Report - download.freeroms.com/psp_roms/y/yu-gi-oh_5ds_tag_force_6

Report Overview

Visited public
2024-03-05 02:25:43
Tags
Submit Tags
URL
download.freeroms.com/psp_roms/y/yu-gi-oh_5ds_tag_force_6_japan.zip
Finishing URL
www.freeroms.com/errorpages/404-10gb.html
IP / ASN
23.237.120.146
#174 COGENT-174
Title
Missing File

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
moleconcern.com	unknown	2022-11-04	2022-11-04 05:17:13	2024-02-14 07:42:08	1.0 kB	995 B	192.243.61.227
simplewebanalysis.com	unknown	2022-02-15	2022-02-25 05:06:25	2023-08-29 15:49:41	434 B	0 B	0.0.0.0
ocsp.netsolssl.com	8381	2005-01-31	2012-05-20 23:51:49	2024-03-04 08:54:14	660 B	1.9 kB	172.64.149.23
download.freeroms.com	unknown	1999-02-13	2012-07-01 00:02:10	2024-03-03 05:26:09	521 B	383 B	23.237.120.146
www.freeroms.com	750065	1999-02-13	2012-06-23 04:20:10	2024-03-04 02:04:15	7.8 kB	204 kB	64.235.54.28
dacmaiss.com	68570	2021-11-01	2021-11-02 03:48:17	2024-02-28 19:44:03	839 B	32 kB	139.45.197.237
combatbaskstationery.com	unknown	2022-11-03	2022-11-03 02:54:14	2024-02-25 08:31:29	922 B	18 kB	192.243.61.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-03-05	medium	combatbaskstationery.com	Sinkholed
2024-03-05	medium	moleconcern.com	Sinkholed
2024-03-05	medium	moleconcern.com	Sinkholed
2024-03-05	medium	combatbaskstationery.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	From	Size	First Seen	Last Seen
	www.freeroms.com/errorpages/404-10gb.html	ScriptElement	63 kB	2023-03-07	2024-12-19
Pretty URL www.freeroms.com/errorpages/404-10gb.html IP 64.235.54.28 ASN #26277 SERVERPOINT Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:24 Last Seen2024-12-19 19:28 Times Seen40 Hash cb7b43d08d40187b481440aa0ffca1d2 b0271600c8fe4783a882891ce11112c693207642 d6bb18846ca4d3a3de5c1d1fd29ae99671cdf77a3c625bcb7e147e1ee0ba9718 Loading...

	www.freeroms.com/errorpages/404-10gb.html	ScriptElement	445 B	2023-03-07	2024-12-19
Pretty URL www.freeroms.com/errorpages/404-10gb.html IP 64.235.54.28 ASN #26277 SERVERPOINT Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:24 Last Seen2024-12-19 19:28 Times Seen40 Hash 75664f70c2f91e11d52bb5728fdf0eb7 cecfcf1ea522516d743b298b8b062ee4f6c66f16 41f764893b561ae57966d9d1d1de3010acdc82c144e61f840460fab648ad7838 Loading...

	dacmaiss.com/tag.min.js	ScriptElement	85 kB	2024-03-05	2024-08-20
Pretty URL dacmaiss.com/tag.min.js IP 139.45.197.237 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-05 03:25 Last Seen2024-08-20 08:21 Times Seen2 Hash f93336faf0d237d921ac5c5177e1c03a 00abba298df0892d7cecf52fac873622ce0079e3 9c09f039e1abf8c16d6f49dc618ec4475962bafe4ca45eea012f8e184c7fa331 Loading...

	www.freeroms.com/js/jquery.min.js	ScriptElement	96 kB	2023-03-07	2025-07-05
Pretty URL www.freeroms.com/js/jquery.min.js IP 64.235.54.28 ASN #26277 SERVERPOINT Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-07-05 02:53 Times Seen6935 Hash 895323ed2f7258af4fae2c738c8aea49 276c87ff3e1e3155679c318938e74e5c1b76d809 ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8 Loading...

	www.freeroms.com/js/front-script.js	ScriptElement	547 B	2023-03-07	2024-12-27
Pretty URL www.freeroms.com/js/front-script.js IP 64.235.54.28 ASN #26277 SERVERPOINT Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:24 Last Seen2024-12-27 19:54 Times Seen57 Hash 623069997deee6979f41b571e8b728cb 035788635c81bb176917731fcdc655cbd2bd2270 50db1f925c9abd1ddc94afe8d5d98125b741a8ae04712ac9df007b0c5871f0b1 Loading...

	www.freeroms.com/errorpages/404-10gb.html	ScriptElement	88 kB	2023-03-09	2024-12-27
Pretty URL www.freeroms.com/errorpages/404-10gb.html IP 64.235.54.28 ASN #26277 SERVERPOINT Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-09 00:52 Last Seen2024-12-27 19:54 Times Seen56 Hash 32de7999072918ce608cd3bf9cb62e94 b68754107992736b42fc71ffa9dd51838c093830 c1492ae78710e2bdffb32814006c3ca23df1aa3b4ef75ee86650147b49e38489 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 73497a37c3561adbd8ce84e4f017b368	9 B	2023-03-07 01:03	2025-07-04 23:12
Pretty Observations First Seen2023-03-07 01:03 Last Seen2025-07-04 23:12 Times Seen3496 Hash 73497a37c3561adbd8ce84e4f017b368 9193ae73cb3dd2833be8c942714d5544bfb628c9 9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351 Loading...

HTTP Transactions (27)

URL IP Response Size

ocsp.netsolssl.com/

172.64.149.23

472 B

URL
ocsp.netsolssl.com/
IP
172.64.149.23:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
aa49ae1d9741c6c339287a69ef0d81e7
4d9fad490a84393f98dc9f51fcdef10b73cc10de
a6e48794808634a463b0cff3029a3dd64d8a2b27bbddcb0cebf3a08bbc978111

HTTP Headers

POST / HTTP/1.1
Host: ocsp.netsolssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 05 Mar 2024 02:25:18 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 02 Mar 2024 11:54:56 GMT
Expires: Sat, 09 Mar 2024 11:54:55 GMT
Etag: "4d9fad490a84393f98dc9f51fcdef10b73cc10de"
Cache-Control: max-age=379176,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 85f6a7985eed7131-OSL

GET download.freeroms.com/psp_roms/y/yu-gi-oh_5ds_tag_force_6_japan.zip

23.237.120.146

302 Found

170 B

URL User Request GET HTTP/2
download.freeroms.com/psp_roms/y/yu-gi-oh_5ds_tag_force_6_japan.zip
IP
23.237.120.146:443
ASN
#174 COGENT-174

Certificate
IssuerNetwork Solutions L.L.C.
Subjectdownload.freeroms.com
FingerprintD4:30:2C:DF:72:1B:15:B5:8C:7A:36:B3:8A:FD:8F:C1:08:DC:4E:16
ValidityTue, 15 Aug 2023 00:00:00 GMT - Sat, 14 Sep 2024 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
170 B (170 bytes)
Hash
7ae0f3a88d2b351bb1d01f84c43c009e
b0f62bbd08b044b9d9ddc60bdacf10a5568607d9
2399955144f8af99521c3ea8c6f2a5959c500f80902869cbb98d57cde2f48f89

HTTP Headers

GET /psp_roms/y/yu-gi-oh_5ds_tag_force_6_japan.zip HTTP/1.1
Host: download.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx/1.14.0 (Ubuntu)
date: Tue, 05 Mar 2024 02:25:18 GMT
content-type: text/html
content-length: 170
location: https://www.freeroms.com/errorpages/404-10gb.html
X-Firefox-Spdy: h2

ocsp.netsolssl.com/

172.64.149.23

471 B

URL
ocsp.netsolssl.com/
IP
172.64.149.23:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
24719780ea2522856739a8ed9b07a28c
685a7d9bd4e3d9fe6fd4f4af80923886a25f775d
7ad3ee89900b6b1998af32ca080fa2dc344d070c2e9e7290496a0c64ddec6709

HTTP Headers

POST / HTTP/1.1
Host: ocsp.netsolssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 05 Mar 2024 02:25:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 03 Mar 2024 02:54:47 GMT
Expires: Sun, 10 Mar 2024 02:54:46 GMT
Etag: "685a7d9bd4e3d9fe6fd4f4af80923886a25f775d"
Cache-Control: max-age=434745,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 85f6a79d49527131-OSL

GET www.freeroms.com/js/front-script.js

64.235.54.28

200 OK

295 B

URL GET HTTP/2
www.freeroms.com/js/front-script.js
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
295 B (295 bytes)
Hash
623069997deee6979f41b571e8b728cb
035788635c81bb176917731fcdc655cbd2bd2270
50db1f925c9abd1ddc94afe8d5d98125b741a8ae04712ac9df007b0c5871f0b1

HTTP Headers

GET /js/front-script.js HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/errorpages/404-10gb.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:19 GMT
content-type: application/javascript
content-length: 295
x-accel-version: 0.01
last-modified: Mon, 09 Jan 2017 06:39:35 GMT
etag: "223-545a3a17f17c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2

GET www.freeroms.com/images/logo.png

64.235.54.28

200 OK

9.8 kB

URL GET HTTP/2
www.freeroms.com/images/logo.png
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
PNG image data, 215 x 40, 8-bit/color RGB, non-interlaced
Size
9.8 kB (9831 bytes)
Hash
14cd0a179797ca4b75eafccd97c8bb29
3b28b50481b500440e2d20df8acfba80d752a090
e94da94c103e98f78880e5458d6cd022cc20d1d6412b985ef8c0b3eeafd40f5c

HTTP Headers

GET /images/logo.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/errorpages/404-10gb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:19 GMT
content-type: image/png
content-length: 9831
last-modified: Tue, 14 Jul 2015 01:10:45 GMT
etag: "55a46195-2667"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

GET www.freeroms.com/images/circuit_main_top.gif

64.235.54.28

200 OK

1.4 kB

URL GET HTTP/2
www.freeroms.com/images/circuit_main_top.gif
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
GIF image data, version 89a, 334 x 40
Size
1.4 kB (1366 bytes)
Hash
8ce66b9116fdb0a263fbbf0ec7299e1c
3f2868999529378d7e40c4acce440c0fdd0963bb
7ee186a06b35fc6499ca0fe10faa3f137fdee61cbfd4163aaba28414b8e65063

HTTP Headers

GET /images/circuit_main_top.gif HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:19 GMT
content-type: image/gif
content-length: 1366
last-modified: Tue, 14 Jul 2015 01:10:55 GMT
etag: "55a4619f-556"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

GET www.freeroms.com/images/circuit_left.gif

64.235.54.28

200 OK

3.0 kB

URL GET HTTP/2
www.freeroms.com/images/circuit_left.gif
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
GIF image data, version 89a, 12 x 320
Size
3.0 kB (3029 bytes)
Hash
f84caa56ec89113941ed4823aecea88a
dd608663197ad5cf505e06c8a16fbd42f3001153
7925efc9e31cb712e156e1b0663846dea73debe1200b125ed73dfea95efc06f6

HTTP Headers

GET /images/circuit_left.gif HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:19 GMT
content-type: image/gif
content-length: 3029
last-modified: Tue, 14 Jul 2015 01:10:52 GMT
etag: "55a4619c-bd5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

GET www.freeroms.com/images/black.png

64.235.54.28

200 OK

927 B

URL GET HTTP/2
www.freeroms.com/images/black.png
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Size
927 B (927 bytes)
Hash
6f78a7c9048c4843d819c2ab39b33b6c
99e314e4b9325f41d0d42512cbf8a4a636871ac4
486e08b2d63e05464d757f1fbf3952a74bff6ff29f9ccace92c478fe8b4e4119

HTTP Headers

GET /images/black.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:19 GMT
content-type: image/png
content-length: 927
x-accel-version: 0.01
last-modified: Tue, 14 Jul 2015 01:10:48 GMT
etag: "39f-51acb82299600"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

GET www.freeroms.com/images/nav-strip.png

64.235.54.28

200 OK

1.1 kB

URL GET HTTP/2
www.freeroms.com/images/nav-strip.png
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
PNG image data, 7 x 56, 8-bit/color RGB, non-interlaced
Size
1.1 kB (1094 bytes)
Hash
92f72da7215127fddf06584d40f1f67c
506dec643852f00b64b0a247d5ff68b1c3fe5c7e
d61ce2fb10db1c5814deedb8c6ca63ee220abba2ba29359cd053e28e84f22172

HTTP Headers

GET /images/nav-strip.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:19 GMT
content-type: image/png
content-length: 1094
last-modified: Tue, 14 Jul 2015 01:10:45 GMT
etag: "55a46195-446"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

GET www.freeroms.com/errorpages/404-10gb.html

64.235.54.28

200 OK

0 B

URL User Request GET HTTP/2
www.freeroms.com/errorpages/404-10gb.html
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

HEAD /errorpages/404-10gb.html HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/errorpages/404-10gb.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:19 GMT
content-type: text/html
content-length: 53523
x-accel-version: 0.01
last-modified: Thu, 23 Feb 2023 01:02:26 GMT
etag: "26497-5f55390f1c8b1-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2

GET www.freeroms.com/images/border.png

64.235.54.28

200 OK

938 B

URL GET HTTP/2
www.freeroms.com/images/border.png
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
PNG image data, 2 x 23, 8-bit/color RGBA, non-interlaced
Size
938 B (938 bytes)
Hash
a4de791940d86ff21226a978b905950e
bba1cc2559c7b67cb577f48118604b169a212239
c1ff6bcf530cc998882a66b1a1dafcff6869533caf5a6fea4e137497f0555269

HTTP Headers

GET /images/border.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:19 GMT
content-type: image/png
content-length: 938
x-accel-version: 0.01
last-modified: Tue, 14 Jul 2015 01:10:48 GMT
etag: "3aa-51acb82299600"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

GET www.freeroms.com/images/rom.png

64.235.54.28

200 OK

1.4 kB

URL GET HTTP/2
www.freeroms.com/images/rom.png
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
PNG image data, 28 x 25, 8-bit/color RGBA, non-interlaced
Size
1.4 kB (1365 bytes)
Hash
213bc22990ce0324b563a2714b22749d
514c1c91577fd3fa56b081a73b419015fcb2baf9
0465cb562ac7a714e9e90eb55764b1bc210b3378c5c01a465f8cdaa386f65349

HTTP Headers

GET /images/rom.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:19 GMT
content-type: image/png
content-length: 1365
last-modified: Tue, 14 Jul 2015 01:10:46 GMT
etag: "55a46196-555"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

GET www.freeroms.com/images/default-arr.png

64.235.54.28

200 OK

978 B

URL GET HTTP/2
www.freeroms.com/images/default-arr.png
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
PNG image data, 3 x 7, 8-bit/color RGBA, non-interlaced
Size
978 B (978 bytes)
Hash
0edc018ca2c25a655a9eeed4b31eab51
dba5918c2b540f28d9365ad1db47d658c2dd8f66
d82b013cdd3a3efcde2e7403046e96555f5f7446efef3f2a6879af699f868218

HTTP Headers

GET /images/default-arr.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:20 GMT
content-type: image/png
content-length: 978
x-accel-version: 0.01
last-modified: Tue, 14 Jul 2015 01:10:55 GMT
etag: "3d2-51acb829465c0"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

GET www.freeroms.com/images/circuit_main_right.gif

64.235.54.28

200 OK

1.8 kB

URL GET HTTP/2
www.freeroms.com/images/circuit_main_right.gif
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
GIF image data, version 89a, 12 x 415
Size
1.8 kB (1849 bytes)
Hash
ca8a951bdcdf29ca49cf66f5e2a963d1
514cdcb098f3e0716f94c53a33cf2fc9f41d40bf
089c688ad07d47949987f81f182752199bb7329fd5d443fa084342f6f9dc2953

HTTP Headers

GET /images/circuit_main_right.gif HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:20 GMT
content-type: image/gif
content-length: 1849
last-modified: Tue, 14 Jul 2015 01:10:55 GMT
etag: "55a4619f-739"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

GET www.freeroms.com/images/deals.png

64.235.54.28

200 OK

1.7 kB

URL GET HTTP/2
www.freeroms.com/images/deals.png
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
PNG image data, 28 x 25, 8-bit/color RGBA, non-interlaced
Size
1.7 kB (1703 bytes)
Hash
af70f63ff1d66bbba81818861df6b9c0
1612daa7d1160baa30c9e31fda99def140832cca
1e169d2ec5faf9c54e194c70c39ee11b21f9985eab0e954de8450b964bd51563

HTTP Headers

GET /images/deals.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:20 GMT
content-type: image/png
content-length: 1703
last-modified: Tue, 14 Jul 2015 01:10:55 GMT
etag: "55a4619f-6a7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

GET www.freeroms.com/images/circuit_main_bottom.gif

64.235.54.28

200 OK

1.4 kB

URL GET HTTP/2
www.freeroms.com/images/circuit_main_bottom.gif
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
GIF image data, version 89a, 334 x 40
Size
1.4 kB (1352 bytes)
Hash
660833b77d6e64a7347b2536658f65d4
7ef5949aa50558090c53c9084bf4e01c8984f5c7
280a43318bfd40a4cf90a00f47e944e7c6ae6221aaed1e7fe23a1b39b79c3635

HTTP Headers

GET /images/circuit_main_bottom.gif HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:20 GMT
content-type: image/gif
content-length: 1352
last-modified: Tue, 14 Jul 2015 01:10:54 GMT
etag: "55a4619e-548"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

GET dacmaiss.com/tag.min.js

139.45.197.237

200 OK

27 kB

URL GET HTTP/2
dacmaiss.com/tag.min.js
IP
139.45.197.237:443
ASN
#9002 RETN Limited

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerLet's Encrypt
Subjectdacmaiss.com
FingerprintAD:9B:BA:CB:A0:5A:C8:FE:2C:22:33:72:BD:AA:47:0C:E4:0F:65:35
ValidityWed, 10 Jan 2024 05:08:21 GMT - Tue, 09 Apr 2024 05:08:20 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
27 kB (26792 bytes)
Hash
f93336faf0d237d921ac5c5177e1c03a
00abba298df0892d7cecf52fac873622ce0079e3
9c09f039e1abf8c16d6f49dc618ec4475962bafe4ca45eea012f8e184c7fa331

HTTP Headers

GET /tag.min.js HTTP/1.1
Host: dacmaiss.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:20 GMT
content-type: text/javascript; charset=utf-8
content-length: 26792
content-encoding: br
x-trace-id: 6243fcc306093abe609a5c610ad3068c
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Tue, 05 Mar 2024 00:54:37 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

GET www.freeroms.com/errorpages/404-10gb.html

64.235.54.28

200 OK

50 kB

URL User Request GET HTTP/2
www.freeroms.com/errorpages/404-10gb.html
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (59770)
Size
50 kB (50386 bytes)
Hash
199ef5ddc564383ca9d599224dd05877
904d5bf62ec8d65f4be1cbe5d84d969ef666ac06
0453ce628c3ae37a3d27332ab5baf2b9059b7634f6bacc750671e29ec5caeea8

HTTP Headers

GET /errorpages/404-10gb.html HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:19 GMT
content-type: text/html
last-modified: Thu, 23 Feb 2023 01:02:26 GMT
etag: W/"63f6bb22-26497"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

GET combatbaskstationery.com/c4/d5/3d/c4d53d21b4a90448b5012c00c5cfa5a2.js

192.243.61.227

200 OK

16 kB

URL GET HTTP/1.1
combatbaskstationery.com/c4/d5/3d/c4d53d21b4a90448b5012c00c5cfa5a2.js
IP
192.243.61.227:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerLet's Encrypt
Subjectcombatbaskstationery.com
FingerprintBD:BF:98:88:18:66:E4:F8:BA:91:BD:64:3A:CF:6C:9F:C4:50:4C:D0
ValidityMon, 26 Feb 2024 06:26:59 GMT - Sun, 26 May 2024 06:26:58 GMT

File type
JavaScript source, ASCII text, with very long lines (44069), with no line terminators
Size
16 kB (15802 bytes)
Hash
7b252c56ff0698fff5866a06627fa28b
ed394f906016bebfc38e6c28f535d53ca948fe03
39ba119089631b969de39caf81a640942866d835cba102717eedf328d80ee04b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /c4/d5/3d/c4d53d21b4a90448b5012c00c5cfa5a2.js HTTP/1.1
Host: combatbaskstationery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Mar 2024 02:25:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e8f7ddcc074781ce94293629e41572e9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

OPTIONS moleconcern.com/pixel/pure

192.243.61.227

204 No Content

0 B

URL OPTIONS HTTP/1.1
moleconcern.com/pixel/pure
IP
192.243.61.227:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerLet's Encrypt
Subjectmoleconcern.com
FingerprintBD:F3:94:E6:29:4B:DE:A6:DF:43:40:A6:1C:A6:CE:BB:DF:B5:85:65
ValidityTue, 27 Feb 2024 07:11:34 GMT - Mon, 27 May 2024 07:11:33 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /pixel/pure HTTP/1.1
Host: moleconcern.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.freeroms.com/
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx/1.21.6
Date: Tue, 05 Mar 2024 02:25:21 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0

OPTIONS moleconcern.com/pixel/pure

192.243.61.227

204 No Content

0 B

URL OPTIONS HTTP/1.1
moleconcern.com/pixel/pure
IP
192.243.61.227:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerLet's Encrypt
Subjectmoleconcern.com
FingerprintBD:F3:94:E6:29:4B:DE:A6:DF:43:40:A6:1C:A6:CE:BB:DF:B5:85:65
ValidityTue, 27 Feb 2024 07:11:34 GMT - Mon, 27 May 2024 07:11:33 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /pixel/pure HTTP/1.1
Host: moleconcern.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 73
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Mar 2024 02:25:21 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

GET www.freeroms.com/favicon.ico

64.235.54.28

200 OK

1.2 kB

URL GET HTTP/2
www.freeroms.com/favicon.ico
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Size
1.2 kB (1150 bytes)
Hash
66ccc38a036f42cb9555a65a8f0dd96d
de96c7f3b02ca03d5ab9dd57e7249e3af0a7469f
554982b40d0c899885675b5eb48e7d32b1068623e99c6d361f190427de2387f0

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/errorpages/404-10gb.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:21 GMT
content-type: image/vnd.microsoft.icon
content-length: 1150
last-modified: Thu, 18 Dec 2014 11:03:18 GMT
etag: "5492b476-47e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

GET dacmaiss.com/5/2881944/?oo=1&aab=1

139.45.197.237

200 OK

3.0 kB

URL GET HTTP/2
dacmaiss.com/5/2881944/?oo=1&aab=1
IP
139.45.197.237:443
ASN
#9002 RETN Limited

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerLet's Encrypt
Subjectdacmaiss.com
FingerprintAD:9B:BA:CB:A0:5A:C8:FE:2C:22:33:72:BD:AA:47:0C:E4:0F:65:35
ValidityWed, 10 Jan 2024 05:08:21 GMT - Tue, 09 Apr 2024 05:08:20 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (3216), with no line terminators
Size
3.0 kB (2958 bytes)
Hash
cb23117164fc45603cf559bb760f8412
788de0badd67d9a6a1e2b81f607b66b60e580a96
687f3a482b9fa29f1a16c824070f05d444396835a9441d2fcf01a89c94c72b69

HTTP Headers

GET /5/2881944/?oo=1&aab=1 HTTP/1.1
Host: dacmaiss.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:20 GMT
content-type: application/json
x-trace-id: ab4dc5ee896e1267c3a18662e0132d30
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://www.freeroms.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=008016e81863483df3b7ebeca1e25b1f; expires=Wed, 05 Mar 2025 02:25:20 GMT; path=/; secure; SameSite=None
oaidts=1709605520; expires=Wed, 05 Mar 2025 02:25:20 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2

GET combatbaskstationery.com/ea/2d/5d/ea2d5d802b867cf417198fc84113161f.json

192.243.61.227

200 OK

407 B

URL GET HTTP/1.1
combatbaskstationery.com/ea/2d/5d/ea2d5d802b867cf417198fc84113161f.json
IP
192.243.61.227:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerLet's Encrypt
Subjectcombatbaskstationery.com
FingerprintBD:BF:98:88:18:66:E4:F8:BA:91:BD:64:3A:CF:6C:9F:C4:50:4C:D0
ValidityMon, 26 Feb 2024 06:26:59 GMT - Sun, 26 May 2024 06:26:58 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (491), with no line terminators
Size
407 B (407 bytes)
Hash
3c17a51e06138c3f39319dc7b92888e1
ea5a1945d296d2d755833b5118b01806f453bb47
fb1294b9e72708c92b2825a2d6ea6cf392ef2eb3ea5bdf4e41a41343a318452b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ea/2d/5d/ea2d5d802b867cf417198fc84113161f.json HTTP/1.1
Host: combatbaskstationery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Mar 2024 02:25:20 GMT
Content-Type: application/json
Content-Length: 407
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b3fc853d0f8b752d15a4bb4a3bbca436
Strict-Transport-Security: max-age=0; includeSubdomains

GET www.freeroms.com/js/jquery.min.js

64.235.54.28

200 OK

96 kB

URL GET HTTP/2
www.freeroms.com/js/jquery.min.js
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32038)
Size
96 kB (95957 bytes)
Hash
895323ed2f7258af4fae2c738c8aea49
276c87ff3e1e3155679c318938e74e5c1b76d809
ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8

HTTP Headers

GET /js/jquery.min.js HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/errorpages/404-10gb.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:19 GMT
content-type: application/javascript
last-modified: Tue, 28 Jul 2015 06:50:01 GMT
etag: W/"55b72619-176d5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

GET simplewebanalysis.com/stats

0.0.0.0

0 B

URL GET
simplewebanalysis.com/stats
IP
0.0.0.0:0
ASN
#0

Requested by
https://www.freeroms.com/errorpages/404-10gb.html

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET www.freeroms.com/css/style.css

64.235.54.28

200 OK

28 kB

URL GET HTTP/2
www.freeroms.com/css/style.css
IP
64.235.54.28:443
ASN
#26277 SERVERPOINT

Requested by
https://www.freeroms.com/errorpages/404-10gb.html
Certificate
IssuerNetwork Solutions L.L.C.
Subjectwww.freeroms.com
Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D
ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT

File type
ASCII text
Size
28 kB (27453 bytes)
Hash
398ef8c2ef606ae67b0ba586e1a719b4
c97aedb87e36818212ffc4b54ab3237b219eb35f
0e48283f73694f66f5c82fff2f94a807a7a2e5a846ed7bf38176369deb934989

HTTP Headers

GET /css/style.css HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/errorpages/404-10gb.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 05 Mar 2024 02:25:19 GMT
content-type: text/css
last-modified: Tue, 10 Jan 2023 15:18:36 GMT
etag: W/"63bd81cc-6b3d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (27)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers