Report - one-daily-news.com/

Report Overview

Submitted URL
one-daily-news.com/
IP
92.38.192.253
ASN
#12695 LLC Digital Network
Submitted
2024-04-26 03:19:50
Access
public
Website Title
MIXER NOVOSTEI -
Final URL
one-daily-news.com/?sid9=home&uid=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
18

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
one-daily-news.com	unknown	2022-10-10	2023-03-17	2023-09-28	4.2 kB	119 kB	85.192.12.187
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-25	1.1 kB	27 kB	142.250.74.99
mixer-events.com	unknown	2023-09-13	2023-09-13	2024-03-24	619 B	1.1 kB	85.192.12.172
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	461 B	11 kB	142.250.74.74

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	one-daily-news.com	Sinkholed
2024-04-26	medium	one-daily-news.com	Sinkholed
2024-04-26	medium	one-daily-news.com	Sinkholed
2024-04-26	medium	one-daily-news.com	Sinkholed
2024-04-26	medium	one-daily-news.com	Sinkholed
2024-04-26	medium	one-daily-news.com	Sinkholed
2024-04-26	medium	one-daily-news.com	Sinkholed
2024-04-26	medium	mixer-events.com	Sinkholed
2024-04-26	medium	one-daily-news.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	one-daily-news.com/	2.2 kB	2024-04-26	2024-04-26
Pretty URL one-daily-news.com/ IP 85.192.12.187 ASN #12695 LLC Digital Network Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 05:19:53 Last Seen2024-04-26 05:19:53 Times Seen1 Hash a36ef5007c1b91ec7f23cf0e1dffdfa0 942fe50fc152357f2394a46aaddf44547f591306 8778cfda0011eb812a378812a33bc649427a922bf0e1e68892cd2d1119814d9d Loading...

	one-daily-news.com/static/outofwindow3-without-dmp2.desktop/js/chunk-vendors.6a844e66.js	284 kB	2024-03-22	2024-05-04
Pretty URL one-daily-news.com/static/outofwindow3-without-dmp2.desktop/js/chunk-vendors.6a844e66.js IP 85.192.12.187 ASN #12695 LLC Digital Network Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-22 17:47:33 Last Seen2024-05-04 09:09:44 Times Seen19 Hash 4bcc8f1ab257a3a7f2682fc76ef938eb 0b55a5a558745ab4f3ee40a448ae67af35b249f8 876d0035f300e030d2dd7e8c3fa3cac069e0970edee3ad710a66579242d23c8e Loading...

	one-daily-news.com/static/outofwindow3-without-dmp2.desktop/js/app.1f7ffee5.js	61 kB	2024-04-05	2024-05-04
Pretty URL one-daily-news.com/static/outofwindow3-without-dmp2.desktop/js/app.1f7ffee5.js IP 85.192.12.187 ASN #12695 LLC Digital Network Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-05 13:31:30 Last Seen2024-05-04 09:09:44 Times Seen27 Hash 885d599073ffbe148bdc80a6f290c842 01a816b3d95cc1920cd1352e9c3c942abaca874d 54992b57d63e453bee34817f0ea1c73f68b4bed1b5d72fc083ea5e823d82fb66 Loading...

	one-daily-news.com/	701 B	2023-12-04	2024-05-04
Pretty URL one-daily-news.com/ IP 85.192.12.187 ASN #12695 LLC Digital Network Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-04 18:45:40 Last Seen2024-05-04 06:59:57 Times Seen29 Hash 1a346921805c0551cc539508223a3b24 45c3b28b825015143b2c5ceaaed1425b9bcc3abf 52fd198c5b26c4df0b85f6849af3d72a359d833863e8e3babaf4533c766b6796 Loading...

	one-daily-news.com/	13 B	2023-03-07	2024-05-04
Pretty URL one-daily-news.com/ IP 85.192.12.187 ASN #12695 LLC Digital Network Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:50:18 Last Seen2024-05-04 09:09:44 Times Seen832 Hash 8e742d11d6b24c401e35f3b516726584 89b72153bd7e6390415ba25b9b5fbe750e6e16d5 8e8cc72e61ff6f6c0c945a976756d112732c499cd64fc5b207bb213fc84a1e40 Loading...

HTTP Transactions (12)

URL IP Response Size

one-daily-news.com/

85.192.12.187

200 OK

1.3 kB

URL User Request GET HTTP/1.1
one-daily-news.com/
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (2293)
Size
1.3 kB (1282 bytes)
Hash
510b3f2ee95e514086a6f555e46fa569
bfd9b4e340a67dda565cd4e4d3c986fe76dd1b62
a363867f8d16c041b3a847536f9dc7ae00921843e5c5f30808dd7a225daba85b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: one-daily-news.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 03:19:24 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Requested-With
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
X_domain: one-daily-news.com
X_theme: outofwindow3-without-dmp2.desktop
Content-Encoding: gzip

one-daily-news.com/static/outofwindow3-without-dmp2.desktop/css/grid.min.css

85.192.12.187

200 OK

6.6 kB

URL GET HTTP/1.1
one-daily-news.com/static/outofwindow3-without-dmp2.desktop/css/grid.min.css
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Requested by
https://one-daily-news.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
ASCII text, with very long lines (51776), with no line terminators
Size
6.6 kB (6566 bytes)
Hash
bb2187ffc39c45384458524b1dd9253b
5d8db7d19fd63fe48fc2e187c970d82e0af37592
21226ae8892fd9920a89d1c1b2a1f17a93b600e6d88d7427a878fdd964340e8d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/outofwindow3-without-dmp2.desktop/css/grid.min.css HTTP/1.1
Host: one-daily-news.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://one-daily-news.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 03:19:25 GMT
Content-Type: text/css
Last-Modified: Tue, 26 Mar 2024 10:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66029d5e-ca40"
Content-Encoding: gzip

one-daily-news.com/static/outofwindow3-without-dmp2.desktop/js/app.1f7ffee5.js

85.192.12.187

200 OK

9.5 kB

URL GET HTTP/1.1
one-daily-news.com/static/outofwindow3-without-dmp2.desktop/js/app.1f7ffee5.js
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Requested by
https://one-daily-news.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (61077)
Size
9.5 kB (9480 bytes)
Hash
885d599073ffbe148bdc80a6f290c842
01a816b3d95cc1920cd1352e9c3c942abaca874d
54992b57d63e453bee34817f0ea1c73f68b4bed1b5d72fc083ea5e823d82fb66

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/outofwindow3-without-dmp2.desktop/js/app.1f7ffee5.js HTTP/1.1
Host: one-daily-news.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://one-daily-news.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 03:19:25 GMT
Content-Type: application/javascript
Last-Modified: Tue, 26 Mar 2024 10:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66029d5e-ef13"
Content-Encoding: gzip

one-daily-news.com/static/outofwindow3-without-dmp2.desktop/css/style.min.css

85.192.12.187

200 OK

2.9 kB

URL GET HTTP/1.1
one-daily-news.com/static/outofwindow3-without-dmp2.desktop/css/style.min.css
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Requested by
https://one-daily-news.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
ASCII text, with very long lines (10290), with no line terminators
Size
2.9 kB (2856 bytes)
Hash
d38541ab402216e5d06b9eebbda15227
40835452d8b01b09a3946781224301006f5da7b1
2c19f3af00a3bddd2fff8453cb4279fdf8c01d37f8b41f3d05df174f6795b99c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/outofwindow3-without-dmp2.desktop/css/style.min.css HTTP/1.1
Host: one-daily-news.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://one-daily-news.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 03:19:25 GMT
Content-Type: text/css
Last-Modified: Tue, 26 Mar 2024 10:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66029d5e-2832"
Content-Encoding: gzip

one-daily-news.com/static/outofwindow3-without-dmp2.desktop/js/chunk-vendors.6a844e66.js

85.192.12.187

200 OK

96 kB

URL GET HTTP/1.1
one-daily-news.com/static/outofwindow3-without-dmp2.desktop/js/chunk-vendors.6a844e66.js
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Requested by
https://one-daily-news.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33460)
Size
96 kB (96106 bytes)
Hash
4060f2a935a377e7eb8db4df608b8ca1
ea630e2580a5075050a0f5435cdfcfd0dde77686
7ae627eec7ec821fb3a6c77342be3acf8bd86d3926956081caaf4306f459bc2e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/outofwindow3-without-dmp2.desktop/js/chunk-vendors.6a844e66.js HTTP/1.1
Host: one-daily-news.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://one-daily-news.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 03:19:25 GMT
Content-Type: application/javascript
Last-Modified: Tue, 26 Mar 2024 10:03:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66029d5e-4567c"
Content-Encoding: gzip

one-daily-news.com/api/get-n-items?=undefined&language=RU&utm_campaign=3&blang=en-US&sid9=home&uid=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0&offset=0&project=1&count=7

85.192.12.187

200 OK

3 B

URL GET HTTP/1.1
one-daily-news.com/api/get-n-items?=undefined&language=RU&utm_campaign=3&blang=en-US&sid9=home&uid=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0&offset=0&project=1&count=7
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Requested by
https://one-daily-news.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
JSON text data
Size
3 B (3 bytes)
Hash
58e0494c51d30eb3494f7c9198986bb9
cd0d4cc32346750408f7d4f5e78ec9a6e5b79a0d
37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/get-n-items?=undefined&language=RU&utm_campaign=3&blang=en-US&sid9=home&uid=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0&offset=0&project=1&count=7 HTTP/1.1
Host: one-daily-news.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://one-daily-news.com/?sid9=home&uid=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0
Cookie: duid=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 03:19:25 GMT
Content-Type: application/json
Content-Length: 3
Connection: keep-alive
Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Requested-With
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.99

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://one-daily-news.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://one-daily-news.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:37:01 GMT
expires: Fri, 25 Apr 2025 02:37:01 GMT
cache-control: public, max-age=31536000
age: 88944
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

one-daily-news.com/api/get-n-items?=undefined&language=RU&utm_campaign=3&blang=en-US&sid9=home&uid=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0&offset=7&project=1&count=7

85.192.12.187

200 OK

3 B

URL GET HTTP/1.1
one-daily-news.com/api/get-n-items?=undefined&language=RU&utm_campaign=3&blang=en-US&sid9=home&uid=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0&offset=7&project=1&count=7
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Requested by
https://one-daily-news.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type
JSON text data
Size
3 B (3 bytes)
Hash
58e0494c51d30eb3494f7c9198986bb9
cd0d4cc32346750408f7d4f5e78ec9a6e5b79a0d
37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/get-n-items?=undefined&language=RU&utm_campaign=3&blang=en-US&sid9=home&uid=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0&offset=7&project=1&count=7 HTTP/1.1
Host: one-daily-news.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://one-daily-news.com/?sid9=home&uid=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0
Cookie: duid=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 03:19:25 GMT
Content-Type: application/json
Content-Length: 3
Connection: keep-alive
Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Requested-With
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2

142.250.74.99

200 OK

9.6 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://one-daily-news.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 9628, version 1.0
Size
9.6 kB (9628 bytes)
Hash
d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://one-daily-news.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:37:03 GMT
expires: Fri, 25 Apr 2025 02:37:03 GMT
cache-control: public, max-age=31536000
age: 88942
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

mixer-events.com/image.gif?sid9=home&utm_campaign=3&utm_content=&utm_source=&utm_medium=&client_id=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0&cost=0&category=0&resolution_width=1280&resolution_height=1024&connection_speed=

85.192.12.172

200 OK

43 B

URL GET HTTP/1.1
mixer-events.com/image.gif?sid9=home&utm_campaign=3&utm_content=&utm_source=&utm_medium=&client_id=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0&cost=0&category=0&resolution_width=1280&resolution_height=1024&connection_speed=
IP
85.192.12.172:443
ASN
#12695 LLC Digital Network

Requested by
https://one-daily-news.com/
Certificate
IssuerLet's Encrypt
Subjectmixer-magazin.com
Fingerprint18:D8:D6:7D:92:DE:0D:40:FF:A0:44:4F:CC:FC:E6:11:8C:44:1D:43
ValidityMon, 25 Mar 2024 11:42:37 GMT - Sun, 23 Jun 2024 11:42:36 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image.gif?sid9=home&utm_campaign=3&utm_content=&utm_source=&utm_medium=&client_id=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0&cost=0&category=0&resolution_width=1280&resolution_height=1024&connection_speed= HTTP/1.1
Host: mixer-events.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://one-daily-news.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Fri, 26 Apr 2024 03:19:25 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Cookie, Set-Cookie
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://one-daily-news.com
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Wed, 11 Nov 1998 11:11:11 GMT
Last-Modified: Fri, 26 Apr 2024 03:19:25 GMT
Pragma: no-cache
Set-Cookie: cd=eyJzIjp7Im8iOiJMaW51eCIsIm92IjoiIiwiZGMiOjEsImIiOiJGaXJlZm94IiwiYnYiOiI5NiJ9LCJsIjp7InIiOiIiLCJuIjoyMDA0NywiaXNwIjoiQmxpeCBTb2x1dGlvbnMifX0=; Path=/; Expires=Sun, 26 May 2024 03:19:25 GMT; Secure; SameSite=None
cc=eyJ1aWlkIjoibmV3cy01ZDliMDVjMy03MjA0LTQxYWEtOWNjOC0wZDIyZDA4ZmY5ZDAiLCJkX29mZnNldCI6LTF9; Path=/; Expires=Sun, 26 May 2024 03:19:25 GMT; Secure; SameSite=None
article=; Path=/; Expires=Sun, 26 May 2024 03:19:25 GMT; Secure; SameSite=None

one-daily-news.com/favicon.ico

85.192.12.187

204 No Content

0 B

URL GET HTTP/1.1
one-daily-news.com/favicon.ico
IP
85.192.12.187:443
ASN
#12695 LLC Digital Network

Requested by
https://one-daily-news.com/
Certificate
IssuerLet's Encrypt
Subjectglobal-magazine.com
Fingerprint82:39:BF:BD:D1:7C:DD:6E:38:01:10:B8:17:93:DD:40:DB:84:0F:FB
ValidityFri, 22 Mar 2024 07:30:00 GMT - Thu, 20 Jun 2024 07:29:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: one-daily-news.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://one-daily-news.com/
Cookie: duid=news-5d9b05c3-7204-41aa-9cc8-0d22d08ff9d0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 03:19:25 GMT
Connection: keep-alive

fonts.googleapis.com/css?family=Roboto:300,400,500,700&subset=cyrillic

142.250.74.74

200 OK

10 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:300,400,500,700&subset=cyrillic
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://one-daily-news.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
10 kB (10117 bytes)
Hash
5143d0ceda457535c89c51c21e56b447
d1dca1253b1169f32c0bb73f79771901b8671589
7bcc47284fd476e55ae02b087e0c209f2da7106b0e05664737171116f4c360f5

HTTP Headers

GET /css?family=Roboto:300,400,500,700&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://one-daily-news.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 03:19:25 GMT
date: Fri, 26 Apr 2024 03:19:25 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections