1b-2440251f06cb950a57489555;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 21:37:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UU3eyJXDqth6F65_913HL9lqA3qZHfGExAV89BRzHpQho5wZbQRTmw==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:52:33 GMT
age: 866
etag: "2fe69b52fe03128e86550bf08474ecac82682384"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6311
Md5:    2020df3404a4b7c3e142af4a1330b848
Sha1:   2fe69b52fe03128e86550bf08474ecac82682384
Sha256: 37a52c158d5cfdf3589e19163cf446c02ce1466f444656080b02da82d2bcefae
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcded97a1-bc2d-405f-b231-35f5af035463.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6438
x-amzn-requestid: 517b1627-9789-48e8-b5df-106fee878820
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENaGN6IAMFoUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d88-28cbd126745e8ab15d937936;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vPiqEPzdYtVSdb8l3Gz5f1X2tMjYuPdtLfxgiicjQRygN6SU5CrWMg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:59:56 GMT
age: 423
etag: "4f14c9f7b36dfa356877251f1e6a0f5936286c4b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6438
Md5:    75dd1ecae61b991cd21929deb9244aac
Sha1:   4f14c9f7b36dfa356877251f1e6a0f5936286c4b
Sha256: 3435eda8961bb9954fcf5fd7c957ce58fd7aa4bb9e00525b8f42756adcf341e7
                                        
                                            GET /imgs/9999/2.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:59 GMT
Content-Length: 88294
Last-Modified: Fri, 28 Oct 2022 10:39:41 GMT
Connection: keep-alive
ETag: "635bb16d-158e6"
Expires: Wed, 11 Jan 2023 22:06:59 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x960, components 3\012- data
Size:   88294
Md5:    939185775835646776d9ac4f84b68d83
Sha1:   698535bfd8e3c8e26f4a33f321f231658c5cc553
Sha256: f5fcf1be5286c20e100a3eec4d2d02d6ac0555143aaa4f018063c75e78ff8c82
                                        
                                            POST /g/collect?v=2&tid=G-NMQZ5ZQV8E&gtm=2oebu0&_p=1338678860&cid=1962404074.1670882817&ul=en-us&sr=1280x1024&_s=1&sid=1670882817&sct=1&seg=0&dl=http%3A%2F%2Fhotlive78.vip%2F&dt=HOTLIVE%20App%20%E2%9C%94%EF%B8%8F%20Tr%C3%B2%20ch%C6%A1i%20x%E1%BB%95%20s%E1%BB%91%20%2C%20tr%C3%B2%20ch%C6%A1i%20b%C3%B3ng%20%C4%91%C3%A1%20%2C%20c%C3%A1%20%C4%91%E1%BB%99%20%2C%20c%E1%BB%9D%20b%E1%BA%A1c%20%2C%20K%E1%BA%BFt%20b%E1%BA%A1n%2C%20tr%C3%B2%20chuy%E1%BB%87n%2C%20xem%20Show%20g%C3%A1i%20xinh&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hotlive78.vip
Connection: keep-alive
Referer: http://hotlive78.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             216.239.32.36
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: http://hotlive78.vip
date: Mon, 12 Dec 2022 22:06:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /imgs/9999/4.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:59 GMT
Content-Length: 67512
Last-Modified: Fri, 28 Oct 2022 10:39:42 GMT
Connection: keep-alive
ETag: "635bb16e-107b8"
Expires: Wed, 11 Jan 2023 22:06:59 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 784x784, components 3\012- data
Size:   67512
Md5:    81282243658c7216896f8538e9b9ab21
Sha1:   660e7d041e532778ed14f30b90c3f6603df33445
Sha256: 63829b92d0be3510772e6031950af204d217c9e0b7ec0965aa8c02af81074342
                                        
                                            GET /imgs/9999/9.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Content-Length: 307598
Last-Modified: Fri, 28 Oct 2022 10:39:44 GMT
Connection: keep-alive
ETag: "635bb170-4b18e"
Expires: Wed, 11 Jan 2023 22:06:58 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1350, components 3\012- data
Size:   307598
Md5:    788fb13257a68e96e5e410db0b7c6447
Sha1:   efc58aca277074fa2cae09d5edd04521bebbad86
Sha256: 21605b155fcce0654533969352729624299b6f036e30d927764643bcbb479b4a
                                        
                                            GET /imgs/9999/3.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Content-Length: 373031
Last-Modified: Fri, 28 Oct 2022 10:39:41 GMT
Connection: keep-alive
ETag: "635bb16d-5b127"
Expires: Wed, 11 Jan 2023 22:06:58 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x2048, components 3\012- data
Size:   373031
Md5:    2d8a4237e24ee71ddc17246e8cd1a22b
Sha1:   e368d3583b118ec2bc8f769f16c09a76e7e28e4f
Sha256: 450a06f7ad35d6dbac187cf1b108ed13f5b7987d0ba0aaef33316e62bf064d54
                                        
                                            GET /uploads/1565831137-BWqpk.jpg HTTP/1.1 
Host: zodiac.tw
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hotlive78.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.104.90.184
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Mon, 12 Dec 2022 22:06:59 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/7.0.18
Last-Modified: Thu, 15 Aug 2019 01:05:37 GMT
ETag: "10e42-5901d78b2fa40"
Accept-Ranges: bytes
Content-Length: 69186
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 595x592, components 3\012- data
Size:   69186
Md5:    3d17e973efc841e5071d77d74290641c
Sha1:   b2ea0b29f9f1f0fa3833a32f55c170141cbab481
Sha256: caef2bd464dba488a805c74212fd9a005c5fb6ae95764f7f46278ca7c59a8776
                                        
                                            GET /images/btn.gif HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/css/m.css

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:00 GMT
Content-Length: 52273
Last-Modified: Fri, 28 Oct 2022 10:39:47 GMT
Connection: keep-alive
ETag: "635bb173-cc31"
Expires: Wed, 11 Jan 2023 22:07:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 133\012- data
Size:   52273
Md5:    8a54c77d6abb54203588a777ffc63465
Sha1:   28c4ca924ff1e9345f87380df9ed5b4a9bef9220
Sha256: f9a330c35754440836a87d5385ba7f63c6790eeb75b709bdc259e5ea0b46c246
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: Tengine
Content-Length: 471
Connection: keep-alive
Date: Mon, 12 Dec 2022 22:07:00 GMT
Last-Modified: Mon, 12 Dec 2022 19:36:28 GMT
ETag: "639782bc-1d7"
Expires: Wed, 14 Dec 2022 19:36:28 GMT
Cache-Control: max-age=163768
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1670882820
Via: cache11.l2de2[292,292,200-0,M], cache11.l2de2[293,0], cache2.se1[315,315,200-0,M], cache2.se1[316,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 12 Dec 2022 22:07:00 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9616708828201647604e

                                        
                                            GET /imgs/9999/11.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:00 GMT
Content-Length: 250914
Last-Modified: Fri, 28 Oct 2022 10:39:41 GMT
Connection: keep-alive
ETag: "635bb16d-3d422"
Expires: Wed, 11 Jan 2023 22:07:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 710x960, components 3\012- data
Size:   250914
Md5:    a1af681f15df9769abca2d5b9801e44b
Sha1:   8fc683523e49baf85f5a7d761171ea9055ab42ea
Sha256: ded07f5735873630236c6daab258976cfcb8ed2ac37855760041610b59b23c24
                                        
