Report - www.flyingpredictor.com/B1G5rmQT/

Report Overview

Submitted URL
www.flyingpredictor.com/B1G5rmQT/
IP
91.223.123.38
ASN
#21100 ITL LLC
Submitted
2024-04-17 23:42:29
Access
public
Website Title
Telegram
Final URL
www.flyingpredictor.com/B1G5rmQT/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-17	453 B	31 kB	151.101.2.137
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-17	1.6 kB	50 kB	142.250.74.99
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-17	473 B	1.3 MB	142.250.74.106
www.flyingpredictor.com	unknown	2023-11-10	2023-11-10	2024-04-18	2.9 kB	1.3 MB	91.223.123.38

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	www.flyingpredictor.com/B1G5rmQT/	Telegram

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	www.flyingpredictor.com/B1G5rmQT/	17 B	2023-03-07	2024-04-18
Pretty URL www.flyingpredictor.com/B1G5rmQT/ IP 91.223.123.38 ASN #21100 ITL LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:06:38 Last Seen2024-04-18 01:42:30 Times Seen2 Hash b417a23148afa4277e46ae40c9d32270 1c3239e6f63f2de078b9534c119ab2be3ec6366f 9201945e5042d7ddf4e55e806024e4db2d084eb84305f81bfcdcad5234b5b9ab Loading...

	www.flyingpredictor.com/B1G5rmQT/	0 B	2023-03-07	2024-04-30
Pretty URL www.flyingpredictor.com/B1G5rmQT/ IP 91.223.123.38 ASN #21100 ITL LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-30 17:53:58 Times Seen37220364 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	code.jquery.com/jquery-3.7.1.min.js	88 kB	2023-08-31	2024-04-30
Pretty URL code.jquery.com/jquery-3.7.1.min.js IP 151.101.2.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 16:03:19 Last Seen2024-04-30 17:51:34 Times Seen8375 Hash 2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a Loading...

	www.flyingpredictor.com/B1G5rmQT/	0 B	2023-03-07	2024-04-30
Pretty URL www.flyingpredictor.com/B1G5rmQT/ IP 91.223.123.38 ASN #21100 ITL LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-30 17:53:58 Times Seen37220364 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (12)

URL IP Response Size

www.flyingpredictor.com/B1G5rmQT/

91.223.123.38

200 OK

1.4 kB

URL User Request GET HTTP/1.1
www.flyingpredictor.com/B1G5rmQT/
IP
91.223.123.38:80
ASN
#21100 ITL LLC

File type
HTML document, Unicode text, UTF-8 text
Size
1.4 kB (1361 bytes)
Hash
8e6eb4f0ade39a4415df92028a584657
bda59341ea334d3030755927bb13d32d4d4a2070
073216263fbbc5a9b4aba54d37c636526dcf848ae1f8873a334144eec2f7ded4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /B1G5rmQT/ HTTP/1.1
Host: www.flyingpredictor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 23:42:03 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1361
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: Wed, 17 Apr 2024 23:42:03 GMT
Set-Cookie: hash_zip=888b19a43b151683c87895f6211d9f8640f97bdc8ef32f03dbe057c8f5e56d32
hash_city=8e016391c88c77d6773deab343b91f53bb64bfbc9ca18101844cb84c3d01e561
hash_gender=08f271887ce94707da822d5263bae19d5519cb3614e0daedc4c7ce5dab7473f1
hash_country=9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59
hash_region=b94f78c69bd51943a4999e1018ca0985b896982ef186b75af206625c07950f0c
sub1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
sub2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
sub3=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
fbclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
_pixel=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *

www.flyingpredictor.com/lander/anya---cristian---1001589664720/css/style.css

91.223.123.38

200 OK

1.6 kB

URL GET HTTP/1.1
www.flyingpredictor.com/lander/anya---cristian---1001589664720/css/style.css
IP
91.223.123.38:80
ASN
#21100 ITL LLC

Requested by
http://www.flyingpredictor.com/B1G5rmQT/

File type
assembler source, Unicode text, UTF-8 text, with CRLF line terminators
Size
1.6 kB (1566 bytes)
Hash
3c020c836398eeaca7fe24fc58df2165
30a9b33664ff0e0c516ccc07be3def4fbf9f0f4c
058745e6a6e1a6db91f5bb83854522a66f21c87b1721b55876bad2f7213605ac

