Report - utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:

Report Overview

Submitted URL
utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:
IP
143.204.55.57
ASN
#16509 AMAZON-02
Submitted
2024-05-01 21:50:44
Access
public
Website Title
Not Authorized · μTorrent Web
Final URL
utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
127.0.0.1:19575	unknown	unknown	No data	No data	499 B	0 B	0.0.0.0
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-01	463 B	3.1 kB	142.250.74.106
utweb.rainberrytv.com	unknown	2022-04-22	2022-12-07	2024-03-03	2.8 kB	47 kB	143.204.55.87
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-30	428 B	97 kB	142.250.74.168
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-01	1.1 kB	58 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-01	medium	127.0.0.1	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	www.googletagmanager.com/gtag/js?id=G-Z28525QR15	280 kB	2024-05-01	2024-05-01
Pretty URL www.googletagmanager.com/gtag/js?id=G-Z28525QR15 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-01 23:50:50 Last Seen2024-05-01 23:50:50 Times Seen2 Hash 43343e4366829a99400150109776c95e 29bc0c4c013c2f75b39daf9c20d59c902e45c588 78d5fa4d5d657c842a788041474277dc1fc6ae5644ca76ad663461d3f64c9354 Loading...

	utweb.rainberrytv.com/gui/static/js/base64.js	1.5 kB	2023-04-09	2024-05-10
Pretty URL utweb.rainberrytv.com/gui/static/js/base64.js IP 143.204.55.87 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-09 14:39:25 Last Seen2024-05-10 06:38:37 Times Seen115 Hash 3dd016900a667df4caf79e04fcb23bbb 3154c1dc530011727d9d27b82176ca43dd74434f cdf97fe6715fa46711fd39e19826bdaf38e09bf774ba6a9bc3812fcaf91d9f26 Loading...

	utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:	953 B	2023-04-09	2024-05-10
Pretty URL utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1: IP 143.204.55.87 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-09 14:39:25 Last Seen2024-05-10 06:38:37 Times Seen112 Hash a62c82ed2619b0a6e5fdc5534c38304c 709f6c51b0a62e3984bc4a3e4f81a5b7e5481c0a a00a28b8d0d7b6a8de216513ea296c8602aa6d371c29d88878e3ed7cd589b834 Loading...

	utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:	764 B	2023-04-09	2024-05-10
Pretty URL utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1: IP 143.204.55.87 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-09 14:39:25 Last Seen2024-05-10 06:38:37 Times Seen112 Hash 21db38e471c7a0202a33609c8ad6a018 f063bc1d711b9aabf66db78f85e29fcce4bb7121 bc842df5824b7f04ca0e9e6787eb541bd0470602231258cf9c5457e991e65679 Loading...

	utweb.rainberrytv.com/gui/static/js/start.js	4.2 kB	2023-06-29	2024-05-10
Pretty URL utweb.rainberrytv.com/gui/static/js/start.js IP 143.204.55.87 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-29 16:42:51 Last Seen2024-05-10 06:38:37 Times Seen83 Hash 4b24d43086935bfc6a1c5494af985b46 086880a97975bbed7cc5f83b749b38c76c041b3e 1a2c04411df3f44bbb919c408141f82aa85aa119f3f848c67f713aa9e0afff5f Loading...

	unknown	1.1 kB	2024-05-01	2024-05-01
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-01 21:52:57 Last Seen2024-05-01 23:50:50 Times Seen2 Hash 18a29aa787fbf2e855f165eab8a63bfa 2cc16d866e33e5ba61389013b15b29f1335622c4 a8d1039a035cc9d0cdcd90394becd713d3e2ae7d86f02361ea383111ae04afd9 Loading...

