| download.freeroms.com/psp_roms/x/x-men_legends_ii_-_rise_of_apocalypse.zip |  23.237.120.146 | | 170 B |
URL User Request GET download.freeroms.com/psp_roms/x/x-men_legends_ii_-_rise_of_apocalypse.zip IP23.237.120.146:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash7ae0f3a88d2b351bb1d01f84c43c009e b0f62bbd08b044b9d9ddc60bdacf10a5568607d9 2399955144f8af99521c3ea8c6f2a5959c500f80902869cbb98d57cde2f48f89
GET /psp_roms/x/x-men_legends_ii_-_rise_of_apocalypse.zip HTTP/1.1
Host: download.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.14.0 (Ubuntu)
Date: Thu, 30 Nov 2023 18:35:08 GMT
Content-Type: text/html
Content-Length: 170
Connection: keep-alive
Location: https://www.freeroms.com/errorpages/max_connections.html
|
|
| ocsp.netsolssl.com/ | 172.64.149.23 | | 471 B |
IP172.64.149.23:0
Hash7617d11d0d737e7f531ee3fe111da3d4 e3dab77188d9bd6f0cd596c97bd000328b2c211a 85fe5fc8a547cc981156305fdb9ace78dc1312e2e3580e29b5f0b4478dc768f1
POST / HTTP/1.1
Host: ocsp.netsolssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 18:35:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 29 Nov 2023 14:54:49 GMT
Expires: Wed, 06 Dec 2023 14:54:48 GMT
Etag: "e3dab77188d9bd6f0cd596c97bd000328b2c211a"
Cache-Control: max-age=504876,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 82e53048e9dd56bd-OSL
|
|
| www.freeroms.com/js/front-script.js | 64.235.54.28 | 200 OK | 295 B |
URL GET HTTP/2www.freeroms.com/js/front-script.js IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
Hash623069997deee6979f41b571e8b728cb 035788635c81bb176917731fcdc655cbd2bd2270 50db1f925c9abd1ddc94afe8d5d98125b741a8ae04712ac9df007b0c5871f0b1
GET /js/front-script.js HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/errorpages/max_connections.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: application/javascript
content-length: 295
x-accel-version: 0.01
last-modified: Mon, 09 Jan 2017 06:39:35 GMT
etag: "223-545a3a17f17c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/images/logo.png | 64.235.54.28 | 200 OK | 9.8 kB |
URL GET HTTP/2www.freeroms.com/images/logo.png IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typePNG image data, 215 x 40, 8-bit/color RGB, non-interlaced\012- data Hash14cd0a179797ca4b75eafccd97c8bb29 3b28b50481b500440e2d20df8acfba80d752a090 e94da94c103e98f78880e5458d6cd022cc20d1d6412b985ef8c0b3eeafd40f5c
GET /images/logo.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/errorpages/max_connections.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: image/png
content-length: 9831
last-modified: Tue, 14 Jul 2015 01:10:45 GMT
etag: "55a46195-2667"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/images/circuit_main_top.gif | 64.235.54.28 | 200 OK | 1.4 kB |
URL GET HTTP/2www.freeroms.com/images/circuit_main_top.gif IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typeGIF image data, version 89a, 334 x 40\012- data Hash8ce66b9116fdb0a263fbbf0ec7299e1c 3f2868999529378d7e40c4acce440c0fdd0963bb 7ee186a06b35fc6499ca0fe10faa3f137fdee61cbfd4163aaba28414b8e65063
GET /images/circuit_main_top.gif HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: image/gif
content-length: 1366
last-modified: Tue, 14 Jul 2015 01:10:55 GMT
etag: "55a4619f-556"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/images/circuit_left.gif | 64.235.54.28 | 200 OK | 3.0 kB |
URL GET HTTP/2www.freeroms.com/images/circuit_left.gif IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typeGIF image data, version 89a, 12 x 320\012- data Hashf84caa56ec89113941ed4823aecea88a dd608663197ad5cf505e06c8a16fbd42f3001153 7925efc9e31cb712e156e1b0663846dea73debe1200b125ed73dfea95efc06f6
GET /images/circuit_left.gif HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: image/gif
content-length: 3029
last-modified: Tue, 14 Jul 2015 01:10:52 GMT
etag: "55a4619c-bd5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/css/style.css | 64.235.54.28 | 200 OK | 5.1 kB |
URL GET HTTP/2www.freeroms.com/css/style.css IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
Hash398ef8c2ef606ae67b0ba586e1a719b4 c97aedb87e36818212ffc4b54ab3237b219eb35f 0e48283f73694f66f5c82fff2f94a807a7a2e5a846ed7bf38176369deb934989
GET /css/style.css HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/errorpages/max_connections.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: text/css
last-modified: Tue, 10 Jan 2023 15:18:36 GMT
etag: W/"63bd81cc-6b3d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/js/jquery.min.js | 64.235.54.28 | 200 OK | 33 kB |
URL GET HTTP/2www.freeroms.com/js/jquery.min.js IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typeASCII text, with very long lines (32038) Hash895323ed2f7258af4fae2c738c8aea49 276c87ff3e1e3155679c318938e74e5c1b76d809 ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8
GET /js/jquery.min.js HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/errorpages/max_connections.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: application/javascript
last-modified: Tue, 28 Jul 2015 06:50:01 GMT
etag: W/"55b72619-176d5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/images/border.png | 64.235.54.28 | 200 OK | 938 B |
URL GET HTTP/2www.freeroms.com/images/border.png IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typePNG image data, 2 x 23, 8-bit/color RGBA, non-interlaced\012- data Hasha4de791940d86ff21226a978b905950e bba1cc2559c7b67cb577f48118604b169a212239 c1ff6bcf530cc998882a66b1a1dafcff6869533caf5a6fea4e137497f0555269
GET /images/border.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: image/png
content-length: 938
x-accel-version: 0.01
last-modified: Tue, 14 Jul 2015 01:10:48 GMT
etag: "3aa-51acb82299600"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/errorpages/max_connections.html | 64.235.54.28 | 200 OK | 0 B |
URL HEAD HTTP/2www.freeroms.com/errorpages/max_connections.html IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /errorpages/max_connections.html HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/errorpages/max_connections.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: text/html
content-length: 53615
x-accel-version: 0.01
last-modified: Thu, 23 Feb 2023 01:02:29 GMT
etag: "26531-5f553911f6ffc-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/images/rom.png | 64.235.54.28 | 200 OK | 1.4 kB |
URL GET HTTP/2www.freeroms.com/images/rom.png IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typePNG image data, 28 x 25, 8-bit/color RGBA, non-interlaced\012- data Hash213bc22990ce0324b563a2714b22749d 514c1c91577fd3fa56b081a73b419015fcb2baf9 0465cb562ac7a714e9e90eb55764b1bc210b3378c5c01a465f8cdaa386f65349
GET /images/rom.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: image/png
content-length: 1365
last-modified: Tue, 14 Jul 2015 01:10:46 GMT
etag: "55a46196-555"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/images/default-arr.png | 64.235.54.28 | 200 OK | 978 B |
URL GET HTTP/2www.freeroms.com/images/default-arr.png IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typePNG image data, 3 x 7, 8-bit/color RGBA, non-interlaced\012- data Hash0edc018ca2c25a655a9eeed4b31eab51 dba5918c2b540f28d9365ad1db47d658c2dd8f66 d82b013cdd3a3efcde2e7403046e96555f5f7446efef3f2a6879af699f868218
GET /images/default-arr.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: image/png
content-length: 978
x-accel-version: 0.01
last-modified: Tue, 14 Jul 2015 01:10:55 GMT
etag: "3d2-51acb829465c0"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/images/circuit_main_right.gif | 64.235.54.28 | 200 OK | 1.8 kB |
URL GET HTTP/2www.freeroms.com/images/circuit_main_right.gif IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typeGIF image data, version 89a, 12 x 415\012- data Hashca8a951bdcdf29ca49cf66f5e2a963d1 514cdcb098f3e0716f94c53a33cf2fc9f41d40bf 089c688ad07d47949987f81f182752199bb7329fd5d443fa084342f6f9dc2953
GET /images/circuit_main_right.gif HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: image/gif
content-length: 1849
last-modified: Tue, 14 Jul 2015 01:10:55 GMT
etag: "55a4619f-739"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/images/deals.png | 64.235.54.28 | 200 OK | 1.7 kB |
URL GET HTTP/2www.freeroms.com/images/deals.png IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typePNG image data, 28 x 25, 8-bit/color RGBA, non-interlaced\012- data Hashaf70f63ff1d66bbba81818861df6b9c0 1612daa7d1160baa30c9e31fda99def140832cca 1e169d2ec5faf9c54e194c70c39ee11b21f9985eab0e954de8450b964bd51563
GET /images/deals.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: image/png
content-length: 1703
last-modified: Tue, 14 Jul 2015 01:10:55 GMT
etag: "55a4619f-6a7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/images/circuit_main_bottom.gif | 64.235.54.28 | 200 OK | 1.4 kB |
URL GET HTTP/2www.freeroms.com/images/circuit_main_bottom.gif IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typeGIF image data, version 89a, 334 x 40\012- data Hash660833b77d6e64a7347b2536658f65d4 7ef5949aa50558090c53c9084bf4e01c8984f5c7 280a43318bfd40a4cf90a00f47e944e7c6ae6221aaed1e7fe23a1b39b79c3635
GET /images/circuit_main_bottom.gif HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: image/gif
content-length: 1352
last-modified: Tue, 14 Jul 2015 01:10:54 GMT
etag: "55a4619e-548"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| combatbaskstationery.com/ea/2d/5d/ea2d5d802b867cf417198fc84113161f.json | 173.233.137.52 | 200 OK | 407 B |
URL GET HTTP/1.1combatbaskstationery.com/ea/2d/5d/ea2d5d802b867cf417198fc84113161f.json IP173.233.137.52:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectcombatbaskstationery.com FingerprintC2:03:EE:0C:A4:E6:5D:AF:91:D4:D2:48:12:F2:C8:1D:43:6E:E5:2C ValiditySun, 29 Oct 2023 06:19:05 GMT - Sat, 27 Jan 2024 06:19:04 GMT
File typeJSON data\012- , ASCII text, with very long lines (407), with no line terminators Hashff9488673fc4657a194bb03c61d9256c 77b42a9e75d49c66e1c7db48e33fc3c730d308f3 6f7e5b04233b1392edd7ec64eaaf43bb788f8e7f773ce1e0a38a0441b90e5a37
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ea/2d/5d/ea2d5d802b867cf417198fc84113161f.json HTTP/1.1
Host: combatbaskstationery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 18:35:10 GMT
Content-Type: application/json
Content-Length: 407
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a2cb89ede3249e8e1f53e4e177b59ec9
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| dacmaiss.com/tag.min.js |  139.45.197.237 | 200 OK | 26 kB |
IP139.45.197.237:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectdacmaiss.com FingerprintCC:49:30:23:56:98:15:B1:1A:DC:A9:92:7D:D2:DF:DA:8B:CC:2D:1B ValiditySun, 22 Oct 2023 05:11:39 GMT - Sat, 20 Jan 2024 05:11:38 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashbea6b718fb0247f43168c0dee89219a5 e584dac0a0b284ed9ac096cabb49e2337e1dd81a 52bcb29599bdd96b1e1d2fa618ece2d892c1dda71a7377d60ee7aad72bd00b2f
GET /tag.min.js HTTP/1.1
Host: dacmaiss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:11 GMT
content-type: text/javascript; charset=utf-8
content-length: 25615
content-encoding: br
x-trace-id: 3b2baefbcd22e862375fc440687f3970
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Thu, 30 Nov 2023 12:38:57 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| combatbaskstationery.com/c4/d5/3d/c4d53d21b4a90448b5012c00c5cfa5a2.js | 173.233.137.52 | 200 OK | 15 kB |
URL GET HTTP/1.1combatbaskstationery.com/c4/d5/3d/c4d53d21b4a90448b5012c00c5cfa5a2.js IP173.233.137.52:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectcombatbaskstationery.com FingerprintC2:03:EE:0C:A4:E6:5D:AF:91:D4:D2:48:12:F2:C8:1D:43:6E:E5:2C ValiditySun, 29 Oct 2023 06:19:05 GMT - Sat, 27 Jan 2024 06:19:04 GMT
File typeASCII text, with very long lines (42799), with no line terminators Hash93946a511d64d9e5f000a589e6e0ed6a 756221f414ca972bf9b3bcd4dbffb9d7ce029cc7 983c6fafa2b51240487ebc3cec0e558e7b371ce714bf9f2ad654e25d093ecd50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /c4/d5/3d/c4d53d21b4a90448b5012c00c5cfa5a2.js HTTP/1.1
Host: combatbaskstationery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 18:35:10 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c80dd50d9d304b0b7fad96fee5cb1e64
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ocsp.r2m03.amazontrust.com/ | 54.230.218.11 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP54.230.218.11:0
Hash1f5ea1de01644aecc419ef2fd3b7052c 1ec2b3adee6069d46937a34cf5d25d3b2566a9e0 dbd64cba305c05822c6c2b6f98eeae215c443e4370856624be3e3b7a5897e7b5
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Thu, 30 Nov 2023 18:35:11 GMT
Last-Modified: Thu, 30 Nov 2023 17:01:25 GMT
Server: ECAcc (ska/F6CC)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XdDrm8YXTgflVPUzNDN5_ejyY7unDFJVObyV9_LIjTpKzCTMQSLBzA==
Age: 5626
|
|
| proftrafficcounter.com/stats |  35.157.159.40 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP35.157.159.40:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hasha9c239632ba34f38a24ab7f69df1c2ec 9dc92c5205e5459c4efcbda0b43c07a10636d436 44f72ca81c1192140acb4ff1d06550494c23bbad252d2195fbe35b40b22bd91f
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 18:35:11 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.freeroms.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=58488004-dd68-45bc-b2cc-d64725354895:2:1; expires=Sun, 27 Nov 2033 18:35:11 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| cameesse.net/1?z=3056520 | 139.45.197.242 | 404 Not Found | 7 B |
