WEBSITE ANALYSIS REPORT

http://rom4free.xyz/

09 Dec 2025 · 23:27:14.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

23:26:52.094 GET 200 document 14.4 KB 289 ms —

23:26:52.504 GET 200 stylesheet 75.1 KB 134 ms —

23:26:52.505 GET 200 stylesheet 3.1 KB 124 ms —

23:26:52.508 GET 200 stylesheet 9.6 KB 125 ms —

23:26:52.510 GET 200 stylesheet 3.8 KB 119 ms —

23:26:52.513 GET 200 stylesheet 2.5 KB 128 ms —

23:26:52.514 GET 200 stylesheet 100.3 KB 149 ms —

23:26:52.515 GET 200 stylesheet 5.9 KB 118 ms —

23:26:52.516 GET 200 stylesheet 12.1 KB 134 ms —

23:26:52.517 GET 200 stylesheet 201.6 KB 173 ms —

23:26:52.518 GET 200 stylesheet 57.7 KB 124 ms —

23:26:52.519 GET 200 stylesheet 8.7 KB 125 ms —

23:26:52.521 GET 200 stylesheet 565 B 268 ms —

23:26:52.521 GET 200 stylesheet 38.4 KB 447 ms —

23:26:52.522 GET 200 stylesheet 2.8 KB 123 ms —

23:26:52.523 GET 200 script 167.6 KB 38 ms 1 alerts

23:26:52.524 GET 200 img 48.8 KB 195 ms —

23:26:52.524 GET 200 img 30.2 KB 164 ms —

23:26:52.525 GET 200 script 84.7 KB 169 ms —

23:26:52.526 GET 200 script 68.1 KB 123 ms —

23:26:52.527 GET 200 script 52.6 KB 126 ms —

23:26:52.530 GET 200 script 3.9 KB 97 ms —

23:26:52.530 GET 200 script 20.5 KB 120 ms —

23:26:52.531 GET 200 script 10.4 KB 123 ms —

23:26:52.533 GET 200 script 13.5 KB 121 ms —

23:26:52.534 GET 200 script 5.2 KB 123 ms —

23:26:52.535 GET 200 script 5.9 KB 121 ms —

23:26:52.536 GET 200 script 112.2 KB 163 ms —

23:26:52.537 GET 200 script 1.8 KB 119 ms —

23:26:52.812 GET 200 fetch 1.1 KB 195 ms 1 alerts

Transaction #37

Request / response

URL

GET HTTPS

https://adexchangeclear.com/ad/czcf.php?cz=ooqqzvvz5o&atv=72.2

IP / ASN

104.21.78.155

AS13335 · CLOUDFLARENET

Requested by: https://rom4free.xyz/

Resource information

File type: JSON text data
MIME type: text/html; charset=utf-8
First seen (UTC): 20 Nov 2025 · 20:10:42.657 UTC
Last seen (UTC): 09 Dec 2025 · 23:27:18.901 UTC
Times seen: 3

Size: 1.1 KB (1164 bytes)
MD5: 506a927028dddecd8cfb3db188ffc116
SHA1: ec777cef525acca8345e62aab66170f3331d282a
SHA256: ceb9a44916dac57f544f2c39a48225208a0815f78b70ca517506564f97fb2e06

Certificate information

Issuer: Google Trust Services · WE1
Subject: adexchangeclear.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: D5:B9:71:11:A1:C5:BD:EA:60:68:49:87:01:4B:0B:CB:81:8B:FA:6C
Valid from: Sat, 06 Dec 2025 23:08:46 GMT
Valid until: Sat, 07 Mar 2026 00:07:30 GMT

Technology fingerprints

Cloudflare (CDN)
Google Cloud CDN (CDN)
Google Cloud (IaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ad/czcf.php?cz=ooqqzvvz5o&atv=72.2 HTTP/1.1
Host: adexchangeclear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rom4free.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Tue, 09 Dec 2025 23:26:52 GMT
content-type: text/html; charset=utf-8
server: cloudflare
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=M2tXhFKHBKXptvT6h64lPN3p%2BvDsbVtKOc%2BHCixFQwJrIyXSQqRBGLk%2B3O7hhljhwXznl%2F8a%2F%2BcebB1N2LByeBlm0cz4jR5jOYhL%2BYWPugMy"}]}
via: 1.1 google
cf-cache-status: DYNAMIC
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9ab8451c3a3d0b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

23:26:52.853 GET 200 font 47.2 KB 168 ms —

23:26:52.857 GET 200 font 47.2 KB 299 ms —

23:26:52.861 GET 200 font 47.2 KB 401 ms —

23:26:52.864 GET 200 font 47.2 KB 162 ms —

23:26:52.873 GET 200 font 4.2 KB 99 ms —

23:26:52.887 GET 200 font 18.9 KB 158 ms —

23:26:52.903 GET 200 font 47.2 KB 104 ms —

23:26:53.041 GET 302 script 10.1 KB 9 ms —

23:26:53.101 GET 200 img 4.9 KB 141 ms —

23:26:53.102 GET 200 img 447 B 140 ms —

23:26:53.183 GET 200 script 10.1 KB 10 ms —

23:26:53.255 POST 204 beacon 0 B 193 ms 5 alerts

23:26:53.402 POST 200 xhr 0 B 11 ms —

23:26:53.433 GET 200 script 74.5 KB 10 ms 1 alerts

23:26:53.517 GET 200 script 40.7 KB 10 ms 1 alerts

23:26:53.519 GET 200 fetch 1.1 KB 191 ms 1 alerts

23:26:53.558 GET 200 fetch 2.0 KB 181 ms 1 alerts

23:26:53.754 GET 204 img 0 B 145 ms 1 alerts

http://rom4free.xyz/

Domain graph

Hostnames

Connections