Report - skup.dip.jp/up/up16636.zip

Report Overview

Visited public
2025-01-28 16:59:34
Tags
URL
skup.dip.jp/up/up16636.zip
Finishing URL
about:privatebrowsing
IP / ASN
210.150.121.170
#2514 NTT PC Communications, Inc.
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
skup.dip.jp	unknown	2005-05-01	2012-08-04	2025-01-28	658 B	540 kB	210.150.121.170

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-01-28 16:59:07	low	108.161.141.216	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2
2025-01-28 16:59:07	low	108.161.141.216	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
skup.dip.jp/up/up16636.zip
IP
210.150.121.170
ASN
#2514 NTT PC Communications, Inc.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
518 kB (518178 bytes)
Hash
8f400653a67aceef2b5e192bd9f3e694
c35e764e50b09121ef193cd39a98d10fc044b53a
93a2b7686ef50071a758bc7a83b2fb741df2af8e10aa8ca18df15e3d83f183a5

Archive (2)

Modified	Filename	Size	Md5	File type
2025-01-05 20:55	Alpha_english_japanese.xml	2.3 MB	ab1ff9174867f807a006f5fe1a5b6726	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
2025-01-18 13:36	りどみ.txt	298 B	271097d66e0d7f062009c0d3fd6f4460	Unicode text, UTF-8 text, with CRLF line terminators

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	skup.dip.jp/	210.150.121.170	200 OK	21 kB
URL skup.dip.jp/ IP 210.150.121.170:0 ASN #2514 NTT PC Communications, Inc. File type XML 1.0 document, Unicode text, UTF-8 text, with very long lines (2297) Size 21 kB (21235 bytes) Hash 6870393bba2eb83d4b0f0f3b54e2db48 db2d91d6f5bf2d4991e21f0d5f79058cd723a36e 6ab87e34360cd842d7068ca36a8b24684396ccedf86a2ee3b6e08303b0a94a91 HTTP Headers `GET / HTTP/1.1 Host: skup.dip.jp User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 28 Jan 2025 16:59:10 GMT Server: Apache/2.2.15 (CentOS) X-Powered-By: PHP/5.3.3 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8`

	skup.dip.jp/up/up16636.zip	210.150.121.170	200 OK	518 kB
URL User Request GET HTTP/1.1 skup.dip.jp/up/up16636.zip IP 210.150.121.170:80 ASN #2514 NTT PC Communications, Inc. File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 518 kB (518178 bytes) Hash 8f400653a67aceef2b5e192bd9f3e694 c35e764e50b09121ef193cd39a98d10fc044b53a 93a2b7686ef50071a758bc7a83b2fb741df2af8e10aa8ca18df15e3d83f183a5 HTTP Headers `GET /up/up16636.zip HTTP/1.1 Host: skup.dip.jp User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 28 Jan 2025 16:59:12 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Sat, 18 Jan 2025 04:39:22 GMT ETag: "40e05-7e822-62bf39c738680" Accept-Ranges: bytes Content-Length: 518178 Connection: close Content-Type: application/zip`