xyclick.space/3cecf055-6663-4825-aa0e-b8498e0447ce
302 Found 0 B URL User Request GET HTTP/2 xyclick.space/3cecf055-6663-4825-aa0e-b8498e0447ce
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintAA:B1:6F:C7:4B:AB:44:88:75:E9:3E:70:05:5D:81:F0:3D:B8:99:0A
ValidityThu, 26 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /3cecf055-6663-4825-aa0e-b8498e0447ce HTTP/1.1
Host: xyclick.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 09 Sep 2023 07:22:18 GMT
content-length: 0
location: https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
set-cookie: 3cecf055-6663-4825-aa0e-b8498e0447ce-v4=ZBeN2eNxeLM1Q1ePgIjFtU4Dpyp3n0Ed7vk-EgZh0Ss; Max-Age=86400; Expires=Sun, 10-Sep-2023 07:22:18 GMT; Domain=xyclick.space; Path=/; HttpOnly
cep-v4=eXVtHMKzAoSy9b27xAXGY6XljHyA2LA_y2l4495MkKHTjecAn0pqDercO1rIgx-_wBx08uwPBQBe6FKJo6cmLJKOMY-hvmCXIajODRn4oe8OqZ3L9vpZ8oTgVymyTCiA2bZAoMWXMxV7sy5PYC8o8oAGOn75mVKOIDyBiNe1pmfu7ul27T0cW6S-aYsDeynBozIi5xto_--HH3eucFQBO-ixfSLwM3ey0td66XuACKgJBA66pCA0NXoEAPr-gxjJDb3w18k_LH7AE3odc-uq-xJg-5AhaxrWYDP02CQyT6gsldBEBN_R_-0iPz80C8lrfLwWSwNCS9p0JvmjpbjP8s06w1LT3RnDgkbgjPwNQDg; Max-Age=86400; Expires=Sun, 10-Sep-2023 07:22:18 GMT; Domain=xyclick.space; Path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sCxpLEZLrLhpsMrBkzByQAVZXZhXkm6gDYK4%2FDqB4XsuKAFuE9PjwmjF02wG%2FUgKqlCIpb15Nk%2B1ftAfdMxj4NiZMjONkbppMijlcIMUIDwSUCWZtiYCmN%2FqR%2FLsA9fh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 803dade6dea756bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/Detect.js/2.2.2/detect.min.js
200 OK 6.0 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/Detect.js/2.2.2/detect.min.js
IP
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (26227), with no line terminators
Hash 43805e47b7707f74eb54d49cf1cb5a51
733d2f72901a42ec70cf738dcacd8666022e089f
22a67790ce6b6632c0c1780e5c9edadfd7b5e306705213dfa36979d9508fe645
GET /ajax/libs/Detect.js/2.2.2/detect.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 6002
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6494253c-1772"
last-modified: Thu, 22 Jun 2023 10:41:00 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 758845
expires: Thu, 29 Aug 2024 07:22:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yJ5t%2BjV2Vve4X%2BNw0RBu7iFwTy6ipyr%2FfnlYx5ZC5W0PwnB8wovQw0RRcC5FY6whYwzFYmy%2BJ621RVvLnnS%2FvfSP%2FYGlCrmfij0TF5q6I%2Btbwh6%2FENCH30DPWfcR2fLI21HV1xIR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 803dadeadf9bb4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
jipers.live/16Vf/img/menu2.png
200 OK 1.7 kB URL GET HTTP/2 jipers.live/16Vf/img/menu2.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 36 x 36, 8-bit/color RGB, non-interlaced\012- data
Hash bc32798c28d2145f979848809ba5f858
7bc0276cd56bf6463113a9c5d33ea9aacbdb5f51
7319ffc0fdb40740b07f1a286348fa0f29676127996481b6310f3dd7f322d4ee
GET /16Vf/img/menu2.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: image/png
content-length: 1665
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-681"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/menu3.png
200 OK 1.5 kB URL GET HTTP/2 jipers.live/16Vf/img/menu3.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 36 x 36, 8-bit/color RGB, non-interlaced\012- data
Hash 860d945f4bba4b150b4c6300bdd87527
4c3f11a2902bf437bb578871f7e27625f0ae6504
bdca8ddc4aaf7200e8c215c5eedeae489626d9df23313578ac0cfe45854ea0c8
GET /16Vf/img/menu3.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: image/png
content-length: 1483
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-5cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/menu4.png
200 OK 1.8 kB URL GET HTTP/2 jipers.live/16Vf/img/menu4.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 36 x 36, 8-bit/color RGB, non-interlaced\012- data
Hash 7af58322b67083908a8519d74471f47d
256a9119feb235759cf98f211bc6398f58c4ee43
bfab83c5a6c9c62450668ba960527fc9b17ed316a52436f0f63fd1eedcd45a3d
GET /16Vf/img/menu4.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: image/png
content-length: 1812
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-714"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/check.png
200 OK 1.9 kB URL GET HTTP/2 jipers.live/16Vf/img/check.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 35 x 34, 8-bit/color RGB, non-interlaced\012- data
Hash 1eab4e4fb7a147352b0027c0e4df1fe6
99e621180265541383f5c081cd6f7c77b7d21e0d
a66a5ce08b112086075a336e9f18d5cea683143b552a50641971ef00d3895207
GET /16Vf/img/check.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: image/png
content-length: 1946
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-79a"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/icon1.png
200 OK 5.9 kB URL GET HTTP/2 jipers.live/16Vf/img/icon1.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 139 x 130, 8-bit/color RGB, non-interlaced\012- data
Hash fa6582524d715994e9d9036eca9b034b
06cce1b23faba93959df12a9eccaa3d6f51341ce
cf05a371ab1261c3e1f2785e26c95cc5869b37de15c9d48206e78a58894a0cdc
GET /16Vf/img/icon1.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: image/png
content-length: 5928
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-1728"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/info.png
200 OK 1.5 kB URL GET HTTP/2 jipers.live/16Vf/img/info.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 23 x 20, 8-bit/color RGB, non-interlaced\012- data
Hash 7f7b44979afb15dfdc18e7d754c6d0f5
7426889578a3a6f20f620611f7ea8d4dadaf3b87
cb2eff4a1cf5f187eda87e71d6039f24af63844617a7f890070b9afd5c965a33
GET /16Vf/img/info.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: image/png
content-length: 1545
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-609"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/icon2.png
200 OK 4.9 kB URL GET HTTP/2 jipers.live/16Vf/img/icon2.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 152 x 121, 8-bit/color RGB, non-interlaced\012- data
Hash a0f86853c68b824dd5c15b0fae66fdfe
0c8ba75f1370ba3c10a309be4c1c96a5067c6098
f58fdb3b3ba6dc0943458179df29efb7201b84ff2edbf03d9ad5cb26c4e52917
GET /16Vf/img/icon2.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: image/png
content-length: 4856
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-12f8"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/icon3.png
200 OK 5.9 kB URL GET HTTP/2 jipers.live/16Vf/img/icon3.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 137 x 131, 8-bit/color RGB, non-interlaced\012- data
Hash 8a07f71c9d0642e8b94bd2b9687c768f
fb2f6f1a6a421101a4b10c315f340d0565709abf
e77edd6c132664f48fb66468de2e1b5068d61e9f04e03d6a51668b14d00af0ed
GET /16Vf/img/icon3.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: image/png
content-length: 5904
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-1710"
accept-ranges: bytes
X-Firefox-Spdy: h2
aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
200 OK 17 kB URL User Request GET HTTP/2 aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
IP
Certificate IssuerGoogle Trust Services LLC
Subjectaymobi.online
FingerprintC7:82:E1:9C:FC:BD:DD:0B:FE:BA:CD:F5:8E:4E:3F:89:DB:CD:EA:55
ValidityThu, 20 Jul 2023 15:27:24 GMT - Wed, 18 Oct 2023 15:27:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash ed772592c3a34773bc536a1c8f00090b
ee9980d740ec5d952631fad1bbb335ffa7991ee3
821e04ab0f8e5191a3e4a689e3dba8cdb17b3117f416a18d254f36f00fb0d8fa
GET /avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1 HTTP/1.1
Host: aymobi.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: text/html
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iV0Ytvo90VjL6eMSqLRpFOS6y0mxxgFiZbdcJsaVp4firKC9EIwynKWa%2FP%2FDDthXdiZLrwk9YExZ82cKku1oA7Vo68kX0WtTXaupg62uYclisEg9uvj%2FrTKN47V95QPB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 803dade88ae9b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
jipers.live/16Vf/img/menu1.png
200 OK 1.9 kB URL GET HTTP/2 jipers.live/16Vf/img/menu1.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 36 x 36, 8-bit/color RGB, non-interlaced\012- data
Hash b2b98941a9fe6bbcb6745989b3289b1e
5fb8fce5934af6d3426a37eb58b9846fa80ead39
d9efcb7b0f632cb3d2650c0c676b3c758f00c52f5d1cc5e7963dd456aaa03833
GET /16Vf/img/menu1.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: image/png
content-length: 1920
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-780"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/landings/209605/1618996856/js/main6b42.js
200 OK 870 B URL GET HTTP/2 jipers.live/16Vf/landings/209605/1618996856/js/main6b42.js
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
Hash f3d1a3ef75bc5fb650046e4046059020
e6fd3e861b9433207fa570140a008b3eccfecdae
4958d4f4f54691bc9324b844b5b94f2667b9e54d66ac3b0623d547cca2d6d7c9
GET /16Vf/landings/209605/1618996856/js/main6b42.js HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: application/javascript
content-length: 870
last-modified: Wed, 16 Nov 2022 15:40:58 GMT
etag: "6375048a-366"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/globe-alpha.png
200 OK 36 kB URL GET HTTP/2 jipers.live/16Vf/img/globe-alpha.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x860, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 568e089f59867948afa6685924507f18
f53c14257743c858f817b9233748444c24c3b6f8
16f7f871d2f26b47f061d3c77ae4ef13ec076671bed3ecafe44ccb3640af45e1
GET /16Vf/img/globe-alpha.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jipers.live/16Vf/landings/209605/1618996856/css/style6b426b42.css?1618996856
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:19 GMT
content-type: image/png
content-length: 35670
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-8b56"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/avira-white.png
200 OK 59 kB URL GET HTTP/2 jipers.live/16Vf/img/avira-white.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced\012- data
Hash 15cac20be8d4fdd074e21a4a52604d2f
fd4c43583bec2c7bfae3cb9feb2699abbc50c578
d4ad291dfcf93d75db62260b5ba53ddda1f2a9c855a3019cf7ae52c3cd936739
GET /16Vf/img/avira-white.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:19 GMT
content-type: image/png
content-length: 59078
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-e6c6"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 51e2978c4704feba75449d8861a89fd9
b52e4db9eecdc94c1279e920ff3656420fe1dfbc
e585bda3afcec6073c5cd9e4e9278c9bdabe65eea6e59bd4ec56e6a1134d5bad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:22:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 51e2978c4704feba75449d8861a89fd9
b52e4db9eecdc94c1279e920ff3656420fe1dfbc
e585bda3afcec6073c5cd9e4e9278c9bdabe65eea6e59bd4ec56e6a1134d5bad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:22:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash d16e6a04473828a5eb518bac650a29c5
940abcc82c06c90baf6d4014c9d80e18bfaaf0c3
38606c1318a5cafd37bd0cf3bd966f1548150b78616a201f07ae7b38ff7c4156
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:22:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/d=0/rs=AN8SPfrtPftKEg7PtUwWauRCo_c976LPSg/m=el_main_css
200 OK 4.0 kB URL GET HTTP/2 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/d=0/rs=AN8SPfrtPftKEg7PtUwWauRCo_c976LPSg/m=el_main_css
IP
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type ASCII text, with very long lines (20367), with no line terminators
Hash 72d3a735ccca1027f6b3afba2c93e3a7
67f8eff8d17334c59c28fc1753bf451527c7490d
c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/d=0/rs=AN8SPfrtPftKEg7PtUwWauRCo_c976LPSg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Sep 2023 20:31:19 GMT
expires: Wed, 04 Sep 2024 20:31:19 GMT
cache-control: public, max-age=31536000
age: 298260
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash d16e6a04473828a5eb518bac650a29c5
940abcc82c06c90baf6d4014c9d80e18bfaaf0c3
38606c1318a5cafd37bd0cf3bd966f1548150b78616a201f07ae7b38ff7c4156
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:22:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash b20e8badc1e24ac1860707180170cc64
fcc6a4f070f5171fdfc138909494c65fcebbcfd6
3317dad70023be07761487f567c097933c0ed148f281a191b4d2db9b6fec02e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:22:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jipers.live/16Vf/landings/209605/1618996856/js/jquery.min6b42.js
200 OK 108 kB URL GET HTTP/2 jipers.live/16Vf/landings/209605/1618996856/js/jquery.min6b42.js
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type ASCII text, with very long lines (65451)
Size 108 kB (108051 bytes)
Hash 8c926efcdfd884993f414c820fc36a19
cf579420b780e50b8bf9a2cbb049b4440660422d
8a3d1d51c1679ff965b93eb6ffa5f1cb66d67556a7d03d39b4d2cdfd05371428
GET /16Vf/landings/209605/1618996856/js/jquery.min6b42.js HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: application/javascript
last-modified: Wed, 16 Nov 2022 15:40:58 GMT
vary: Accept-Encoding
etag: W/"6375048a-1538f"
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash b20e8badc1e24ac1860707180170cc64
fcc6a4f070f5171fdfc138909494c65fcebbcfd6
3317dad70023be07761487f567c097933c0ed148f281a191b4d2db9b6fec02e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:22:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/images/branding/product/2x/translate_24dp.png
200 OK 1.8 kB URL GET HTTP/3 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/d=0/rs=AN8SPfrtPftKEg7PtUwWauRCo_c976LPSg/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Sep 2023 13:55:24 GMT
expires: Wed, 04 Sep 2024 13:55:24 GMT
cache-control: public, max-age=31536000
age: 322015
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
200 OK 3.3 kB URL GET HTTP/2 fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
IP
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6225), with no line terminators
Hash 2bd5c073a88b83ed74db88282a56ddfb
d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650
ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Sep 2023 20:35:50 GMT
expires: Wed, 04 Sep 2024 20:35:50 GMT
cache-control: public, max-age=31536000
age: 297989
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
1.4 kB URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP
Hash a3eefe14b1b4698460d992bd1673a26b
a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4
87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 09 Sep 2023 07:22:19 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=A9SBRV4jFv-1xVqOJdeWT96HrZpiC1tGCTKA5iyVrgCsIbfchAGJ7uiu1Skb8dkWUeboZLuJcPP60PbITQpUjCB-lXZUQUn_W020Ih7BmMrqDejwvVZWwzomqyQhbq8aFNEJJM7lPlfIGC99uWupxwfRwtYxErd7jyYTSqvwgPk; expires=Sun, 10-Mar-2024 07:22:19 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+430; expires=Mon, 08-Sep-2025 07:22:19 GMT; path=/; domain=.googleapis.com; Secure
expires: Sat, 09 Sep 2023 07:22:19 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL POST HTTP/3 translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser
Referer: https://aymobi.online/
Origin: https://aymobi.online
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://aymobi.online
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin
content-type: text/plain; charset=UTF-8
date: Sat, 09 Sep 2023 07:22:29 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+019; expires=Mon, 08-Sep-2025 07:22:29 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sat, 09 Sep 2023 07:22:29 GMT
cache-control: private
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL POST HTTP/3 translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Encoding: gzip
Content-Type: application/binary
Content-Length: 318
Origin: https://aymobi.online
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://aymobi.online
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Sat, 09 Sep 2023 07:22:29 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+777; expires=Mon, 08-Sep-2025 07:22:29 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sat, 09 Sep 2023 07:22:29 GMT
jipers.live/16Vf/landings/209605/1618996856/js/translate6b42.js
200 OK 1.2 kB URL GET HTTP/2 jipers.live/16Vf/landings/209605/1618996856/js/translate6b42.js
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type ASCII text, with very long lines (1223), with no line terminators
Hash 00d68d5fcbe959205761ae2eb92bda5a
e70670eba70fd9428d8ee7d8acacea623bd72d4f
994454fb2f960994c4f0721e63734138eb06498b18f1236e39d4c66de579b054
GET /16Vf/landings/209605/1618996856/js/translate6b42.js HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: application/javascript
last-modified: Wed, 16 Nov 2022 15:40:58 GMT
vary: Accept-Encoding
etag: W/"6375048a-485"
content-encoding: gzip
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
200 OK 87 kB URL GET HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (2450)
Hash 5e63df7b606ca12cdeaa33b82d2b5789
6caf9040e41598cdd81d4f7531632b56a48259b8
218e373256dbf7f9301dee2a5dd8df7dfcb69b3ee3818984c4ce0a9c89eb1abc
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 09 Sep 2023 07:22:19 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+638; expires=Mon, 08-Sep-2025 07:22:19 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jipers.live/16Vf/landings/209605/1618996856/css/style6b426b42.css?1618996856
200 OK 20 kB URL GET HTTP/2 jipers.live/16Vf/landings/209605/1618996856/css/style6b426b42.css?1618996856
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
Hash 1707651bf84c5fde130e13500a71e278
9707827c91673c7b7dbc371d2de465f8834d52f8
1d20e92d7c2479f785fc60fa41fe888c6b788fd5fb48159a81a27b715718504c
GET /16Vf/landings/209605/1618996856/css/style6b426b42.css?1618996856 HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 15:40:58 GMT
vary: Accept-Encoding
etag: W/"6375048a-4ed4"
content-encoding: gzip
X-Firefox-Spdy: h2
jipers.live/16Vf/img/logo.jpg
200 OK 16 kB URL GET HTTP/2 jipers.live/16Vf/img/logo.jpg
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash dcbaba5ccd82fe6d02fd206a21683030
228eb47edeee4c4e17a564ff065174d9cdb221cf
bb32a46a1eb78c4ce7504b42c1b4b7d1cc615bbb901ce6fae0fc77acc7e8dcb2
GET /16Vf/img/logo.jpg HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: image/jpeg
content-length: 15758
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-3d8e"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/landings/209605/1618996856/js/js.cockie.min6b42.js
200 OK 2.2 kB URL GET HTTP/2 jipers.live/16Vf/landings/209605/1618996856/js/js.cockie.min6b42.js
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type ASCII text, with very long lines (2304), with no line terminators
Hash 79218c8e4d6b9589da61b4daddd1d721
c8bdf2b44db9327ac24f0d02e2aa0bfc69097ab5
db4e31aaf6f2022d9cd8c052537ee237b0b69cd49ab27d6d29913bf401b1ea5a
GET /16Vf/landings/209605/1618996856/js/js.cockie.min6b42.js HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:22:18 GMT
content-type: application/javascript
last-modified: Wed, 16 Nov 2022 15:40:58 GMT
vary: Accept-Encoding
etag: W/"6375048a-896"
content-encoding: gzip
X-Firefox-Spdy: h2
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.VhLMa5Goqys.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp6Bt2OEGTMzKB1bcJzO6dB0ssCsA/m=el_main
200 OK 221 kB URL GET HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.VhLMa5Goqys.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp6Bt2OEGTMzKB1bcJzO6dB0ssCsA/m=el_main
IP
Requested by https://aymobi.online/avira5pre/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=m4LPz0xjIVdeItasL5-i3ArvG_DpzMTJ4OLiGugDZMBbSR60FOxp5skQY_3cARwIgTmWepIY9nfg8_-eTzCIMwIeWzFKyuPwlzv4jifkBOvyDDWeRrGf6d6MpaaIpLlCfx63bDZd1znC8Lw0kETDYA5iDqdwyx_61FOrleaXwinmYubhYv8SKuPfvTFZP5oYAMCwfI2WxjBtgJTQ9abGUi9FLsbMX0yVgYoApc53_MfohTJFttX_-bivWs2nEokxIMzdIIpWmPbgllHaa7sMkai_s6W_l9e2PpvVTIWh9k-PXp7BK83O5jKtcVVtSJuvoEV4o83haMd311bAIM94mfX4AXNl6AvzXejpSgDcfkM&lptoken=1616944724f4597538a1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
File type ASCII text, with very long lines (2009)
Size 221 kB (220812 bytes)
Hash a2a011d1e599db8ef632d98330bb23af
1424bdccf6af94e13cc47af4472870bf928a581e
f057f2ea50996360cb788c5fc87da25674f5a3b48dc1d549440ae68817597415
GET /_/translate_http/_/js/k=translate_http.tr.no.VhLMa5Goqys.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp6Bt2OEGTMzKB1bcJzO6dB0ssCsA/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 77700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Sep 2023 19:21:54 GMT
expires: Fri, 06 Sep 2024 19:21:54 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 06 Sep 2023 15:12:32 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 129625
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
188.114.96.1
104.21.64.165
142.250.74.131
164.90.204.4
0.0.0.0