Request to Archive.org for Image with Minimal Headers

Tim Peck@timpeck

•updated Nov 11, 2025•0•26

This rule detects HTTP requests to archive.org for image files (png, jpg, jpeg, svg, gif, tiff) that have minimal request headers, specifically lacking both 'User-Agent' and 'Referer' headers. This behavior can be indicative of automated tools or malware attempting to retrieve content while trying to evade detection or hide their origin.