aymobi.online/avg5pre/AVG-Logo.png
172.67.152.243200 OK 33 kB URL GET HTTP/3 aymobi.online/avg5pre/AVG-Logo.png
IP 172.67.152.243:443
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerGoogle Trust Services LLC
Subjectaymobi.online
Fingerprint4A:B0:08:00:45:75:38:D5:A9:DD:99:14:01:A0:77:4D:68:48:47:5E
ValiditySun, 17 Sep 2023 15:58:17 GMT - Sat, 16 Dec 2023 15:58:16 GMT
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Hash 38325999c80e9ceb28d35bc689f4fb53
f343d2348bfcd28dd364835cdeaada8b023b52c6
efde53aff8ea830097edced9e212c899e57a5c2736253eff54f3a27ee8061294
GET /avg5pre/AVG-Logo.png HTTP/1.1
Host: aymobi.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 14:48:14 GMT
content-type: image/png
content-length: 33154
last-modified: Mon, 21 Aug 2023 01:05:26 GMT
etag: "64e2b856-8182"
expires: Sun, 24 Sep 2023 14:47:50 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OLIYX3XErMg1dWA4o0wySMJabOATN2ELscsZ0RPLxrvj104dJQbqk9VkJ%2BK4INRY2m1aEABHILxe50n8qooI%2B71W6Zxxh1Duc4ce4p64tYnttuwo2Y4fBFCYWdIH9fSj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b3966568f8b523-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/Detect.js/2.2.2/detect.min.js
104.17.25.14200 OK 6.0 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/Detect.js/2.2.2/detect.min.js
IP 104.17.25.14:443
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (26227), with no line terminators
Hash 43805e47b7707f74eb54d49cf1cb5a51
733d2f72901a42ec70cf738dcacd8666022e089f
22a67790ce6b6632c0c1780e5c9edadfd7b5e306705213dfa36979d9508fe645
GET /ajax/libs/Detect.js/2.2.2/detect.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:48:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 6002
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6494253c-1772"
last-modified: Thu, 22 Jun 2023 10:41:00 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1995201
expires: Thu, 12 Sep 2024 14:48:14 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rAExRl40Zo3FcXMA%2F8tuUVYsB3ZUvzLq%2Fv5B0klQRXgk9PUK8pF8LyREVhYPyjarmm03KA%2BKru8d%2BFzo41tkpShD%2BjN7HdwjIY16asVg9nbOonsvlAiV4d1mxB0a%2FU8AxPzpbSlu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80b396657fdb56be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
jipers.live/16Vf/img/menu4.png
164.90.204.4200 OK 1.8 kB URL GET HTTP/2 jipers.live/16Vf/img/menu4.png
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 36 x 36, 8-bit/color RGB, non-interlaced\012- data
Hash 7af58322b67083908a8519d74471f47d
256a9119feb235759cf98f211bc6398f58c4ee43
bfab83c5a6c9c62450668ba960527fc9b17ed316a52436f0f63fd1eedcd45a3d
GET /16Vf/img/menu4.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: image/png
content-length: 1812
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-714"
accept-ranges: bytes
X-Firefox-Spdy: h2
aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
172.67.152.243200 OK 3.5 kB URL User Request GET HTTP/2 aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
IP 172.67.152.243:443
Certificate IssuerGoogle Trust Services LLC
Subjectaymobi.online
Fingerprint4A:B0:08:00:45:75:38:D5:A9:DD:99:14:01:A0:77:4D:68:48:47:5E
ValiditySun, 17 Sep 2023 15:58:17 GMT - Sat, 16 Dec 2023 15:58:16 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash a485285fc755014d3f93272342c0d673
dc15cd2ad9fd65076a1b2258d065196a05d9ed2c
cf6946102f90dfb7cf2602bfe126beefb6a85f1c29063e8c9536eb2031b604bb
GET /avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198 HTTP/1.1
Host: aymobi.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:48:14 GMT
content-type: text/html
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jpd1d5WQrTievzdGlWGqp9qo2RD%2FHl%2BvUIs4eI%2B7JKoENQL313%2Bo9IjayDcM9hVVo%2Bpv9iGk3mFqPODxxAyiSBfAfpR5oE%2Bs9WOIM8O49ppdrQJnwC%2BYhJ8QPSGq%2FRqJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b396624fd6b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
jipers.live/16Vf/img/icon1.png
164.90.204.4200 OK 5.9 kB URL GET HTTP/2 jipers.live/16Vf/img/icon1.png
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 139 x 130, 8-bit/color RGB, non-interlaced\012- data
Hash fa6582524d715994e9d9036eca9b034b
06cce1b23faba93959df12a9eccaa3d6f51341ce
cf05a371ab1261c3e1f2785e26c95cc5869b37de15c9d48206e78a58894a0cdc
GET /16Vf/img/icon1.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: image/png
content-length: 5928
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-1728"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/info.png
164.90.204.4200 OK 1.5 kB URL GET HTTP/2 jipers.live/16Vf/img/info.png
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 23 x 20, 8-bit/color RGB, non-interlaced\012- data
Hash 7f7b44979afb15dfdc18e7d754c6d0f5
7426889578a3a6f20f620611f7ea8d4dadaf3b87
cb2eff4a1cf5f187eda87e71d6039f24af63844617a7f890070b9afd5c965a33
GET /16Vf/img/info.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: image/png
content-length: 1545
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-609"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/icon2.png
164.90.204.4200 OK 4.9 kB URL GET HTTP/2 jipers.live/16Vf/img/icon2.png
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 152 x 121, 8-bit/color RGB, non-interlaced\012- data
Hash a0f86853c68b824dd5c15b0fae66fdfe
0c8ba75f1370ba3c10a309be4c1c96a5067c6098
f58fdb3b3ba6dc0943458179df29efb7201b84ff2edbf03d9ad5cb26c4e52917
GET /16Vf/img/icon2.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: image/png
content-length: 4856
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-12f8"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/icon3.png
164.90.204.4200 OK 5.9 kB URL GET HTTP/2 jipers.live/16Vf/img/icon3.png
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 137 x 131, 8-bit/color RGB, non-interlaced\012- data
Hash 8a07f71c9d0642e8b94bd2b9687c768f
fb2f6f1a6a421101a4b10c315f340d0565709abf
e77edd6c132664f48fb66468de2e1b5068d61e9f04e03d6a51668b14d00af0ed
GET /16Vf/img/icon3.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: image/png
content-length: 5904
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-1710"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/menu1.png
164.90.204.4200 OK 1.9 kB URL GET HTTP/2 jipers.live/16Vf/img/menu1.png
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 36 x 36, 8-bit/color RGB, non-interlaced\012- data
Hash b2b98941a9fe6bbcb6745989b3289b1e
5fb8fce5934af6d3426a37eb58b9846fa80ead39
d9efcb7b0f632cb3d2650c0c676b3c758f00c52f5d1cc5e7963dd456aaa03833
GET /16Vf/img/menu1.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: image/png
content-length: 1920
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-780"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/menu2.png
164.90.204.4200 OK 1.7 kB URL GET HTTP/2 jipers.live/16Vf/img/menu2.png
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 36 x 36, 8-bit/color RGB, non-interlaced\012- data
Hash bc32798c28d2145f979848809ba5f858
7bc0276cd56bf6463113a9c5d33ea9aacbdb5f51
7319ffc0fdb40740b07f1a286348fa0f29676127996481b6310f3dd7f322d4ee
GET /16Vf/img/menu2.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: image/png
content-length: 1665
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-681"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/menu3.png
164.90.204.4200 OK 1.5 kB URL GET HTTP/2 jipers.live/16Vf/img/menu3.png
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 36 x 36, 8-bit/color RGB, non-interlaced\012- data
Hash 860d945f4bba4b150b4c6300bdd87527
4c3f11a2902bf437bb578871f7e27625f0ae6504
bdca8ddc4aaf7200e8c215c5eedeae489626d9df23313578ac0cfe45854ea0c8
GET /16Vf/img/menu3.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: image/png
content-length: 1483
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-5cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/landings/209605/1618996856/js/main6b42.js
164.90.204.4200 OK 870 B URL GET HTTP/2 jipers.live/16Vf/landings/209605/1618996856/js/main6b42.js
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
Hash f3d1a3ef75bc5fb650046e4046059020
e6fd3e861b9433207fa570140a008b3eccfecdae
4958d4f4f54691bc9324b844b5b94f2667b9e54d66ac3b0623d547cca2d6d7c9
GET /16Vf/landings/209605/1618996856/js/main6b42.js HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: application/javascript
content-length: 870
last-modified: Wed, 16 Nov 2022 15:40:58 GMT
etag: "6375048a-366"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/img/globe-alpha.png
164.90.204.4200 OK 36 kB URL GET HTTP/2 jipers.live/16Vf/img/globe-alpha.png
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x860, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 568e089f59867948afa6685924507f18
f53c14257743c858f817b9233748444c24c3b6f8
16f7f871d2f26b47f061d3c77ae4ef13ec076671bed3ecafe44ccb3640af45e1
GET /16Vf/img/globe-alpha.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jipers.live/16Vf/landings/209605/1618996856/css/style6b426b42.css?1618996856
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: image/png
content-length: 35670
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-8b56"
accept-ranges: bytes
X-Firefox-Spdy: h2
aymobi.online/avg5pre/AVG-Logo.png
172.67.152.243200 OK 33 kB URL GET HTTP/3 aymobi.online/avg5pre/AVG-Logo.png
IP 172.67.152.243:443
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerGoogle Trust Services LLC
Subjectaymobi.online
Fingerprint4A:B0:08:00:45:75:38:D5:A9:DD:99:14:01:A0:77:4D:68:48:47:5E
ValiditySun, 17 Sep 2023 15:58:17 GMT - Sat, 16 Dec 2023 15:58:16 GMT
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Hash 38325999c80e9ceb28d35bc689f4fb53
f343d2348bfcd28dd364835cdeaada8b023b52c6
efde53aff8ea830097edced9e212c899e57a5c2736253eff54f3a27ee8061294
GET /avg5pre/AVG-Logo.png HTTP/1.1
Host: aymobi.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Cookie: GoogleAccountsLocale_session=en; googtrans=/en/en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: image/png
content-length: 33154
last-modified: Mon, 21 Aug 2023 01:05:26 GMT
etag: "64e2b856-8182"
expires: Sun, 24 Sep 2023 14:47:50 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ddJuOY4RSRwlEhU2se1LEkeKSHCKrj8hI51%2BphraleG%2Bn4BQEyT%2FApcjeIZzHf2HYYZnFUqkcj0YnOop76Izw9JLIxJYSkcuOh8wStpJjV8Olaswe9tSajPILK%2FKJ8j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b396697cb8b523-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 8e0560c46747530b07f20c3704aecf0c
30e8a5e5b62c28ed29ef6408f9044f2d8a911db5
e5b8c6bd88bfb832b0b14cf3e17048b546cbf82d7de8d539f8fdad12794b3cb8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:48:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
216.58.207.238200 OK 31 kB URL GET HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP 216.58.207.238:443
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type gzip compressed data, max compression\012- data
Hash 45d1e5d69b34bd4946897a6131919b0a
117f267ceec6e1597eb913580e055c9dc10465ee
a3627c5a1e31c7a5477c0351025ed61c09ec39703cb75b86e774cfde03190250
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 23 Sep 2023 14:48:15 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+378; expires=Mon, 22-Sep-2025 14:48:15 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 2a9cb3694beef11368f7284821163a4d
32d723fad91ccd0c154e5d7e489266cfe596aa61
08cd4f8a916cab4a520c51bd519209ebe87f4898f10d1f1c968bce537c4d3916
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:48:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/d=0/rs=AN8SPfrtPftKEg7PtUwWauRCo_c976LPSg/m=el_main_css
142.250.74.35200 OK 4.0 kB URL GET HTTP/2 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/d=0/rs=AN8SPfrtPftKEg7PtUwWauRCo_c976LPSg/m=el_main_css
IP 142.250.74.35:443
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (20367), with no line terminators
Hash 72d3a735ccca1027f6b3afba2c93e3a7
67f8eff8d17334c59c28fc1753bf451527c7490d
c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/d=0/rs=AN8SPfrtPftKEg7PtUwWauRCo_c976LPSg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 18:36:14 GMT
expires: Fri, 20 Sep 2024 18:36:14 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 159121
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 2a9cb3694beef11368f7284821163a4d
32d723fad91ccd0c154e5d7e489266cfe596aa61
08cd4f8a916cab4a520c51bd519209ebe87f4898f10d1f1c968bce537c4d3916
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:48:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 8fe5097b12ddbaa7731f5c6d445db349
b1d9718a7e3ead4ad6c08b3c888129ddf9ba52af
3133a3d91f11eeb170b6a3149b7cceb04228b72a222187bcc374f1fbbdbf4bd3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:48:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jipers.live/16Vf/landings/209605/1618996856/css/style6b426b42.css?1618996856
164.90.204.4200 OK 82 kB URL GET HTTP/2 jipers.live/16Vf/landings/209605/1618996856/css/style6b426b42.css?1618996856
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type ASCII text, with very long lines (1660)
Hash 03bb2066d17a14ebb8f692c8366a4f9f
9ca4ab97bbdf41b22be4b58a7e35236076c435d4
f5f6247e8dcb5a784e2f6cdd313ad7d1609e13716ea4af912651aa5149d323eb
GET /16Vf/landings/209605/1618996856/css/style6b426b42.css?1618996856 HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 15:40:58 GMT
vary: Accept-Encoding
etag: W/"6375048a-4ed4"
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 8fe5097b12ddbaa7731f5c6d445db349
b1d9718a7e3ead4ad6c08b3c888129ddf9ba52af
3133a3d91f11eeb170b6a3149b7cceb04228b72a222187bcc374f1fbbdbf4bd3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:48:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/images/branding/product/2x/translate_24dp.png
142.250.74.35200 OK 1.8 kB URL GET HTTP/3 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP 142.250.74.35:443
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/d=0/rs=AN8SPfrtPftKEg7PtUwWauRCo_c976LPSg/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 14:17:19 GMT
expires: Tue, 17 Sep 2024 14:17:19 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
age: 433857
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
216.58.207.227200 OK 3.3 kB URL GET HTTP/2 fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
IP 216.58.207.227:443
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6225), with no line terminators
Hash 2bd5c073a88b83ed74db88282a56ddfb
d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650
ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 20 Sep 2023 16:41:37 GMT
expires: Thu, 19 Sep 2024 16:41:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 252399
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
142.250.74.138 1.4 kB URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP 142.250.74.138:0
Hash a3eefe14b1b4698460d992bd1673a26b
a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4
87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 23 Sep 2023 14:48:16 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=nISFbjkS8dvq-02liLciwuQk5_RrZBiBUzB1fl2TUuQP-DtHOmw4WRDNqixRqDK93fGCCC6_CioXoRaI1jsKhLHe2xqJ867C5om9TRSo-QmDXXnRPo_pw4pWuWglJReKHGZb2UJDNtJzXJwyhuIv7yqC1ynwFZriwBvMTgMlkTY; expires=Sun, 24-Mar-2024 14:48:16 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+698; expires=Mon, 22-Sep-2025 14:48:16 GMT; path=/; domain=.googleapis.com; Secure
expires: Sat, 23 Sep 2023 14:48:16 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
142.250.74.138200 OK 0 B URL POST HTTP/3 translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP 142.250.74.138:443
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser
Referer: https://aymobi.online/
Origin: https://aymobi.online
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://aymobi.online
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin
content-type: text/plain; charset=UTF-8
date: Sat, 23 Sep 2023 14:48:26 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+668; expires=Mon, 22-Sep-2025 14:48:26 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sat, 23 Sep 2023 14:48:26 GMT
cache-control: private
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
142.250.74.138200 OK 131 B URL POST HTTP/3 translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP 142.250.74.138:443
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Encoding: gzip
Content-Type: application/binary
Content-Length: 314
Origin: https://aymobi.online
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://aymobi.online
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Sat, 23 Sep 2023 14:48:26 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+144; expires=Mon, 22-Sep-2025 14:48:26 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sat, 23 Sep 2023 14:48:26 GMT
jipers.live/16Vf/img/check.png
164.90.204.4200 OK 1.9 kB URL GET HTTP/2 jipers.live/16Vf/img/check.png
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type PNG image data, 35 x 34, 8-bit/color RGB, non-interlaced\012- data
Hash 1eab4e4fb7a147352b0027c0e4df1fe6
99e621180265541383f5c081cd6f7c77b7d21e0d
a66a5ce08b112086075a336e9f18d5cea683143b552a50641971ef00d3895207
GET /16Vf/img/check.png HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: image/png
content-length: 1946
last-modified: Wed, 16 Nov 2022 15:40:54 GMT
etag: "63750486-79a"
accept-ranges: bytes
X-Firefox-Spdy: h2
jipers.live/16Vf/landings/209605/1618996856/js/jquery.min6b42.js
164.90.204.4200 OK 87 kB URL GET HTTP/2 jipers.live/16Vf/landings/209605/1618996856/js/jquery.min6b42.js
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /16Vf/landings/209605/1618996856/js/jquery.min6b42.js HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: application/javascript
last-modified: Wed, 16 Nov 2022 15:40:58 GMT
vary: Accept-Encoding
etag: W/"6375048a-1538f"
content-encoding: gzip
X-Firefox-Spdy: h2
jipers.live/16Vf/landings/209605/1618996856/js/translate6b42.js
164.90.204.4200 OK 1.2 kB URL GET HTTP/2 jipers.live/16Vf/landings/209605/1618996856/js/translate6b42.js
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type ASCII text, with very long lines (1223), with no line terminators
Hash 00d68d5fcbe959205761ae2eb92bda5a
e70670eba70fd9428d8ee7d8acacea623bd72d4f
994454fb2f960994c4f0721e63734138eb06498b18f1236e39d4c66de579b054
GET /16Vf/landings/209605/1618996856/js/translate6b42.js HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: application/javascript
last-modified: Wed, 16 Nov 2022 15:40:58 GMT
vary: Accept-Encoding
etag: W/"6375048a-485"
content-encoding: gzip
X-Firefox-Spdy: h2
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.7oys_F1j_Ks.O/d=1/exm=el_conf/ed=1/rs=AN8SPfq1hgtdi168tW40ImsstAJbL5yjCA/m=el_main
142.250.74.138200 OK 222 kB URL GET HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.7oys_F1j_Ks.O/d=1/exm=el_conf/ed=1/rs=AN8SPfq1hgtdi168tW40ImsstAJbL5yjCA/m=el_main
IP 142.250.74.138:443
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type ASCII text, with very long lines (1660)
Size 222 kB (222090 bytes)
Hash d6a5cd989485c06a7ecf8500cb064345
af916a6f31c3f695444cdeaf47449ff9b02c1809
07e4580c8a2e3079fe0704dcbe0163aac0c4be58208a370aaf61c968215be2cf
GET /_/translate_http/_/js/k=translate_http.tr.no.7oys_F1j_Ks.O/d=1/exm=el_conf/ed=1/rs=AN8SPfq1hgtdi168tW40ImsstAJbL5yjCA/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 78269
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 19:14:48 GMT
expires: Fri, 20 Sep 2024 19:14:48 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 20 Sep 2023 01:12:20 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 156808
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jipers.live/16Vf/landings/209605/1618996856/js/js.cockie.min6b42.js
164.90.204.4200 OK 2.2 kB URL GET HTTP/2 jipers.live/16Vf/landings/209605/1618996856/js/js.cockie.min6b42.js
IP 164.90.204.4:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://aymobi.online/avg5pre/?model=Firefox%20for%20Android&brand=Mozilla&os=Android&osv=Android%2013.0&cep=deFn973wM5F4knjv1GfD34VKx4-y0e4poAVLj5IfK-U-3AGCF0shKeo2kikIjtp5Y7rBdQCf6ba5VJvkwNTNa0yi5q32LpXGzhuw_ieeTPMh9j8rELcxiiVACvbENOm_AjlwPVpHYlLj01DTV1NudtlXHgCT7KgBBzL_e77jtxlmUnBFeAMxJ9LKSK5W2ibmxseUO9nQquO19Lgap3NwfCszR9DtPppwcSJ1UE_lkfV8pA0P6deUijJcr3rrzOccIPwQWKwAaL2a_bFyv4g0ZlJoUA8hAjSR-U_JjWc5AydgNHkfbdkP4Of-XPYO7_pyJbMRz85m-C2icnWj2Y4k0a3YG_UX2jC3q8FBWt_SLuNqbaBMmfbTE81Synn2UyXr&lptoken=168695c3481b22fa6198
Certificate IssuerLet's Encrypt
Subjectjipers.live
FingerprintE8:60:CC:FE:1A:C5:0B:63:77:14:E5:A0:E0:45:80:95:96:E6:51:53
ValidityThu, 17 Aug 2023 21:20:12 GMT - Wed, 15 Nov 2023 21:20:11 GMT
File type ASCII text, with very long lines (2304), with no line terminators
Hash 79218c8e4d6b9589da61b4daddd1d721
c8bdf2b44db9327ac24f0d02e2aa0bfc69097ab5
db4e31aaf6f2022d9cd8c052537ee237b0b69cd49ab27d6d29913bf401b1ea5a
GET /16Vf/landings/209605/1618996856/js/js.cockie.min6b42.js HTTP/1.1
Host: jipers.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aymobi.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:48:15 GMT
content-type: application/javascript
last-modified: Wed, 16 Nov 2022 15:40:58 GMT
vary: Accept-Encoding
etag: W/"6375048a-896"
content-encoding: gzip
X-Firefox-Spdy: h2