Report - moemail.brian70.tw/%E8%B3%87%E6%96%99/Vocaloid/Vocaloid%204/Crypton/Miku/MikuV4C_Update.rar

Report Overview

Visited public
2023-09-23 09:35:54
Tags
URL
moemail.brian70.tw/%E8%B3%87%E6%96%99/Vocaloid/Vocaloid%204/Crypton/Miku/MikuV4C_Update.rar
Finishing URL
about:privatebrowsing
IP / ASN
123.194.61.222
#38841 kbro CO. Ltd.
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

3

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
moemail.brian70.tw	unknown	unknown	2022-08-29 12:27:41	2023-07-02 20:22:57	1.2 kB	1.7 kB	123.194.61.222
www.brian70.moe	unknown	unknown	No data	No data	894 B	2.2 MB	123.194.61.222

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-23 09:35:39	medium	Client IP	123.194.61.222	ETPRO INFO .moe Domain in TLS SNI
2023-09-23 09:35:42	medium	Client IP	123.194.61.222	ETPRO INFO .moe Domain in TLS SNI
2023-09-23 09:35:44	medium	Client IP	123.194.61.222	ETPRO INFO .moe Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	moemail.brian70.tw/%E8%B3%87%E6%96%99/Vocaloid/Vocaloid%204/Crypton/Miku/MikuV4C_Update.rar	123.194.61.222	301 Moved Permanently	304 B
URL User Request GET HTTP/1.1 moemail.brian70.tw/%E8%B3%87%E6%96%99/Vocaloid/Vocaloid%204/Crypton/Miku/MikuV4C_Update.rar IP 123.194.61.222:443 ASN #38841 kbro CO. Ltd. Certificate IssuerLet's Encrypt Subject.brian70.tw Fingerprint08:E6:95:7B:EE:A0:2E:BC:79:DA:5A:EE:93:C3:D3:CA:82:EE:17:5D ValiditySun, 02 Jul 2023 17:22:17 GMT - Sat, 30 Sep 2023 17:22:16 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 304 B (304 bytes) Hash 7bc2f991a1daff498ba196a5b2155476 0e299986797d381c9541225ed4181ffea84a98bd 68680d922331541508a4ae0fdd48f4b365e0faebfd133fb353ca986db7a1bd9c HTTP Headers GET /%E8%B3%87%E6%96%99/Vocaloid/Vocaloid%204/Crypton/Miku/MikuV4C_Update.rar HTTP/1.1 Host: moemail.brian70.tw User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 301 Moved Permanently Date: Sat, 23 Sep 2023 09:35:38 GMT Server: Apache Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Location: https://www.brian70.moe/%e8%b3%87%e6%96%99/Vocaloid/Vocaloid%204/Crypton/Miku/MikuV4C_Update.rar Content-Length: 304 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1`

	moemail.brian70.tw/	123.194.61.222		235 B
URL moemail.brian70.tw/ IP 123.194.61.222:0 ASN #38841 kbro CO. Ltd. Certificate IssuerLet's Encrypt Subject.brian70.tw Fingerprint08:E6:95:7B:EE:A0:2E:BC:79:DA:5A:EE:93:C3:D3:CA:82:EE:17:5D ValiditySun, 02 Jul 2023 17:22:17 GMT - Sat, 30 Sep 2023 17:22:16 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 235 B (235 bytes) Hash 01f2ca29c3997e3e4a0f5801ce28ae8d fa0ec8dc07e1cfd57725474a89ecf4826a8e5358 a0f8fe30d9104f3def9c6c9229c8cb882a3d49b9b4f5c84071b8719b67c6ce8b HTTP Headers `GET / HTTP/1.1 Host: moemail.brian70.tw User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Date: Sat, 23 Sep 2023 09:35:40 GMT Server: Apache Location: https://moemail.brian70.tw/ Content-Length: 235 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1`

	moemail.brian70.tw/	123.194.61.222		232 B
URL moemail.brian70.tw/ IP 123.194.61.222:0 ASN #38841 kbro CO. Ltd. Certificate IssuerLet's Encrypt Subject.brian70.tw Fingerprint08:E6:95:7B:EE:A0:2E:BC:79:DA:5A:EE:93:C3:D3:CA:82:EE:17:5D ValiditySun, 02 Jul 2023 17:22:17 GMT - Sat, 30 Sep 2023 17:22:16 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 232 B (232 bytes) Hash 51382e444ac04ad865c9ee5b6c721f6d b266463a57d2ecd732337298b556d27ad862bb2a 9e60bbe3d04d894e909d160880a05529e2b1ecfd3b3aaf29d87533474fd8a72b HTTP Headers `GET / HTTP/1.1 Host: moemail.brian70.tw User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Date: Sat, 23 Sep 2023 09:35:41 GMT Server: Apache Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Location: https://www.brian70.moe/ Content-Length: 232 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1`

	www.brian70.moe/	123.194.61.222		2.5 kB
URL www.brian70.moe/ IP 123.194.61.222:0 ASN #38841 kbro CO. Ltd. File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF, LF line terminators Size 2.5 kB (2474 bytes) Hash df028cfa8e54ad735919f3f7176e3c7a ce34f2e35c3c7ec62863254dec6bba13db138ded db3ff753bf0223f72f3f2a80d4e9c80e86e4abd8b48458e08999d28d65b6a567 HTTP Headers `GET / HTTP/1.1 Host: www.brian70.moe User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sat, 23 Sep 2023 09:35:44 GMT Server: Apache Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2474 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8`

	www.brian70.moe/%e8%b3%87%e6%96%99/Vocaloid/Vocaloid%204/Crypton/Miku/MikuV4C_Update.rar	123.194.61.222	200 OK	2.2 MB
URL User Request GET HTTP/1.1 www.brian70.moe/%e8%b3%87%e6%96%99/Vocaloid/Vocaloid%204/Crypton/Miku/MikuV4C_Update.rar IP 123.194.61.222:443 ASN #38841 kbro CO. Ltd. Certificate IssuerLet's Encrypt Subject.brian70.tw Fingerprint08:E6:95:7B:EE:A0:2E:BC:79:DA:5A:EE:93:C3:D3:CA:82:EE:17:5D ValiditySun, 02 Jul 2023 17:22:17 GMT - Sat, 30 Sep 2023 17:22:16 GMT File type Size 2.2 MB (2215829 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /%e8%b3%87%e6%96%99/Vocaloid/Vocaloid%204/Crypton/Miku/MikuV4C_Update.rar HTTP/1.1 Host: www.brian70.moe User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Sat, 23 Sep 2023 09:35:41 GMT Server: Apache Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Last-Modified: Fri, 23 Jun 2023 03:00:41 GMT ETag: "2c0ce072-5fec334cf9084" Accept-Ranges: bytes Content-Length: 739041394 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/vnd.rar`