Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The 2019 checkrain[.]com offer was not a checkra1n jailbreak. Cisco Talos found that it installed a configuration profile containing a Web Clip, then routed visitors through ads, verification pages and an App Store game to generate click-fraud revenue. A genuine checkra1n setup did not work through a browser or “without a PC”: the documented process used a compatible A5–A11 device, DFU mode and an Apple USB cable.

What the fake checkra1n site did

Cisco Talos reported the campaign on October 15, 2019. Attackers used checkrain[.]com, a lookalike domain aimed at people searching for the legitimate checkra1n jailbreak. The site presented itself as a way to jailbreak newer iPhones, but its actual delivery mechanism was an iOS configuration profile.

Talos summarized the result plainly: “However, this site just prompts users to download a malicious profile which allows the attacker to conduct click-fraud.” Installing that profile did not modify iOS or prove that a jailbreak had occurred.

The home-screen icon was a bookmark, not an app

The site requested checkrain[.]com/checkra1n.mobileconfig. After installation, iOS displayed an icon on the Home Screen. Talos found that the icon was an Apple Web Clip—a bookmark installed by the profile—not a native jailbreak utility. Opening it showed a full-screen webpage without normal browser controls and simulated a jailbreak process.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Apple iPhone 14, 128GB, Midnight - Unlocked (Renewed)
  • This phone is unlocked and compatible with any carrier of choice on GSM and CDMA networks (e.g. AT&T, T-Mobile, Sprint, Verizon, US Cellular, Cricket, Metro, Tracfone, Mint Mobile, etc.).
  • Please check with your carrier to verify compatibility.
  • The device does not come with headphones or a SIM card. It does include a generic (Mfi certified) charging cable.
  • Tested for battery health and guaranteed to have a minimum battery capacity of 80%.

How legitimate checkra1n differed

Checkra1n used the checkm8 bootrom vulnerability. In Talos’s description, checkm8 affected Apple’s A5 through A11 chipsets, covering iPhone models from the 4S through the X. The fake site’s A13 claim and “no PC” promise conflicted with those technical limits and with the documented installation procedure.

Characteristic Legitimate checkra1n context Fake checkrain.com offer
Hardware boundary A5–A11 chipsets; Talos described iPhone 4S through iPhone X as affected by checkm8. Claimed support for A13 hardware, which contradicted the A5–A11 scope identified by Talos.
Connection method Required the phone to enter DFU mode and connect with an Apple USB cable. Promised installation without a computer.
What was delivered A real jailbreak tool that loads a jailbroken image using the checkm8 vulnerability. A .mobileconfig profile that created a Web Clip bookmark.
Observed outcome Modification of the device’s boot process, subject to the tool’s hardware and software limits. Redirects, tracking, verification steps and app-install engagement intended to earn money for the operator.

Warning signs to check before installing anything

  • Browser-only installation: A claim that checkra1n can jailbreak an iPhone without a computer conflicts with the DFU-mode and Apple USB cable requirement documented by Talos.
  • Unsupported hardware: A promise of A13 support conflicts with the A5–A11 range associated with checkm8 and checkra1n in the Talos report.
  • A configuration profile: A jailbreak website asking for a .mobileconfig file is asking to add an iOS profile, not to run a jailbreak executable.
  • A mystery Home Screen icon: An icon that opens a page with no normal browser controls can be a Web Clip. It is not evidence that the operating system was jailbroken.
  • Engagement gates: Requests to install an unrelated game, complete “verification,” or keep playing for a set number of days are monetization instructions, not jailbreak steps.

How the click-fraud flow made money

Redirects and tracking

Talos observed a chain involving multiple redirects, advertising tracking, verification pages and geolocation checks. These steps kept the visitor moving through monetized pages rather than performing a device modification.

Rank #2
Apple iPhone 16, 128GB, Pink - Unlocked (Renewed)
  • 6.1" Super Retina XDR OLED, HDR10, Dolby Vision, 1000nits (typ), 2000nits (HBM), 2556x1179px at 460ppi, 3561mAh Battery
  • 128GB 8GB RAM, Apple A18 (3nm), Hexa-core (2x4.04 GHz + 4x2.20 GHz), Apple GPU 5-core, 16‑core Neural Engine
  • Rear camera: 48MP, f/1.6, wide + 12MP, f/2.2, ultrawide, Front Camera: 12MP, f/1.9, wide, iOS 18, upgradable to iOS 18.5
  • 4G LTE: 1/2/3/4/5/7/8/12/13/14/17/18/19/20/25/26/28/29/30/32/34/38/39/40/41/42/48/53/66/71, 5G: n1/2/3/5/7/8/12/14/20/25/26/28/29/30/38/40/41/48/53/66/70/71/75/76/77/78/79 - Dual eSIM
  • Unlocked for freedom to choose your carrier. Compatible with both GSM & CDMA networks. The phone is unlocked to work with all GSM Carriers & CDMA Carriers Including AT&T, T-Mobile, Verizon, Sprint., Etc.

The POP! Slots requirement

The chain ultimately sent users to the App Store to install the slot-machine game POP! Slots. Instructions told users to play for seven days to unlock the supposed jailbreak content. Talos concluded that the gameplay requirement generated additional interactive sessions that could produce revenue for the attacker. As Talos put it, “This is obviously nonsense — the user will merely provide more interactive sessions through the gameplay, which may result in additional revenue for this attacker.”

How to check an iPhone for an unknown profile

Use the profile-management screen rather than judging by the presence or absence of a Home Screen icon. The following path is the one Cisco Talos documented for the affected iOS interface; wording can differ on newer releases:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Apple iPhone 15, 128GB, Black - Unlocked (Renewed)
  • 6.1inch Super Retina XDR display. Aluminum with color-infused glass back. Ring/Silent switch
  • Dynamic Island. A magical way to interact with iPhone. A16 Bionic chip with 5-core GPU
  • Advanced dual-camera system. 48MP Main | Ultra Wide. Super-high-resolution photos (24MP and 48MP). Next-generation portraits with Focus and Depth Control. 4X optical zoom range
  • Emergency SOS via satellite. Crash Detection. Roadside Assistance via satellite
  • Up to 26 hours video playback. USB C, Supports USB 2. Face ID
  1. Open Settings.
  2. Tap General.
  3. Open Profiles & Device Management.
  4. Select the MDM configuration or other profile you do not recognize.
  5. Review its Restrictions and Apps entries before deciding what to do.

Talos states that if Profiles & Device Management is absent, the phone was not enrolled in MDM and had no additional profiles trusted, according to the guidance in that report. A missing menu does not validate a jailbreak; it only means that this profile-management area is not present.

How to remove a profile you did not intend to install

  1. Open the unrecognized profile from the profile-management screen.
  2. If iOS offers Remove Profile or Delete Profile, use that control and authenticate when prompted.
  3. Restart the iPhone, then check the profile-management screen again.
  4. Delete the Web Clip icon and any unrelated app installed during the flow, including POP! Slots if you installed it only for the supposed unlock.

Some organization-managed devices block profile removal. If the removal control is unavailable, the device may be managed by an employer, school or other administrator; contact that administrator rather than trying to bypass management. Cisco Talos’s overarching warning was: “We strongly recommend to never install an unknown profile from the internet.”

Rank #4
Apple iPhone 13, 128GB, Midnight - Unlocked (Renewed)
  • This pre-owned product is not Apple certified, but has been professionally inspected, tested and cleaned by Amazon-qualified suppliers.
  • There will be no visible cosmetic imperfections when held at an arm’s length.
  • This product is eligible for a replacement or refund within 90 days of receipt if you are not satisfied.
  • Product may come in generic Box.

If you followed the fake instructions

  • Stop interacting with the redirect chain and do not complete the promised multi-day gameplay requirement.
  • Inspect Profiles & Device Management for an unfamiliar MDM configuration, its restrictions and its installed apps.
  • Remove the profile when iOS permits it, then remove the Web Clip and any unrelated app you installed for the offer.
  • If the profile is organization-managed or cannot be removed, ask the responsible administrator or Apple Support for help.

The campaign described by Talos was designed to monetize interaction. The fact that a page displayed a progress screen or a Home Screen icon did not establish that the phone had been jailbroken.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Where Talos saw potential targeting

Cisco Talos listed the United States, United Kingdom, France, Nigeria, Iraq, Vietnam, Venezuela, Egypt, Georgia, Australia, Canada, Turkey, the Netherlands and Italy as potentially targeted countries. That list describes the campaign’s observed targeting scope in the October 2019 report, not a guarantee that every user in those countries saw the site.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Apple iPhone 16e, 128GB, Black - Unlocked (Renewed)
  • 6.1" Super Retina XDR OLED, HDR10, 800 nits (HBM), 1200 nits (peak), 2532x1170px at 460ppi, 4005mAh Battery
  • 8GB RAM, Apple A18 6-core CPU (2 performance + 4 efficiency cores), Apple GPU 4-core, 16‑core Neural Engine
  • Rear camera: 48MP, f/1.6, wide, Front Camera: 12MP, f/1.9, wide, iOS 18.3.1, upgradable to iOS 18.5
  • Connectivity: Global 4G LTE, Sub-6 GHz 5G, LTE, Wi-Fi 6, Bluetooth 5.3, NFC, USB-C, Wireless Charging (7.5W). (does not have mmWave 5G or MagSafe or physical SIM card) - Dual eSIM Only
  • Unlocked for freedom to choose your carrier. Compatible with both GSM & CDMA networks. The phone is unlocked to work with all GSM Carriers & CDMA Carriers Including AT&T, T-Mobile, Verizon, Straight Talk., Etc.

A practical authenticity test

Before trusting any jailbreak offer, compare its claimed hardware range and installation method with the project’s documented requirements. For the checkra1n campaign examined by Talos, A13 support, browser-only installation, a .mobileconfig download and a Web Clip were mutually incompatible with the legitimate A5–A11, DFU-mode and Apple-USB-cable process.

Quick Recap

Bestseller No. 1
Apple iPhone 14, 128GB, Midnight - Unlocked (Renewed)
Apple iPhone 14, 128GB, Midnight - Unlocked (Renewed)
Please check with your carrier to verify compatibility.; Tested for battery health and guaranteed to have a minimum battery capacity of 80%.
$300.00
Bestseller No. 3
Apple iPhone 15, 128GB, Black - Unlocked (Renewed)
Apple iPhone 15, 128GB, Black - Unlocked (Renewed)
Dynamic Island. A magical way to interact with iPhone. A16 Bionic chip with 5-core GPU; Emergency SOS via satellite. Crash Detection. Roadside Assistance via satellite
$409.00
Bestseller No. 4
Apple iPhone 13, 128GB, Midnight - Unlocked (Renewed)
Apple iPhone 13, 128GB, Midnight - Unlocked (Renewed)
There will be no visible cosmetic imperfections when held at an arm’s length.; Product may come in generic Box.
$262.00

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.