HTTP Headers

GET /lander/anya---cristian---1001589664720/css/style.css HTTP/1.1
Host: www.flyingpredictor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.flyingpredictor.com/B1G5rmQT/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 23:42:03 GMT
Content-Type: text/css
Last-Modified: Sat, 02 Mar 2024 21:01:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"65e393af-14c0"
Expires: Sat, 27 Apr 2024 23:42:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip

code.jquery.com/jquery-3.7.1.min.js

151.101.2.137

200 OK

30 kB

URL GET HTTP/2
code.jquery.com/jquery-3.7.1.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
http://www.flyingpredictor.com/B1G5rmQT/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
30 kB (30336 bytes)
Hash
2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a

HTTP Headers

GET /jquery-3.7.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.flyingpredictor.com
DNT: 1
Connection: keep-alive
Referer: http://www.flyingpredictor.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-155ed"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 23:42:03 GMT
age: 18596661
x-served-by: cache-lga21978-LGA, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 74, 183032
x-timer: S1713397324.936025,VS0,VE0
vary: Accept-Encoding
content-length: 30336
X-Firefox-Spdy: h2

www.flyingpredictor.com/lander/anya---cristian---1001589664720/images/favicon.png

91.223.123.38

200 OK

1.0 kB

URL GET HTTP/1.1
www.flyingpredictor.com/lander/anya---cristian---1001589664720/images/favicon.png
IP
91.223.123.38:80
ASN
#21100 ITL LLC

Requested by
http://www.flyingpredictor.com/B1G5rmQT/

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.0 kB (1043 bytes)
Hash
16a75c7824b5223b8e22864354e9e33f
2c35e76ebe2d8002369d582b32bd70374552c574
7f3e38478d53875c1f35d67fc035067274bacf9df8285889ad04fb143dfdddd8

HTTP Headers

GET /lander/anya---cristian---1001589664720/images/favicon.png HTTP/1.1
Host: www.flyingpredictor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.flyingpredictor.com/B1G5rmQT/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 23:42:03 GMT
Content-Type: image/png
Content-Length: 1043
Last-Modified: Thu, 22 Feb 2024 22:07:28 GMT
Connection: keep-alive
ETag: "65d7c5a0-413"
Expires: Sat, 27 Apr 2024 23:42:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

www.flyingpredictor.com/lander/anya---cristian---1001589664720/images/flag.png

91.223.123.38

200 OK

1.5 kB

URL GET HTTP/1.1
www.flyingpredictor.com/lander/anya---cristian---1001589664720/images/flag.png
IP
91.223.123.38:80
ASN
#21100 ITL LLC

Requested by
http://www.flyingpredictor.com/B1G5rmQT/

File type
PNG image data, 30 x 20, 8-bit/color RGBA, non-interlaced
Size
1.5 kB (1481 bytes)
Hash
ece0118d0f35bec8a366354110d00902
3c77ab39b6a0fa6fb41d1fbcbf3d824bc5c1c9e4
6240b8d45ea3b91078c1539b4f83b2e922ae7ac9e16ddc5dced3f3c5654bf91c

HTTP Headers

GET /lander/anya---cristian---1001589664720/images/flag.png HTTP/1.1
Host: www.flyingpredictor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.flyingpredictor.com/B1G5rmQT/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 23:42:03 GMT
Content-Type: image/png
Content-Length: 1481
Last-Modified: Thu, 22 Feb 2024 22:07:28 GMT
Connection: keep-alive
ETag: "65d7c5a0-5c9"
Expires: Sat, 27 Apr 2024 23:42:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

www.flyingpredictor.com/lander/anya---cristian---1001589664720/images/logocanel.jpg

91.223.123.38

200 OK

30 kB

URL GET HTTP/1.1
www.flyingpredictor.com/lander/anya---cristian---1001589664720/images/logocanel.jpg
IP
91.223.123.38:80
ASN
#21100 ITL LLC

Requested by
http://www.flyingpredictor.com/B1G5rmQT/

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3
Size
30 kB (29621 bytes)
Hash
83ec0d132c063b7fe18a8625b00679ac
01717047ce292b6bc0476bfbcf44369c8d9c626c
5e171afa11014ba71c21c782ae59f5ee9629c233553e31f285d25f9ca85b8c18

HTTP Headers

GET /lander/anya---cristian---1001589664720/images/logocanel.jpg HTTP/1.1
Host: www.flyingpredictor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.flyingpredictor.com/B1G5rmQT/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 23:42:03 GMT
Content-Type: image/jpeg
Content-Length: 29621
Last-Modified: Thu, 22 Feb 2024 22:07:28 GMT
Connection: keep-alive
ETag: "65d7c5a0-73b5"
Expires: Sat, 27 Apr 2024 23:42:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

142.250.74.99

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
http://www.flyingpredictor.com/B1G5rmQT/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.flyingpredictor.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 10:46:32 GMT
expires: Wed, 16 Apr 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 132932
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700;900&&display=swap

142.250.74.106

200 OK

1.3 MB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700;900&&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://www.flyingpredictor.com/B1G5rmQT/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
gzip compressed data, max compression
Size
1.3 MB (1252344 bytes)
Hash
e33e69a09512851f4647987ed572318a
9abccfdb4d1a79d8db988894b3b25110b30bec37
f93dff148c57e073c7c82527f004cf21aac1a0b84cd629bde3114f471b24f25f

HTTP Headers

GET /css2?family=Roboto:wght@300;400;500;700;900&&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.flyingpredictor.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 23:42:03 GMT
date: Wed, 17 Apr 2024 23:42:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.99

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
http://www.flyingpredictor.com/B1G5rmQT/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.flyingpredictor.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 02:37:01 GMT
expires: Fri, 11 Apr 2025 02:37:01 GMT
cache-control: public, max-age=31536000
age: 594303
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

142.250.74.99

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
http://www.flyingpredictor.com/B1G5rmQT/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Size
16 kB (15920 bytes)
Hash
3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.flyingpredictor.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 02:32:53 GMT
expires: Fri, 11 Apr 2025 02:32:53 GMT
cache-control: public, max-age=31536000
age: 594551
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.flyingpredictor.com/lander/anya---cristian---1001589664720/images/favicon.png

91.223.123.38

200 OK

1.0 kB

URL GET HTTP/1.1
www.flyingpredictor.com/lander/anya---cristian---1001589664720/images/favicon.png
IP
91.223.123.38:80
ASN
#21100 ITL LLC

Requested by
http://www.flyingpredictor.com/B1G5rmQT/

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.0 kB (1043 bytes)
Hash
16a75c7824b5223b8e22864354e9e33f
2c35e76ebe2d8002369d582b32bd70374552c574
7f3e38478d53875c1f35d67fc035067274bacf9df8285889ad04fb143dfdddd8

HTTP Headers

GET /lander/anya---cristian---1001589664720/images/favicon.png HTTP/1.1
Host: www.flyingpredictor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.flyingpredictor.com/B1G5rmQT/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 23:42:04 GMT
Content-Type: image/png
Content-Length: 1043
Last-Modified: Thu, 22 Feb 2024 22:07:28 GMT
Connection: keep-alive
ETag: "65d7c5a0-413"
Expires: Sat, 27 Apr 2024 23:42:04 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

www.flyingpredictor.com/lander/anya---cristian---1001589664720/images/tg-dark.png

91.223.123.38

200 OK

1.3 MB

URL GET HTTP/1.1
www.flyingpredictor.com/lander/anya---cristian---1001589664720/images/tg-dark.png
IP
91.223.123.38:80
ASN
#21100 ITL LLC

Requested by
http://www.flyingpredictor.com/B1G5rmQT/

File type
PNG image data, 1755 x 861, 8-bit/color RGB, non-interlaced
Size
1.3 MB (1251539 bytes)
Hash
aa69e492750e4ec87c49ff37e562fcde
d090493f0232c509b7d75af74d441ba9d0ef6aa6
1a2cbe02fd7116bdecf8e2f5a86543bd10a9ba8488fcf551fe31e35eb7ecb6d8

HTTP Headers

GET /lander/anya---cristian---1001589664720/images/tg-dark.png HTTP/1.1
Host: www.flyingpredictor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.flyingpredictor.com/lander/anya---cristian---1001589664720/css/style.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 23:42:04 GMT
Content-Type: image/png
Content-Length: 1251539
Last-Modified: Thu, 22 Feb 2024 22:07:28 GMT
Connection: keep-alive
ETag: "65d7c5a0-1318d3"
Expires: Sat, 27 Apr 2024 23:42:04 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers