Report - global-today.com/

Report Overview

Submitted URL
global-today.com/
IP
92.38.192.253
ASN
#12695 LLC Digital Network
Submitted
2024-04-26 14:29:47
Access
public
Website Title
MIXER NOVOSTEI -
Final URL
global-today.com/?sid9=home&uid=news-7defc561-9e03-4abd-9398-f59c72f1b801
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
18

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
global-today.com	unknown	unknown	No data	No data	4.2 kB	119 kB	92.38.192.253
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	1.1 kB	27 kB	216.58.207.227
mixer-events.com	unknown	2023-09-13	2023-09-13	2024-04-23	617 B	1.1 kB	85.192.12.172
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	459 B	6.2 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	global-today.com	Sinkholed
2024-04-26	medium	global-today.com	Sinkholed
2024-04-26	medium	global-today.com	Sinkholed
2024-04-26	medium	global-today.com	Sinkholed
2024-04-26	medium	global-today.com	Sinkholed
2024-04-26	medium	global-today.com	Sinkholed
2024-04-26	medium	global-today.com	Sinkholed
2024-04-26	medium	mixer-events.com	Sinkholed
2024-04-26	medium	global-today.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	global-today.com/	2.2 kB	2024-04-26	2024-04-26
Pretty URL global-today.com/ IP 92.38.192.253 ASN #12695 LLC Digital Network Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 16:29:53 Last Seen2024-04-26 16:29:53 Times Seen1 Hash 2a06a41ce6ebb153752828e1f3723055 5a7be885e92939c3e6f55a3a648d9f6b15866283 1bea46e6ed1b6946a3c3f6377bc913697e8b432ac470dddea484f3e27a3a2193 Loading...

	global-today.com/static/outofwindow3-without-dmp2.desktop/js/chunk-vendors.6a844e66.js	284 kB	2024-03-22	2024-05-04
Pretty URL global-today.com/static/outofwindow3-without-dmp2.desktop/js/chunk-vendors.6a844e66.js IP 85.192.12.187 ASN #12695 LLC Digital Network Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-22 17:47:33 Last Seen2024-05-04 09:09:44 Times Seen19 Hash 4bcc8f1ab257a3a7f2682fc76ef938eb 0b55a5a558745ab4f3ee40a448ae67af35b249f8 876d0035f300e030d2dd7e8c3fa3cac069e0970edee3ad710a66579242d23c8e Loading...

	global-today.com/static/outofwindow3-without-dmp2.desktop/js/app.1f7ffee5.js	61 kB	2024-04-05	2024-05-04
Pretty URL global-today.com/static/outofwindow3-without-dmp2.desktop/js/app.1f7ffee5.js IP 92.38.192.253 ASN #12695 LLC Digital Network Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-05 13:31:30 Last Seen2024-05-04 09:09:44 Times Seen27 Hash 885d599073ffbe148bdc80a6f290c842 01a816b3d95cc1920cd1352e9c3c942abaca874d 54992b57d63e453bee34817f0ea1c73f68b4bed1b5d72fc083ea5e823d82fb66 Loading...

	global-today.com/	701 B	2023-12-04	2024-05-04
Pretty URL global-today.com/ IP 92.38.192.253 ASN #12695 LLC Digital Network Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-04 18:45:40 Last Seen2024-05-04 06:59:57 Times Seen29 Hash 1a346921805c0551cc539508223a3b24 45c3b28b825015143b2c5ceaaed1425b9bcc3abf 52fd198c5b26c4df0b85f6849af3d72a359d833863e8e3babaf4533c766b6796 Loading...

	global-today.com/	13 B	2023-03-07	2024-05-04
Pretty URL global-today.com/ IP 92.38.192.253 ASN #12695 LLC Digital Network Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:50:18 Last Seen2024-05-04 09:09:44 Times Seen832 Hash 8e742d11d6b24c401e35f3b516726584 89b72153bd7e6390415ba25b9b5fbe750e6e16d5 8e8cc72e61ff6f6c0c945a976756d112732c499cd64fc5b207bb213fc84a1e40 Loading...

HTTP Transactions (12)

URL IP Response Size

global-today.com/

92.38.192.253

200 OK

1.3 kB

URL User Request GET HTTP/1.1
global-today.com/
IP
92.38.192.253:443
ASN
#12695 LLC Digital Network

Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (2336)
Size
1.3 kB (1298 bytes)
Hash
32299b69e2a7ae56127c732a4a7d27bd
0582d879c3940c95e500d781e8c5164f5afc39b3
ce0e38bcaa62518e453f384b842194c5b3ddc50f5319fe02c5ea6d95f099205c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: global-today.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.17.4
Date: Fri, 26 Apr 2024 14:29:22 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Requested-With
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
X_domain: global-today.com
X_theme: outofwindow3-without-dmp2.desktop
Content-Encoding: gzip

global-today.com/static/outofwindow3-without-dmp2.desktop/css/grid.min.css

92.38.192.253

200 OK

6.6 kB

URL GET HTTP/1.1
global-today.com/static/outofwindow3-without-dmp2.desktop/css/grid.min.css
IP
92.38.192.253:443
ASN
#12695 LLC Digital Network

Requested by
https://global-today.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
ASCII text, with very long lines (51776), with no line terminators
Size
6.6 kB (6566 bytes)
Hash
bb2187ffc39c45384458524b1dd9253b
5d8db7d19fd63fe48fc2e187c970d82e0af37592
21226ae8892fd9920a89d1c1b2a1f17a93b600e6d88d7427a878fdd964340e8d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/outofwindow3-without-dmp2.desktop/css/grid.min.css HTTP/1.1
Host: global-today.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-today.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.17.4
Date: Fri, 26 Apr 2024 14:29:22 GMT
Content-Type: text/css
Last-Modified: Tue, 26 Mar 2024 10:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66029d5e-ca40"
Content-Encoding: gzip

global-today.com/static/outofwindow3-without-dmp2.desktop/js/app.1f7ffee5.js

92.38.192.253

200 OK

9.5 kB

URL GET HTTP/1.1
global-today.com/static/outofwindow3-without-dmp2.desktop/js/app.1f7ffee5.js
IP
92.38.192.253:443
ASN
#12695 LLC Digital Network

Requested by
https://global-today.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (61077)
Size
9.5 kB (9480 bytes)
Hash
885d599073ffbe148bdc80a6f290c842
01a816b3d95cc1920cd1352e9c3c942abaca874d
54992b57d63e453bee34817f0ea1c73f68b4bed1b5d72fc083ea5e823d82fb66

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/outofwindow3-without-dmp2.desktop/js/app.1f7ffee5.js HTTP/1.1
Host: global-today.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-today.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.17.4
Date: Fri, 26 Apr 2024 14:29:22 GMT
Content-Type: application/javascript
Last-Modified: Tue, 26 Mar 2024 10:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66029d5e-ef13"
Content-Encoding: gzip

global-today.com/static/outofwindow3-without-dmp2.desktop/css/style.min.css

85.192.12.187

200 OK

2.9 kB

URL GET HTTP/1.1
global-today.com/static/outofwindow3-without-dmp2.desktop/css/style.min.css
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Requested by
https://global-today.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
ASCII text, with very long lines (10290), with no line terminators
Size
2.9 kB (2856 bytes)
Hash
d38541ab402216e5d06b9eebbda15227
40835452d8b01b09a3946781224301006f5da7b1
2c19f3af00a3bddd2fff8453cb4279fdf8c01d37f8b41f3d05df174f6795b99c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/outofwindow3-without-dmp2.desktop/css/style.min.css HTTP/1.1
Host: global-today.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-today.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 14:29:22 GMT
Content-Type: text/css
Last-Modified: Tue, 26 Mar 2024 10:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66029d5e-2832"
Content-Encoding: gzip

global-today.com/static/outofwindow3-without-dmp2.desktop/js/chunk-vendors.6a844e66.js

85.192.12.187

200 OK

96 kB

URL GET HTTP/1.1
global-today.com/static/outofwindow3-without-dmp2.desktop/js/chunk-vendors.6a844e66.js
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Requested by
https://global-today.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33460)
Size
96 kB (96106 bytes)
Hash
4060f2a935a377e7eb8db4df608b8ca1
ea630e2580a5075050a0f5435cdfcfd0dde77686
7ae627eec7ec821fb3a6c77342be3acf8bd86d3926956081caaf4306f459bc2e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/outofwindow3-without-dmp2.desktop/js/chunk-vendors.6a844e66.js HTTP/1.1
Host: global-today.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-today.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 14:29:22 GMT
Content-Type: application/javascript
Last-Modified: Tue, 26 Mar 2024 10:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66029d5e-4567c"
Content-Encoding: gzip

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://global-today.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://global-today.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:02:10 GMT
expires: Sat, 26 Apr 2025 06:02:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 30432
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

global-today.com/api/get-n-items?=undefined&language=RU&utm_campaign=3&blang=en-US&sid9=home&uid=news-7defc561-9e03-4abd-9398-f59c72f1b801&offset=0&project=1&count=7

85.192.12.187

200 OK

3 B

URL GET HTTP/1.1
global-today.com/api/get-n-items?=undefined&language=RU&utm_campaign=3&blang=en-US&sid9=home&uid=news-7defc561-9e03-4abd-9398-f59c72f1b801&offset=0&project=1&count=7
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Requested by
https://global-today.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
JSON text data
Size
3 B (3 bytes)
Hash
58e0494c51d30eb3494f7c9198986bb9
cd0d4cc32346750408f7d4f5e78ec9a6e5b79a0d
37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/get-n-items?=undefined&language=RU&utm_campaign=3&blang=en-US&sid9=home&uid=news-7defc561-9e03-4abd-9398-f59c72f1b801&offset=0&project=1&count=7 HTTP/1.1
Host: global-today.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-today.com/?sid9=home&uid=news-7defc561-9e03-4abd-9398-f59c72f1b801
Cookie: duid=news-7defc561-9e03-4abd-9398-f59c72f1b801
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 14:29:23 GMT
Content-Type: application/json
Content-Length: 3
Connection: keep-alive
Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Requested-With
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *

global-today.com/api/get-n-items?=undefined&language=RU&utm_campaign=3&blang=en-US&sid9=home&uid=news-7defc561-9e03-4abd-9398-f59c72f1b801&offset=7&project=1&count=7

85.192.12.187

200 OK

3 B

URL GET HTTP/1.1
global-today.com/api/get-n-items?=undefined&language=RU&utm_campaign=3&blang=en-US&sid9=home&uid=news-7defc561-9e03-4abd-9398-f59c72f1b801&offset=7&project=1&count=7
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Requested by
https://global-today.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
JSON text data
Size
3 B (3 bytes)
Hash
58e0494c51d30eb3494f7c9198986bb9
cd0d4cc32346750408f7d4f5e78ec9a6e5b79a0d
37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/get-n-items?=undefined&language=RU&utm_campaign=3&blang=en-US&sid9=home&uid=news-7defc561-9e03-4abd-9398-f59c72f1b801&offset=7&project=1&count=7 HTTP/1.1
Host: global-today.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-today.com/?sid9=home&uid=news-7defc561-9e03-4abd-9398-f59c72f1b801
Cookie: duid=news-7defc561-9e03-4abd-9398-f59c72f1b801
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 14:29:23 GMT
Content-Type: application/json
Content-Length: 3
Connection: keep-alive
Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Requested-With
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2

216.58.207.227

200 OK

9.6 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://global-today.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 9628, version 1.0
Size
9.6 kB (9628 bytes)
Hash
d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://global-today.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:00:53 GMT
expires: Sat, 26 Apr 2025 06:00:53 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 30510
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

mixer-events.com/image.gif?sid9=home&utm_campaign=3&utm_content=&utm_source=&utm_medium=&client_id=news-7defc561-9e03-4abd-9398-f59c72f1b801&cost=0&category=0&resolution_width=1280&resolution_height=1024&connection_speed=

85.192.12.172

200 OK

43 B

URL GET HTTP/1.1
mixer-events.com/image.gif?sid9=home&utm_campaign=3&utm_content=&utm_source=&utm_medium=&client_id=news-7defc561-9e03-4abd-9398-f59c72f1b801&cost=0&category=0&resolution_width=1280&resolution_height=1024&connection_speed=
IP
85.192.12.172:443
ASN
#12695 LLC Digital Network

Requested by
https://global-today.com/
Certificate
IssuerLet's Encrypt
Subjectmixer-magazin.com
Fingerprint18:D8:D6:7D:92:DE:0D:40:FF:A0:44:4F:CC:FC:E6:11:8C:44:1D:43
ValidityMon, 25 Mar 2024 11:42:37 GMT - Sun, 23 Jun 2024 11:42:36 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image.gif?sid9=home&utm_campaign=3&utm_content=&utm_source=&utm_medium=&client_id=news-7defc561-9e03-4abd-9398-f59c72f1b801&cost=0&category=0&resolution_width=1280&resolution_height=1024&connection_speed= HTTP/1.1
Host: mixer-events.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-today.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Fri, 26 Apr 2024 14:29:23 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Cookie, Set-Cookie
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://global-today.com
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Wed, 11 Nov 1998 11:11:11 GMT
Last-Modified: Fri, 26 Apr 2024 14:29:23 GMT
Pragma: no-cache
Set-Cookie: cd=eyJzIjp7Im8iOiJMaW51eCIsIm92IjoiIiwiZGMiOjEsImIiOiJGaXJlZm94IiwiYnYiOiI5NiJ9LCJsIjp7InIiOiIiLCJuIjoyMDA0NywiaXNwIjoiQmxpeCBTb2x1dGlvbnMifX0=; Path=/; Expires=Sun, 26 May 2024 14:29:23 GMT; Secure; SameSite=None
cc=eyJ1aWlkIjoibmV3cy03ZGVmYzU2MS05ZTAzLTRhYmQtOTM5OC1mNTljNzJmMWI4MDEiLCJkX29mZnNldCI6LTF9; Path=/; Expires=Sun, 26 May 2024 14:29:23 GMT; Secure; SameSite=None
article=; Path=/; Expires=Sun, 26 May 2024 14:29:23 GMT; Secure; SameSite=None

global-today.com/favicon.ico

85.192.12.187

204 No Content

0 B

URL GET HTTP/1.1
global-today.com/favicon.ico
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Requested by
https://global-today.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: global-today.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-today.com/
Cookie: duid=news-7defc561-9e03-4abd-9398-f59c72f1b801
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 14:29:23 GMT
Connection: keep-alive

fonts.googleapis.com/css?family=Roboto:300,400,500,700&subset=cyrillic

142.250.74.106

200 OK

5.6 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:300,400,500,700&subset=cyrillic
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://global-today.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
5.6 kB (5604 bytes)
Hash
164fe3e4396bf885e8f34e4b9cb5d85f
41d39eb6d7ad5c84dceb22b83cfc3005c39ca5f2
445e82491eadff52868f5819de98404bbb487d1be7f281cc6e031b186a6f0d58

HTTP Headers

GET /css?family=Roboto:300,400,500,700&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-today.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 14:29:22 GMT
date: Fri, 26 Apr 2024 14:29:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections