| media.quartess.online/file.zip?c=AGtb2Gf7YAUAXFgCAFpBFwAoAAAAAAD3 |  172.67.205.227 | 522 No Reason Phrase | 7.1 kB |
URL User Request GET media.quartess.online/file.zip?c=AGtb2Gf7YAUAXFgCAFpBFwAoAAAAAAD3 IP172.67.205.227:443
CertificateIssuerGoogle Trust Services Subjectquartess.online FingerprintD3:E6:AB:35:6E:0C:BB:8E:5A:30:00:B1:1E:BB:DF:64:A8:B5:11:77 ValiditySat, 15 Mar 2025 01:26:35 GMT - Fri, 13 Jun 2025 02:25:10 GMT
File typeHTML document, ASCII text, with very long lines (7448), with no line terminators Hash14606ff503ed4d08960c46d4da7ee821 7e750c865fdf398a59815fd3337e4e6ad83d6554 d4426eec3e4d0fedc922abfe10d3a50c0e56e206558f5242efd2ff122060643a
| NIDS | Severity | Alert |
|---|
| suricata | high | ET MALWARE Possible PrivateLoader Payload Request (GET) |
GET /file.zip?c=AGtb2Gf7YAUAXFgCAFpBFwAoAAAAAAD3 HTTP/1.1
Host: media.quartess.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 522 No Reason Phrase
date: Sun, 23 Mar 2025 21:35:11 GMT
content-type: text/html; charset=UTF-8
content-length: 7119
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sP0mRHWcuoMg8%2FV7OkeKo4xuNvmZNLNBBdo1RDkuIQlsJD6pFaR%2BIS2TvoUa1Yq0SMni68htDSjGKw0Y9jtvOpHOYJP9%2FgQO%2FjJg4xdAZa37eVh95MUaLr8tm38IceZDi0c%2FzNDYbRg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 92510e26affc5847-AMS
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=25290&min_rtt=19930&rtt_var=13078&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3210&recv_bytes=1163&delivery_rate=217744&cwnd=90&unsent_bytes=0&cid=a2ba67af1e3fe484&ts=19763&x=0"
X-Firefox-Spdy: h2
|