r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1cdc095521e9ee2606059be447d1fdd5
02b5d0a5b5823e2338daf7e144700babe2a213af
8bda3aabcf331c2bfcc4c7023cd797c760fd301dc353641bb95048e072f66c66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6873
Expires: Mon, 06 Feb 2023 15:39:05 GMT
Date: Mon, 06 Feb 2023 13:44:32 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15302
Expires: Mon, 06 Feb 2023 17:59:34 GMT
Date: Mon, 06 Feb 2023 13:44:32 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3540
Expires: Mon, 06 Feb 2023 14:43:32 GMT
Date: Mon, 06 Feb 2023 13:44:32 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Feb 2023 13:34:04 GMT
content-type: application/json
age: 628
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2rag4zplH8dmGtgO0uw3/KYlQ8r7Bglyp8+sP8yC54NorxkETHoBR9kcrCxCwJh4E+X2UidGxnc=
x-amz-request-id: JNNAF4M2JACHSVGB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Feb 2023 12:53:42 GMT
age: 3050
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
40hotlive.vip/
34.124.152.248200 OK 4.0 kB IP 34.124.152.248:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 4f8338630d0ff6d1048f38448855a77f
af1214c4ed3e5771cc814b40d03a86ce0a703bd9
fdffacf25fb701e1793c97f05efedd5c96f8ba18bb811015265233f4e8b3790f
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:32 GMT
Content-Type: text/html
Last-Modified: Fri, 28 Oct 2022 11:03:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb6fe-3569"
Content-Encoding: gzip
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 13:44:32 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 9206c3ba6d5a17d62244c438fd03496e
069e8257aebe618953434b1299d065540125a512
937d395fed398e9410f75945e80f607f3146458b48cd47ba7249536ca2195817
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 13:44:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-NMQZ5ZQV8E
142.250.74.168200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-NMQZ5ZQV8E
IP 142.250.74.168:0
File type ASCII text, with very long lines (21849)
Hash df006b0d332bcfefc61b472c97d52acc
9bb572eeeb8d2a64eab24466951266be958df0ab
56890ac743ba84f57a88c00d9823b36dcf29a14cbfda6430dd78b640c2f36102
GET /gtag/js?id=G-NMQZ5ZQV8E HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://40hotlive.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 13:44:33 GMT
expires: Mon, 06 Feb 2023 13:44:33 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77617
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 9206c3ba6d5a17d62244c438fd03496e
069e8257aebe618953434b1299d065540125a512
937d395fed398e9410f75945e80f607f3146458b48cd47ba7249536ca2195817
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 13:44:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
40hotlive.vip/css/m.css
34.124.152.248200 OK 5.3 kB IP 34.124.152.248:0
File type Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash 16261ac238029acfedf1a5dfd1e60d59
c7e844ab3cf5907a6a333c0929a1546bcee726aa
0dd8fcbfe0cfdeb530ab9a1c0b5f04e7f633b610b79169083c20cf6c4c5c9f96
GET /css/m.css HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: text/css
Last-Modified: Fri, 28 Oct 2022 10:39:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb17a-63b7"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
40hotlive.vip/css/swiper.min.css
34.124.152.248200 OK 3.7 kB URL HTTP/1.1 40hotlive.vip/css/swiper.min.css
IP 34.124.152.248:0
File type ASCII text, with very long lines (1467), with CRLF, LF line terminators
Hash 1dc88e7343536b78fb6680865e5f204a
4ae87307b6dad22922644c8bf8375ee13169a5ef
987d591891eca26aa57207b238b8b2bf6967d6c68b7247beed4eee445e891fc8
GET /css/swiper.min.css HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: text/css
Last-Modified: Fri, 28 Oct 2022 10:39:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb17b-56ad"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 417beeb0deeb0e8b8c54092133e78daf
6d0d08159e6853af9b2acf778cee4d8a61f7f05b
66f2870a36733032ac51ad78c057a144c403321860869c74295b49f41dd8bc44
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6211
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 13:44:33 GMT
Etag: "63e0434a-2d7"
Last-Modified: Mon, 06 Feb 2023 12:01:02 GMT
Server: ECS (amb/6B9A)
X-Cache: HIT
Content-Length: 727
s1.pstatp.com/cdn/expire-1-M/font-awesome/4.6.0/css/font-awesome.min.css
163.171.140.79200 OK 6.6 kB URL HTTP/1.1 s1.pstatp.com/cdn/expire-1-M/font-awesome/4.6.0/css/font-awesome.min.css
IP 163.171.140.79:0
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (28596)
Hash 43daacfa7c905c71f929e2e01e6c72bb
d876d0b56e5bf5c7ca6e38e66c23b46f169572bb
7b0bb91fde48bb02c2e9fe0f704eaa35a868b4e591d9c1e76b8f1dfd6dbc22d3
GET /cdn/expire-1-M/font-awesome/4.6.0/css/font-awesome.min.css HTTP/1.1
Host: s1.pstatp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://40hotlive.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 13 Feb 2023 03:40:24 GMT
Server: nginx
Last-Modified: Sat, 22 Jan 2022 22:34:23 GMT
ETag: W/"61ec866f-7057"
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
x-tt-trace-host: 011edc5a70b6b92e22b8ea20835f19b099f28c14f758f8767aba295eee64817c4fe39f86df5ff4d26279da0b0f423119b125b7eada9f6f7bede516a4a70737227697fc5c61524fcbffccb8e0119f15462e16347bd3486a8fac1ce6c5df057c4ecbda8c5f2c4f1ff04003bb0c6bf812ed69
X-Cache-new: HIT
Age: 1
X-Via: 1.1 PSzjnbsxjm101:4 (Cdn Cache Server V2.0), 1.1 PS-000-010U9202:13 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1vj92:4 (Cdn Cache Server V2.0)
x-response-cache: edge_hit
server-timing: cdn-cache;desc=hit,edge;dur=0
x-tt-trace-tag: id=01;cdn-cache=hit;type=static
X-Ws-Request-Id: 63e10441_PShlamstdAMS1vj92_47324-55749
Ws-S2h-Acc-Level: 1
Timing-Allow-Origin: *
X-Response-Cinfo: 91.90.42.154
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, Pragma, Alert, Cache-Control, Content-Length, Expires, Retry-After, Backoff, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Feb 2023 13:07:20 GMT
age: 2233
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
40hotlive.vip/js/md5.js
34.124.152.248200 OK 3.4 kB IP 34.124.152.248:0
Hash fcecd72140f300d5c3e7a13d5b27a291
6e6c10786ad218bd421e4adc5919056744026ccc
0222f71f04b4d17dfbbf62059c0a01b2ccc9b309224098e8549ffde1f76cd084
Analyzer Verdict Alert fortinet Phishing
GET /js/md5.js HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: application/javascript
Last-Modified: Fri, 28 Oct 2022 10:39:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb168-2d26"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
40hotlive.vip/js/newmain.js
34.124.152.248200 OK 2.2 kB URL HTTP/1.1 40hotlive.vip/js/newmain.js
IP 34.124.152.248:0
File type ASCII text, with CRLF, LF line terminators
Hash 65629c172e8677d103813c76930e10a9
4976f50ae8a6092b6078abc7bdfca451b71dd949
691199115b1241f8038a8deb315fb2708c9f03fc2590a46e530aea456f87e4a1
Analyzer Verdict Alert fortinet Phishing
GET /js/newmain.js HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: application/javascript
Last-Modified: Fri, 28 Oct 2022 10:39:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb169-16ea"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6013
Expires: Mon, 06 Feb 2023 15:24:46 GMT
Date: Mon, 06 Feb 2023 13:44:33 GMT
Connection: keep-alive
40hotlive.vip/js/crypto-js.min.js
34.124.152.248200 OK 23 kB URL HTTP/1.1 40hotlive.vip/js/crypto-js.min.js
IP 34.124.152.248:0
File type ASCII text, with CRLF line terminators
Hash 52d3eada479c35c52078b9872effa30e
9aa0a219b02599b3e2b11aaa73c3f5e8bce0fda9
fa26558cf1f523a8a37dff199dced37b76723d82a1da1aee4aca23ab918100ec
Analyzer Verdict Alert fortinet Phishing
GET /js/crypto-js.min.js HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: application/javascript
Last-Modified: Fri, 28 Oct 2022 10:39:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb167-11c44"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
40hotlive.vip/js/clipboard.js
34.124.152.248200 OK 6.3 kB URL HTTP/1.1 40hotlive.vip/js/clipboard.js
IP 34.124.152.248:0
File type Unicode text, UTF-8 text, with very long lines (849)
Hash 0e2e0b7f32259de61fdcb160edd598eb
69464357cbf44f99606eda0143659b4de7eca435
df49db5c6021dab863b9a5493328ab1fc40d0ddb7d2bcdc763c92babd10fa116
Analyzer Verdict Alert fortinet Phishing
GET /js/clipboard.js HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: application/javascript
Last-Modified: Fri, 28 Oct 2022 10:39:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb167-6191"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
40hotlive.vip/kf/dist/lib/modernizr.touch.js
34.124.152.248200 OK 1.4 kB URL HTTP/1.1 40hotlive.vip/kf/dist/lib/modernizr.touch.js
IP 34.124.152.248:0
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 5773255f50c5343e3c7c308ff2e7f6e3
3a69235388990f3c65f32dc4f2329b901ebb3ea1
03d9e67142344d5d84533146911a0bf14298091d11b9c2341d4c5abefb1260f8
Analyzer Verdict Alert fortinet Phishing
GET /kf/dist/lib/modernizr.touch.js HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: application/javascript
Last-Modified: Fri, 28 Oct 2022 10:39:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb165-bb9"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
40hotlive.vip/js/mobile-detect.js
34.124.152.248200 OK 25 kB URL HTTP/1.1 40hotlive.vip/js/mobile-detect.js
IP 34.124.152.248:0
File type ASCII text, with very long lines (5442)
Hash b838e337e4b4a6778b7addffdea9f4e8
e11b8e0f7fe07536ac4e7f5b4c3d931d50a7f214
8ace32ef0021efb3a72195edcb240b9dad9b831388caaccf094710fc0986e09d
Analyzer Verdict Alert fortinet Phishing
GET /js/mobile-detect.js HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: application/javascript
Last-Modified: Fri, 28 Oct 2022 10:39:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb169-10ef1"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
40hotlive.vip/js/jquery-3.4.1.min.js
34.124.152.248200 OK 34 kB URL HTTP/1.1 40hotlive.vip/js/jquery-3.4.1.min.js
IP 34.124.152.248:0
File type ASCII text, with very long lines (65451)
Hash 45088a63622db0550345f7aa58c3e3bb
4bf834aedeaac7a1919bdb5b6ee17419b9181171
c7ca6923bc404e521d3690b3a2e7464c3c6e3e6bc618ca7cd7d6910fb188938f
Analyzer Verdict Alert fortinet Phishing
GET /js/jquery-3.4.1.min.js HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: application/javascript
Last-Modified: Fri, 28 Oct 2022 10:39:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb168-15851"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
40hotlive.vip/kf/css/index.css
34.124.152.248200 OK 2.1 kB URL HTTP/1.1 40hotlive.vip/kf/css/index.css
IP 34.124.152.248:0
File type ASCII text, with CRLF, LF line terminators
Hash 4a5a15ec61e224b465a8c041ac5a9b01
52b2030b8273f715d95179207d03e60bfc9570f7
990c6f4aefa1e7cd4031e037d8038f21219ab8c09b6a1827d163bdc0d2ec30d5
GET /kf/css/index.css HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: text/css
Last-Modified: Fri, 28 Oct 2022 10:39:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb166-1ea1"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
40hotlive.vip/kf/dist/mfb.css
34.124.152.248200 OK 5.1 kB URL HTTP/1.1 40hotlive.vip/kf/dist/mfb.css
IP 34.124.152.248:0
File type ASCII text, with very long lines (318), with CRLF line terminators
Hash da2cfe82377e95c38f84893d777fd3ab
819f3e67aa62b6dd9b3ff7700f094ddc93bc52ce
bc81cc7f9322982a3bc8905d2a648638d40563c47a26dd1f331644330dc930e5
GET /kf/dist/mfb.css HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: text/css
Last-Modified: Fri, 28 Oct 2022 10:39:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb164-8a78"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
40hotlive.vip/kf/dist/mfb.js
34.124.152.248200 OK 1.1 kB URL HTTP/1.1 40hotlive.vip/kf/dist/mfb.js
IP 34.124.152.248:0
Hash af2a254793ff0fdfc25ce2474ec9ef70
2dfb34fea687cc938b3d6afc069f06d20ecd99ff
bc130342e8dcd8dd93e50b4b8c4e163a699f02aa59933890a6161aba5593b6eb
Analyzer Verdict Alert fortinet Phishing
GET /kf/dist/mfb.js HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: application/javascript
Last-Modified: Fri, 28 Oct 2022 10:39:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb164-9fd"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
40hotlive.vip/js/swiper.min.js
34.124.152.248200 OK 41 kB URL HTTP/1.1 40hotlive.vip/js/swiper.min.js
IP 34.124.152.248:0
File type ASCII text, with very long lines (65280)
Hash d5f9930e928fdff2666cf39d8a81107c
a7ce3649f1aa7acb42061a5ef77f26e51a82b225
af58c2d320dfa9639e99738f1aea290ce75bd4c2a021fbf322e6a0916f397d4a
Analyzer Verdict Alert fortinet Phishing
GET /js/swiper.min.js HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: application/javascript
Last-Modified: Fri, 28 Oct 2022 10:39:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb16a-21d03"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
40hotlive.vip/js/flexible.js
34.124.152.248200 OK 1.1 kB URL HTTP/1.1 40hotlive.vip/js/flexible.js
IP 34.124.152.248:0
File type Unicode text, UTF-8 text, with very long lines (2435), with CRLF line terminators
Hash afc653aa2a002a71095b6900dcbebb02
b13c33af769cc52a41f57a32563a9796557c606f
129d7e79c3842a6a3434e191660f6f133bd1ed0ffad150a024cacd06a7d90aff
Analyzer Verdict Alert fortinet Phishing
GET /js/flexible.js HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: application/javascript
Last-Modified: Fri, 28 Oct 2022 10:39:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb167-9b1"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
push.services.mozilla.com/
52.25.166.168101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.25.166.168:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NNvGyN36tZHRZA13758uKg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8nTD8i1VFHfInVOEfVoYesRs7v0=
40hotlive.vip/js/axios.js
34.124.152.248200 OK 345 B URL HTTP/1.1 40hotlive.vip/js/axios.js
IP 34.124.152.248:0
Hash 9944ef9a4931ea12f95472733745eebd
6e4aad4a75610aaedec5c4eaee86fc8f0c5dee74
3bd4f4f094e5fee0cef38445fc2bfdde227f2999f1120cb631b873f02e22e10e
Analyzer Verdict Alert fortinet Phishing
GET /js/axios.js HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:33 GMT
Content-Type: application/javascript
Last-Modified: Fri, 28 Oct 2022 10:39:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"635bb166-b47d"
Expires: Tue, 07 Feb 2023 01:44:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9944ef9a4931ea12f95472733745eebd
6e4aad4a75610aaedec5c4eaee86fc8f0c5dee74
3bd4f4f094e5fee0cef38445fc2bfdde227f2999f1120cb631b873f02e22e10e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3BD4F4F094E5FEE0CEF38445FC2BFDDE227F2999F1120CB631B873F02E22E10E"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11263
Expires: Mon, 06 Feb 2023 16:52:17 GMT
Date: Mon, 06 Feb 2023 13:44:34 GMT
Connection: keep-alive
40hotlive.vip/imgs/9999/banner1.jpg
34.124.152.248200 OK 209 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/banner1.jpg
IP 34.124.152.248:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=436, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=835], progressive, precision 8, 835x436, components 3\012- data
Size 209 kB (209322 bytes)
Hash e6e9117f19fae20c85805f12e0e4ed0e
ab2ff339dc8339259ea12b40fa01b03018797524
d2bb4d29a0d5b4583d36f327cacf4805177b7639d816ba7abe4d1040f5cced29
GET /imgs/9999/banner1.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:34 GMT
Content-Type: image/jpeg
Content-Length: 209322
Last-Modified: Fri, 28 Oct 2022 10:39:44 GMT
Connection: keep-alive
ETag: "635bb170-331aa"
Expires: Wed, 08 Mar 2023 13:44:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash b1aede2a325a5dcb5d98faebbdd857cc
936ce63dc2ffeac2197c8035d0817a28ed16e50f
8c2113d8e2482505e71a617e66d5088f5aee4ebdfbf043e5104cbc6a60c804ff
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 13:44:34 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 09:46:11 GMT
Expires: Sun, 12 Feb 2023 09:46:10 GMT
Etag: "936ce63dc2ffeac2197c8035d0817a28ed16e50f"
Cache-Control: max-age=503495,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795452402d93b4fa-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f032bf56f7a173c3fcf9eb4a45782125
b4b1b40032277c004d654aa6e7d8d96867a0990a
d1ee150b1af4caa283e055f0bf63f3370cff9ed57ad5c70ea6f41fbe5036695e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1EE150B1AF4CAA283E055F0BF63F3370CFF9ED57AD5C70EA6F41FBE5036695E"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21563
Expires: Mon, 06 Feb 2023 19:43:57 GMT
Date: Mon, 06 Feb 2023 13:44:34 GMT
Connection: keep-alive
40hotlive.vip/imgs/9999/banner2.jpg
34.124.152.248200 OK 192 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/banner2.jpg
IP 34.124.152.248:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=436, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=835], progressive, precision 8, 835x436, components 3\012- data
Size 192 kB (192078 bytes)
Hash 701c1acfaa9e616f54276d89fc8bd6bb
30d5d34e568f3ff76e52ef326dbaf8b1afee1b20
09aee9d14ac49ffee3d06e76622dc931938cda5c29657f58b96dce0f3db0627b
GET /imgs/9999/banner2.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:34 GMT
Content-Type: image/jpeg
Content-Length: 192078
Last-Modified: Fri, 28 Oct 2022 10:39:45 GMT
Connection: keep-alive
ETag: "635bb171-2ee4e"
Expires: Wed, 08 Mar 2023 13:44:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/imgs/9999/banner5.jpg
34.124.152.248200 OK 165 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/banner5.jpg
IP 34.124.152.248:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=436, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=835], progressive, precision 8, 835x436, components 3\012- data
Size 165 kB (165199 bytes)
Hash 7a3e9d36770723b8acec1a76f8ecdc45
5e74e33851888ef205cbb4b3d8719337af4c8f89
69348b0a4d90c848afd929ed6ecfb5326ee681c53267ef4015af950af8ba087d
GET /imgs/9999/banner5.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:34 GMT
Content-Type: image/jpeg
Content-Length: 165199
Last-Modified: Fri, 28 Oct 2022 10:39:46 GMT
Connection: keep-alive
ETag: "635bb172-2854f"
Expires: Wed, 08 Mar 2023 13:44:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/imgs/9999/2.jpg
34.124.152.248200 OK 88 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/2.jpg
IP 34.124.152.248:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x960, components 3\012- data
Hash 939185775835646776d9ac4f84b68d83
698535bfd8e3c8e26f4a33f321f231658c5cc553
f5fcf1be5286c20e100a3eec4d2d02d6ac0555143aaa4f018063c75e78ff8c82
GET /imgs/9999/2.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:34 GMT
Content-Type: image/jpeg
Content-Length: 88294
Last-Modified: Fri, 28 Oct 2022 10:39:41 GMT
Connection: keep-alive
ETag: "635bb16d-158e6"
Expires: Wed, 08 Mar 2023 13:44:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/imgs/9999/banner3.jpg
34.124.152.248200 OK 186 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/banner3.jpg
IP 34.124.152.248:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=436, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=835], progressive, precision 8, 835x436, components 3\012- data
Size 186 kB (185451 bytes)
Hash b0366ddc8aaafc05b44d78de281814e6
5df26b2b075d4223551274a2fbbcbcc13877fc94
fa99d7642c42b0ccc797882fd356bd27af52da337c37eda4cdcedc54cb91782e
GET /imgs/9999/banner3.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:34 GMT
Content-Type: image/jpeg
Content-Length: 185451
Last-Modified: Fri, 28 Oct 2022 10:39:45 GMT
Connection: keep-alive
ETag: "635bb171-2d46b"
Expires: Wed, 08 Mar 2023 13:44:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
region1.google-analytics.com/g/collect?v=2&tid=G-NMQZ5ZQV8E>m=45je3210&_p=904929271&cid=439621919.1675691119&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675691119&sct=1&seg=0&dl=http%3A%2F%2F40hotlive.vip%2F&dt=HOTLIVE%20App%20%E2%9C%94%EF%B8%8F%20Tr%C3%B2%20ch%C6%A1i%20x%E1%BB%95%20s%E1%BB%91%20%2C%20tr%C3%B2%20ch%C6%A1i%20b%C3%B3ng%20%C4%91%C3%A1%20%2C%20c%C3%A1%20%C4%91%E1%BB%99%20%2C%20c%E1%BB%9D%20b%E1%BA%A1c%20%2C%20K%E1%BA%BFt%20b%E1%BA%A1n%2C%20tr%C3%B2%20chuy%E1%BB%87n%2C%20xem%20Show%20g%C3%A1i%20xinh&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.32.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-NMQZ5ZQV8E>m=45je3210&_p=904929271&cid=439621919.1675691119&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675691119&sct=1&seg=0&dl=http%3A%2F%2F40hotlive.vip%2F&dt=HOTLIVE%20App%20%E2%9C%94%EF%B8%8F%20Tr%C3%B2%20ch%C6%A1i%20x%E1%BB%95%20s%E1%BB%91%20%2C%20tr%C3%B2%20ch%C6%A1i%20b%C3%B3ng%20%C4%91%C3%A1%20%2C%20c%C3%A1%20%C4%91%E1%BB%99%20%2C%20c%E1%BB%9D%20b%E1%BA%A1c%20%2C%20K%E1%BA%BFt%20b%E1%BA%A1n%2C%20tr%C3%B2%20chuy%E1%BB%87n%2C%20xem%20Show%20g%C3%A1i%20xinh&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-NMQZ5ZQV8E>m=45je3210&_p=904929271&cid=439621919.1675691119&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675691119&sct=1&seg=0&dl=http%3A%2F%2F40hotlive.vip%2F&dt=HOTLIVE%20App%20%E2%9C%94%EF%B8%8F%20Tr%C3%B2%20ch%C6%A1i%20x%E1%BB%95%20s%E1%BB%91%20%2C%20tr%C3%B2%20ch%C6%A1i%20b%C3%B3ng%20%C4%91%C3%A1%20%2C%20c%C3%A1%20%C4%91%E1%BB%99%20%2C%20c%E1%BB%9D%20b%E1%BA%A1c%20%2C%20K%E1%BA%BFt%20b%E1%BA%A1n%2C%20tr%C3%B2%20chuy%E1%BB%87n%2C%20xem%20Show%20g%C3%A1i%20xinh&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://40hotlive.vip
Connection: keep-alive
Referer: http://40hotlive.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://40hotlive.vip
date: Mon, 06 Feb 2023 13:44:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api64.ipify.org/
173.231.16.75200 OK 12 B IP 173.231.16.75:0
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET / HTTP/1.1
Host: api64.ipify.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: http://40hotlive.vip
Connection: keep-alive
Referer: http://40hotlive.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://40hotlive.vip
content-type: text/plain
date: Mon, 06 Feb 2023 13:44:34 GMT
vary: Origin
content-length: 12
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6803
Expires: Mon, 06 Feb 2023 15:37:58 GMT
Date: Mon, 06 Feb 2023 13:44:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6803
Expires: Mon, 06 Feb 2023 15:37:58 GMT
Date: Mon, 06 Feb 2023 13:44:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6803
Expires: Mon, 06 Feb 2023 15:37:58 GMT
Date: Mon, 06 Feb 2023 13:44:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6803
Expires: Mon, 06 Feb 2023 15:37:58 GMT
Date: Mon, 06 Feb 2023 13:44:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ccc8078cc937b7de0b299bcee1496f1b
395f04af71767acc9516387c8b07bde08968fdfe
cf959fc4a72d80dcab20c235bec6d21eadaab87efa7a8969744cd228628ba050
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9808
x-amzn-requestid: 75cc8041-19f5-4994-96b6-b14d3c90ec6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiSFZAIAMF65g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-355d272c345c8c37595b4bb2;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T7YlRZ936VEDkBvo2YKrS3GbyEh1xzC8W-50KiODzFjTnQb-hvkKpw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 57272
etag: "395f04af71767acc9516387c8b07bde08968fdfe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9046d887fd45a0940e31a74173d17798
1ff698b9cf660165e846dfc4770f29852aedce45
0c7b0e1250aa7718b7b35b80a1442f62e94ace1fb578fb781ec8204ee96386d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10514
x-amzn-requestid: ac2a383b-833d-4dae-9bd9-43dc3d9e373d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiPEIyoAMFqUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-436bb6816b269ce45b9f8600;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RYNzle5-l5dOMPWb2Bmu_T5aIJw9NX2FKuJsej8hzpYZcgD6coH9SA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:09 GMT
age: 57266
etag: "1ff698b9cf660165e846dfc4770f29852aedce45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13572f84ad268caedcc897f2ad7b9baf
afb91ab43953e8915a2169618d2ab5e330cde0a1
0fb8b09608dc293b2084953b948cc7d8a7aa7bcb525090a7e44d5cb2a725fab3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7851
x-amzn-requestid: 11d3fe95-844b-4e5d-b31c-f99e96e2b608
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRHeEIAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-602b91422dff88a750b8e3e9;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7LXNdWi5iKCUI61c2z3spsg5_DGu1jnZ4cIACc3MCmqWP57RveBMGw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 57272
etag: "afb91ab43953e8915a2169618d2ab5e330cde0a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31cf5553-4c3f-4c6d-8dfb-d292e38275bb.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31cf5553-4c3f-4c6d-8dfb-d292e38275bb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f54c8725e5dab88b12d42876fa61b12
89c734d690981e30f9d566a7763a1870724d65aa
b8cc5148ae01e1a1fe32f56bdce71de086da320cdd8a55a746609c9773fdaf77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31cf5553-4c3f-4c6d-8dfb-d292e38275bb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9809
x-amzn-requestid: 533de5fa-8173-430e-a657-4386728723eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpc-VEGbIAMFSmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0ec1-4e160c5c2a46d2913cc8e71e;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:03:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BgSfqU3WmIhR8N86AEfaU7pXN7jIKs_lKJVD6yCSaJBl5AVx13e5hw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:54:03 GMT
etag: "89c734d690981e30f9d566a7763a1870724d65aa"
content-type: image/jpeg
age: 57032
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7158f70-9e7b-4725-8249-e7061700f1ee.webp
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7158f70-9e7b-4725-8249-e7061700f1ee.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cb0dab387816c4b691190ec83c2f0f06
9c56d516ae0178b5b0d8bbf2b16e2e7fbe25e358
6655307747227d7905f0eca1aaefda6147e4ae443fb9fb20cdb6a336aaab5b67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7158f70-9e7b-4725-8249-e7061700f1ee.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8528
x-amzn-requestid: b799da5b-d52a-4d83-bdd4-9582d39d6c5e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwCmAFYgIAMFjvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dcb159-77235f642e8a0bdb07414dcb;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 07:01:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: EN4Mi_2U_eISge5bd6JQgkg6rGJcB2cQAyhKHOZO-g_Arj6kofRo6g==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 07:27:28 GMT
age: 22627
etag: "9c56d516ae0178b5b0d8bbf2b16e2e7fbe25e358"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7dbe304b5138a360ff07a9842bcf6a7f
00572f7667e322c9ef34bc35b7998c1c172dd34c
d63c58d6c96e23c61b92272de8c2aab01f4cf85f3420cc434c05447d355b1c77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9108
x-amzn-requestid: 47a7d6da-229b-4fcc-a2c0-823f9c5e4224
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f0QLAGXgoAMFv6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63de60ac-5b8ee53114e58a056306067f;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 13:42:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6oyg-X-GTV3HeKzW4a6Sa99JNjWcZFnE8okoqeAtp6ZgkTKCDtSoAw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:46:53 GMT
age: 57462
etag: "00572f7667e322c9ef34bc35b7998c1c172dd34c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
40hotlive.vip/imgs/9999/4.jpg
34.124.152.248200 OK 68 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/4.jpg
IP 34.124.152.248:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 784x784, components 3\012- data
Hash 81282243658c7216896f8538e9b9ab21
660e7d041e532778ed14f30b90c3f6603df33445
63829b92d0be3510772e6031950af204d217c9e0b7ec0965aa8c02af81074342
GET /imgs/9999/4.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:34 GMT
Content-Type: image/jpeg
Content-Length: 67512
Last-Modified: Fri, 28 Oct 2022 10:39:42 GMT
Connection: keep-alive
ETag: "635bb16e-107b8"
Expires: Wed, 08 Mar 2023 13:44:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/imgs/9999/5.jpg
34.124.152.248200 OK 99 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/5.jpg
IP 34.124.152.248:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x960, components 3\012- data
Hash 85adb27b65698f03b09917acfde58026
86f0a49e98a0db0287998a6e9f9f110090f5beda
baae228c59df098caf413fb29b6a3e0f1f4e1db5d8f121a45feaf93ee2732294
GET /imgs/9999/5.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:34 GMT
Content-Type: image/jpeg
Content-Length: 98801
Last-Modified: Fri, 28 Oct 2022 10:39:42 GMT
Connection: keep-alive
ETag: "635bb16e-181f1"
Expires: Wed, 08 Mar 2023 13:44:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/imgs/9999/1.jpg
34.124.152.248200 OK 481 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/1.jpg
IP 34.124.152.248:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x1782, components 3\012- data
Size 481 kB (480950 bytes)
Hash f7145f78a3d379917236bcbc3310fc2b
7019ac5719e99afd414bb1be9cb16c64f8f0d9f3
4dc6648a7eb40fb90635bad0add0dd954e147f1a9288796a53ef27382206a82d
GET /imgs/9999/1.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:34 GMT
Content-Type: image/jpeg
Content-Length: 480950
Last-Modified: Fri, 28 Oct 2022 10:39:40 GMT
Connection: keep-alive
ETag: "635bb16c-756b6"
Expires: Wed, 08 Mar 2023 13:44:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/imgs/9999/banner4.jpg
34.124.152.248200 OK 415 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/banner4.jpg
IP 34.124.152.248:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=627, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1200 DIY-Thermocam raw data\012- (Lepton 2.x), scale 0-14402, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 0.000000, slope 795521.875000], progressive, precision 8, 1200x627, components 3\012- data
Size 415 kB (414978 bytes)
Hash 96ddb87ec0531fe844823e22778f937b
64a85d31d485b830ef955a6beece3e832442ae77
d2f54ec6284f36f09443e1ed7d07be1b8011fe3d5820e7b971b38a7968b58116
GET /imgs/9999/banner4.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:34 GMT
Content-Type: image/jpeg
Content-Length: 414978
Last-Modified: Fri, 28 Oct 2022 10:39:46 GMT
Connection: keep-alive
ETag: "635bb172-65502"
Expires: Wed, 08 Mar 2023 13:44:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/imgs/9999/8.jpg
34.124.152.248200 OK 82 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/8.jpg
IP 34.124.152.248:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 594x960, components 3\012- data
Hash 4cf6a694ec92a3c07f9d01e86d90f172
74c9df9b786711fbf0d99070bcfa24e80fe58e96
222a1ea2bbda18bfacf529f40d74b5ec9062917ef698696c556a5a065083f067
GET /imgs/9999/8.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:35 GMT
Content-Type: image/jpeg
Content-Length: 81454
Last-Modified: Fri, 28 Oct 2022 10:39:44 GMT
Connection: keep-alive
ETag: "635bb170-13e2e"
Expires: Wed, 08 Mar 2023 13:44:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
zodiac.tw/uploads/1565831137-BWqpk.jpg
172.104.90.184200 OK 69 kB URL HTTP/1.1 zodiac.tw/uploads/1565831137-BWqpk.jpg
IP 172.104.90.184:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 595x592, components 3\012- data
Hash 3d17e973efc841e5071d77d74290641c
b2ea0b29f9f1f0fa3833a32f55c170141cbab481
caef2bd464dba488a805c74212fd9a005c5fb6ae95764f7f46278ca7c59a8776
GET /uploads/1565831137-BWqpk.jpg HTTP/1.1
Host: zodiac.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://40hotlive.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 13:44:34 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/7.0.18
Last-Modified: Thu, 15 Aug 2019 01:05:37 GMT
ETag: "10e42-5901d78b2fa40"
Accept-Ranges: bytes
Content-Length: 69186
Connection: close
Content-Type: image/jpeg
ocsp.digicert.cn/
47.246.44.205200 OK 471 B IP 47.246.44.205:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash fdfe10a1227f31d6f6972af0be5fe9f2
04aaba5acded23129ae5d4eeb36840a8b2ba7203
9a24423aac4fa34b9ecb337e00a78f3e2b8edfb36c681c0440cced21046cf888
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Mon, 06 Feb 2023 13:44:35 GMT
Last-Modified: Sun, 05 Feb 2023 19:36:29 GMT
ETag: "63e0053d-1d7"
Expires: Tue, 07 Feb 2023 19:36:29 GMT
Cache-Control: max-age=107514
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1675691075
Via: cache14.l2de2[4,3,200-0,M], cache14.l2de2[5,0], cache2.se1[27,27,200-0,M], cache2.se1[29,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 06 Feb 2023 13:44:35 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9616756910757122943e
40hotlive.vip/imgs/9999/3.jpg
34.124.152.248200 OK 373 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/3.jpg
IP 34.124.152.248:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x2048, components 3\012- data
Size 373 kB (373031 bytes)
Hash 2d8a4237e24ee71ddc17246e8cd1a22b
e368d3583b118ec2bc8f769f16c09a76e7e28e4f
450a06f7ad35d6dbac187cf1b108ed13f5b7987d0ba0aaef33316e62bf064d54
GET /imgs/9999/3.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:34 GMT
Content-Type: image/jpeg
Content-Length: 373031
Last-Modified: Fri, 28 Oct 2022 10:39:41 GMT
Connection: keep-alive
ETag: "635bb16d-5b127"
Expires: Wed, 08 Mar 2023 13:44:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ocsp.digicert.cn/
47.246.44.205200 OK 471 B IP 47.246.44.205:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash fdfe10a1227f31d6f6972af0be5fe9f2
04aaba5acded23129ae5d4eeb36840a8b2ba7203
9a24423aac4fa34b9ecb337e00a78f3e2b8edfb36c681c0440cced21046cf888
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Mon, 06 Feb 2023 13:44:35 GMT
Last-Modified: Sun, 05 Feb 2023 19:36:29 GMT
ETag: "63e0053d-1d7"
Expires: Tue, 07 Feb 2023 19:36:29 GMT
Cache-Control: max-age=107514
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1675691076
Via: cache4.l2de2[311,311,200-0,M], cache4.l2de2[312,0], cache8.se1[338,338,200-0,M], cache8.se1[340,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 06 Feb 2023 13:44:36 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9c16756910757111977e
40hotlive.vip/images/btn.gif
34.124.152.248200 OK 52 kB URL HTTP/1.1 40hotlive.vip/images/btn.gif
IP 34.124.152.248:0
File type GIF image data, version 89a, 300 x 133\012- data
Hash 8a54c77d6abb54203588a777ffc63465
28c4ca924ff1e9345f87380df9ed5b4a9bef9220
f9a330c35754440836a87d5385ba7f63c6790eeb75b709bdc259e5ea0b46c246
GET /images/btn.gif HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/css/m.css
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:36 GMT
Content-Type: image/gif
Content-Length: 52273
Last-Modified: Fri, 28 Oct 2022 10:39:47 GMT
Connection: keep-alive
ETag: "635bb173-cc31"
Expires: Wed, 08 Mar 2023 13:44:36 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ocsp.digicert.cn/
47.246.44.205200 OK 471 B IP 47.246.44.205:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash fdfe10a1227f31d6f6972af0be5fe9f2
04aaba5acded23129ae5d4eeb36840a8b2ba7203
9a24423aac4fa34b9ecb337e00a78f3e2b8edfb36c681c0440cced21046cf888
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Mon, 06 Feb 2023 13:44:36 GMT
Last-Modified: Sun, 05 Feb 2023 19:36:29 GMT
ETag: "63e0053d-1d7"
Expires: Tue, 07 Feb 2023 19:36:29 GMT
Cache-Control: max-age=107513
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1675691076
Via: cache21.l2de2[488,488,200-0,M], cache21.l2de2[489,0], cache1.se1[512,512,200-0,M], cache1.se1[513,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 06 Feb 2023 13:44:36 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9516756910756115988e
40hotlive.vip/imgs/9999/11.jpg
34.124.152.248200 OK 251 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/11.jpg
IP 34.124.152.248:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 710x960, components 3\012- data
Size 251 kB (250914 bytes)
Hash a1af681f15df9769abca2d5b9801e44b
8fc683523e49baf85f5a7d761171ea9055ab42ea
ded07f5735873630236c6daab258976cfcb8ed2ac37855760041610b59b23c24
GET /imgs/9999/11.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:35 GMT
Content-Type: image/jpeg
Content-Length: 250914
Last-Modified: Fri, 28 Oct 2022 10:39:41 GMT
Connection: keep-alive
ETag: "635bb16d-3d422"
Expires: Wed, 08 Mar 2023 13:44:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/images/logo.png
34.124.152.248200 OK 180 kB URL HTTP/1.1 40hotlive.vip/images/logo.png
IP 34.124.152.248:0
File type PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced\012- data
Size 180 kB (180155 bytes)
Hash 61dd988b697bd424dc3516d260078058
b05977758fee75926b938ec8fe60d4afa1fa98de
58c1f18206166b204bc932d8462f2902487cf849bf1dc96d0cf7404544be3dfe
GET /images/logo.png HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:35 GMT
Content-Type: image/png
Content-Length: 180155
Last-Modified: Fri, 28 Oct 2022 10:39:50 GMT
Connection: keep-alive
ETag: "635bb176-2bfbb"
Expires: Wed, 08 Mar 2023 13:44:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/images/tag1.png
34.124.152.248200 OK 1.6 kB URL HTTP/1.1 40hotlive.vip/images/tag1.png
IP 34.124.152.248:0
File type PNG image data, 102 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash a0ab7bad2945fac4f5d32b6d1168ef47
8704729f53840a0f5377c4d943360b2e4680fb08
d93a86e425c2ca652cf756cef2d5da71adcf63bc1f0002c25bdaf5b6f34fcde8
GET /images/tag1.png HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/css/m.css
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:36 GMT
Content-Type: image/png
Content-Length: 1611
Last-Modified: Fri, 28 Oct 2022 10:39:53 GMT
Connection: keep-alive
ETag: "635bb179-64b"
Expires: Wed, 08 Mar 2023 13:44:36 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/images/distance.png
34.124.152.248200 OK 942 B URL HTTP/1.1 40hotlive.vip/images/distance.png
IP 34.124.152.248:0
File type PNG image data, 109 x 33, 8-bit gray+alpha, non-interlaced\012- data
Hash 607df472d4f8b54cebe5078f8be892e3
dfb4ce1172c23cb39b485e59b1cea9466bd028ac
60d3cb7e330086a42300742b60c5d3d05179a7f3dcb64e128ac8ff4fea512033
GET /images/distance.png HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/css/m.css
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:36 GMT
Content-Type: image/png
Content-Length: 942
Last-Modified: Fri, 28 Oct 2022 10:39:48 GMT
Connection: keep-alive
ETag: "635bb174-3ae"
Expires: Wed, 08 Mar 2023 13:44:36 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/images/online.png
34.124.152.248200 OK 3.3 kB URL HTTP/1.1 40hotlive.vip/images/online.png
IP 34.124.152.248:0
File type PNG image data, 76 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 2b45a03d18880b0e02320404bf61ebce
3b44c2e6cec700ffa33d3d3709a76f1261f08278
3edbafa2cea753b60b798d3408d8cf57ca55f47fa5dc8ece186d2fe20636758c
GET /images/online.png HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/css/m.css
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:36 GMT
Content-Type: image/png
Content-Length: 3253
Last-Modified: Fri, 28 Oct 2022 10:39:50 GMT
Connection: keep-alive
ETag: "635bb176-cb5"
Expires: Wed, 08 Mar 2023 13:44:36 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/imgs/9999/9.jpg
34.124.152.248200 OK 308 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/9.jpg
IP 34.124.152.248:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1350, components 3\012- data
Size 308 kB (307598 bytes)
Hash 788fb13257a68e96e5e410db0b7c6447
efc58aca277074fa2cae09d5edd04521bebbad86
21605b155fcce0654533969352729624299b6f036e30d927764643bcbb479b4a
GET /imgs/9999/9.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:35 GMT
Content-Type: image/jpeg
Content-Length: 307598
Last-Modified: Fri, 28 Oct 2022 10:39:44 GMT
Connection: keep-alive
ETag: "635bb170-4b18e"
Expires: Wed, 08 Mar 2023 13:44:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
i02piccdn.sogoucdn.com/43bb2c9766823415
61.54.94.230200 OK 38 kB URL HTTP/1.1 i02piccdn.sogoucdn.com/43bb2c9766823415
IP 61.54.94.230:0
ASN #4837 CHINA UNICOM China169 Backbone
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 499x482, components 3\012- data
Hash 15348266972cbb43ca48dffa8b213dea
4be17f0ca47de33eb501b7a19da1d54809fe63a0
4e7531997b6749fe210e1fac9d91245103f64a41bf166b0c1e899bc353612ea8
GET /43bb2c9766823415 HTTP/1.1
Host: i02piccdn.sogoucdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://40hotlive.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Mon, 12 Dec 2022 20:58:01 GMT
Cache-Control: max-age=31536000
Age: 70689
Content-Length: 38463
Accept-Ranges: bytes
X-NWS-LOG-UUID: 619893772316638375
Connection: keep-alive
Server: Lego Server
Date: Mon, 06 Feb 2023 13:44:36 GMT
X-Cache-Lookup: Cache Hit
i02piccdn.sogoucdn.com/308f572a883780e3
61.54.94.230200 OK 28 kB URL HTTP/1.1 i02piccdn.sogoucdn.com/308f572a883780e3
IP 61.54.94.230:0
ASN #4837 CHINA UNICOM China169 Backbone
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Hash e38037882a578f30cd554e8db1c6c311
43e95b92991e2d0e436f8cccddf3fd7f6a03ced2
bc1d3e16d0c6e265e41e2ae46a8490c4588a90c9dde5688e09e33c0ab3a06d1e
GET /308f572a883780e3 HTTP/1.1
Host: i02piccdn.sogoucdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://40hotlive.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Server: Lego Server
Date: Mon, 06 Feb 2023 13:44:36 GMT
Last-Modified: Wed, 07 Dec 2022 15:10:25 GMT
Cache-Control: max-age=31536000
Age: 67251
Content-Length: 27877
X-NWS-LOG-UUID: 11895116483037638397
Connection: keep-alive
X-Cache-Lookup: Cache Hit, Hit From Inner Cluster
cdn.discordapp.com/attachments/918179438494101527/982120155549171792/ezgif.com-gif-maker_1.gif
162.159.134.233403 Forbidden 7.6 kB URL HTTP/2 cdn.discordapp.com/attachments/918179438494101527/982120155549171792/ezgif.com-gif-maker_1.gif
IP 162.159.134.233:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1001)
Hash 69653598a0a36be64231d4aabfdfdbcc
582a2e14616654d9972ab0d44fa755ec875b04d7
b9fb21cb36a02b29d9f17a2081b1aea33812386f51018b53aba69d2decaea47b
GET /attachments/918179438494101527/982120155549171792/ezgif.com-gif-maker_1.gif HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://40hotlive.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Mon, 06 Feb 2023 13:44:33 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
set-cookie: __cf_bm=pvu75SAVmrk3_r7Y8x2bBndtxB0cmi5towlFdQfbSMU-1675691073-0-AfNXw9UN2PGEIOPZQ4+S3Wwbo+Afphqrs7k3SaR337degz8YOwltNxk0Y5bZo2BDIDASSTypyRelwYWxrhL6m48=; path=/; expires=Mon, 06-Feb-23 14:14:33 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tiTn24eKZUkoJYl%2BznZqgAnRRxivBMUHn62jiNg2qvGv%2BmErCo0BIxRST9a46kb0PJ0nMvKLVA%2BGzh5a%2B%2FTqfry0PCGIumpXGZZT04S8d6OqHwhs9fcgM3KSmuIw6snqKyp7EQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7954523c3fdeb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
40hotlive.vip/images/tag3.png
34.124.152.248200 OK 2.0 kB URL HTTP/1.1 40hotlive.vip/images/tag3.png
IP 34.124.152.248:0
File type PNG image data, 102 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 27db22d1e321f34f220ff7319fa12e35
f793e744ea0f48677057cff2b99057bd98aaf194
22b26a5a4f2122e973a3e6704d0882541bdb2b5e731986f61715f04bd09c7809
GET /images/tag3.png HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/css/m.css
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:36 GMT
Content-Type: image/png
Content-Length: 1957
Last-Modified: Fri, 28 Oct 2022 10:39:54 GMT
Connection: keep-alive
ETag: "635bb17a-7a5"
Expires: Wed, 08 Mar 2023 13:44:36 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/imgs/icons8-get-help.svg
34.124.152.248200 OK 1.5 kB URL HTTP/1.1 40hotlive.vip/imgs/icons8-get-help.svg
IP 34.124.152.248:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1544), with no line terminators
Hash 8557a1d1f39016a56402af80bba186a3
2d791f1626210c22fc84b3d4995e9135e6774511
ec254615c4ad7609d1a55492937efa3fbaeb891345c0f08de8e1b5508fb7963b
Analyzer Verdict Alert fortinet Phishing
GET /imgs/icons8-get-help.svg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:36 GMT
Content-Type: image/svg+xml
Content-Length: 1544
Last-Modified: Fri, 28 Oct 2022 10:39:39 GMT
Connection: keep-alive
ETag: "635bb16b-608"
Accept-Ranges: bytes
i01piccdn.sogoucdn.com/280faae1a89b21bd
113.194.51.229200 OK 23 kB URL HTTP/1.1 i01piccdn.sogoucdn.com/280faae1a89b21bd
IP 113.194.51.229:0
ASN #4837 CHINA UNICOM China169 Backbone
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Hash bd219ba8e1aa0f287149295990f93898
203408c04b78e5354cf1de55b124266cc29155b1
844b12de5a3699535086f0e0362c0070b00e028c885df04e3f84286386c71d68
GET /280faae1a89b21bd HTTP/1.1
Host: i01piccdn.sogoucdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://40hotlive.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 07 Dec 2022 23:00:02 GMT
Cache-Control: max-age=31536000
Age: 423209
Content-Length: 23411
Accept-Ranges: bytes
X-NWS-LOG-UUID: 17265142948302235827
Connection: keep-alive
Server: Lego Server
Date: Mon, 06 Feb 2023 13:44:36 GMT
X-Cache-Lookup: Cache Hit
40hotlive.vip/imgs/icons8-telegram-app.svg
34.124.152.248200 OK 826 B URL HTTP/1.1 40hotlive.vip/imgs/icons8-telegram-app.svg
IP 34.124.152.248:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (826), with no line terminators
Hash 919a6e225ffc16e8543738b5e4bd3694
0f9676ee74d73026df08e0049cebab172661dbd0
542ae3394a30f1d26fbbed6fcd567ebe01d3f23827fa915b93625af0aa8d3c36
Analyzer Verdict Alert fortinet Phishing
GET /imgs/icons8-telegram-app.svg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:36 GMT
Content-Type: image/svg+xml
Content-Length: 826
Last-Modified: Fri, 28 Oct 2022 10:39:39 GMT
Connection: keep-alive
ETag: "635bb16b-33a"
Accept-Ranges: bytes
40hotlive.vip/imgs/icons8-facebook-messenger.svg
34.124.152.248200 OK 2.4 kB URL HTTP/1.1 40hotlive.vip/imgs/icons8-facebook-messenger.svg
IP 34.124.152.248:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2438), with no line terminators
Hash d71cc5661199ea8b4a58473765550853
cc0db757696842192ea70710e78b4f9996973ac6
c692dc56f0e6094bb4cc150b0462adebf4beb4241657beb3af07c9b2373d7169
Analyzer Verdict Alert fortinet Phishing
GET /imgs/icons8-facebook-messenger.svg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:36 GMT
Content-Type: image/svg+xml
Content-Length: 2438
Last-Modified: Fri, 28 Oct 2022 10:39:38 GMT
Connection: keep-alive
ETag: "635bb16a-986"
Accept-Ranges: bytes
40hotlive.vip/imgs/icons8-chat-64.png
34.124.152.248200 OK 3.2 kB URL HTTP/1.1 40hotlive.vip/imgs/icons8-chat-64.png
IP 34.124.152.248:0
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 098f98c68956aee80ee2c446fb33af6a
a90cfc691c56d1fa251b38a320c7eddbaea06192
a02c3066676051b590e710c23d26b969628c1311d7986d767a33c6f0e4cf040a
GET /imgs/icons8-chat-64.png HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:36 GMT
Content-Type: image/png
Content-Length: 3216
Last-Modified: Fri, 28 Oct 2022 10:39:38 GMT
Connection: keep-alive
ETag: "635bb16a-c90"
Expires: Wed, 08 Mar 2023 13:44:36 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/imgs/9999/6.jpg
34.124.152.248200 OK 797 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/6.jpg
IP 34.124.152.248:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1352x2048, components 3\012- data
Size 797 kB (797098 bytes)
Hash 9e656597e521f6fa5186ad6d3841ff61
92103e5008accfef299b8e533e578b6e78c4aff3
b48947425f5ffebbd0b1494a43ca484ed5600f8854cbb92c07c7389081c3c79f
GET /imgs/9999/6.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:34 GMT
Content-Type: image/jpeg
Content-Length: 797098
Last-Modified: Fri, 28 Oct 2022 10:39:43 GMT
Connection: keep-alive
ETag: "635bb16f-c29aa"
Expires: Wed, 08 Mar 2023 13:44:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/imgs/9999/banner6.jpg
34.124.152.248200 OK 241 kB URL HTTP/1.1 40hotlive.vip/imgs/9999/banner6.jpg
IP 34.124.152.248:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:05:15 14:36:19], progressive, precision 8, 835x436, components 3\012- data
Size 241 kB (241333 bytes)
Hash abe9bfff04d9bcafd48d8a16d666d903
c6ce2893d305c02c4d6a79b36899d26222ec239e
5f0895b202bfd1d0158c3e7577ad5b4023e7843ebafc0c410ae169fb9c5e885a
GET /imgs/9999/banner6.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:36 GMT
Content-Type: image/jpeg
Content-Length: 241333
Last-Modified: Fri, 28 Oct 2022 10:39:47 GMT
Connection: keep-alive
ETag: "635bb173-3aeb5"
Expires: Wed, 08 Mar 2023 13:44:36 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
40hotlive.vip/imgs/9999/7.jpg
34.124.152.248200 OK 1.2 MB URL HTTP/1.1 40hotlive.vip/imgs/9999/7.jpg
IP 34.124.152.248:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1536x2048, components 3\012- data
Size 1.2 MB (1211088 bytes)
Hash 9c78b7b163ea5947526664ee293f669e
1f224f813ccd40bb9adae219e2fc82c90a6af7ff
852ae727492645d02d45dfac45119bd6ccc17dd4611c68f10fef60271076994d
GET /imgs/9999/7.jpg HTTP/1.1
Host: 40hotlive.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://40hotlive.vip/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 13:44:35 GMT
Content-Type: image/jpeg
Content-Length: 1211088
Last-Modified: Fri, 28 Oct 2022 10:39:43 GMT
Connection: keep-alive
ETag: "635bb16f-127ad0"
Expires: Wed, 08 Mar 2023 13:44:35 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
s167.daydaynews.cc/?url=http%3A%2F%2Fp9.pstatp.com%2Flarge%2Fpgc-image%2F00dcd7f910204e0a9b8555ab9bbf1076
188.114.96.1200 OK 0 B URL HTTP/2 s167.daydaynews.cc/?url=http%3A%2F%2Fp9.pstatp.com%2Flarge%2Fpgc-image%2F00dcd7f910204e0a9b8555ab9bbf1076
IP 188.114.96.1:0
GET /?url=http%3A%2F%2Fp9.pstatp.com%2Flarge%2Fpgc-image%2F00dcd7f910204e0a9b8555ab9bbf1076 HTTP/1.1
Host: s167.daydaynews.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://40hotlive.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 13:44:34 GMT
content-type: image/png
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XvUcgxlxCoqaVf7PWM0qJfAZ44gOBpaSOoYEkkvs1E6vjYmrV5R3lVHuKQl5zeESe4xAEWCYSWvhxxILQYaTUTaHKYQJr3paKkcImOXMbTY79tdl60VHsFrpRLzdDl2289W7gn4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7954523c7876b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2