Report - todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/

Report Overview

Visited public
2025-06-23 07:22:16
Tags
Submit Tags
URL
todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Finishing URL
todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
IP / ASN
212.81.47.13
#212238 Datacamp Limited
Title
Today Special Offers

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.googletagmanager.com	75	2011-11-11	2012-10-04	2025-06-18	442 B	331 kB	142.250.178.104
www.google.com	7	1997-09-15	2015-05-10	2025-06-18	2.0 kB	990 B	142.250.178.68
code.jquery.com	634	2005-12-10	2012-05-21	2025-06-18	465 B	88 kB	151.101.130.137
todayspecialoffers.io	unknown	2025-06-17	2025-06-21	2025-06-21	13 kB	1.3 MB	212.81.47.13
m.media-amazon.com	580	2016-08-18	2017-01-30	2025-06-19	2.3 kB	265 kB	54.230.216.66
cdnjs.cloudflare.com	235	2009-02-17	2012-05-23	2025-06-18	451 B	88 kB	104.17.25.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed
2025-06-23	medium	todayspecialoffers.io	Sinkholed

ThreatFox

No alerts detected

JavaScript (13)

	URL	From	Size	First Seen	Last Seen
	www.googletagmanager.com/gtag/js?id=AW-954523693	ScriptElement	330 kB	2025-06-23	2025-06-23
Pretty URL www.googletagmanager.com/gtag/js?id=AW-954523693 IP 142.250.178.104 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-06-23 07:22 Last Seen2025-06-23 07:22 Times Seen1 Hash 43d475bef7fa1c2d81e08f4c41f4dc2c 7efa9cf0a0e958c535660039f0eaeb649ddf7b5c cba6f972155518a51a2b4d647a7507b162b886ff5321b88b4af7251a7f390c12 Loading...

	todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/	ScriptElement	153 B	2025-05-07	2025-07-05
Pretty URL todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/ IP 212.81.47.13 ASN #212238 Datacamp Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2025-05-07 06:45 Last Seen2025-07-05 01:19 Times Seen11 Hash 92b2afac41a79832e09328dd218bcd3e 415e5ed0edb2e195c87b8f1f9cc8fd89d1e94c72 14c71bef3c1e82d1aaaf700a26e43559fe6d5b967a5d37ce3e14ad9650253635 Loading...

	todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/	ScriptElement	330 B	2025-06-23	2025-06-23
Pretty URL todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/ IP 212.81.47.13 ASN #212238 Datacamp Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-23 07:22 Last Seen2025-06-23 07:22 Times Seen1 Hash 96e8add4b0ed8a56aabb41d55eb6615c b3a400c65c75770a7c2be4d655e0118add7b2e17 d637fbb26baf31ad23c50edfad9123c4e27183d2e06eb6a46be30ba8250eb9cb Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js	ScriptElement	87 kB	2023-03-07	2025-07-07
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-07-07 05:12 Times Seen64389 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

	todayspecialoffers.io/assets/js/relativeTime.js	ScriptElement	1.8 kB	2024-01-27	2025-07-05
Pretty URL todayspecialoffers.io/assets/js/relativeTime.js IP 212.81.47.13 ASN #212238 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-27 15:06 Last Seen2025-07-05 01:19 Times Seen33 Hash 3d981b3fc604b6f84880766e93b9afa1 bf805a85cd988d6b0da0f7c605bff22bc6ae85c0 889f6332c69e9a7bf234c4ec913c6adf6775ffe588ad15df185771d306cf7131 Loading...

	todayspecialoffers.io/assets/js/manage_product3.js	ScriptElement	7.6 kB	2025-05-22	2025-07-02
Pretty URL todayspecialoffers.io/assets/js/manage_product3.js IP 212.81.47.13 ASN #212238 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-22 16:49 Last Seen2025-07-02 23:23 Times Seen9 Hash 01af68af6e194020f51ee9e8b93f9e42 261a1378edce824e6479800bab1d70ea3ce40a58 f1dee0bd3e15a8850aae8703f6de611045453f7cc17fb278e9bfc81abd81d2ba Loading...

	todayspecialoffers.io/assets/js/bootstrap.min.js	ScriptElement	60 kB	2023-03-07	2025-07-07
Pretty URL todayspecialoffers.io/assets/js/bootstrap.min.js IP 212.81.47.13 ASN #212238 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06 Last Seen2025-07-07 02:36 Times Seen7019 Hash 02d223393e00c273efdcb1ade8f4f8b1 0cc93b8421d89c24a889642428b363cb831de78a 79c599dd760cec0c1621a1af49d9a2a49da5d45e1b37d4575bace0a5e0226582 Loading...

	todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/	ScriptElement	337 B	2025-05-07	2025-07-02
Pretty URL todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/ IP 212.81.47.13 ASN #212238 Datacamp Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2025-05-07 06:45 Last Seen2025-07-02 23:23 Times Seen6 Hash 79a0270ab2f9d495b64e4e69369f99dd 78a16af5be8367cb151334f5467e9d2233ed4501 43b236ee0111c386da5eb720143bd62254b0afb5cfdbb2294f59a86c4539a5d9 Loading...

	code.jquery.com/jquery-3.7.1.min.js	ScriptElement	88 kB	2023-08-31	2025-07-07
Pretty URL code.jquery.com/jquery-3.7.1.min.js IP 151.101.130.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 16:03 Last Seen2025-07-07 05:13 Times Seen45593 Hash 2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a Loading...

	todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/	ScriptElement	21 kB	2025-05-15	2025-07-05
Pretty URL todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/ IP 212.81.47.13 ASN #212238 Datacamp Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2025-05-15 11:42 Last Seen2025-07-05 01:19 Times Seen11 Hash 737b98fd8516c2557ef818c1bbf58eb2 a74abd3f14554d024d3747531f56de88a6ff8d9b 556a212b3e06c511cee84ce8a45dcff44d31e0708ebb7f197933646e156935db Loading...

	todayspecialoffers.io/assets/js/custom.js	ScriptElement	4.8 kB	2024-01-27	2025-07-05
Pretty URL todayspecialoffers.io/assets/js/custom.js IP 212.81.47.13 ASN #212238 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-27 15:06 Last Seen2025-07-05 01:19 Times Seen26 Hash 694c608c30e6ba35bb95e082eca03565 5d76e14ca672eb4d420912be24de547d80fbefbf 465fd86ae2e136ec72ac27afff991738864bfa841b4e2b231303c55e9886650e Loading...

	todayspecialoffers.io/assets/js/days.min.js	ScriptElement	8.2 kB	2024-01-27	2025-07-05
Pretty URL todayspecialoffers.io/assets/js/days.min.js IP 212.81.47.13 ASN #212238 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-27 15:06 Last Seen2025-07-05 01:19 Times Seen34 Hash 8a09deaffb8b9baa62dde8aa093c30cc c597a12e81223ce44967af7d5e44e1196d54f02d 95c4ad39ceee3c22b90a098d104c675e5b7005bf3f5a6d4f82c41d86d19d1bbc Loading...

	todayspecialoffers.io/assets/js/jquery.min.js	ScriptElement	90 kB	2023-03-07	2025-07-07
Pretty URL todayspecialoffers.io/assets/js/jquery.min.js IP 212.81.47.13 ASN #212238 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-07-07 05:09 Times Seen121695 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

HTTP Transactions (34)

URL IP Response Size

GET todayspecialoffers.io/assets/css/custom.css

212.81.47.13

200 OK

26 kB

URL GET
todayspecialoffers.io/assets/css/custom.css
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
ASCII text, with CRLF line terminators
Size
26 kB (26508 bytes)
Hash
d150a41ac68d8798d6c429b8b00729b3
9b3618c917933aedd09f82cbdcb979025a02ea6b
c176c3ac1ce96970dbfd0528d92bafe9dca4370bb1a02212b4216523d5e814f0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/custom.css HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:45 GMT
content-type: text/css
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4979
date: Mon, 23 Jun 2025 07:21:45 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

GET todayspecialoffers.io/storage/uploads/flm1/p151.jpg

212.81.47.13

200 OK

54 kB

URL GET
todayspecialoffers.io/storage/uploads/flm1/p151.jpg
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
JPEG image data, baseline, precision 8, 940x411, components 3
Size
54 kB (54022 bytes)
Hash
d927a3f6b8632f2d914c73ef90e8c605
640c0ba32401745d10f7a0fa82282388cce4ee0d
1512f44711bb125cb7665a8284642819daa0eeb9eae569c5b051336e75d3d0b3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /storage/uploads/flm1/p151.jpg HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Cookie: _gcl_au=1.1.1446439593.1750663306; PHPSESSID=b9f87bb28d3efae3704137ff8e6f353f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:47 GMT
content-type: image/jpeg
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-length: 54022
date: Mon, 23 Jun 2025 07:21:47 GMT
server: LiteSpeed

GET todayspecialoffers.io/storage/uploads/flm1/p152.jpg

212.81.47.13

200 OK

103 kB

URL GET
todayspecialoffers.io/storage/uploads/flm1/p152.jpg
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
JPEG image data, baseline, precision 8, 958x1052, components 3
Size
103 kB (102899 bytes)
Hash
7c4f8d4295f3c1ac6a5f5bcab365ed6e
b7b86ab423c5cfbffc2229f756bac57f8dc74f47
b0f3cb5450d6c027455a3878e64246009a04ab2b83bc6ddd1f3ec15d1019dd0a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /storage/uploads/flm1/p152.jpg HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Cookie: _gcl_au=1.1.1446439593.1750663306; PHPSESSID=b9f87bb28d3efae3704137ff8e6f353f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:47 GMT
content-type: image/jpeg
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-length: 102899
date: Mon, 23 Jun 2025 07:21:47 GMT
server: LiteSpeed

GET todayspecialoffers.io/storage/uploads/flm1/p153.jpg

212.81.47.13

200 OK

127 kB

URL GET
todayspecialoffers.io/storage/uploads/flm1/p153.jpg
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
JPEG image data, baseline, precision 8, 957x2439, components 3
Size
127 kB (126706 bytes)
Hash
5eded624287032fd5d545b8bdead376a
12f66afc7958e8265c68c11bc44bd7fc636a2a6b
7f906df78c3c13f88ec02b6bf6dad6069b5b02a801761682e8b403c5ae64d612

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /storage/uploads/flm1/p153.jpg HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Cookie: _gcl_au=1.1.1446439593.1750663306; PHPSESSID=b9f87bb28d3efae3704137ff8e6f353f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:47 GMT
content-type: image/jpeg
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-length: 126706
date: Mon, 23 Jun 2025 07:21:47 GMT
server: LiteSpeed

GET m.media-amazon.com/images/I/51FFYYW6XpL._SL1080_.jpg

54.230.216.66

200 OK

33 kB

URL GET
m.media-amazon.com/images/I/51FFYYW6XpL._SL1080_.jpg
IP
54.230.216.66:443
ASN
#16509 AMAZON-02

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
FingerprintED:9D:2D:58:76:07:9C:57:88:75:37:D1:AE:71:6D:09:D2:50:48:81
ValidityThu, 10 Oct 2024 00:00:00 GMT - Sun, 28 Sep 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3
Size
33 kB (32953 bytes)
Hash
2324a053c6e8f236c973128f30609f56
9ed62774cc30d296b0e32c0f57bbff71a24e91e4
cc4c97c99293d532e5ab8f8d9b071a1fac5569b7d467f9a7a648fbf9cdac5fb1

HTTP Headers

GET /images/I/51FFYYW6XpL._SL1080_.jpg HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpeg
content-length: 32953
date: Tue, 17 Jun 2025 08:11:26 GMT
server: Server
x-amz-ir-id: d45461cb-1f97-46e5-8233-01ff3a8cb690
cache-control: max-age=630720000,public
last-modified: Tue, 14 Feb 2023 06:30:07 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-436,/images/I/51FFYYW6XpL
expires: Sat, 25 Mar 2045 14:10:55 GMT
surrogate-key: x-cache-436 /images/I/51FFYYW6XpL
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 515421
accept-ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Zd45Q8aPLbsk_JEzfn0dxEHFOBIvsehUmRgWQb-4TErGesZbbpNWMQ==
X-Firefox-Spdy: h2

GET todayspecialoffers.io/assets/css/bootstrap.min.css

212.81.47.13

200 OK

233 kB

URL GET
todayspecialoffers.io/assets/css/bootstrap.min.css
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
Unicode text, UTF-8 text, with very long lines (65342)
Size
233 kB (232855 bytes)
Hash
896192cc65e20f1fcc6d792b5b9a4626
b13ef70543d70c1ec7fdd56a5ebc9d7d64023851
d939d21f27010c09b6c2966681d8b4cfcd64ca418f240922518f967fded16ef6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/bootstrap.min.css HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:45 GMT
content-type: text/css
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 28311
date: Mon, 23 Jun 2025 07:21:45 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

GET todayspecialoffers.io/assets/images/replacement.png

212.81.47.13

200 OK

4.3 kB

URL GET
todayspecialoffers.io/assets/images/replacement.png
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Size
4.3 kB (4329 bytes)
Hash
5bec7667fb9e127fdcd3cce1f670c497
86d70338013d1d0e7cb6806d7aa9eb2b64a75514
557f195b532006a8a6a71d79050b092837f708855f4b4dbea6b2252064ec772f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/replacement.png HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:46 GMT
content-type: image/png
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-length: 4329
date: Mon, 23 Jun 2025 07:21:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

GET todayspecialoffers.io/assets/js/jquery.min.js

212.81.47.13

200 OK

90 kB

URL GET
todayspecialoffers.io/assets/js/jquery.min.js
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
90 kB (89476 bytes)
Hash
dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/jquery.min.js HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30280
date: Mon, 23 Jun 2025 07:21:31 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

GET todayspecialoffers.io/assets/js/custom.js

212.81.47.13

200 OK

4.8 kB

URL GET
todayspecialoffers.io/assets/js/custom.js
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
4.8 kB (4846 bytes)
Hash
694c608c30e6ba35bb95e082eca03565
5d76e14ca672eb4d420912be24de547d80fbefbf
465fd86ae2e136ec72ac27afff991738864bfa841b4e2b231303c55e9886650e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/custom.js HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1306
date: Mon, 23 Jun 2025 07:21:31 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

GET todayspecialoffers.io/img/back.png

212.81.47.13

200 OK

365 kB

URL GET
todayspecialoffers.io/img/back.png
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced
Size
365 kB (364924 bytes)
Hash
35619961628680afbe647816b90382ed
1c1b620139a0b713501f78d3256d92d7ec99f782
4e063a08d03cfe93f31ee09049930edcfbba2d971075a4b2a67fbe6b0ce80240

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/back.png HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:45 GMT
content-type: image/png
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-length: 364924
date: Mon, 23 Jun 2025 07:21:45 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

GET todayspecialoffers.io/img/share.png

212.81.47.13

200 OK

835 B

URL GET
todayspecialoffers.io/img/share.png
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
PNG image data, 60 x 51, 8-bit/color RGBA, non-interlaced
Size
835 B (835 bytes)
Hash
aa9391b5267fcf388faae1554ba526e3
527e885abbad7680e8b95400640628eabf5664cb
7063247c65e57dd09fd01f6baad7a5fd5b8eb5d6e5361ac5c62500e687e0065d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/share.png HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/assets/css/custom.css
Cookie: _gcl_au=1.1.1446439593.1750663306
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:46 GMT
content-type: image/png
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-length: 835
date: Mon, 23 Jun 2025 07:21:46 GMT
server: LiteSpeed

GET todayspecialoffers.io/img/love.png

212.81.47.13

200 OK

2.5 kB

URL GET
todayspecialoffers.io/img/love.png
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
PNG image data, 70 x 63, 8-bit/color RGBA, non-interlaced
Size
2.5 kB (2484 bytes)
Hash
88f6e3f53a72398189b368873498ec94
2a57da17f56d0c49ea3e292aee99dc351af57dc0
ce4aa8ee3b195f2b2ad0518770d386157741c9af66dc7feb2eb431f81651c783

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/love.png HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/assets/css/custom.css
Cookie: _gcl_au=1.1.1446439593.1750663306
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:46 GMT
content-type: image/png
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-length: 2484
date: Mon, 23 Jun 2025 07:21:46 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

GET m.media-amazon.com/images/I/51udbaUtW5L._SL1080_.jpg

54.230.216.66

200 OK

48 kB

URL GET
m.media-amazon.com/images/I/51udbaUtW5L._SL1080_.jpg
IP
54.230.216.66:443
ASN
#16509 AMAZON-02

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
FingerprintED:9D:2D:58:76:07:9C:57:88:75:37:D1:AE:71:6D:09:D2:50:48:81
ValidityThu, 10 Oct 2024 00:00:00 GMT - Sun, 28 Sep 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3
Size
48 kB (48149 bytes)
Hash
5f21273a94a068deda0e6af2270d86a3
287e13d333089f980fcc3bc7649951261a715ff2
fb9293e6acb2fc8ad8bd43a3ce7f8fa2e36ca3e304582929b0768b37d5437c48

HTTP Headers

GET /images/I/51udbaUtW5L._SL1080_.jpg HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpeg
content-length: 48149
date: Mon, 16 Jun 2025 09:55:47 GMT
server: Server
x-amz-ir-id: 1b9cf727-d800-431a-a856-cbcd4638581d
cache-control: max-age=630720000,public
last-modified: Tue, 14 Feb 2023 06:32:52 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-165,/images/I/51udbaUtW5L
expires: Fri, 31 Mar 2045 15:46:15 GMT
surrogate-key: x-cache-165 /images/I/51udbaUtW5L
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 595560
accept-ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mLL7QgfVXqYLHR9-NC754908otgC9OEsVm6HEpPbu4KDh0SEj_pUOg==
X-Firefox-Spdy: h2

GET todayspecialoffers.io/storage/uploads/flm1/p154.jpg

212.81.47.13

200 OK

125 kB

URL GET
todayspecialoffers.io/storage/uploads/flm1/p154.jpg
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
JPEG image data, baseline, precision 8, 958x1422, components 3
Size
125 kB (124613 bytes)
Hash
7210ec96f8d7e9f784b16a5c7ef5fb61
c13356c588f92b7217884cf894652a113940eaf5
bed2f341abefb603d95c7543e16623c90b646ac96e55fea06eef4980250ba748

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /storage/uploads/flm1/p154.jpg HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Cookie: _gcl_au=1.1.1446439593.1750663306; PHPSESSID=b9f87bb28d3efae3704137ff8e6f353f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:47 GMT
content-type: image/jpeg
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-length: 124613
date: Mon, 23 Jun 2025 07:21:47 GMT
server: LiteSpeed

GET todayspecialoffers.io/assets/images/logo.png

212.81.47.13

200 OK

7.1 kB

URL GET
todayspecialoffers.io/assets/images/logo.png
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
PNG image data, 316 x 112, 8-bit colormap, non-interlaced
Size
7.1 kB (7091 bytes)
Hash
c5de64e0faf5d8baad8f1f5d6fd4bff4
cb4a4f986d1fa3429745f24d9b4afefd0bd1e063
f41b545ac31fae867d8d03570cc44f6cd298a550286022ac0dd967d7acf1664d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/logo.png HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:40 GMT
content-type: image/png
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-length: 7091
date: Mon, 23 Jun 2025 07:21:40 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

GET todayspecialoffers.io/files/12.jpg

212.81.47.13

404 Not Found

1.3 kB

URL GET
todayspecialoffers.io/files/12.jpg
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /files/12.jpg HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Mon, 23 Jun 2025 07:21:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

GET todayspecialoffers.io/assets/js/bootstrap.min.js

212.81.47.13

200 OK

60 kB

URL GET
todayspecialoffers.io/assets/js/bootstrap.min.js
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
JavaScript source, ASCII text, with very long lines (59765)
Size
60 kB (60044 bytes)
Hash
02d223393e00c273efdcb1ade8f4f8b1
0cc93b8421d89c24a889642428b363cb831de78a
79c599dd760cec0c1621a1af49d9a2a49da5d45e1b37d4575bace0a5e0226582

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/bootstrap.min.js HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 14195
date: Mon, 23 Jun 2025 07:21:31 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

GET cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js

104.17.25.14

200 OK

87 kB

URL GET
cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
87 kB (86927 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

