Report - iptvkosova.ml.gentv.to:8080/get.php?username=8TYSeFgLkq&password=Y3VQJ7IUhm&type=m3u

Report Overview

Visitedpublic

2023-12-02 14:07:54

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
	unknown				466 B	2.3 MB	159.100.13.167

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-02 14:07:42	medium	Client IP	Internal IP	ET DNS Query for .to TLD
2023-12-02 14:07:42	medium	Client IP	Internal IP	ET DNS Query for .to TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	GET iptvkosova.ml.gentv.to:8080/get.php?username=8TYSeFgLkq&password=Y3VQJ7IUhm&type=m3u	159.100.13.167	200 OK	2.3 MB
URL iptvkosova.ml.gentv.to:8080/get.php?username=8TYSeFgLkq&password=Y3VQJ7IUhm&type=m3u IP / ASN 159.100.13.167 #44066 diva-e Datacenters GmbH Requested byN/A Resource Info File typeM3U playlist, Unicode text, UTF-8 text, with CRLF, LF line terminators First Seen2023-12-02 Last Seen2023-12-02 Times Seen1 Size2.3 MB (2342133 bytes) MD588d9bed0667b02cb23dff2653cf2671d SHA1546d0498519ef1a820451f6103a7e4a620ce5dfd SHA25643ea7db28465cb701a19d6fe8b51d5307e1588d31978710b7dd0d6fa8bc4e2f1 HTTP Headers `GET /get.php?username=8TYSeFgLkq&password=Y3VQJ7IUhm&type=m3u HTTP/1.1 Host: iptvkosova.ml.gentv.to:8080 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK server: nginx date: Sat, 02 Dec 2023 14:07:38 GMT content-type: application/octet-stream content-length: 2342133 x-powered-by: PHP/7.4.5 access-control-allow-origin: * content-description: File Transfer expires: 0 cache-control: must-revalidate pragma: public content-disposition: attachment; filename="tv_channels_8TYSeFgLkq.m3u"`

GET iptvkosova.ml.gentv.to:8080/get.php?username=8TYSeFgLkq&password=Y3VQJ7IUhm&type=m3u

159.100.13.167

200 OK

2.3 MB

URL

iptvkosova.ml.gentv.to:8080/get.php?username=8TYSeFgLkq&password=Y3VQJ7IUhm&type=m3u

IP / ASN

159.100.13.167

#44066 diva-e Datacenters GmbH

Requested byN/A

Resource Info

File typeM3U playlist, Unicode text, UTF-8 text, with CRLF, LF line terminators

First Seen2023-12-02

Last Seen2023-12-02

Times Seen1

Size2.3 MB (2342133 bytes)

MD588d9bed0667b02cb23dff2653cf2671d

SHA1546d0498519ef1a820451f6103a7e4a620ce5dfd

SHA25643ea7db28465cb701a19d6fe8b51d5307e1588d31978710b7dd0d6fa8bc4e2f1

HTTP Headers

GET /get.php?username=8TYSeFgLkq&password=Y3VQJ7IUhm&type=m3u HTTP/1.1
Host: iptvkosova.ml.gentv.to:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
server: nginx
date: Sat, 02 Dec 2023 14:07:38 GMT
content-type: application/octet-stream
content-length: 2342133
x-powered-by: PHP/7.4.5
access-control-allow-origin: *
content-description: File Transfer
expires: 0
cache-control: must-revalidate
pragma: public
content-disposition: attachment; filename="tv_channels_8TYSeFgLkq.m3u"