IP139.45.197.242:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint95:AE:4C:29:A9:9F:0C:04:38:32:00:81:30:07:95:A7:F8:B0:77:D6 ValidityWed, 18 Oct 2023 10:27:53 GMT - Tue, 16 Jan 2024 10:27:52 GMT
File typeASCII text, with no line terminators Hash3b66fb7a307f3ca29bd59b2f354055bd d6ae6ccb37eb272d94d4a5191fa50372f4d06bba de68e8f959bc131328db7581860711517d6ae1eb03aa047043dc7f826906e5a4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1?z=3056520 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Thu, 30 Nov 2023 18:35:11 GMT
content-type: text/plain; charset=utf-8
content-length: 7
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: e0a5478eea0bda33899166ac20e552da
access-control-expose-headers: X-Sc
x-sc: 4KdnrdofxFOHMlcU
set-cookie: scm=1; expires=Fri, 29 Nov 2024 18:35:11 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| moleconcern.com/pixel/pure | 173.233.137.60 | 204 No Content | 0 B |
URL OPTIONS HTTP/1.1moleconcern.com/pixel/pure IP173.233.137.60:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectmoleconcern.com FingerprintEB:1F:59:14:C7:DD:65:50:10:51:62:9F:42:07:6B:62:7A:58:41:AF ValidityMon, 30 Oct 2023 07:29:08 GMT - Sun, 28 Jan 2024 07:29:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /pixel/pure HTTP/1.1
Host: moleconcern.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.freeroms.com/
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 18:35:11 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0
|
|
| gishejuy.com/400/3601099 | 139.45.197.242 | 200 OK | 34 kB |
IP139.45.197.242:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint99:91:AA:4E:BA:FC:75:A0:0A:79:EE:F6:15:64:FA:15:B2:BC:61:31 ValidityWed, 25 Oct 2023 09:21:45 GMT - Tue, 23 Jan 2024 09:21:44 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash5752edc26579fb853f177d8a330d314d 67386cbc3284fb5314fa236067d08855a15bdbe0 5fefdc2b20cc8ff91c79dd5a010af11198fda5d63f858a640ebc96b667f95b88
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /400/3601099 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:11 GMT
content-type: application/javascript
x-trace-id: 3efaa5355b97ce0446397d0900e9cd77
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
set-cookie: OAID=9f474ca391d84e77aca1e63b08d0e221; expires=Fri, 29 Nov 2024 18:35:11 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/gid.js?userId=5181f90a205d4919beff5b290a663f97 | 139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=5181f90a205d4919beff5b290a663f97 IP139.45.195.8:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42 ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File typeJSON data\012- , ASCII text Hash77843cb3fd4b10a3444568c6d6c9b79c c5b7d4edacc205f9463f154b56602a443b397886 4559016cc3e6dcf3a21482ac0e34a83b6ecb07902c1e91a3143c1c920ea970bf
GET /gid.js?userId=5181f90a205d4919beff5b290a663f97 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:11 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://www.freeroms.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=5181f90a205d4919beff5b290a663f97; expires=Fri, 29 Nov 2024 18:35:11 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| moleconcern.com/pixel/pure | 173.233.137.60 | 204 No Content | 0 B |
URL OPTIONS HTTP/1.1moleconcern.com/pixel/pure IP173.233.137.60:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectmoleconcern.com FingerprintEB:1F:59:14:C7:DD:65:50:10:51:62:9F:42:07:6B:62:7A:58:41:AF ValidityMon, 30 Oct 2023 07:29:08 GMT - Sun, 28 Jan 2024 07:29:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /pixel/pure HTTP/1.1
Host: moleconcern.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 73
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 18:35:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f | 139.45.195.254 | 200 OK | 12 B |
URL POST HTTP/1.1fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f IP139.45.195.254:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerSectigo Limited Subjectfleraprt.com FingerprintA4:AF:A0:00:99:C9:85:E5:30:F6:F3:F2:B5:4F:AE:4F:D0:46:74:A9 ValidityMon, 09 Jan 2023 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT
File typeJSON data\012- , ASCII text, with no line terminators Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1384
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 30 Nov 2023 18:35:49 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://www.freeroms.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| gishejuy.com/500/3601099?excludes=&oaid=5181f90a205d4919beff5b290a663f97&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fwww.freeroms.com%2Ferrorpages%2Fmax_connections.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.311.0 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2gishejuy.com/500/3601099?excludes=&oaid=5181f90a205d4919beff5b290a663f97&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fwww.freeroms.com%2Ferrorpages%2Fmax_connections.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.311.0 IP139.45.197.242:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint99:91:AA:4E:BA:FC:75:A0:0A:79:EE:F6:15:64:FA:15:B2:BC:61:31 ValidityWed, 25 Oct 2023 09:21:45 GMT - Tue, 23 Jan 2024 09:21:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /500/3601099?excludes=&oaid=5181f90a205d4919beff5b290a663f97&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fwww.freeroms.com%2Ferrorpages%2Fmax_connections.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.311.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.freeroms.com/
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:11 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://www.freeroms.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=&eb=9dc9c1d31cb8b7965ee9d24b6e1f79e7&te=b7f6eb057aaaa451b9eeba0ff496141a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=13.3095&b_frame=0&pk=ea2d5d802b867cf417198fc84113161f&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 | 192.243.59.20 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=&eb=9dc9c1d31cb8b7965ee9d24b6e1f79e7&te=b7f6eb057aaaa451b9eeba0ff496141a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=13.3095&b_frame=0&pk=ea2d5d802b867cf417198fc84113161f&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14 ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=&eb=9dc9c1d31cb8b7965ee9d24b6e1f79e7&te=b7f6eb057aaaa451b9eeba0ff496141a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=13.3095&b_frame=0&pk=ea2d5d802b867cf417198fc84113161f&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 18:35:12 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 519d92b3c6bf19723de6261dcd68ac9f
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| offerimage.com/www/images/1254ddfd42baa84cea2221d2e82fa511.png |  104.22.33.172 | 200 OK | 70 kB |
URL GET HTTP/2offerimage.com/www/images/1254ddfd42baa84cea2221d2e82fa511.png IP104.22.33.172:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0 ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hash1254ddfd42baa84cea2221d2e82fa511 84b26dfb937aa8b9746a20e52f9d1330a9a29eab eba572a9f6836dc915e75251fed8c1e6129c7013cb380af95899e9824a82fd92
GET /www/images/1254ddfd42baa84cea2221d2e82fa511.png HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 18:35:12 GMT
content-type: image/png
content-length: 69506
last-modified: Mon, 28 Aug 2023 16:35:16 GMT
etag: "64ecccc4-10f82"
expires: Fri, 01 Dec 2023 06:17:10 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: HIT
age: 44282
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e530586edd9908-ARN
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=&eb=9dc9c1d31cb8b7965ee9d24b6e1f79e7&te=b7f6eb057aaaa451b9eeba0ff496141a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=13.3095&b_frame=0&pk=c4d53d21b4a90448b5012c00c5cfa5a2&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 | 192.243.59.20 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=&eb=9dc9c1d31cb8b7965ee9d24b6e1f79e7&te=b7f6eb057aaaa451b9eeba0ff496141a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=13.3095&b_frame=0&pk=c4d53d21b4a90448b5012c00c5cfa5a2&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14 ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=&eb=9dc9c1d31cb8b7965ee9d24b6e1f79e7&te=b7f6eb057aaaa451b9eeba0ff496141a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=13.3095&b_frame=0&pk=c4d53d21b4a90448b5012c00c5cfa5a2&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 18:35:12 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 77d140cdcb931cb1afbd428d0d474ff8
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| www.freeroms.com/favicon.ico | 64.235.54.28 | 200 OK | 1.2 kB |
URL GET HTTP/2www.freeroms.com/favicon.ico IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data Hash66ccc38a036f42cb9555a65a8f0dd96d de96c7f3b02ca03d5ab9dd57e7249e3af0a7469f 554982b40d0c899885675b5eb48e7d32b1068623e99c6d361f190427de2387f0
GET /favicon.ico HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/errorpages/max_connections.html
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=58488004-dd68-45bc-b2cc-d64725354895%3A2%3A1; ppu_main_ea2d5d802b867cf417198fc84113161f=1; sb_main_c4d53d21b4a90448b5012c00c5cfa5a2=1; sb_count_c4d53d21b4a90448b5012c00c5cfa5a2=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:12 GMT
content-type: image/vnd.microsoft.icon
content-length: 1150
last-modified: Thu, 18 Dec 2014 11:03:18 GMT
etag: "5492b476-47e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| rotateportion.com/sbar.json?key=c4d53d21b4a90448b5012c00c5cfa5a2&uuid=58488004-dd68-45bc-b2cc-d64725354895%3A2%3A1 | 192.243.61.225 | 200 OK | 4.2 kB |
URL GET HTTP/1.1rotateportion.com/sbar.json?key=c4d53d21b4a90448b5012c00c5cfa5a2&uuid=58488004-dd68-45bc-b2cc-d64725354895%3A2%3A1 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectrotateportion.com Fingerprint96:4F:1F:9B:7A:D2:00:E2:E4:F0:C3:A0:5D:76:B4:08:45:22:14:73 ValidityTue, 28 Nov 2023 08:17:05 GMT - Mon, 26 Feb 2024 08:17:04 GMT
File typeJSON data\012- , ASCII text, with very long lines (5867), with no line terminators Hasha8472edc4be19e3f8a557879428146be f643d6544b42fa4652b22e8ba5f709b0f147118c 6f5cfbdb73b52387859cb5e77df0d13386871cb8702524c03b6b7adc26a09381
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sbar.json?key=c4d53d21b4a90448b5012c00c5cfa5a2&uuid=58488004-dd68-45bc-b2cc-d64725354895%3A2%3A1 HTTP/1.1
Host: rotateportion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 18:35:12 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.freeroms.com
Access-Control-Allow-Origin: https://www.freeroms.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16560103; expires=Fri, 01 Dec 2023 18:35:12 GMT; secure; SameSite=None
uid_id2=58488004-dd68-45bc-b2cc-d64725354895:2:1; expires=Thu, 07 Dec 2023 18:35:12 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 01 Dec 2023 18:35:12 GMT; secure; SameSite=None
uncs=1; expires=Fri, 01 Dec 2023 18:35:12 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 01 Dec 2023 18:35:12 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 01 Dec 2023 18:35:12 GMT; secure; SameSite=None
slecc4d53d21b4a90448b5012c00c5cfa5a2=[4690994]; expires=Thu, 30 Nov 2023 18:35:17 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: df21ca10a2064de4fe8819f8c52e9fdd
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| rotateportion.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSTYgcRRTHq9eNF%2FVg0EMOwhzED3Bnq3u6d2fMwRhjwmJMQhLJTayv3i23uqup6p7e7CkYkIAIE%2FAgeOn9z27Wj6DmKkhk1ossKBkR2YOL4MGrIMSLB5ndgcV3qPde%2Fd7h%2Ff9V729U%2ByRExfYuvWnXtTFsPmnT1gvXdC5t7VsXrrZC2qYnW9d0vhCfbK1NDtd%2FOaRJm77YOqfEqp2PaEhpSMPWWe1UatfmDyh0cbcXtnu0HUftMImx5v7f%2ByqAZwFkf58ch5bjYys%2F3IMWI%2BTZ12eUXy1t8dLrWWVYaR36cvutfDW3dY7sqExdgDTfnk7D%2BjEhH8%2FA5ttTBbD9zYkCcD0mwa8heL49XRO8v3W4KTdQObh8DHV%2FBGVG0GwEYW9CywcEEBIXLiLP7lywrmbXDymb0DGZffg3dD0ms789hTz78rTRa60r1lSltrnHWtpAr42gl0coqh2U6wF0vQNRvgctfyTzD88jzzYvemOh5d6zSTfudimN56Rc6M7FCRdzPBJiTi7Ei1HSSeJuLzmwSOsRdDqCUQMwP4PKB6h0gCoNUBUBMrnXYkkvpXQx5Wmn042FEJ2OEEl3QSayE3dTikpMNAxQFgMIM4BwN1C4G1jVtx8kx%2BGq7%2BBXGngZwJcEfdmgVgS1J6gZQa0J6pKg7jdb0vjIN3ek8RUPpzma5k4ztOXyBtuy5bLKCZgbbBT75MkD%2F%2F796k%2Bsqr2WiGXSkVHIY9ajcdzlCQ0jQalIRMoSFsHrBtrPgPkA63pMTjynUegxOfbhB%2BBsB97sQOinwapnwOrhYkTBVoZxl2I9v5s6pZzNfFvYDNI2KMpZlNeDDbNPThzsce6jCErsnnr0k60%2FrvzzE4RrULgG7%2BrvCZbNreFlW5PNy7b25N7FotSZXmeTN75SslLNfv6Gul5bJ5fO%2BMFnr4oJmJR3rypfnme51PmyJ1%2Bc1lIqd9Y6oci3S%2F6a4pcqv3K6cnlVnL%2F02tmlrHDKe23zEZh%2B8M59CD0mT9yZP%2Fi9z3%2BaQbsRXNUgq3bJNKDtDkRxA77YPUVmHl%2F65u0E3hI4czTDiwB11QxdxI8ujSYw6qhnvIFXRxZwtXv%2Fr0O24W9h2QVg5U3kWYO%2Ba9A3DZgZwFePDMvC7b7yc%2BcgwE0w5MYFm9w4c%2FvQWq%2F3WipJaapopHja4%2Bkio7KXxj3OeqFa5AkLUfqxWvnl9%2F8AAAD%2F%2FwEAAP%2F%2FXXF33JUEAAA%3D | 192.243.61.225 | 200 OK | 7 B |
URL GET HTTP/1.1rotateportion.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSTYgcRRTHq9eNF%2FVg0EMOwhzED3Bnq3u6d2fMwRhjwmJMQhLJTayv3i23uqup6p7e7CkYkIAIE%2FAgeOn9z27Wj6DmKkhk1ossKBkR2YOL4MGrIMSLB5ndgcV3qPde%2Fd7h%2Ff9V729U%2ByRExfYuvWnXtTFsPmnT1gvXdC5t7VsXrrZC2qYnW9d0vhCfbK1NDtd%2FOaRJm77YOqfEqp2PaEhpSMPWWe1UatfmDyh0cbcXtnu0HUftMImx5v7f%2ByqAZwFkf58ch5bjYys%2F3IMWI%2BTZ12eUXy1t8dLrWWVYaR36cvutfDW3dY7sqExdgDTfnk7D%2BjEhH8%2FA5ttTBbD9zYkCcD0mwa8heL49XRO8v3W4KTdQObh8DHV%2FBGVG0GwEYW9CywcEEBIXLiLP7lywrmbXDymb0DGZffg3dD0ms789hTz78rTRa60r1lSltrnHWtpAr42gl0coqh2U6wF0vQNRvgctfyTzD88jzzYvemOh5d6zSTfudimN56Rc6M7FCRdzPBJiTi7Ei1HSSeJuLzmwSOsRdDqCUQMwP4PKB6h0gCoNUBUBMrnXYkkvpXQx5Wmn042FEJ2OEEl3QSayE3dTikpMNAxQFgMIM4BwN1C4G1jVtx8kx%2BGq7%2BBXGngZwJcEfdmgVgS1J6gZQa0J6pKg7jdb0vjIN3ek8RUPpzma5k4ztOXyBtuy5bLKCZgbbBT75MkD%2F%2F796k%2Bsqr2WiGXSkVHIY9ajcdzlCQ0jQalIRMoSFsHrBtrPgPkA63pMTjynUegxOfbhB%2BBsB97sQOinwapnwOrhYkTBVoZxl2I9v5s6pZzNfFvYDNI2KMpZlNeDDbNPThzsce6jCErsnnr0k60%2FrvzzE4RrULgG7%2BrvCZbNreFlW5PNy7b25N7FotSZXmeTN75SslLNfv6Gul5bJ5fO%2BMFnr4oJmJR3rypfnme51PmyJ1%2Bc1lIqd9Y6oci3S%2F6a4pcqv3K6cnlVnL%2F02tmlrHDKe23zEZh%2B8M59CD0mT9yZP%2Fi9z3%2BaQbsRXNUgq3bJNKDtDkRxA77YPUVmHl%2F65u0E3hI4czTDiwB11QxdxI8ujSYw6qhnvIFXRxZwtXv%2Fr0O24W9h2QVg5U3kWYO%2Ba9A3DZgZwFePDMvC7b7yc%2BcgwE0w5MYFm9w4c%2FvQWq%2F3WipJaapopHja4%2Bkio7KXxj3OeqFa5AkLUfqxWvnl9%2F8AAAD%2F%2FwEAAP%2F%2FXXF33JUEAAA%3D IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectrotateportion.com Fingerprint96:4F:1F:9B:7A:D2:00:E2:E4:F0:C3:A0:5D:76:B4:08:45:22:14:73 ValidityTue, 28 Nov 2023 08:17:05 GMT - Mon, 26 Feb 2024 08:17:04 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SSTYgcRRTHq9eNF%2FVg0EMOwhzED3Bnq3u6d2fMwRhjwmJMQhLJTayv3i23uqup6p7e7CkYkIAIE%2FAgeOn9z27Wj6DmKkhk1ossKBkR2YOL4MGrIMSLB5ndgcV3qPde%2Fd7h%2Ff9V729U%2ByRExfYuvWnXtTFsPmnT1gvXdC5t7VsXrrZC2qYnW9d0vhCfbK1NDtd%2FOaRJm77YOqfEqp2PaEhpSMPWWe1UatfmDyh0cbcXtnu0HUftMImx5v7f%2ByqAZwFkf58ch5bjYys%2F3IMWI%2BTZ12eUXy1t8dLrWWVYaR36cvutfDW3dY7sqExdgDTfnk7D%2BjEhH8%2FA5ttTBbD9zYkCcD0mwa8heL49XRO8v3W4KTdQObh8DHV%2FBGVG0GwEYW9CywcEEBIXLiLP7lywrmbXDymb0DGZffg3dD0ms789hTz78rTRa60r1lSltrnHWtpAr42gl0coqh2U6wF0vQNRvgctfyTzD88jzzYvemOh5d6zSTfudimN56Rc6M7FCRdzPBJiTi7Ei1HSSeJuLzmwSOsRdDqCUQMwP4PKB6h0gCoNUBUBMrnXYkkvpXQx5Wmn042FEJ2OEEl3QSayE3dTikpMNAxQFgMIM4BwN1C4G1jVtx8kx%2BGq7%2BBXGngZwJcEfdmgVgS1J6gZQa0J6pKg7jdb0vjIN3ek8RUPpzma5k4ztOXyBtuy5bLKCZgbbBT75MkD%2F%2F796k%2Bsqr2WiGXSkVHIY9ajcdzlCQ0jQalIRMoSFsHrBtrPgPkA63pMTjynUegxOfbhB%2BBsB97sQOinwapnwOrhYkTBVoZxl2I9v5s6pZzNfFvYDNI2KMpZlNeDDbNPThzsce6jCErsnnr0k60%2FrvzzE4RrULgG7%2BrvCZbNreFlW5PNy7b25N7FotSZXmeTN75SslLNfv6Gul5bJ5fO%2BMFnr4oJmJR3rypfnme51PmyJ1%2Bc1lIqd9Y6oci3S%2F6a4pcqv3K6cnlVnL%2F02tmlrHDKe23zEZh%2B8M59CD0mT9yZP%2Fi9z3%2BaQbsRXNUgq3bJNKDtDkRxA77YPUVmHl%2F65u0E3hI4czTDiwB11QxdxI8ujSYw6qhnvIFXRxZwtXv%2Fr0O24W9h2QVg5U3kWYO%2Ba9A3DZgZwFePDMvC7b7yc%2BcgwE0w5MYFm9w4c%2FvQWq%2F3WipJaapopHja4%2Bkio7KXxj3OeqFa5AkLUfqxWvnl9%2F8AAAD%2F%2FwEAAP%2F%2FXXF33JUEAAA%3D HTTP/1.1
Host: rotateportion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Cookie: u_pl=16560103; uid_id2=58488004-dd68-45bc-b2cc-d64725354895:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 18:35:12 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 770494167121ecb75e3a463ec0fc440c
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/button.png | 172.64.108.10 | 200 OK | 9.9 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/button.png IP172.64.108.10:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34 ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File typePNG image data, 374 x 158, 8-bit colormap, non-interlaced\012- data Hash820ad88853e09bfa31ecc6dfd93c07ec c8d408a8618a825a5111c51a6fe2e30f4d53098c 948bc0c4bd13d058c1c64f903453f928ecfdcd87686eebe6f9a73618e24d4bbd
GET /sb/interstitial/games/hentai-heroes/main/8/img/button.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 18:35:13 GMT
content-type: image/png
content-length: 9865
last-modified: Thu, 19 Oct 2023 16:12:57 GMT
etag: "65315589-2689"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 48462
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hg5I%2FetRZqbFOo9aXghek5qXfZo691EXsJzpOnn88I1A04CE32keWmOKGXfVJJ1LYAzysmG%2FMIzdGyG3n4ZJmsAGWhbLpXClo57wsrntk4eoNOxQoABixJrzOI%2BANsW1WsdgzqBZeetK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e530632d725c49-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/animate.css | 172.64.108.10 | 200 OK | 4.9 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/animate.css IP172.64.108.10:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34 ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hashe1d8acd5ee9d1a90ea09313cbd8f2b02 8a8327b115d1356715e63270d1ce6d46124c7b1a 3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/interstitial/games/hentai-heroes/main/8/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 18:35:13 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2023 16:12:56 GMT
etag: W/"65315588-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VEHdUZCVq8yPaQQblvs%2F1bKfF9TvgjtUxMa%2B7Es5Wl3HJLmZQPU0q1CfUOSiYWWTEdN7v6%2Bq1s9nLEo%2Fq6WgendLGgD4aVbFSSpHxoj%2FmFKXVJGnl%2Fvoyx4%2BT8jxtAMoQn1pucD1yL%2Br"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e53062ed085c49-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/close.svg | 172.64.108.10 | 200 OK | 376 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/close.svg IP172.64.108.10:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34 ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File typeSVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text Size376 kB (375957 bytes) Hash0e2235e70c5d45defff6d4f958efd6c2 a3b54b1d2e285bf511980d1dc920d8831b5eeb3a 9457de0168c27aabaab60abbf72b737625da31f5cafe528ba2e56b57d6b38d1c
GET /sb/interstitial/games/hentai-heroes/main/8/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 18:35:13 GMT
content-type: image/svg+xml
last-modified: Thu, 19 Oct 2023 16:12:58 GMT
etag: W/"6531558a-49d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 52457
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bSGnojHmtXSVY626PqRR0UF18z23vdb5AEc1zcbOFZChi2piOd2DjEPfRgdXc6RAYdsY2l2os3mjybQoiWz1VM4hUMma4Vr%2F%2FvN2R3kr%2BkC5yGm7UrQuYQTPz6j4kdgTALFPi8%2FjnTsU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e530632d6c5c49-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dacmaiss.com/5/2881944/?oo=1&aab=1 | 139.45.197.237 | 200 OK | 1.4 kB |
URL GET HTTP/2dacmaiss.com/5/2881944/?oo=1&aab=1 IP139.45.197.237:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectdacmaiss.com FingerprintCC:49:30:23:56:98:15:B1:1A:DC:A9:92:7D:D2:DF:DA:8B:CC:2D:1B ValiditySun, 22 Oct 2023 05:11:39 GMT - Sat, 20 Jan 2024 05:11:38 GMT
File typeJSON data\012- , ASCII text, with very long lines (2879), with no line terminators Hash5508b682c27ecec8bda488920e5780b8 80109b2c47d119fa5edc77ae1530208cae7c45f2 510869d26c75cf386b311eb3878e09b549ce41078fd48a1697cba704c93a46e9
GET /5/2881944/?oo=1&aab=1 HTTP/1.1
Host: dacmaiss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: application/json
x-trace-id: 29299f35c86be3550b7047d257b286d9
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://www.freeroms.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=5181f90a205d4919beff5b290a663f97; expires=Fri, 29 Nov 2024 18:35:10 GMT; path=/; secure; SameSite=None
oaidts=1701369310; expires=Fri, 29 Nov 2024 18:35:10 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gishejuy.com/impression/U0LjN_yA7o-eqsl0wGBpJo2gj04X9qiTFkuQB6qLZpioweuuL8g8_YDM-ZuCycaEx0I1oX-xwDvFR8_LL7JgBuQpVKoweuL7-HfnZA5gDzhPIIZ69timJ_Cjvve1VxFjpjchV9iNnTBhs0ZlCIDt7CAOGB7o813S9dqnp6ADQX58OEAaAmFOjCVOgBNYadGyck4l32vwnBIWVSh01MiqJHpXrrxXkcvNG6Lpop3rjWmdXbuoV32hZZe51CZf5sp_VQAopo7Bf6M2pRWYmTcfuet4tPnL5XtPxleFI1etoNVItpYY9v5re6MjX-Mw9EM0AQAexO6BifwvekE7yQ-4Bo4_m4x6OxA2Uy2lklALsmvmSf23PFZkxwDjmra3A_a8s0PBj_8PWr2_JdCp9zoZlbC1A6RPu1sRlsLXq9GbPpi1CliV5IE5dZyYYt2w0IfuXxD8s1i1Vp4EUrkEt4lkz_snNEJk0BiwLz3scMLKfFriSEIYtr83XJcaXhO6n2fpp8awTD8wV3VPsYjgPX2KO4TgXOeSwgfZR9R1nM69zrOgAbiSiaMAs3uFBgRm4HD5vWJ94yABMQc7xHMRb-knLFK7Nn9UGgB8u_cjGMk3iW3ibPLT4mFfVFDmRUAAW1lBVCinfexlfeJUc39HFuE8Fj4OTH7yOCC2g-RpMB1m8jRX0A2Yerj2ZzBmJ873cCBG3w5UtjmKa_Ck0E5hA6ZD3XYKwWu5e4Wa4BTAPvQ3pnYZpFDU82r8ZWq00GZcWwIiQt5GaeSkwSc=?_z=3601099&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fwww.freeroms.com%2Ferrorpages%2Fmax_connections.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.311.0 | 139.45.197.242 | 200 OK | 43 B |
URL GET HTTP/2gishejuy.com/impression/U0LjN_yA7o-eqsl0wGBpJo2gj04X9qiTFkuQB6qLZpioweuuL8g8_YDM-ZuCycaEx0I1oX-xwDvFR8_LL7JgBuQpVKoweuL7-HfnZA5gDzhPIIZ69timJ_Cjvve1VxFjpjchV9iNnTBhs0ZlCIDt7CAOGB7o813S9dqnp6ADQX58OEAaAmFOjCVOgBNYadGyck4l32vwnBIWVSh01MiqJHpXrrxXkcvNG6Lpop3rjWmdXbuoV32hZZe51CZf5sp_VQAopo7Bf6M2pRWYmTcfuet4tPnL5XtPxleFI1etoNVItpYY9v5re6MjX-Mw9EM0AQAexO6BifwvekE7yQ-4Bo4_m4x6OxA2Uy2lklALsmvmSf23PFZkxwDjmra3A_a8s0PBj_8PWr2_JdCp9zoZlbC1A6RPu1sRlsLXq9GbPpi1CliV5IE5dZyYYt2w0IfuXxD8s1i1Vp4EUrkEt4lkz_snNEJk0BiwLz3scMLKfFriSEIYtr83XJcaXhO6n2fpp8awTD8wV3VPsYjgPX2KO4TgXOeSwgfZR9R1nM69zrOgAbiSiaMAs3uFBgRm4HD5vWJ94yABMQc7xHMRb-knLFK7Nn9UGgB8u_cjGMk3iW3ibPLT4mFfVFDmRUAAW1lBVCinfexlfeJUc39HFuE8Fj4OTH7yOCC2g-RpMB1m8jRX0A2Yerj2ZzBmJ873cCBG3w5UtjmKa_Ck0E5hA6ZD3XYKwWu5e4Wa4BTAPvQ3pnYZpFDU82r8ZWq00GZcWwIiQt5GaeSkwSc=?_z=3601099&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fwww.freeroms.com%2Ferrorpages%2Fmax_connections.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.311.0 IP139.45.197.242:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint99:91:AA:4E:BA:FC:75:A0:0A:79:EE:F6:15:64:FA:15:B2:BC:61:31 ValidityWed, 25 Oct 2023 09:21:45 GMT - Tue, 23 Jan 2024 09:21:44 GMT
File typeGIF image data, version 89a, 1 x 1\012- data Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impression/U0LjN_yA7o-eqsl0wGBpJo2gj04X9qiTFkuQB6qLZpioweuuL8g8_YDM-ZuCycaEx0I1oX-xwDvFR8_LL7JgBuQpVKoweuL7-HfnZA5gDzhPIIZ69timJ_Cjvve1VxFjpjchV9iNnTBhs0ZlCIDt7CAOGB7o813S9dqnp6ADQX58OEAaAmFOjCVOgBNYadGyck4l32vwnBIWVSh01MiqJHpXrrxXkcvNG6Lpop3rjWmdXbuoV32hZZe51CZf5sp_VQAopo7Bf6M2pRWYmTcfuet4tPnL5XtPxleFI1etoNVItpYY9v5re6MjX-Mw9EM0AQAexO6BifwvekE7yQ-4Bo4_m4x6OxA2Uy2lklALsmvmSf23PFZkxwDjmra3A_a8s0PBj_8PWr2_JdCp9zoZlbC1A6RPu1sRlsLXq9GbPpi1CliV5IE5dZyYYt2w0IfuXxD8s1i1Vp4EUrkEt4lkz_snNEJk0BiwLz3scMLKfFriSEIYtr83XJcaXhO6n2fpp8awTD8wV3VPsYjgPX2KO4TgXOeSwgfZR9R1nM69zrOgAbiSiaMAs3uFBgRm4HD5vWJ94yABMQc7xHMRb-knLFK7Nn9UGgB8u_cjGMk3iW3ibPLT4mFfVFDmRUAAW1lBVCinfexlfeJUc39HFuE8Fj4OTH7yOCC2g-RpMB1m8jRX0A2Yerj2ZzBmJ873cCBG3w5UtjmKa_Ck0E5hA6ZD3XYKwWu5e4Wa4BTAPvQ3pnYZpFDU82r8ZWq00GZcWwIiQt5GaeSkwSc=?_z=3601099&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fwww.freeroms.com%2Ferrorpages%2Fmax_connections.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.311.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Cookie: OAID=5181f90a205d4919beff5b290a663f97
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:21 GMT
content-type: image/gif
content-length: 43
x-trace-id: 06850dcb485d904bf24a89fbd3da705d
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/1254ddfd42baa84cea2221d2e82fa511.png | 104.22.33.172 | 200 OK | 70 kB |
URL GET HTTP/2offerimage.com/www/images/1254ddfd42baa84cea2221d2e82fa511.png IP104.22.33.172:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0 ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hash1254ddfd42baa84cea2221d2e82fa511 84b26dfb937aa8b9746a20e52f9d1330a9a29eab eba572a9f6836dc915e75251fed8c1e6129c7013cb380af95899e9824a82fd92
GET /www/images/1254ddfd42baa84cea2221d2e82fa511.png HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 18:35:22 GMT
content-type: image/png
content-length: 69506
last-modified: Mon, 28 Aug 2023 16:35:16 GMT
etag: "64ecccc4-10f82"
expires: Fri, 01 Dec 2023 06:17:10 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: HIT
age: 44292
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e53096d9999908-ARN
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.131 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.131:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:52:12 GMT
expires: Thu, 28 Nov 2024 21:52:12 GMT
cache-control: public, max-age=31536000
age: 74590
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/js/script.js | 172.64.108.10 | 200 OK | 17 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/js/script.js IP172.64.108.10:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34 ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hashf06aedc6f9c35062ffcf1d5ad7b6e574 47f1ec30faf80f0958036aea330d22d4ea6bd994 f6ae8744b3f2b2f8865fff018810c62b9bb82ffb3224d0e958ff2cdcec3d2026
GET /sb/interstitial/games/hentai-heroes/main/8/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 18:35:13 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2023 16:13:00 GMT
etag: W/"6531558c-f3f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KBiLjBFxSlerFEfzImzJsxy5J5d4RO6hhWqv6%2B4nJyGiF7uAgPxkwEMtmvcehmQGdsXM%2BnaDRlD%2BaaOY%2Fuk1%2BznE6yLAYIn8zqr%2FjAL9eZNQKGBWQTsSUfiy2LBfoZFDNDmU6i2n0vk7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e53062fd195c49-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700 | 142.250.74.106 | 200 OK | 11 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700 IP142.250.74.106:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hashdbdc7ee435c6a7f4277bfc7fedf28368 8194a5d7e0108bed7abb001d8bf2b8985a5aa2ca 91b113cbf5aedc9b93ceebe313863344b1ead775a618a7e9f31f9e98dbbdf227
GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 30 Nov 2023 18:35:22 GMT
date: Thu, 30 Nov 2023 18:35:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.freeroms.com/images/nav-strip.png | 64.235.54.28 | 200 OK | 1.1 kB |
URL GET HTTP/2www.freeroms.com/images/nav-strip.png IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typePNG image data, 7 x 56, 8-bit/color RGB, non-interlaced\012- data Hash92f72da7215127fddf06584d40f1f67c 506dec643852f00b64b0a247d5ff68b1c3fe5c7e d61ce2fb10db1c5814deedb8c6ca63ee220abba2ba29359cd053e28e84f22172
GET /images/nav-strip.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: image/png
content-length: 1094
last-modified: Tue, 14 Jul 2015 01:10:45 GMT
etag: "55a46195-446"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| addresseepaper.com/sfp.js | 0.0.0.0 | | 0 B |
URL GET addresseepaper.com/sfp.js IP0.0.0.0:0
Requested byhttps://www.freeroms.com/errorpages/max_connections.html
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| banquetunarmedgrater.com/advertisers.js | 172.67.219.12 | 200 OK | 0 B |
URL GET HTTP/2banquetunarmedgrater.com/advertisers.js IP172.67.219.12:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerGoogle Trust Services LLC Subjectbanquetunarmedgrater.com Fingerprint92:8E:AD:72:AC:AD:3B:21:99:CD:21:A0:9F:BD:F2:AF:0D:98:D8:57 ValidityThu, 09 Nov 2023 11:40:15 GMT - Wed, 07 Feb 2024 11:40:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 18:35:11 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: 42894fee873eab17ba10f45ea4939111
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 30 Nov 2023 18:35:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6cenYacIo2IJt%2BCn2lE4alVLNPrqCecc93dsPxdIDLxGrc8EH9Tu8ue1YOrn7klzFG%2FfEZls4sWx7P7hTqXNZBXv0UdFOJYfl1I44YCLnY0aSiRde2RA3KMNSvgwJH1ZN3Q8PV95cqi0Eyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e53054690fb505-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/style.css | 172.64.108.10 | 200 OK | 2.4 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/style.css IP172.64.108.10:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34 ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File typeASCII text, with very long lines (2534), with no line terminators Hash565a828cd09907e234598f78c4672ae1 bf30c71fa149d82e10c405cc2dd22d5415af3514 45caa990dabda92c96faa8da3208494707ca28e9fb1090a370b40da63ede95a1
GET /sb/interstitial/games/hentai-heroes/main/8/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 18:35:14 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2023 16:12:56 GMT
etag: W/"65315588-958"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wfku2nAqJAutaWdnEoYOPJMuh%2FkCC%2Bhjgx3Im%2Bd3WqFvhztfXiwvCZEPmn%2Bwj%2F8rRZR7MRZJt6UIhlG8Ssn5p0jRSoxotKME1hBk7t0u4lhR%2FN61zzELS6qtPhz1iUpWK1AFZ7%2FNzeya"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e53062fd1e5c49-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.freeroms.com/images/black.png | 64.235.54.28 | 200 OK | 927 B |
URL GET HTTP/2www.freeroms.com/images/black.png IP64.235.54.28:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerNetwork Solutions L.L.C. Subjectwww.freeroms.com Fingerprint76:6C:B0:F0:67:FF:14:98:E7:B6:EB:77:80:B0:36:83:14:99:FE:4D ValidityMon, 15 May 2023 00:00:00 GMT - Fri, 14 Jun 2024 23:59:59 GMT
File typePNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data Hash6f78a7c9048c4843d819c2ab39b33b6c 99e314e4b9325f41d0d42512cbf8a4a636871ac4 486e08b2d63e05464d757f1fbf3952a74bff6ff29f9ccace92c478fe8b4e4119
GET /images/black.png HTTP/1.1
Host: www.freeroms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 18:35:10 GMT
content-type: image/png
content-length: 927
x-accel-version: 0.01
last-modified: Tue, 14 Jul 2015 01:10:48 GMT
etag: "39f-51acb82299600"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| rotateportion.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSTYgcRRTHq9eNF%2FVg0EMOwhzED3Bnu3u6d3rMwRhjwmJMQhLJTayuqp4tt7qrqeqenuxpMSABESbgQfDS%2B5%2F98GNRcxUkMutFFpQdEdmDi%2BDBqyDEiweZ2YHFd6j3Xv3e4f3%2FVe9vlEfEQ0kPr72p16RSdDFsuo0XbsmM68o2rtxseG7TPdu4JbOl4GyjPzlM72XPDZvui41Lgq3qRd%2F1XNdzvcZFaUSi%2B4tTCpnvdrxmx20GftMLA%2FTN%2F3tbOrDUAe8dkdOQfHxq5Yf7kGyELP36grCrhc5fej0tFS20QY%2FvvJWtZrrKkJ6UiXGQZDuzaWg7JuTjOehsZ6YAurc5UYBYjonzq4c425mtibi3dbxprCAyxPwxVL0RhBpB0hGYvgPJDwjAOK5cRZZuX9GmorePKZ3QMZl%2F%2BDdkNSbzvz2FLP3yvJL9xg2tykLqzKKf1JD9EWR3hLzcQ7HmQFZ7YMV7kPxHsvjwMrJ086pVGpIfPhtGQRS5brDA%2BVK0EIQxW4h9xhb4UtD2w1YYRJ1wapGUI8hkBCUGoHYOpXVQSgdl4qDMHaT8sEHDTuK67SROWq0oYIy1WoyF0RIPeSuIEhclm2gYoMgHYGoAZtaRm3WsynsH4WmY8jvYlRqWO7AFQY%2FXqARBZQkqSlBJgqogqHr1FlfWt%2FU2V7aMvVn2Z7lVD3XR3aBbuuiKjICawUZ%2BRJ6c%2BvfvV39iVRw2WMDDFve9OKAdNwiiOHQ9n7kuC1lCQ%2BrDyhrSzoFaB2tyTM48J5HLMTn14QeI6R6s2gOTT4OWz4BWw7bvgq4Mg8jFWrabGCGMTm2T6RRc18iLeRS3nQ11RM5M97j0kQ%2FB9s89%2BsnWHzf%2B%2BQnM1MhNjXfl9wRddXd4XVdk87quLLl%2FNS9kKtfo5I1vFLQQ85%2B%2FIW5X2vDlC3bw2atsAibl7k1hi8s04zLrWvLFecm5MBe1YYJ8u2xvifhaaVfOlyYr88vXXru4nOZGWCt1NgKVB%2B88AJNj8sT24vT3Pv9pCmlGMGWNtNwns4DUe2D5Omy%2Bf47MPb78zdshrCYw6mQmzh1UZT00fnxyqSSBEic9jWtYcWJBLPYf%2FHXMNuxddI0DWtxBltbomRo9VYOqAWz5yLDIzf4rP7emgVg5w1gZZzNWRt07ttbKw0boBSKKozbjPBaMe22%2FFbVc1%2Bc8aHeE10Fhx2Lll9%2F%2FAwAA%2F%2F8BAAD%2F%2F0l5%2BTqVBAAA | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1rotateportion.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSTYgcRRTHq9eNF%2FVg0EMOwhzED3Bnu3u6d3rMwRhjwmJMQhLJTayuqp4tt7qrqeqenuxpMSABESbgQfDS%2B5%2F98GNRcxUkMutFFpQdEdmDi%2BDBqyDEiweZ2YHFd6j3Xv3e4f3%2FVe9vlEfEQ0kPr72p16RSdDFsuo0XbsmM68o2rtxseG7TPdu4JbOl4GyjPzlM72XPDZvui41Lgq3qRd%2F1XNdzvcZFaUSi%2B4tTCpnvdrxmx20GftMLA%2FTN%2F3tbOrDUAe8dkdOQfHxq5Yf7kGyELP36grCrhc5fej0tFS20QY%2FvvJWtZrrKkJ6UiXGQZDuzaWg7JuTjOehsZ6YAurc5UYBYjonzq4c425mtibi3dbxprCAyxPwxVL0RhBpB0hGYvgPJDwjAOK5cRZZuX9GmorePKZ3QMZl%2F%2BDdkNSbzvz2FLP3yvJL9xg2tykLqzKKf1JD9EWR3hLzcQ7HmQFZ7YMV7kPxHsvjwMrJ086pVGpIfPhtGQRS5brDA%2BVK0EIQxW4h9xhb4UtD2w1YYRJ1wapGUI8hkBCUGoHYOpXVQSgdl4qDMHaT8sEHDTuK67SROWq0oYIy1WoyF0RIPeSuIEhclm2gYoMgHYGoAZtaRm3WsynsH4WmY8jvYlRqWO7AFQY%2FXqARBZQkqSlBJgqogqHr1FlfWt%2FU2V7aMvVn2Z7lVD3XR3aBbuuiKjICawUZ%2BRJ6c%2BvfvV39iVRw2WMDDFve9OKAdNwiiOHQ9n7kuC1lCQ%2BrDyhrSzoFaB2tyTM48J5HLMTn14QeI6R6s2gOTT4OWz4BWw7bvgq4Mg8jFWrabGCGMTm2T6RRc18iLeRS3nQ11RM5M97j0kQ%2FB9s89%2BsnWHzf%2B%2BQnM1MhNjXfl9wRddXd4XVdk87quLLl%2FNS9kKtfo5I1vFLQQ85%2B%2FIW5X2vDlC3bw2atsAibl7k1hi8s04zLrWvLFecm5MBe1YYJ8u2xvifhaaVfOlyYr88vXXru4nOZGWCt1NgKVB%2B88AJNj8sT24vT3Pv9pCmlGMGWNtNwns4DUe2D5Omy%2Bf47MPb78zdshrCYw6mQmzh1UZT00fnxyqSSBEic9jWtYcWJBLPYf%2FHXMNuxddI0DWtxBltbomRo9VYOqAWz5yLDIzf4rP7emgVg5w1gZZzNWRt07ttbKw0boBSKKozbjPBaMe22%2FFbVc1%2Bc8aHeE10Fhx2Lll9%2F%2FAwAA%2F%2F8BAAD%2F%2F0l5%2BTqVBAAA IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectrotateportion.com Fingerprint96:4F:1F:9B:7A:D2:00:E2:E4:F0:C3:A0:5D:76:B4:08:45:22:14:73 ValidityTue, 28 Nov 2023 08:17:05 GMT - Mon, 26 Feb 2024 08:17:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1SSTYgcRRTHq9eNF%2FVg0EMOwhzED3Bnu3u6d3rMwRhjwmJMQhLJTayuqp4tt7qrqeqenuxpMSABESbgQfDS%2B5%2F98GNRcxUkMutFFpQdEdmDi%2BDBqyDEiweZ2YHFd6j3Xv3e4f3%2FVe9vlEfEQ0kPr72p16RSdDFsuo0XbsmM68o2rtxseG7TPdu4JbOl4GyjPzlM72XPDZvui41Lgq3qRd%2F1XNdzvcZFaUSi%2B4tTCpnvdrxmx20GftMLA%2FTN%2F3tbOrDUAe8dkdOQfHxq5Yf7kGyELP36grCrhc5fej0tFS20QY%2FvvJWtZrrKkJ6UiXGQZDuzaWg7JuTjOehsZ6YAurc5UYBYjonzq4c425mtibi3dbxprCAyxPwxVL0RhBpB0hGYvgPJDwjAOK5cRZZuX9GmorePKZ3QMZl%2F%2BDdkNSbzvz2FLP3yvJL9xg2tykLqzKKf1JD9EWR3hLzcQ7HmQFZ7YMV7kPxHsvjwMrJ086pVGpIfPhtGQRS5brDA%2BVK0EIQxW4h9xhb4UtD2w1YYRJ1wapGUI8hkBCUGoHYOpXVQSgdl4qDMHaT8sEHDTuK67SROWq0oYIy1WoyF0RIPeSuIEhclm2gYoMgHYGoAZtaRm3WsynsH4WmY8jvYlRqWO7AFQY%2FXqARBZQkqSlBJgqogqHr1FlfWt%2FU2V7aMvVn2Z7lVD3XR3aBbuuiKjICawUZ%2BRJ6c%2BvfvV39iVRw2WMDDFve9OKAdNwiiOHQ9n7kuC1lCQ%2BrDyhrSzoFaB2tyTM48J5HLMTn14QeI6R6s2gOTT4OWz4BWw7bvgq4Mg8jFWrabGCGMTm2T6RRc18iLeRS3nQ11RM5M97j0kQ%2FB9s89%2BsnWHzf%2B%2BQnM1MhNjXfl9wRddXd4XVdk87quLLl%2FNS9kKtfo5I1vFLQQ85%2B%2FIW5X2vDlC3bw2atsAibl7k1hi8s04zLrWvLFecm5MBe1YYJ8u2xvifhaaVfOlyYr88vXXru4nOZGWCt1NgKVB%2B88AJNj8sT24vT3Pv9pCmlGMGWNtNwns4DUe2D5Omy%2Bf47MPb78zdshrCYw6mQmzh1UZT00fnxyqSSBEic9jWtYcWJBLPYf%2FHXMNuxddI0DWtxBltbomRo9VYOqAWz5yLDIzf4rP7emgVg5w1gZZzNWRt07ttbKw0boBSKKozbjPBaMe22%2FFbVc1%2Bc8aHeE10Fhx2Lll9%2F%2FAwAA%2F%2F8BAAD%2F%2F0l5%2BTqVBAAA HTTP/1.1
Host: rotateportion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Cookie: u_pl=16560103; uid_id2=58488004-dd68-45bc-b2cc-d64725354895:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 18:35:14 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3b602141b7ee8eb3988fc0d38a21ac38
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| simplewebanalysis.com/stats | 0.0.0.0 | | 0 B |
URL GET simplewebanalysis.com/stats IP0.0.0.0:0
Requested byhttps://www.freeroms.com/errorpages/max_connections.html
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| cdn.yourwebbars.com/sb/interstitial/games/hentai-heroes/main/8/index.html | 104.26.7.19 | 200 OK | 1.2 kB |
URL GET HTTP/2cdn.yourwebbars.com/sb/interstitial/games/hentai-heroes/main/8/index.html IP104.26.7.19:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint84:82:6E:35:03:D4:C4:FC:BA:08:CD:C8:E6:A3:97:A9:20:2F:F5:49 ValiditySun, 23 Jul 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File typeHTML document text\012- HTML document, ASCII text, with very long lines (1310), with no line terminators Hashe3b4395490a66f24e4461eea7481e495 18a3479d01e1a5dec50eb78d998fbad56a8b72ee 88718b8db2865c0e2f96730d4e2925b79005f0e68ceed052120b356655e69f99
GET /sb/interstitial/games/hentai-heroes/main/8/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 18:35:13 GMT
content-type: text/html
last-modified: Thu, 19 Oct 2023 16:12:54 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SoOISSfuJkBUr08ODvuG2AuH9mQw4OERaM7SLcFcNj4Cw%2B1S2H%2Fh0HHSe7evCPfrPgMFXQx6JZa2c%2FKOwFJgRjBdPtvDb%2BBLV9IB9cS62auxiTmjhOvWtcPy7WRhYhS7KMPVr3A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e5305e1c547128-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| tzegilo.com/stattag.js | 104.21.11.245 | 200 OK | 19 kB |
IP104.21.11.245:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerGoogle Trust Services LLC Subjecttzegilo.com Fingerprint52:B8:ED:73:BB:55:6F:9C:F8:97:7C:04:34:2B:AD:DB:55:0A:C9:6A ValidityThu, 05 Oct 2023 17:59:18 GMT - Wed, 03 Jan 2024 17:59:17 GMT
File typeASCII text, with very long lines (18369) Hash89e89aea544ea2785d49cc4cd9cf26f6 7d53437a89eb9861038ee27a8ff0e3bb70fa2a0b 86da38693fcea056d36588a4146e85392f784c457511de416fec32034aafa4f9
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 18:35:11 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:52 GMT
etag: W/"64f987a8-4a4b"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 425
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I1YVaNp%2FtV2a5YadfSh0DYH6Z6pGa6R2hLMN3QoFsxQ46La1Ko8h1hjfP1bv0Ot5EA2iT%2FMGeT%2FWHbakWDUO8vxCCkhTaPFcnDLd3G2rOHSN19XME8%2Bn%2FRhu7CrICw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e53054dccb5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.106 | 200 OK | 6.8 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.106:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeASCII text, with very long lines (7013), with no line terminators Hash49475c425d6c00477bb339179326c49b bd97deeb753f44f43a21feafa92d98239fa511bd 598841a98ad357d2896d2f093ea3e4e1d44e24b3351268ffd45e61ff8c1d0e09
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 30 Nov 2023 18:35:13 GMT
date: Thu, 30 Nov 2023 18:35:13 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/bg.jpg | 172.64.108.10 | 200 OK | 376 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/bg.jpg IP172.64.108.10:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34 ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data Size376 kB (375458 bytes) Hash65b98e31f2a22bfc2ae827300f514b93 8d66b3140eaabf1eff5990961d013af5e948df5a 6ea2b64aa9ed05099682f877c6f257d5ebc03814c5910a9dc91a3eae94bf6879
GET /sb/interstitial/games/hentai-heroes/main/8/img/bg.jpg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 18:35:14 GMT
content-type: image/jpeg
content-length: 375458
last-modified: Thu, 19 Oct 2023 16:13:01 GMT
etag: "6531558d-5baa2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2651510
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SN5jB9DtAOIfwWnO6U6vhd9vHqZBYCTc9XvhMVi6VMFyDMku7bf%2BePao6vkMifg9E8%2FbNvkZLEA9W%2BPjeh7RMV7p7IbUm68rQpa4iPjuVb0tndEIQzZkIqcklHd6tKU232J6m6GDgz5a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e53065984206cc-AMS
alt-svc: h3=":443"; ma=86400
|
|
| simplewebanalysis.com/stats | 0.0.0.0 | | 0 B |
URL GET simplewebanalysis.com/stats IP0.0.0.0:0
Requested byhttps://www.freeroms.com/errorpages/max_connections.html
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.131 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.131:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.freeroms.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Nov 2023 23:43:03 GMT
expires: Tue, 26 Nov 2024 23:43:03 GMT
cache-control: public, max-age=31536000
age: 240739
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| rotateportion.com/pixel/sbs?c=1 | 173.233.137.60 | 200 OK | 0 B |
URL GET HTTP/1.1rotateportion.com/pixel/sbs?c=1 IP173.233.137.60:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerLet's Encrypt Subjectrotateportion.com Fingerprint96:4F:1F:9B:7A:D2:00:E2:E4:F0:C3:A0:5D:76:B4:08:45:22:14:73 ValidityTue, 28 Nov 2023 08:17:05 GMT - Mon, 26 Feb 2024 08:17:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbs?c=1 HTTP/1.1
Host: rotateportion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Cookie: u_pl=16560103; uid_id2=58488004-dd68-45bc-b2cc-d64725354895:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 18:35:14 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| friendshipmale.com/sfp.js | 172.64.196.8 | 200 OK | 86 kB |
URL GET HTTP/2friendshipmale.com/sfp.js IP172.64.196.8:443
Requested byhttps://www.freeroms.com/errorpages/max_connections.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37 ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freeroms.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 18:35:12 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 876ed4b43e92bc33eaae598c4b4be1a3
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 30 Nov 2023 18:35:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8gDtxo5bxBfTLgzlZfX3fpXBfam7uDPXEEOnyweWujkx11ynFdjkUmYLD57SAzwK1LRCHs5kWx90QRqI%2BHLX1KA5CWprkzW65Lrf3%2F9WNNvV0e7JwoXrQmRQCOsaSnMF5EhrXgA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e5305aab1b23b7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|