Report - www.projectquarm.com/server-files/pq_files_05_06

Report Overview

Visited public
2024-07-11 11:51:08
Tags
URL
www.projectquarm.com/server-files/pq_files_05_06_2024-2.zip
Finishing URL
about:privatebrowsing
IP / ASN
68.65.123.126
#22612 NAMECHEAP-NET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-09 18:12:41	2.9 kB	8.0 kB	23.36.76.226
www.projectquarm.com	unknown	2023-08-01	2023-08-01 21:24:24	2023-10-17 11:21:29	513 B	105 kB	68.65.123.126

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.projectquarm.com/server-files/pq_files_05_06_2024-2.zip
IP
68.65.123.126
ASN
#22612 NAMECHEAP-NET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
105 kB (104689 bytes)
Hash
6811d30c1461076f9e41157a00d8e5f5
81143067d77512bdecdc12e43b652a63be9e9cc4
558e97c97e0f390898341cb9ce42dea02e3c4ed765f00daa752f2a570522f66d

Archive (1)

Filename

Md5

File type

eqgame.dll

582b4c61cdaf6616ba5221e3cfed9dd5

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

JavaScript (0)

HTTP Transactions (10)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash ee5b6dc3e7ab972df60b36582e3eaaf4 2a5185acc539fcddac9c33895ec74faf552b62dd be84262bbb3f3aabae368745bc3e85b816e372b16bc37327a1887d3a19992df6 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "BE84262BBB3F3AABAE368745BC3E85B816E372B16BC37327A1887D3A19992DF6" Last-Modified: Wed, 10 Jul 2024 13:53:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10907 Expires: Thu, 11 Jul 2024 14:52:30 GMT Date: Thu, 11 Jul 2024 11:50:43 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash e08576e0904dc9903a9c20fa9e3d15b8 74feff76140500fd4a61e89c7e9d8d0a60df1183 ee690bacddf55fd12ae0c9c39e330e0a1a18776b9edc91b4aa6c5bae28824f1e HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "EE690BACDDF55FD12AE0C9C39E330E0A1A18776B9EDC91B4AA6C5BAE28824F1E" Last-Modified: Tue, 09 Jul 2024 15:28:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2497 Expires: Thu, 11 Jul 2024 12:32:20 GMT Date: Thu, 11 Jul 2024 11:50:43 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash e7492695b5254a3a63fcffb4f1ee8cec 0361713c6d8129210245347284c7c6babfd28fb7 5d1bc1c01894fd88a0d4680490977488d6458bb58a98ace24ef8aa103538bc1f HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5D1BC1C01894FD88A0D4680490977488D6458BB58A98ACE24EF8AA103538BC1F" Last-Modified: Tue, 09 Jul 2024 23:47:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4681 Expires: Thu, 11 Jul 2024 13:08:44 GMT Date: Thu, 11 Jul 2024 11:50:43 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash fc076d7a99abd74b9da6b35304bb93e9 9d541501d5141dcf7b4d839d6fcffabec81e1a14 c86804eff01a7bb9ff866508bfdb1b071cfa4a26617d11094b9f5226e1a4b970 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "C86804EFF01A7BB9FF866508BFDB1B071CFA4A26617D11094B9F5226E1A4B970" Last-Modified: Tue, 09 Jul 2024 16:18:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4819 Expires: Thu, 11 Jul 2024 13:11:02 GMT Date: Thu, 11 Jul 2024 11:50:43 GMT Connection: keep-alive`

	www.projectquarm.com/server-files/pq_files_05_06_2024-2.zip	68.65.123.126	200 OK	105 kB
URL User Request GET HTTP/2 www.projectquarm.com/server-files/pq_files_05_06_2024-2.zip IP 68.65.123.126:443 ASN #22612 NAMECHEAP-NET Certificate IssuerSectigo Limited Subjectprojectquarm.com Fingerprint3E:D1:FD:3B:17:FB:43:B9:F3:18:59:46:61:90:4A:88:41:65:30:5C ValidityMon, 17 Jun 2024 00:00:00 GMT - Fri, 18 Jul 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 105 kB (104689 bytes) Hash 6811d30c1461076f9e41157a00d8e5f5 81143067d77512bdecdc12e43b652a63be9e9cc4 558e97c97e0f390898341cb9ce42dea02e3c4ed765f00daa752f2a570522f66d HTTP Headers `GET /server-files/pq_files_05_06_2024-2.zip HTTP/1.1 Host: www.projectquarm.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: application/zip last-modified: Mon, 06 May 2024 19:30:12 GMT accept-ranges: bytes content-length: 104689 date: Thu, 11 Jul 2024 11:50:44 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14453 Expires: Thu, 11 Jul 2024 15:51:38 GMT Date: Thu, 11 Jul 2024 11:50:45 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14453 Expires: Thu, 11 Jul 2024 15:51:38 GMT Date: Thu, 11 Jul 2024 11:50:45 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14453 Expires: Thu, 11 Jul 2024 15:51:38 GMT Date: Thu, 11 Jul 2024 11:50:45 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14453 Expires: Thu, 11 Jul 2024 15:51:38 GMT Date: Thu, 11 Jul 2024 11:50:45 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14453 Expires: Thu, 11 Jul 2024 15:51:38 GMT Date: Thu, 11 Jul 2024 11:50:45 GMT Connection: keep-alive`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (1)

JavaScript (0)

HTTP Transactions (10)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL