Report - tvmate.icu:8080/get.php?username=jesus1&password=jesus1&type=m3u

Report Overview

Visited public
2023-11-28 20:15:55
Tags
URL
tvmate.icu:8080/get.php?username=jesus1&password=jesus1&type=m3u
Finishing URL
about:privatebrowsing
IP / ASN
206.212.244.71
#12260 KCA-NET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
	unknown				446 B	3.9 MB	206.212.244.71

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-11-28 20:15:40	medium	Client IP	Internal IP	ET INFO DNS Query for Suspicious .icu Domain
2023-11-28 20:15:41	medium	Client IP	206.212.244.71	ET PHISHING Possible Credentials Sent to Suspicious TLD via HTTP GET

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Size
	tvmate.icu:8080/get.php?username=jesus1&password=jesus1&type=m3u	206.212.244.71	3.9 MB
URL tvmate.icu:8080/get.php?username=jesus1&password=jesus1&type=m3u IP 206.212.244.71:0 ASN #12260 KCA-NET File type M3U playlist, Unicode text, UTF-8 text, with CRLF, LF line terminators Size 3.9 MB (3863541 bytes) Hash d53f918849c3f3e049e04956d19a0a6b f231dbbfc221daf6520135f2f68f05869fe9e2e5 7724eb5d9c88e7e773faee60b0e5d11551c988b4e1c71d34b298c1cdbe465ae8 HTTP Headers `GET /get.php?username=jesus1&password=jesus1&type=m3u HTTP/1.1 Host: tvmate.icu:8080 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Tue, 28 Nov 2023 20:15:37 GMT Content-Type: application/octet-stream Content-Length: 3863541 Connection: keep-alive Content-Description: File Transfer Expires: 0 Cache-Control: must-revalidate Pragma: public Content-Disposition: attachment; filename="tv_channels_jesus1.m3u"`

tvmate.icu:8080/get.php?username=jesus1&password=jesus1&type=m3u

206.212.244.71

3.9 MB

URL
tvmate.icu:8080/get.php?username=jesus1&password=jesus1&type=m3u
IP
206.212.244.71:0
ASN
#12260 KCA-NET

File type
M3U playlist, Unicode text, UTF-8 text, with CRLF, LF line terminators
Size
3.9 MB (3863541 bytes)
Hash
d53f918849c3f3e049e04956d19a0a6b
f231dbbfc221daf6520135f2f68f05869fe9e2e5
7724eb5d9c88e7e773faee60b0e5d11551c988b4e1c71d34b298c1cdbe465ae8

HTTP Headers

GET /get.php?username=jesus1&password=jesus1&type=m3u HTTP/1.1
Host: tvmate.icu:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 20:15:37 GMT
Content-Type: application/octet-stream
Content-Length: 3863541
Connection: keep-alive
Content-Description: File Transfer
Expires: 0
Cache-Control: must-revalidate
Pragma: public
Content-Disposition: attachment; filename="tv_channels_jesus1.m3u"

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (1)

URL

IP

ASN

File type

Size

Hash

HTTP Headers