	utweb.rainberrytv.com/gui/sandbox%20eval%20code	147 B	2023-04-11	2024-05-15
Pretty URL utweb.rainberrytv.com/gui/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-05-15 20:06:27 Times Seen348504 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

	www.google-analytics.com/analytics.js	4.7 kB	2023-04-11	2024-05-15
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-05-15 20:06:27 Times Seen347995 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

HTTP Transactions (11)

URL IP Response Size

utweb.rainberrytv.com/gui/static/imgs/ut-favicon.ico

143.204.55.87

200 OK

4.3 kB

URL GET HTTP/2
utweb.rainberrytv.com/gui/static/imgs/ut-favicon.ico
IP
143.204.55.87:443
ASN
#16509 AMAZON-02

Requested by
https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:
Certificate
IssuerAmazon
Subject*.rainberrytv.com
FingerprintB0:96:C2:1B:10:2C:94:97:B7:55:EC:FE:8B:30:C7:31:66:77:10:FC
ValiditySun, 11 Jun 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
4945a47bd094566a117942d85acedc9f
6105f806156b5c1ce48b8137a16d6d1001e11299
f5d02ba6c0fb8255ca702a5d88556186b481437d7ab32180235d97fbce46da5a

HTTP Headers

GET /gui/static/imgs/ut-favicon.ico HTTP/1.1
Host: utweb.rainberrytv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://utweb.rainberrytv.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/x-icon
content-length: 4286
last-modified: Thu, 28 Mar 2024 07:50:32 GMT
server: AmazonS3
date: Wed, 01 May 2024 03:03:47 GMT
etag: "4945a47bd094566a117942d85acedc9f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: P3_ihGZEembSXvOT4V_dpK746de2H5QHso_yakA_HciDHyfssEIJGQ==
age: 67593
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-Z28525QR15

142.250.74.168

200 OK

97 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-Z28525QR15
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52
ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT

File type
JavaScript source, ASCII text, with very long lines (5945)
Size
97 kB (96725 bytes)
Hash
43343e4366829a99400150109776c95e
29bc0c4c013c2f75b39daf9c20d59c902e45c588
78d5fa4d5d657c842a788041474277dc1fc6ae5644ca76ad663461d3f64c9354

HTTP Headers

GET /gtag/js?id=G-Z28525QR15 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://utweb.rainberrytv.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 May 2024 21:50:19 GMT
expires: Wed, 01 May 2024 21:50:19 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 96725
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/librefranklin/v14/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2

216.58.207.227

200 OK

28 kB

URL GET HTTP/2
fonts.gstatic.com/s/librefranklin/v14/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 28224, version 1.0
Size
28 kB (28224 bytes)
Hash
6e95e894bf3dab542264c4bfbe7e677a
c5ef8b858caf7920d451d43f37ea65de3736716c
edbf37f6db3f632faaeeeee4aa127c204d0bcc52e940682bc5d4b0fa48ded96b

HTTP Headers

GET /s/librefranklin/v14/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://utweb.rainberrytv.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28224
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:04:54 GMT
expires: Sat, 26 Apr 2025 06:04:54 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:23:38 GMT
content-type: font/woff2
age: 488726
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/librefranklin/v14/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2

216.58.207.227

200 OK

28 kB

URL GET HTTP/2
fonts.gstatic.com/s/librefranklin/v14/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 28224, version 1.0
Size
28 kB (28224 bytes)
Hash
6e95e894bf3dab542264c4bfbe7e677a
c5ef8b858caf7920d451d43f37ea65de3736716c
edbf37f6db3f632faaeeeee4aa127c204d0bcc52e940682bc5d4b0fa48ded96b

HTTP Headers

GET /s/librefranklin/v14/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://utweb.rainberrytv.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28224
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:04:54 GMT
expires: Sat, 26 Apr 2025 06:04:54 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:23:38 GMT
content-type: font/woff2
age: 488726
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

utweb.rainberrytv.com/gui/static/imgs/ut-favicon.ico

143.204.55.87

200 OK

4.3 kB

URL GET HTTP/2
utweb.rainberrytv.com/gui/static/imgs/ut-favicon.ico
IP
143.204.55.87:443
ASN
#16509 AMAZON-02

Requested by
https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:
Certificate
IssuerAmazon
Subject*.rainberrytv.com
FingerprintB0:96:C2:1B:10:2C:94:97:B7:55:EC:FE:8B:30:C7:31:66:77:10:FC
ValiditySun, 11 Jun 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
4945a47bd094566a117942d85acedc9f
6105f806156b5c1ce48b8137a16d6d1001e11299
f5d02ba6c0fb8255ca702a5d88556186b481437d7ab32180235d97fbce46da5a

HTTP Headers

GET /gui/static/imgs/ut-favicon.ico HTTP/1.1
Host: utweb.rainberrytv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://utweb.rainberrytv.com/
DNT: 1
Connection: keep-alive
Cookie: _ga_Z28525QR15=GS1.1.1714600220.1.0.1714600220.0.0.0; _ga=GA1.1.1694070638.1714600220
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/x-icon
content-length: 4286
last-modified: Thu, 28 Mar 2024 07:50:32 GMT
server: AmazonS3
date: Wed, 01 May 2024 03:03:47 GMT
etag: "4945a47bd094566a117942d85acedc9f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ghcHKhuK1w9k4uya5GpT7pqr_4H0RB5crb4XW4F_E-Hia-QG1VwSRw==
age: 67594
X-Firefox-Spdy: h2

utweb.rainberrytv.com/gui/noauth.html

143.204.55.87

200 OK

28 kB

URL GET HTTP/2
utweb.rainberrytv.com/gui/noauth.html
IP
143.204.55.87:443
ASN
#16509 AMAZON-02

Requested by
https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:
Certificate
IssuerAmazon
Subject*.rainberrytv.com
FingerprintB0:96:C2:1B:10:2C:94:97:B7:55:EC:FE:8B:30:C7:31:66:77:10:FC
ValiditySun, 11 Jun 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT

File type

Size
28 kB (28029 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /gui/noauth.html HTTP/1.1
Host: utweb.rainberrytv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://utweb.rainberrytv.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
last-modified: Thu, 28 Mar 2024 07:50:26 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 01 May 2024 01:51:32 GMT
etag: W/"b4c102ebbc2aea37d20c82fd1ed29ee6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3RPqRJ9sMTSq7-D1gTtN-O2g7sGuH8raRTQ_bX19vYHxQqCWvJwDGA==
age: 71927
X-Firefox-Spdy: h2

utweb.rainberrytv.com/gui/static/js/base64.js

143.204.55.87

200 OK

1.5 kB

URL GET HTTP/2
utweb.rainberrytv.com/gui/static/js/base64.js
IP
143.204.55.87:443
ASN
#16509 AMAZON-02

Requested by
https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:
Certificate
IssuerAmazon
Subject*.rainberrytv.com
FingerprintB0:96:C2:1B:10:2C:94:97:B7:55:EC:FE:8B:30:C7:31:66:77:10:FC
ValiditySun, 11 Jun 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (1521), with no line terminators
Size
1.5 kB (1501 bytes)
Hash
d608eb353d93bb6b500d5fc37968bb8c
1552413397a07afd815969902b145dce046b2227
cefef6f7d787443958a51a4c4e44119014a73008d873ab5bc2ea1fb897a60e8f

HTTP Headers

GET /gui/static/js/base64.js HTTP/1.1
Host: utweb.rainberrytv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://utweb.rainberrytv.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/x-javascript
date: Wed, 01 May 2024 02:56:55 GMT
last-modified: Thu, 28 Mar 2024 07:50:34 GMT
etag: W/"3dd016900a667df4caf79e04fcb23bbb"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tqRWCFpFhxMaDq8__BgPOLc33amKh1PgtBl-GsHJ0jYtW8DChIGXng==
age: 68005
X-Firefox-Spdy: h2

utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:

143.204.55.87

200 OK

2.1 kB

URL User Request GET HTTP/2
utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:
IP
143.204.55.87:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subject*.rainberrytv.com
FingerprintB0:96:C2:1B:10:2C:94:97:B7:55:EC:FE:8B:30:C7:31:66:77:10:FC
ValiditySun, 11 Jun 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (2208), with no line terminators
Size
2.1 kB (2132 bytes)
Hash
e8bfcc0a6591c8a4a67bd1ddb89e0bf8
ddab4ab34e6bf38829e31d146636036c84c9c84b
61e0e2b129b410b8b124390b638de4943f0e0f9aac66a4d3df2ff5f2b8baf2b5

HTTP Headers

GET /gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1: HTTP/1.1
Host: utweb.rainberrytv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
last-modified: Thu, 28 Mar 2024 07:50:25 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 01 May 2024 01:29:22 GMT
etag: W/"a098ead83d5895744b783ddc195ef1b2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: e7C8uhmYwlYDqlbswMUCYee3fC8zASSrp_MNnZOieO-xUk1beHKM8g==
age: 73645
X-Firefox-Spdy: h2

utweb.rainberrytv.com/gui/static/js/start.js

143.204.55.87

200 OK

4.2 kB

URL GET HTTP/2
utweb.rainberrytv.com/gui/static/js/start.js
IP
143.204.55.87:443
ASN
#16509 AMAZON-02

Requested by
https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:
Certificate
IssuerAmazon
Subject*.rainberrytv.com
FingerprintB0:96:C2:1B:10:2C:94:97:B7:55:EC:FE:8B:30:C7:31:66:77:10:FC
ValiditySun, 11 Jun 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (4369), with no line terminators
Size
4.2 kB (4230 bytes)
Hash
75ebd8a59581c5754ac7300c3460d84a
87c67e722ead7accd7bc359ee57bd25c9e65a35b
8043b547b0efa8eea480e71d68790f5668002fc917fa4bd9993ed126931ef333

HTTP Headers

GET /gui/static/js/start.js HTTP/1.1
Host: utweb.rainberrytv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://utweb.rainberrytv.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Thu, 28 Mar 2024 07:50:35 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 01 May 2024 01:06:50 GMT
etag: W/"4b24d43086935bfc6a1c5494af985b46"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jFtO8xyyl2WFPruWuwFbRjp6hg_YvqUNAV4lvy6OhPVvjAOP4rEu0g==
age: 74610
X-Firefox-Spdy: h2

127.0.0.1:19575/gui/token.html?t=1714600219609&localauth=localapie7e5b3d3c823c5e1:

0.0.0.0

0 B

URL GET
127.0.0.1:19575/gui/token.html?t=1714600219609&localauth=localapie7e5b3d3c823c5e1:
IP
0.0.0.0:0
ASN
#0

Requested by
https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /gui/token.html?t=1714600219609&localauth=localapie7e5b3d3c823c5e1: HTTP/1.1
Host: 127.0.0.1:19575
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://utweb.rainberrytv.com/
Origin: https://utweb.rainberrytv.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

fonts.googleapis.com/css?family=Libre+Franklin:200,500&display=swap

142.250.74.106

200 OK

2.5 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Libre+Franklin:200,500&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5759&localauth=localapie7e5b3d3c823c5e1:
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (2538), with no line terminators
Size
2.5 kB (2484 bytes)
Hash
5cb9214c05e7185eede16b97546def02
130ac836a5e0303749aad651fe6a564cb14f6408
4a6cb3b8153e3560b301101cd6f31e0eb512df6e9664cc33f971d09d04ce084b

HTTP Headers

GET /css?family=Libre+Franklin:200,500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://utweb.rainberrytv.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 01 May 2024 21:50:19 GMT
date: Wed, 01 May 2024 21:50:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)