| selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium |  195.201.254.201 | 200 OK | 3.4 kB |
URL User Request GET HTTP/1.1selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium IP195.201.254.201:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectselfcarewithcheng.com Fingerprint31:8E:32:03:C7:F1:F6:66:9B:9E:C1:68:5D:A4:C0:A2:AE:24:0E:8D ValidityFri, 05 Apr 2024 13:23:11 GMT - Thu, 04 Jul 2024 13:23:10 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1190) Hash8c78779388ce92720012e1dad293cdaa 244f89a435fb84ca9ff663a89f24354524a72f17 0ecc6309d755ace257951173c7d7e4bbc59e20376e478349a4fbde13595f0cb5
GET /index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium HTTP/1.1
Host: selfcarewithcheng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 03:04:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=wfdu2tb4vr; expires=Thu, 09-May-2024 03:04:59 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=wfdu2tb4vr-wfdu2tb4vr-9l37-gxyd8n-2tyd8r-1zydh9-1zydgx-ed87e7; expires=Thu, 09-May-2024 03:04:59 GMT; Max-Age=86400; path=/; secure; SameSite=none
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/css/bootstrap.min.css | 195.201.254.201 | 200 OK | 0 B |
URL GET HTTP/1.1selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/css/bootstrap.min.css IP195.201.254.201:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectselfcarewithcheng.com Fingerprint31:8E:32:03:C7:F1:F6:66:9B:9E:C1:68:5D:A4:C0:A2:AE:24:0E:8D ValidityFri, 05 Apr 2024 13:23:11 GMT - Thu, 04 Jul 2024 13:23:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landers/english_fx_royale_white_page/trade_2/css/bootstrap.min.css HTTP/1.1
Host: selfcarewithcheng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium
Cookie: uclick=wfdu2tb4vr; uclickhash=wfdu2tb4vr-wfdu2tb4vr-9l37-gxyd8n-2tyd8r-1zydh9-1zydgx-ed87e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 03:05:00 GMT
Content-Type: text/css
Content-Length: 0
Last-Modified: Thu, 28 Dec 2023 15:27:51 GMT
Connection: keep-alive
ETag: "658d93f7-0"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/css/font-awesome.min.css | 195.201.254.201 | 200 OK | 22 kB |
URL GET HTTP/1.1selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/css/font-awesome.min.css IP195.201.254.201:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectselfcarewithcheng.com Fingerprint31:8E:32:03:C7:F1:F6:66:9B:9E:C1:68:5D:A4:C0:A2:AE:24:0E:8D ValidityFri, 05 Apr 2024 13:23:11 GMT - Thu, 04 Jul 2024 13:23:10 GMT
File typeASCII text, with very long lines (21804) Hash7ad493d938ef848f52f3460b90f31820 125f8ab645d9c86096a2e51cd0f707e88a0e18fa e6b0c211def45da3c207fff07759fcd1610df7cbf17633d5e53a7fa95e81f9bf
GET /landers/english_fx_royale_white_page/trade_2/css/font-awesome.min.css HTTP/1.1
Host: selfcarewithcheng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium
Cookie: uclick=wfdu2tb4vr; uclickhash=wfdu2tb4vr-wfdu2tb4vr-9l37-gxyd8n-2tyd8r-1zydh9-1zydgx-ed87e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 03:05:00 GMT
Content-Type: text/css
Content-Length: 21966
Last-Modified: Thu, 28 Dec 2023 15:27:51 GMT
Connection: keep-alive
ETag: "658d93f7-55ce"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/css/main.css | 195.201.254.201 | 200 OK | 0 B |
URL GET HTTP/1.1selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/css/main.css IP195.201.254.201:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectselfcarewithcheng.com Fingerprint31:8E:32:03:C7:F1:F6:66:9B:9E:C1:68:5D:A4:C0:A2:AE:24:0E:8D ValidityFri, 05 Apr 2024 13:23:11 GMT - Thu, 04 Jul 2024 13:23:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landers/english_fx_royale_white_page/trade_2/css/main.css HTTP/1.1
Host: selfcarewithcheng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium
Cookie: uclick=wfdu2tb4vr; uclickhash=wfdu2tb4vr-wfdu2tb4vr-9l37-gxyd8n-2tyd8r-1zydh9-1zydgx-ed87e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 03:05:00 GMT
Content-Type: text/css
Content-Length: 0
Last-Modified: Thu, 28 Dec 2023 15:27:51 GMT
Connection: keep-alive
ETag: "658d93f7-0"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/js/bot_detector.js | 195.201.254.201 | 200 OK | 5.5 kB |
URL GET HTTP/1.1selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/js/bot_detector.js IP195.201.254.201:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectselfcarewithcheng.com Fingerprint31:8E:32:03:C7:F1:F6:66:9B:9E:C1:68:5D:A4:C0:A2:AE:24:0E:8D ValidityFri, 05 Apr 2024 13:23:11 GMT - Thu, 04 Jul 2024 13:23:10 GMT
File typeJavaScript source, ASCII text Hashebf52fedbc026e80424e831849d9a310 4c4b0028705b5ecf8c67a2fa7840f7e4dc2961d9 41d167a72190bfb6719b12223f88dd2190d20b79d39aeff2e9173896de6c59be
GET /landers/english_fx_royale_white_page/trade_2/js/bot_detector.js HTTP/1.1
Host: selfcarewithcheng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium
Cookie: uclick=wfdu2tb4vr; uclickhash=wfdu2tb4vr-wfdu2tb4vr-9l37-gxyd8n-2tyd8r-1zydh9-1zydgx-ed87e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 03:05:00 GMT
Content-Type: application/javascript
Content-Length: 5544
Last-Modified: Thu, 28 Dec 2023 15:27:51 GMT
Connection: keep-alive
ETag: "658d93f7-15a8"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/js/jquery-ui.min.js.download | 195.201.254.201 | 200 OK | 20 B |
URL GET HTTP/1.1selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/js/jquery-ui.min.js.download IP195.201.254.201:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectselfcarewithcheng.com Fingerprint31:8E:32:03:C7:F1:F6:66:9B:9E:C1:68:5D:A4:C0:A2:AE:24:0E:8D ValidityFri, 05 Apr 2024 13:23:11 GMT - Thu, 04 Jul 2024 13:23:10 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /landers/english_fx_royale_white_page/trade_2/js/jquery-ui.min.js.download HTTP/1.1
Host: selfcarewithcheng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium
Cookie: uclick=wfdu2tb4vr; uclickhash=wfdu2tb4vr-wfdu2tb4vr-9l37-gxyd8n-2tyd8r-1zydh9-1zydgx-ed87e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 03:05:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/js/jquery.js.download | 195.201.254.201 | 200 OK | 20 B |
URL GET HTTP/1.1selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/js/jquery.js.download IP195.201.254.201:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectselfcarewithcheng.com Fingerprint31:8E:32:03:C7:F1:F6:66:9B:9E:C1:68:5D:A4:C0:A2:AE:24:0E:8D ValidityFri, 05 Apr 2024 13:23:11 GMT - Thu, 04 Jul 2024 13:23:10 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /landers/english_fx_royale_white_page/trade_2/js/jquery.js.download HTTP/1.1
Host: selfcarewithcheng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium
Cookie: uclick=wfdu2tb4vr; uclickhash=wfdu2tb4vr-wfdu2tb4vr-9l37-gxyd8n-2tyd8r-1zydh9-1zydgx-ed87e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 03:05:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/img/en1.jpg | 195.201.254.201 | 200 OK | 78 kB |
URL GET HTTP/1.1selfcarewithcheng.com/landers/english_fx_royale_white_page/trade_2/img/en1.jpg IP195.201.254.201:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectselfcarewithcheng.com Fingerprint31:8E:32:03:C7:F1:F6:66:9B:9E:C1:68:5D:A4:C0:A2:AE:24:0E:8D ValidityFri, 05 Apr 2024 13:23:11 GMT - Thu, 04 Jul 2024 13:23:10 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 611x789, components 3 Hashe295f9832a6d4d7ddbc984e5c691026e 771d0ff8ff5013107208835280bfb4c38a33dedf 79bd454e6c67a8e278954d9a7f3f570015d0496bb44dfd15da5f87c7d11d0f3c
GET /landers/english_fx_royale_white_page/trade_2/img/en1.jpg HTTP/1.1
Host: selfcarewithcheng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium
Cookie: uclick=wfdu2tb4vr; uclickhash=wfdu2tb4vr-wfdu2tb4vr-9l37-gxyd8n-2tyd8r-1zydh9-1zydgx-ed87e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 03:05:00 GMT
Content-Type: image/jpeg
Content-Length: 78377
Last-Modified: Thu, 28 Dec 2023 15:27:51 GMT
Connection: keep-alive
ETag: "658d93f7-13229"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| selfcarewithcheng.com/click.php?event6=1 | 195.201.254.201 | 200 OK | 20 B |
URL GET HTTP/1.1selfcarewithcheng.com/click.php?event6=1 IP195.201.254.201:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectselfcarewithcheng.com Fingerprint31:8E:32:03:C7:F1:F6:66:9B:9E:C1:68:5D:A4:C0:A2:AE:24:0E:8D ValidityFri, 05 Apr 2024 13:23:11 GMT - Thu, 04 Jul 2024 13:23:10 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /click.php?event6=1 HTTP/1.1
Host: selfcarewithcheng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium
Cookie: uclick=wfdu2tb4vr; uclickhash=wfdu2tb4vr-wfdu2tb4vr-9l37-gxyd8n-2tyd8r-1zydh9-1zydgx-ed87e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 03:05:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 |  216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://selfcarewithcheng.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 322583
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://selfcarewithcheng.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:55:00 GMT
expires: Fri, 02 May 2025 01:55:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 522600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ouphouch.com/pfe/current/micro.tag.min.js?z=4072002&var=3&sw=/sw-check-permissions-eeb6f.js |  139.45.197.250 | 200 OK | 15 kB |
URL GET HTTP/2ouphouch.com/pfe/current/micro.tag.min.js?z=4072002&var=3&sw=/sw-check-permissions-eeb6f.js IP139.45.197.250:443
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectouphouch.com Fingerprint63:C9:F5:31:11:CD:03:30:E2:1D:68:D4:1F:4E:14:BF:08:BC:A2:EE ValidityWed, 21 Feb 2024 05:51:35 GMT - Tue, 21 May 2024 05:51:34 GMT
File typegzip compressed data, max speed, from Unix Hash1435765fec836779333fa7e687836a77 eb186745eb56090679b6345923c2426ba0952130 b5f5ab9991e0b4e45daf28b0ea101e55b60b96372094d76e416ca5a3e2197827
GET /pfe/current/micro.tag.min.js?z=4072002&var=3&sw=/sw-check-permissions-eeb6f.js HTTP/1.1
Host: ouphouch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 03:05:00 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:51 GMT
etag: W/"662a3513-9116"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ouphouch.com/zone?&pub=0&zone_id=4072002&is_mobile=false&domain=selfcarewithcheng.com&var=3&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=75031391-6dfe-4bbc-83ed-d74d3b6f2819&action=prerequest | 139.45.197.250 | 200 OK | 0 B |
URL POST HTTP/2ouphouch.com/zone?&pub=0&zone_id=4072002&is_mobile=false&domain=selfcarewithcheng.com&var=3&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=75031391-6dfe-4bbc-83ed-d74d3b6f2819&action=prerequest IP139.45.197.250:443
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectouphouch.com Fingerprint63:C9:F5:31:11:CD:03:30:E2:1D:68:D4:1F:4E:14:BF:08:BC:A2:EE ValidityWed, 21 Feb 2024 05:51:35 GMT - Tue, 21 May 2024 05:51:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4072002&is_mobile=false&domain=selfcarewithcheng.com&var=3&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=75031391-6dfe-4bbc-83ed-d74d3b6f2819&action=prerequest HTTP/1.1
Host: ouphouch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://selfcarewithcheng.com
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 03:05:00 GMT
content-length: 0
x-trace-id: cc41890a8e7b11cc8a84f69202bf796d
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://selfcarewithcheng.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| selfcarewithcheng.com/sw-check-permissions-eeb6f.js?var=3&zoneId=4072002 | 195.201.254.201 | 200 OK | 566 B |
URL GET HTTP/1.1selfcarewithcheng.com/sw-check-permissions-eeb6f.js?var=3&zoneId=4072002 IP195.201.254.201:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectselfcarewithcheng.com Fingerprint31:8E:32:03:C7:F1:F6:66:9B:9E:C1:68:5D:A4:C0:A2:AE:24:0E:8D ValidityFri, 05 Apr 2024 13:23:11 GMT - Thu, 04 Jul 2024 13:23:10 GMT
Hash663b1e69270d54fe69ef9f1f9cfbd7dd 06481bfeb1f0091649e81e5ac3261634ef9096a8 2bb264e730b33e3c41d985add7c66f1a7ef16825596b4fb39e66c785c4424625
GET /sw-check-permissions-eeb6f.js?var=3&zoneId=4072002 HTTP/1.1
Host: selfcarewithcheng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium
Cookie: uclick=wfdu2tb4vr; uclickhash=wfdu2tb4vr-wfdu2tb4vr-9l37-gxyd8n-2tyd8r-1zydh9-1zydgx-ed87e7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 03:05:00 GMT
Content-Type: application/javascript
Content-Length: 566
Last-Modified: Sun, 06 Feb 2022 02:07:49 GMT
Connection: keep-alive
ETag: "61ff2d75-236"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 534
Origin: https://selfcarewithcheng.com
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 03:05:00 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: a3d9fdba8b2a94ebd1d7d7c4d4fac0ef
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://selfcarewithcheng.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 536
Origin: https://selfcarewithcheng.com
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 03:05:00 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 37b0f18f9ae0d04c087c04f779257533
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://selfcarewithcheng.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 537
Origin: https://selfcarewithcheng.com
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 03:05:00 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 24dbb856dd3658542344de0928b5c6cb
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://selfcarewithcheng.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://selfcarewithcheng.com/
Origin: https://selfcarewithcheng.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 03:05:00 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://selfcarewithcheng.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashb7153940c5faec55124c950ae5c949a9 56db701861b219842de4c329496682b80b6b3aa3 a80110d0f46d5c39a5631914257198f26bce12e6f4b365d342ffacc6361cd61e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://selfcarewithcheng.com/
Content-Type: application/json
Content-Length: 1163
Origin: https://selfcarewithcheng.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 03:05:01 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://selfcarewithcheng.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| selfcarewithcheng.com/click.php?event3=1 | 195.201.254.201 | 200 OK | 20 B |
URL GET HTTP/1.1selfcarewithcheng.com/click.php?event3=1 IP195.201.254.201:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectselfcarewithcheng.com Fingerprint31:8E:32:03:C7:F1:F6:66:9B:9E:C1:68:5D:A4:C0:A2:AE:24:0E:8D ValidityFri, 05 Apr 2024 13:23:11 GMT - Thu, 04 Jul 2024 13:23:10 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /click.php?event3=1 HTTP/1.1
Host: selfcarewithcheng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium
Cookie: uclick=wfdu2tb4vr; uclickhash=wfdu2tb4vr-wfdu2tb4vr-9l37-gxyd8n-2tyd8r-1zydh9-1zydgx-ed87e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 03:05:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| selfcarewithcheng.com/click.php?event4=1 | 195.201.254.201 | 200 OK | 20 B |
URL GET HTTP/1.1selfcarewithcheng.com/click.php?event4=1 IP195.201.254.201:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerLet's Encrypt Subjectselfcarewithcheng.com Fingerprint31:8E:32:03:C7:F1:F6:66:9B:9E:C1:68:5D:A4:C0:A2:AE:24:0E:8D ValidityFri, 05 Apr 2024 13:23:11 GMT - Thu, 04 Jul 2024 13:23:10 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /click.php?event4=1 HTTP/1.1
Host: selfcarewithcheng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium
Cookie: uclick=wfdu2tb4vr; uclickhash=wfdu2tb4vr-wfdu2tb4vr-9l37-gxyd8n-2tyd8r-1zydh9-1zydgx-ed87e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 03:05:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| fonts.googleapis.com/css?family=Roboto:400,500,700&subset=latin,cyrillic | 142.250.74.106 | 200 OK | 6.5 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:400,500,700&subset=latin,cyrillic IP142.250.74.106:443
Requested byhttps://selfcarewithcheng.com/index.php?key=ls4j1b9142mdwu4vc0je&visitor_id=811905228461846528&cost=0.004200&zoneid=6969540&campaignid=7990670&bannerid=20494843&zone_type={zone_type}&os=android&osversion=android14&country=DZ&language=ar&isp=algerietelecommobilemobilis&user_activity=medium CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (6710), with no line terminators Hash56a1781afc8e72926afff852b938a2d8 98bd6d897c1dae0279dae77592db9094050321b2 abdf320acb36dfc9aebfdff0568e614647ebedcc01ee1bf5d1908b0ec70ca676
GET /css?family=Roboto:400,500,700&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selfcarewithcheng.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 03:05:00 GMT
date: Wed, 08 May 2024 03:05:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|