Report - tvmate.icu:8080/get.php?username=jesus1&password=jesus1&type=m3u

Report Overview

Visitedpublic

2023-11-28 20:15:55

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
	unknown				446 B	3.9 MB	206.212.244.71

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-11-28 20:15:40	medium	Client IP	Internal IP	ET INFO DNS Query for Suspicious .icu Domain
2023-11-28 20:15:41	medium	Client IP	206.212.244.71	ET PHISHING Possible Credentials Sent to Suspicious TLD via HTTP GET

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Size
	tvmate.icu:8080/get.php?username=jesus1&password=jesus1&type=m3u	206.212.244.71	3.9 MB
URL tvmate.icu:8080/get.php?username=jesus1&password=jesus1&type=m3u IP / ASN 206.212.244.71 #12260 KCA-NET Requested byN/A Resource Info File typeM3U playlist, Unicode text, UTF-8 text, with CRLF, LF line terminators First Seen2023-11-28 Last Seen2023-11-28 Times Seen1 Size3.9 MB (3863541 bytes) MD5d53f918849c3f3e049e04956d19a0a6b SHA1f231dbbfc221daf6520135f2f68f05869fe9e2e5 SHA2567724eb5d9c88e7e773faee60b0e5d11551c988b4e1c71d34b298c1cdbe465ae8 HTTP Headers `GET /get.php?username=jesus1&password=jesus1&type=m3u HTTP/1.1 Host: tvmate.icu:8080 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Tue, 28 Nov 2023 20:15:37 GMT Content-Type: application/octet-stream Content-Length: 3863541 Connection: keep-alive Content-Description: File Transfer Expires: 0 Cache-Control: must-revalidate Pragma: public Content-Disposition: attachment; filename="tv_channels_jesus1.m3u"`

tvmate.icu:8080/get.php?username=jesus1&password=jesus1&type=m3u

206.212.244.71

3.9 MB

URL

tvmate.icu:8080/get.php?username=jesus1&password=jesus1&type=m3u

IP / ASN

206.212.244.71

#12260 KCA-NET

Requested byN/A

Resource Info

File typeM3U playlist, Unicode text, UTF-8 text, with CRLF, LF line terminators

First Seen2023-11-28

Last Seen2023-11-28

Times Seen1

Size3.9 MB (3863541 bytes)

MD5d53f918849c3f3e049e04956d19a0a6b

SHA1f231dbbfc221daf6520135f2f68f05869fe9e2e5

SHA2567724eb5d9c88e7e773faee60b0e5d11551c988b4e1c71d34b298c1cdbe465ae8

HTTP Headers

GET /get.php?username=jesus1&password=jesus1&type=m3u HTTP/1.1
Host: tvmate.icu:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 20:15:37 GMT
Content-Type: application/octet-stream
Content-Length: 3863541
Connection: keep-alive
Content-Description: File Transfer
Expires: 0
Cache-Control: must-revalidate
Pragma: public
Content-Disposition: attachment; filename="tv_channels_jesus1.m3u"