Report - s.urfan.id/gprtv

Report Overview

Visited public
2024-12-29 13:32:36
Tags
Submit Tags
URL
s.urfan.id/gprtv
Finishing URL
about:privatebrowsing
IP / ASN
91.197.243.143
#16509 AMAZON-02
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
s.urfan.id	unknown	2024-09-18	2024-12-29	2024-12-29	470 B	206 B	207.174.61.1
ythls-v3.onrender.com	unknown	2015-03-28	2024-06-22	2024-09-25	513 B	1.7 kB	216.24.57.252
manifest.googlevideo.com	5325	2003-05-25	2014-05-17	2024-07-26	1.2 kB	2.7 kB	142.250.74.142

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-12-29 13:32:11	low	Client IP	216.24.57.252	ET INFO Observed Online Application Hosting Domain (onrender .com in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	GET s.urfan.id/gprtv	207.174.61.1	302 Found	0 B
URL User Request GET HTTP/2 s.urfan.id/gprtv IP 207.174.61.1:443 ASN #16509 AMAZON-02 Certificate IssuerLet's Encrypt Subjects.urfan.id FingerprintF4:2B:1F:5A:BC:E8:98:53:B8:01:79:76:43:A6:0F:BC:FC:45:34:3C ValiditySat, 16 Nov 2024 23:52:59 GMT - Fri, 14 Feb 2025 23:52:58 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /gprtv HTTP/1.1 Host: s.urfan.id User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found location: https://ythls-v3.onrender.com/channel/UCn-Ex0zXXTVElhMr12o0zwA.m3u8 x-content-type-options: nosniff content-length: 0 date: Sun, 29 Dec 2024 13:32:11 GMT X-Firefox-Spdy: h2`

	GET ythls-v3.onrender.com/channel/UCn-Ex0zXXTVElhMr12o0zwA.m3u8	216.24.57.252	302 Found	571 B
URL User Request GET HTTP/2 ythls-v3.onrender.com/channel/UCn-Ex0zXXTVElhMr12o0zwA.m3u8 IP 216.24.57.252:443 ASN #397273 RENDER Certificate IssuerGoogle Trust Services Subjectonrender.com Fingerprint38:B2:A9:75:68:73:F5:03:E7:65:CE:6B:C4:9B:2C:B8:71:5E:DC:66 ValidityWed, 11 Dec 2024 16:57:09 GMT - Tue, 11 Mar 2025 17:57:07 GMT File type HTML document, ASCII text, with very long lines (1570), with no line terminators Size 571 B (571 bytes) Hash 1588f79cb81b8f7bb3cd98dfad06a5b5 709b358f71d7521b0b63687a71988e3991e23e9d 29cf3bb338f3402b1f8432b6496a29bc6e17dd5a62b6bde03b8f57bcb7136c52 HTTP Headers `GET /channel/UCn-Ex0zXXTVElhMr12o0zwA.m3u8 HTTP/1.1 Host: ythls-v3.onrender.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found date: Sun, 29 Dec 2024 13:32:12 GMT content-type: text/html; charset=utf-8 content-length: 571 location: https://manifest.googlevideo.com/api/manifest/hls_variant/expire/1735498358/ei/FkZxZ77YArPt6dsPq52BqQs/ip/169.150.204.34/id/yiA-6QMxBCY.1/source/yt_live_broadcast/requiressl/yes/xpc/EgVo2aDSNQ%3D%3D/hfr/1/playlist_duration/900/manifest_duration/900/demuxed/1/maudio/1/spc/x-caUP3XhykpLU6_KMmiDexlgUCx9oiy-aHu4584DDrclpGSNmXPtV2RKeSo/vprv/1/go/1/rqh/5/pacing/0/nvgoi/1/short_key/1/ncsapi/1/keepalive/yes/fexp/51326932%2C51335594%2C51371294/dover/13/itag/0/playlist_type/DVR/sparams/expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Chfr%2Cplaylist_duration%2Cmanifest_duration%2Cdemuxed%2Cmaudio%2Cspc%2Cvprv%2Cgo%2Crqh%2Citag%2Cplaylist_type/sig/AJfQdSswRAIgBiWJHKH7QM6NpFHhqmivMyYjia6i97OcyBokmUH2WHUCICYF1-HdxFEh5BC1rJ7RbWPLJLiNikYSF2FgeRBUBl5N/file/index.m3u8 cf-ray: 8f9a279e2ab18f5c-CPH cf-cache-status: DYNAMIC content-encoding: br vary: Accept, Accept-Encoding rndr-id: 2ca81d84-c321-4f6e x-powered-by: Express x-render-origin-server: Render server: cloudflare alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	GET manifest.googlevideo.com/api/manifest/hls_variant/expire/1735498358/ei/FkZxZ77YArPt6dsPq52BqQs/ip/169.150.204.34/id/yiA-6QMxBCY.1/source/yt_live_broadcast/requiressl/yes/xpc/EgVo2aDSNQ%3D%3D/hfr/1/playlist_duration/900/manifest_duration/900/demuxed/1/maudio/1/spc/x-caUP3XhykpLU6_KMmiDexlgUCx9oiy-aHu4584DDrclpGSNmXPtV2RKeSo/vprv/1/go/1/rqh/5/pacing/0/nvgoi/1/short_key/1/ncsapi/1/keepalive/yes/fexp/51326932%2C51335594%2C51371294/dover/13/itag/0/playlist_type/DVR/sparams/expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Chfr%2Cplaylist_duration%2Cmanifest_duration%2Cdemuxed%2Cmaudio%2Cspc%2Cvprv%2Cgo%2Crqh%2Citag%2Cplaylist_type/sig/AJfQdSswRAIgBiWJHKH7QM6NpFHhqmivMyYjia6i97OcyBokmUH2WHUCICYF1-HdxFEh5BC1rJ7RbWPLJLiNikYSF2FgeRBUBl5N/file/index.m3u8	142.250.74.142	200 OK	2.2 kB
URL User Request GET HTTP/2 manifest.googlevideo.com/api/manifest/hls_variant/expire/1735498358/ei/FkZxZ77YArPt6dsPq52BqQs/ip/169.150.204.34/id/yiA-6QMxBCY.1/source/yt_live_broadcast/requiressl/yes/xpc/EgVo2aDSNQ%3D%3D/hfr/1/playlist_duration/900/manifest_duration/900/demuxed/1/maudio/1/spc/x-caUP3XhykpLU6_KMmiDexlgUCx9oiy-aHu4584DDrclpGSNmXPtV2RKeSo/vprv/1/go/1/rqh/5/pacing/0/nvgoi/1/short_key/1/ncsapi/1/keepalive/yes/fexp/51326932%2C51335594%2C51371294/dover/13/itag/0/playlist_type/DVR/sparams/expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Chfr%2Cplaylist_duration%2Cmanifest_duration%2Cdemuxed%2Cmaudio%2Cspc%2Cvprv%2Cgo%2Crqh%2Citag%2Cplaylist_type/sig/AJfQdSswRAIgBiWJHKH7QM6NpFHhqmivMyYjia6i97OcyBokmUH2WHUCICYF1-HdxFEh5BC1rJ7RbWPLJLiNikYSF2FgeRBUBl5N/file/index.m3u8 IP 142.250.74.142:443 ASN #15169 GOOGLE Certificate IssuerGoogle Trust Services Subject.google.com Fingerprint36:7C:F6:D0:DA:DB:45:E1:80:A6:76:D2:C1:A5:38:1A:0B:8D:99:4E ValidityMon, 02 Dec 2024 08:35:57 GMT - Mon, 24 Feb 2025 08:35:56 GMT File type M3U playlist, ASCII text, with very long lines (1206) Size 2.2 kB (2232 bytes) Hash 81f3f40436783a5c76c8f3de15b67610 1348680b086654f698626b13e90d0f2bfa5e922b dd52698b4616fe5822044a1096f307b82107dbac485a8363474848612abd140b HTTP Headers GET /api/manifest/hls_variant/expire/1735498358/ei/FkZxZ77YArPt6dsPq52BqQs/ip/169.150.204.34/id/yiA-6QMxBCY.1/source/yt_live_broadcast/requiressl/yes/xpc/EgVo2aDSNQ%3D%3D/hfr/1/playlist_duration/900/manifest_duration/900/demuxed/1/maudio/1/spc/x-caUP3XhykpLU6_KMmiDexlgUCx9oiy-aHu4584DDrclpGSNmXPtV2RKeSo/vprv/1/go/1/rqh/5/pacing/0/nvgoi/1/short_key/1/ncsapi/1/keepalive/yes/fexp/51326932%2C51335594%2C51371294/dover/13/itag/0/playlist_type/DVR/sparams/expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Chfr%2Cplaylist_duration%2Cmanifest_duration%2Cdemuxed%2Cmaudio%2Cspc%2Cvprv%2Cgo%2Crqh%2Citag%2Cplaylist_type/sig/AJfQdSswRAIgBiWJHKH7QM6NpFHhqmivMyYjia6i97OcyBokmUH2WHUCICYF1-HdxFEh5BC1rJ7RbWPLJLiNikYSF2FgeRBUBl5N/file/index.m3u8 HTTP/1.1 Host: manifest.googlevideo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK content-type: application/vnd.apple.mpegurl cross-origin-resource-policy: cross-origin date: Sun, 29 Dec 2024 13:32:12 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, must-revalidate content-encoding: gzip server: HTTP server (unknown) content-length: 2232 x-xss-protection: 0 x-frame-options: SAMEORIGIN alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`