| africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium |  5.75.213.125 | 200 OK | 3.4 kB |
URL User Request GET HTTP/1.1africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium IP5.75.213.125:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectafricasalon.com FingerprintB4:E5:1E:2F:9E:EC:11:0C:C5:CB:EF:9E:05:C6:1D:97:14:DC:73:10 ValidityFri, 22 Mar 2024 14:20:07 GMT - Thu, 20 Jun 2024 14:20:06 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1190) Hashdf6671f51c71a24b03c2afed698affa3 55cbde120dea7dc31991b510bb94732bdb1d9dd5 a9cef902f446dfcae4ae9c6040abed9edee57d6ddfda71232f3f677ea1254148
GET /index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium HTTP/1.1
Host: africasalon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 04 May 2024 16:04:10 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=wfhqikq53y; expires=Sun, 05-May-2024 16:04:10 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=wfhqikq53y-wfhqikq53y-tlwh-52158n-2tqe16-1znt4k-1znty9-6e1029; expires=Sun, 05-May-2024 16:04:10 GMT; Max-Age=86400; path=/; secure; SameSite=none
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| africasalon.com/landers/english_fx_royale_white_page/trade_2/css/bootstrap.min.css | 5.75.213.125 | 200 OK | 0 B |
URL GET HTTP/1.1africasalon.com/landers/english_fx_royale_white_page/trade_2/css/bootstrap.min.css IP5.75.213.125:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectafricasalon.com FingerprintB4:E5:1E:2F:9E:EC:11:0C:C5:CB:EF:9E:05:C6:1D:97:14:DC:73:10 ValidityFri, 22 Mar 2024 14:20:07 GMT - Thu, 20 Jun 2024 14:20:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landers/english_fx_royale_white_page/trade_2/css/bootstrap.min.css HTTP/1.1
Host: africasalon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium
Cookie: uclick=wfhqikq53y; uclickhash=wfhqikq53y-wfhqikq53y-tlwh-52158n-2tqe16-1znt4k-1znty9-6e1029
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 04 May 2024 16:04:10 GMT
Content-Type: text/css
Content-Length: 0
Last-Modified: Thu, 28 Dec 2023 15:27:51 GMT
Connection: keep-alive
ETag: "658d93f7-0"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| africasalon.com/landers/english_fx_royale_white_page/trade_2/css/font-awesome.min.css | 5.75.213.125 | 200 OK | 22 kB |
URL GET HTTP/1.1africasalon.com/landers/english_fx_royale_white_page/trade_2/css/font-awesome.min.css IP5.75.213.125:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectafricasalon.com FingerprintB4:E5:1E:2F:9E:EC:11:0C:C5:CB:EF:9E:05:C6:1D:97:14:DC:73:10 ValidityFri, 22 Mar 2024 14:20:07 GMT - Thu, 20 Jun 2024 14:20:06 GMT
File typeASCII text, with very long lines (21804) Hash7ad493d938ef848f52f3460b90f31820 125f8ab645d9c86096a2e51cd0f707e88a0e18fa e6b0c211def45da3c207fff07759fcd1610df7cbf17633d5e53a7fa95e81f9bf
GET /landers/english_fx_royale_white_page/trade_2/css/font-awesome.min.css HTTP/1.1
Host: africasalon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium
Cookie: uclick=wfhqikq53y; uclickhash=wfhqikq53y-wfhqikq53y-tlwh-52158n-2tqe16-1znt4k-1znty9-6e1029
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 04 May 2024 16:04:11 GMT
Content-Type: text/css
Content-Length: 21966
Last-Modified: Thu, 28 Dec 2023 15:27:51 GMT
Connection: keep-alive
ETag: "658d93f7-55ce"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| africasalon.com/landers/english_fx_royale_white_page/trade_2/css/main.css | 5.75.213.125 | 200 OK | 0 B |
URL GET HTTP/1.1africasalon.com/landers/english_fx_royale_white_page/trade_2/css/main.css IP5.75.213.125:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectafricasalon.com FingerprintB4:E5:1E:2F:9E:EC:11:0C:C5:CB:EF:9E:05:C6:1D:97:14:DC:73:10 ValidityFri, 22 Mar 2024 14:20:07 GMT - Thu, 20 Jun 2024 14:20:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landers/english_fx_royale_white_page/trade_2/css/main.css HTTP/1.1
Host: africasalon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium
Cookie: uclick=wfhqikq53y; uclickhash=wfhqikq53y-wfhqikq53y-tlwh-52158n-2tqe16-1znt4k-1znty9-6e1029
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 04 May 2024 16:04:11 GMT
Content-Type: text/css
Content-Length: 0
Last-Modified: Thu, 28 Dec 2023 15:27:51 GMT
Connection: keep-alive
ETag: "658d93f7-0"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| africasalon.com/landers/english_fx_royale_white_page/trade_2/js/bot_detector.js | 5.75.213.125 | 200 OK | 5.5 kB |
URL GET HTTP/1.1africasalon.com/landers/english_fx_royale_white_page/trade_2/js/bot_detector.js IP5.75.213.125:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectafricasalon.com FingerprintB4:E5:1E:2F:9E:EC:11:0C:C5:CB:EF:9E:05:C6:1D:97:14:DC:73:10 ValidityFri, 22 Mar 2024 14:20:07 GMT - Thu, 20 Jun 2024 14:20:06 GMT
File typeJavaScript source, ASCII text Hashebf52fedbc026e80424e831849d9a310 4c4b0028705b5ecf8c67a2fa7840f7e4dc2961d9 41d167a72190bfb6719b12223f88dd2190d20b79d39aeff2e9173896de6c59be
GET /landers/english_fx_royale_white_page/trade_2/js/bot_detector.js HTTP/1.1
Host: africasalon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium
Cookie: uclick=wfhqikq53y; uclickhash=wfhqikq53y-wfhqikq53y-tlwh-52158n-2tqe16-1znt4k-1znty9-6e1029
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 04 May 2024 16:04:11 GMT
Content-Type: application/javascript
Content-Length: 5544
Last-Modified: Thu, 28 Dec 2023 15:27:51 GMT
Connection: keep-alive
ETag: "658d93f7-15a8"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| africasalon.com/landers/english_fx_royale_white_page/trade_2/js/jquery-ui.min.js.download | 5.75.213.125 | 200 OK | 20 B |
URL GET HTTP/1.1africasalon.com/landers/english_fx_royale_white_page/trade_2/js/jquery-ui.min.js.download IP5.75.213.125:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectafricasalon.com FingerprintB4:E5:1E:2F:9E:EC:11:0C:C5:CB:EF:9E:05:C6:1D:97:14:DC:73:10 ValidityFri, 22 Mar 2024 14:20:07 GMT - Thu, 20 Jun 2024 14:20:06 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /landers/english_fx_royale_white_page/trade_2/js/jquery-ui.min.js.download HTTP/1.1
Host: africasalon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium
Cookie: uclick=wfhqikq53y; uclickhash=wfhqikq53y-wfhqikq53y-tlwh-52158n-2tqe16-1znt4k-1znty9-6e1029
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 04 May 2024 16:04:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| africasalon.com/landers/english_fx_royale_white_page/trade_2/js/jquery.js.download | 5.75.213.125 | 200 OK | 20 B |
URL GET HTTP/1.1africasalon.com/landers/english_fx_royale_white_page/trade_2/js/jquery.js.download IP5.75.213.125:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectafricasalon.com FingerprintB4:E5:1E:2F:9E:EC:11:0C:C5:CB:EF:9E:05:C6:1D:97:14:DC:73:10 ValidityFri, 22 Mar 2024 14:20:07 GMT - Thu, 20 Jun 2024 14:20:06 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /landers/english_fx_royale_white_page/trade_2/js/jquery.js.download HTTP/1.1
Host: africasalon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium
Cookie: uclick=wfhqikq53y; uclickhash=wfhqikq53y-wfhqikq53y-tlwh-52158n-2tqe16-1znt4k-1znty9-6e1029
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 04 May 2024 16:04:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| africasalon.com/landers/english_fx_royale_white_page/trade_2/img/en1.jpg | 5.75.213.125 | 200 OK | 78 kB |
URL GET HTTP/1.1africasalon.com/landers/english_fx_royale_white_page/trade_2/img/en1.jpg IP5.75.213.125:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectafricasalon.com FingerprintB4:E5:1E:2F:9E:EC:11:0C:C5:CB:EF:9E:05:C6:1D:97:14:DC:73:10 ValidityFri, 22 Mar 2024 14:20:07 GMT - Thu, 20 Jun 2024 14:20:06 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 611x789, components 3 Hashe295f9832a6d4d7ddbc984e5c691026e 771d0ff8ff5013107208835280bfb4c38a33dedf 79bd454e6c67a8e278954d9a7f3f570015d0496bb44dfd15da5f87c7d11d0f3c
GET /landers/english_fx_royale_white_page/trade_2/img/en1.jpg HTTP/1.1
Host: africasalon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium
Cookie: uclick=wfhqikq53y; uclickhash=wfhqikq53y-wfhqikq53y-tlwh-52158n-2tqe16-1znt4k-1znty9-6e1029
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 04 May 2024 16:04:11 GMT
Content-Type: image/jpeg
Content-Length: 78377
Last-Modified: Thu, 28 Dec 2023 15:27:51 GMT
Connection: keep-alive
ETag: "658d93f7-13229"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| africasalon.com/click.php?event6=1 | 5.75.213.125 | 200 OK | 20 B |
URL GET HTTP/1.1africasalon.com/click.php?event6=1 IP5.75.213.125:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectafricasalon.com FingerprintB4:E5:1E:2F:9E:EC:11:0C:C5:CB:EF:9E:05:C6:1D:97:14:DC:73:10 ValidityFri, 22 Mar 2024 14:20:07 GMT - Thu, 20 Jun 2024 14:20:06 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /click.php?event6=1 HTTP/1.1
Host: africasalon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium
Cookie: uclick=wfhqikq53y; uclickhash=wfhqikq53y-wfhqikq53y-tlwh-52158n-2tqe16-1znt4k-1znty9-6e1029
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 04 May 2024 16:04:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 |  142.250.74.131 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.131:443
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://africasalon.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:08:19 GMT
expires: Sat, 03 May 2025 06:08:19 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 122152
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:400,500,700&subset=latin,cyrillic | 142.250.74.106 | 200 OK | 17 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:400,500,700&subset=latin,cyrillic IP142.250.74.106:443
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hashb75ab1ead2a2687852ce8b1a2afb9a8b 2972856a319b48580ad787a609d5c82af2bf7935 1866040f1f0411b67242ba2067b253efaf577710b586526680a237c725650bc3
GET /css?family=Roboto:400,500,700&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 16:04:11 GMT
date: Sat, 04 May 2024 16:04:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ouphouch.com/zone?&pub=0&zone_id=4072002&is_mobile=false&domain=africasalon.com&var=3&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=db1b8ed5-0f08-4413-9841-e7fc80a0d937&action=prerequest |  139.45.197.250 | 200 OK | 0 B |
URL POST HTTP/2ouphouch.com/zone?&pub=0&zone_id=4072002&is_mobile=false&domain=africasalon.com&var=3&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=db1b8ed5-0f08-4413-9841-e7fc80a0d937&action=prerequest IP139.45.197.250:443
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectouphouch.com Fingerprint63:C9:F5:31:11:CD:03:30:E2:1D:68:D4:1F:4E:14:BF:08:BC:A2:EE ValidityWed, 21 Feb 2024 05:51:35 GMT - Tue, 21 May 2024 05:51:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4072002&is_mobile=false&domain=africasalon.com&var=3&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=db1b8ed5-0f08-4413-9841-e7fc80a0d937&action=prerequest HTTP/1.1
Host: ouphouch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://africasalon.com
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:04:11 GMT
content-length: 0
x-trace-id: 18ff0734d214812e2785ecedda7561c2
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://africasalon.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| africasalon.com/sw-check-permissions-eeb6f.js?var=3&zoneId=4072002 | 5.75.213.125 | 200 OK | 566 B |
URL GET HTTP/1.1africasalon.com/sw-check-permissions-eeb6f.js?var=3&zoneId=4072002 IP5.75.213.125:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectafricasalon.com FingerprintB4:E5:1E:2F:9E:EC:11:0C:C5:CB:EF:9E:05:C6:1D:97:14:DC:73:10 ValidityFri, 22 Mar 2024 14:20:07 GMT - Thu, 20 Jun 2024 14:20:06 GMT
Hash663b1e69270d54fe69ef9f1f9cfbd7dd 06481bfeb1f0091649e81e5ac3261634ef9096a8 2bb264e730b33e3c41d985add7c66f1a7ef16825596b4fb39e66c785c4424625
GET /sw-check-permissions-eeb6f.js?var=3&zoneId=4072002 HTTP/1.1
Host: africasalon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium
Cookie: uclick=wfhqikq53y; uclickhash=wfhqikq53y-wfhqikq53y-tlwh-52158n-2tqe16-1znt4k-1znty9-6e1029
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 04 May 2024 16:04:11 GMT
Content-Type: application/javascript
Content-Length: 566
Last-Modified: Sun, 06 Feb 2022 02:07:49 GMT
Connection: keep-alive
ETag: "61ff2d75-236"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://africasalon.com/
Origin: https://africasalon.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:04:11 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://africasalon.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 525
Origin: https://africasalon.com
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:04:11 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: d99fe6aec5327f1efeb86a0614ebd51a
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://africasalon.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 522
Origin: https://africasalon.com
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:04:11 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 792053fa3efbf1b5c5bd24c5eef19ce5
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://africasalon.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hash2fe6d9c0d298757d5c50ffc3f9dfa6cf d458aa589458404956609ff9b377009b566f300a 16f773e21107842c0a17f979042ca802644e334b754148bb602b3bf85756de1b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://africasalon.com/
Content-Type: application/json
Content-Length: 1157
Origin: https://africasalon.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:04:11 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://africasalon.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 524
Origin: https://africasalon.com
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:04:11 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 4ecef584c868c0094be356de67e0b39a
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://africasalon.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| africasalon.com/click.php?event3=1 | 5.75.213.125 | 200 OK | 20 B |
URL GET HTTP/1.1africasalon.com/click.php?event3=1 IP5.75.213.125:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectafricasalon.com FingerprintB4:E5:1E:2F:9E:EC:11:0C:C5:CB:EF:9E:05:C6:1D:97:14:DC:73:10 ValidityFri, 22 Mar 2024 14:20:07 GMT - Thu, 20 Jun 2024 14:20:06 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /click.php?event3=1 HTTP/1.1
Host: africasalon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium
Cookie: uclick=wfhqikq53y; uclickhash=wfhqikq53y-wfhqikq53y-tlwh-52158n-2tqe16-1znt4k-1znty9-6e1029
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 04 May 2024 16:04:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| africasalon.com/click.php?event4=1 | 5.75.213.125 | 200 OK | 20 B |
URL GET HTTP/1.1africasalon.com/click.php?event4=1 IP5.75.213.125:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectafricasalon.com FingerprintB4:E5:1E:2F:9E:EC:11:0C:C5:CB:EF:9E:05:C6:1D:97:14:DC:73:10 ValidityFri, 22 Mar 2024 14:20:07 GMT - Thu, 20 Jun 2024 14:20:06 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /click.php?event4=1 HTTP/1.1
Host: africasalon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium
Cookie: uclick=wfhqikq53y; uclickhash=wfhqikq53y-wfhqikq53y-tlwh-52158n-2tqe16-1znt4k-1znty9-6e1029
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 04 May 2024 16:04:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| ouphouch.com/pfe/current/micro.tag.min.js?z=4072002&var=3&sw=/sw-check-permissions-eeb6f.js | 139.45.197.250 | 200 OK | 37 kB |
URL GET HTTP/2ouphouch.com/pfe/current/micro.tag.min.js?z=4072002&var=3&sw=/sw-check-permissions-eeb6f.js IP139.45.197.250:443
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerLet's Encrypt Subjectouphouch.com Fingerprint63:C9:F5:31:11:CD:03:30:E2:1D:68:D4:1F:4E:14:BF:08:BC:A2:EE ValidityWed, 21 Feb 2024 05:51:35 GMT - Tue, 21 May 2024 05:51:34 GMT
File typeJavaScript source, ASCII text, with very long lines (37142), with no line terminators Hash32d6dbd00a639e2cd10d1704b9159bd5 0dab4c95675393f1d0e13d20f13d80ee12e41d95 9f339e5efd7c959419a4e86bb4c5e9f07eae2ed839484846157be981917743de
GET /pfe/current/micro.tag.min.js?z=4072002&var=3&sw=/sw-check-permissions-eeb6f.js HTTP/1.1
Host: ouphouch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://africasalon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:04:11 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:53 GMT
etag: W/"662a3515-9116"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.131 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.131:443
Requested byhttps://africasalon.com/index.php?key=gfah45asigz33pv23ypn&visitor_id=810654440011866112&cost=0.005100&zoneid=4796941&campaignid=7841398&bannerid=20090470&zone_type={zone_type}&os=android&osversion=unspecified_android&country=JO&language=ar&isp=linkdotnet-jordan&user_activity=medium CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://africasalon.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Apr 2024 10:46:32 GMT
expires: Wed, 30 Apr 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 364659
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|