                                            GET /?url=http%3A%2F%2Fp9.pstatp.com%2Flarge%2Fpgc-image%2F00dcd7f910204e0a9b8555ab9bbf1076 HTTP/1.1 
Host: s167.daydaynews.cc
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hotlive78.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.21.13.162
HTTP/2 200 OK
content-type: image/png
                                            
date: Mon, 12 Dec 2022 22:06:58 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iX%2B%2BgyhdixnPnlP6vkf995lxcIuBGcdaLyKqUw3mN%2BP4j3k7Vh751uI0AFsVbeecJ%2Fd0ogrbY1ODqRYglp4XoFtMiaCdXoGrrOBJvYfsP0cYtACtfnLW%2BYL4USmSl46NiQCVJ8E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7789c52bff1ab4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x768, components 3\012- data
Size:   55502
Md5:    c037750f55b5021ed9fbb94638e44337
Sha1:   65adf562e9087275c4418599e73ca9b8659b92e1
Sha256: 80c052affdf76b5aa145295650c870e29f4af2515409dc126d471bdbee79f4c4
                                        
                                            GET /images/logo.png HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:00 GMT
Content-Length: 180155
Last-Modified: Fri, 28 Oct 2022 10:39:50 GMT
Connection: keep-alive
ETag: "635bb176-2bfbb"
Expires: Wed, 11 Jan 2023 22:07:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced\012- data
Size:   180155
Md5:    61dd988b697bd424dc3516d260078058
Sha1:   b05977758fee75926b938ec8fe60d4afa1fa98de
Sha256: 58c1f18206166b204bc932d8462f2902487cf849bf1dc96d0cf7404544be3dfe
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: Tengine
Content-Length: 471
Connection: keep-alive
Date: Mon, 12 Dec 2022 22:07:00 GMT
Last-Modified: Mon, 12 Dec 2022 19:36:28 GMT
ETag: "639782bc-1d7"
Expires: Wed, 14 Dec 2022 19:36:28 GMT
Cache-Control: max-age=163768
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1670882820
Via: cache19.l2de2[458,457,200-0,M], cache19.l2de2[458,0], cache4.se1[480,479,200-0,M], cache4.se1[480,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 12 Dec 2022 22:07:00 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9816708828201683728e

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: Tengine
Content-Length: 471
Connection: keep-alive
Date: Mon, 12 Dec 2022 22:07:00 GMT
Last-Modified: Mon, 12 Dec 2022 19:36:28 GMT
ETag: "639782bc-1d7"
Expires: Wed, 14 Dec 2022 19:36:28 GMT
Cache-Control: max-age=163768
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1670882820
Via: cache3.l2de2[461,460,200-0,M], cache3.l2de2[461,0], cache5.se1[485,485,200-0,M], cache5.se1[488,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 12 Dec 2022 22:07:00 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9916708828201661696e

                                        
                                            GET /308f572a883780e3 HTTP/1.1 
Host: i02piccdn.sogoucdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hotlive78.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             14.204.51.240
HTTP/1.1 200 OK
                                            
Accept-Ranges: bytes
Server: Lego Server
Date: Mon, 12 Dec 2022 22:07:00 GMT
Last-Modified: Wed, 07 Dec 2022 15:10:25 GMT
Cache-Control: max-age=31536000
Age: 24957
Content-Length: 27877
X-NWS-LOG-UUID: 1439853428270178862
Connection: keep-alive
X-Cache-Lookup: Cache Hit, Hit From Inner Cluster


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Size:   27877
Md5:    e38037882a578f30cd554e8db1c6c311
Sha1:   43e95b92991e2d0e436f8cccddf3fd7f6a03ced2
Sha256: bc1d3e16d0c6e265e41e2ae46a8490c4588a90c9dde5688e09e33c0ab3a06d1e
                                        
                                            GET /images/distance.png HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/css/m.css

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:00 GMT
Content-Length: 942
Last-Modified: Fri, 28 Oct 2022 10:39:48 GMT
Connection: keep-alive
ETag: "635bb174-3ae"
Expires: Wed, 11 Jan 2023 22:07:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 109 x 33, 8-bit gray+alpha, non-interlaced\012- data
Size:   942
Md5:    607df472d4f8b54cebe5078f8be892e3
Sha1:   dfb4ce1172c23cb39b485e59b1cea9466bd028ac
Sha256: 60d3cb7e330086a42300742b60c5d3d05179a7f3dcb64e128ac8ff4fea512033
                                        
                                            GET /images/online.png HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/css/m.css

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:00 GMT
Content-Length: 3253
Last-Modified: Fri, 28 Oct 2022 10:39:50 GMT
Connection: keep-alive
ETag: "635bb176-cb5"
Expires: Wed, 11 Jan 2023 22:07:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 76 x 28, 8-bit/color RGBA, non-interlaced\012- data
Size:   3253
Md5:    2b45a03d18880b0e02320404bf61ebce
Sha1:   3b44c2e6cec700ffa33d3d3709a76f1261f08278
Sha256: 3edbafa2cea753b60b798d3408d8cf57ca55f47fa5dc8ece186d2fe20636758c
                                        
                                            GET /images/tag2.png HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/css/m.css

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:00 GMT
Content-Length: 3284
Last-Modified: Fri, 28 Oct 2022 10:39:53 GMT
Connection: keep-alive
ETag: "635bb179-cd4"
Expires: Wed, 11 Jan 2023 22:07:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 102 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size:   3284
Md5:    497e22eecd1f97d346e2fe8f8a23929d
Sha1:   86bae70bb58c924724c0f5a4f9a1f3b20957e5b7
Sha256: 190f75981b6b8e458311b43fe3de31fea6435caa9344c8775f941c196875b471
                                        
                                            GET /43bb2c9766823415 HTTP/1.1 
Host: i02piccdn.sogoucdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hotlive78.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             14.204.51.240
HTTP/1.1 200 OK
                                            
Accept-Ranges: bytes
Server: Lego Server
Date: Mon, 12 Dec 2022 22:07:00 GMT
Last-Modified: Fri, 22 Jul 2022 23:44:19 GMT
Cache-Control: max-age=31536000
Age: 327422
Content-Length: 38463
X-NWS-LOG-UUID: 390209924884441939
Connection: keep-alive
X-Cache-Lookup: Cache Hit, Hit From Inner Cluster


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 499x482, components 3\012- data
Size:   38463
Md5:    15348266972cbb43ca48dffa8b213dea
Sha1:   4be17f0ca47de33eb501b7a19da1d54809fe63a0
Sha256: 4e7531997b6749fe210e1fac9d91245103f64a41bf166b0c1e899bc353612ea8
                                        
                                            GET /imgs/9999/1.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:59 GMT
Content-Length: 480950
Last-Modified: Fri, 28 Oct 2022 10:39:40 GMT
Connection: keep-alive
ETag: "635bb16c-756b6"
Expires: Wed, 11 Jan 2023 22:06:59 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x1782, components 3\012- data
Size:   480950
Md5:    f7145f78a3d379917236bcbc3310fc2b
Sha1:   7019ac5719e99afd414bb1be9cb16c64f8f0d9f3
Sha256: 4dc6648a7eb40fb90635bad0add0dd954e147f1a9288796a53ef27382206a82d
                                        
                                            GET /images/tag3.png HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/css/m.css

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:00 GMT
Content-Length: 1957
Last-Modified: Fri, 28 Oct 2022 10:39:54 GMT
Connection: keep-alive
ETag: "635bb17a-7a5"
Expires: Wed, 11 Jan 2023 22:07:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 102 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size:   1957
Md5:    27db22d1e321f34f220ff7319fa12e35
Sha1:   f793e744ea0f48677057cff2b99057bd98aaf194
Sha256: 22b26a5a4f2122e973a3e6704d0882541bdb2b5e731986f61715f04bd09c7809
                                        
                                            GET /280faae1a89b21bd HTTP/1.1 
Host: i01piccdn.sogoucdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hotlive78.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             42.4.53.77
HTTP/1.1 200 OK
                                            
Last-Modified: Wed, 13 Jul 2022 15:39:45 GMT
Content-Length: 23411
Accept-Ranges: bytes
X-NWS-LOG-UUID: 3298538680615395672
Connection: keep-alive
Server: Lego Server
Date: Mon, 12 Dec 2022 22:07:00 GMT
X-Cache-Lookup: Cache Hit


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Size:   23411
Md5:    bd219ba8e1aa0f287149295990f93898
Sha1:   203408c04b78e5354cf1de55b124266cc29155b1
Sha256: 844b12de5a3699535086f0e0362c0070b00e028c885df04e3f84286386c71d68
                                        
                                            GET /imgs/9999/banner3.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:01 GMT
Content-Length: 185451
Last-Modified: Fri, 28 Oct 2022 10:39:45 GMT
Connection: keep-alive
ETag: "635bb171-2d46b"
Expires: Wed, 11 Jan 2023 22:07:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=436, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=835], progressive, precision 8, 835x436, components 3\012- data
Size:   185451
Md5:    b0366ddc8aaafc05b44d78de281814e6
Sha1:   5df26b2b075d4223551274a2fbbcbcc13877fc94
Sha256: fa99d7642c42b0ccc797882fd356bd27af52da337c37eda4cdcedc54cb91782e
                                        
                                            GET /imgs/9999/6.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Content-Length: 797098
Last-Modified: Fri, 28 Oct 2022 10:39:43 GMT
Connection: keep-alive
ETag: "635bb16f-c29aa"
Expires: Wed, 11 Jan 2023 22:06:58 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1352x2048, components 3\012- data
Size:   797098
Md5:    9e656597e521f6fa5186ad6d3841ff61
Sha1:   92103e5008accfef299b8e533e578b6e78c4aff3
Sha256: b48947425f5ffebbd0b1494a43ca484ed5600f8854cbb92c07c7389081c3c79f
                                        
                                            GET /imgs/9999/banner1.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:00 GMT
Content-Length: 209322
Last-Modified: Fri, 28 Oct 2022 10:39:44 GMT
Connection: keep-alive
ETag: "635bb170-331aa"
Expires: Wed, 11 Jan 2023 22:07:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=436, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=835], progressive, precision 8, 835x436, components 3\012- data
Size:   209322
Md5:    e6e9117f19fae20c85805f12e0e4ed0e
Sha1:   ab2ff339dc8339259ea12b40fa01b03018797524
Sha256: d2bb4d29a0d5b4583d36f327cacf4805177b7639d816ba7abe4d1040f5cced29
                                        
                                            GET /imgs/9999/banner2.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:00 GMT
Content-Length: 192078
Last-Modified: Fri, 28 Oct 2022 10:39:45 GMT
Connection: keep-alive
ETag: "635bb171-2ee4e"
Expires: Wed, 11 Jan 2023 22:07:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=436, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=835], progressive, precision 8, 835x436, components 3\012- data
Size:   192078
Md5:    701c1acfaa9e616f54276d89fc8bd6bb
Sha1:   30d5d34e568f3ff76e52ef326dbaf8b1afee1b20
Sha256: 09aee9d14ac49ffee3d06e76622dc931938cda5c29657f58b96dce0f3db0627b
                                        
                                            GET /imgs/icons8-get-help.svg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:01 GMT
Content-Length: 1544
Last-Modified: Fri, 28 Oct 2022 10:39:39 GMT
Connection: keep-alive
ETag: "635bb16b-608"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1544), with no line terminators
Size:   1544
Md5:    8557a1d1f39016a56402af80bba186a3
Sha1:   2d791f1626210c22fc84b3d4995e9135e6774511
Sha256: ec254615c4ad7609d1a55492937efa3fbaeb891345c0f08de8e1b5508fb7963b

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /imgs/icons8-telegram-app.svg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:01 GMT
Content-Length: 826
Last-Modified: Fri, 28 Oct 2022 10:39:39 GMT
Connection: keep-alive
ETag: "635bb16b-33a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (826), with no line terminators
Size:   826
Md5:    919a6e225ffc16e8543738b5e4bd3694
Sha1:   0f9676ee74d73026df08e0049cebab172661dbd0
Sha256: 542ae3394a30f1d26fbbed6fcd567ebe01d3f23827fa915b93625af0aa8d3c36

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /imgs/9999/banner5.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:01 GMT
Content-Length: 165199
Last-Modified: Fri, 28 Oct 2022 10:39:46 GMT
Connection: keep-alive
ETag: "635bb172-2854f"
Expires: Wed, 11 Jan 2023 22:07:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=436, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=835], progressive, precision 8, 835x436, components 3\012- data
Size:   165199
Md5:    7a3e9d36770723b8acec1a76f8ecdc45
Sha1:   5e74e33851888ef205cbb4b3d8719337af4c8f89
Sha256: 69348b0a4d90c848afd929ed6ecfb5326ee681c53267ef4015af950af8ba087d
                                        
                                            GET /imgs/icons8-facebook-messenger.svg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:01 GMT
Content-Length: 2438
Last-Modified: Fri, 28 Oct 2022 10:39:38 GMT
Connection: keep-alive
ETag: "635bb16a-986"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2438), with no line terminators
Size:   2438
Md5:    d71cc5661199ea8b4a58473765550853
Sha1:   cc0db757696842192ea70710e78b4f9996973ac6
Sha256: c692dc56f0e6094bb4cc150b0462adebf4beb4241657beb3af07c9b2373d7169

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /imgs/icons8-chat-64.png HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:01 GMT
Content-Length: 3216
Last-Modified: Fri, 28 Oct 2022 10:39:38 GMT
Connection: keep-alive
ETag: "635bb16a-c90"
Expires: Wed, 11 Jan 2023 22:07:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size:   3216
Md5:    098f98c68956aee80ee2c446fb33af6a
Sha1:   a90cfc691c56d1fa251b38a320c7eddbaea06192
Sha256: a02c3066676051b590e710c23d26b969628c1311d7986d767a33c6f0e4cf040a
                                        
                                            GET /imgs/9999/banner6.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:01 GMT
Content-Length: 241333
Last-Modified: Fri, 28 Oct 2022 10:39:47 GMT
Connection: keep-alive
ETag: "635bb173-3aeb5"
Expires: Wed, 11 Jan 2023 22:07:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:05:15 14:36:19], progressive, precision 8, 835x436, components 3\012- data
Size:   241333
Md5:    abe9bfff04d9bcafd48d8a16d666d903
Sha1:   c6ce2893d305c02c4d6a79b36899d26222ec239e
Sha256: 5f0895b202bfd1d0158c3e7577ad5b4023e7843ebafc0c410ae169fb9c5e885a
                                        
                                            GET /imgs/9999/banner4.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:07:01 GMT
Content-Length: 414978
Last-Modified: Fri, 28 Oct 2022 10:39:46 GMT
Connection: keep-alive
ETag: "635bb172-65502"
Expires: Wed, 11 Jan 2023 22:07:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=627, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1200 DIY-Thermocam raw data\012- (Lepton 2.x), scale 0-14402, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 0.000000, slope 795521.875000], progressive, precision 8, 1200x627, components 3\012- data
Size:   414978
Md5:    96ddb87ec0531fe844823e22778f937b
Sha1:   64a85d31d485b830ef955a6beece3e832442ae77
Sha256: d2f54ec6284f36f09443e1ed7d07be1b8011fe3d5820e7b971b38a7968b58116
                                        
                                            GET /imgs/9999/7.jpg HTTP/1.1 
Host: hotlive78.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hotlive78.vip/

                                        
                                             34.124.134.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 12 Dec 2022 22:06:58 GMT
Content-Length: 1211088
Last-Modified: Fri, 28 Oct 2022 10:39:43 GMT
Connection: keep-alive
ETag: "635bb16f-127ad0"
Expires: Wed, 11 Jan 2023 22:06:58 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1536x2048, components 3\012- data
Size:   1211088
Md5:    9c78b7b163ea5947526664ee293f669e
Sha1:   1f224f813ccd40bb9adae219e2fc82c90a6af7ff
Sha256: 852ae727492645d02d45dfac45119bd6ccc17dd4611c68f10fef60271076994d