HTTP Headers

GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:21:45 GMT
content-type: application/javascript; charset=utf-8
content-length: 27433
cf-ray: 95423afc2ff656b7-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1538f"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1495744
expires: Sat, 13 Jun 2026 07:21:45 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNL%2Ffn5fpsb4FmgW6QfqY%2BUldEQhTV48slhdMhhMnU94xht1A2GCBppCxN6%2BpT4TIRiD4eBQJ6OVcFoban311MMLg2SRfww5NNd%2BBflvdISCTD6d2supdJYJuuHMJ6XGnjbj9amX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET m.media-amazon.com/images/I/51EkDUQ-8sL._SL1080_.jpg

54.230.216.66

200 OK

54 kB

URL GET
m.media-amazon.com/images/I/51EkDUQ-8sL._SL1080_.jpg
IP
54.230.216.66:443
ASN
#16509 AMAZON-02

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
FingerprintED:9D:2D:58:76:07:9C:57:88:75:37:D1:AE:71:6D:09:D2:50:48:81
ValidityThu, 10 Oct 2024 00:00:00 GMT - Sun, 28 Sep 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3
Size
54 kB (53614 bytes)
Hash
7346f59d3803d80b4128eb927cf4d453
f925934f9f16793ddd34b2e84f4b3285f4775a63
aef6f2ff34c20262e73b3013ca1776e3726d33ffe43012a5fe0a3224b8811673

HTTP Headers

GET /images/I/51EkDUQ-8sL._SL1080_.jpg HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpeg
content-length: 53614
date: Fri, 02 May 2025 14:04:41 GMT
server: Server
x-amz-ir-id: ad89c4bf-5cd8-494f-bdd9-05d1bc54b1f1
cache-control: max-age=630720000,public
last-modified: Tue, 14 Feb 2023 06:31:54 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-844,/images/I/51EkDUQ-8sL
expires: Wed, 29 Mar 2045 15:46:44 GMT
surrogate-key: x-cache-844 /images/I/51EkDUQ-8sL
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 4468626
accept-ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ipl2ub0De4Bq-Uj63Ah55x30rHmJhGCE7tNLrZaA-SOnV5fAXTVjyA==
X-Firefox-Spdy: h2

GET m.media-amazon.com/images/I/51WyBR71kgL._SL1080_.jpg

54.230.216.66

200 OK

60 kB

URL GET
m.media-amazon.com/images/I/51WyBR71kgL._SL1080_.jpg
IP
54.230.216.66:443
ASN
#16509 AMAZON-02

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
FingerprintED:9D:2D:58:76:07:9C:57:88:75:37:D1:AE:71:6D:09:D2:50:48:81
ValidityThu, 10 Oct 2024 00:00:00 GMT - Sun, 28 Sep 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3
Size
60 kB (59798 bytes)
Hash
3d637fbea4e0abbb5207201ec3e04565
462f99019d36d8b73576265743e5e465bc56202a
7517d41e1e761645b3ac0ad26bb17e0c0b6b741b82b158cdb8d39b0fd04b4747

HTTP Headers

GET /images/I/51WyBR71kgL._SL1080_.jpg HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpeg
content-length: 59798
date: Mon, 16 Jun 2025 09:55:47 GMT
server: Server
x-amz-ir-id: 13577820-c759-4154-94d9-36d222a1da53
cache-control: max-age=630720000,public
last-modified: Tue, 14 Feb 2023 06:30:58 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-471,/images/I/51WyBR71kgL
expires: Mon, 03 Apr 2045 04:23:59 GMT
surrogate-key: x-cache-471 /images/I/51WyBR71kgL
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 595560
server-timing: cdn-cache-hit,cdn-pop;desc="OSL50-P1",cdn-rid;desc="PoRLUPWF4sZ0Y1Xgjvs20yhBuji14UJu_5Mmc5rDtX_Vm7M-WZTStQ==",cdn-hit-layer;desc="REC",cdn-downstream-fbl;dur=24,provider;desc="cf"
accept-ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PoRLUPWF4sZ0Y1Xgjvs20yhBuji14UJu_5Mmc5rDtX_Vm7M-WZTStQ==
X-Firefox-Spdy: h2

GET www.googletagmanager.com/gtag/js?id=AW-954523693

142.250.178.104

200 OK

330 kB

URL GET
www.googletagmanager.com/gtag/js?id=AW-954523693
IP
142.250.178.104:443
ASN
#15169 GOOGLE

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT

File type
JavaScript source, ASCII text, with very long lines (5913)
Size
330 kB (329915 bytes)
Hash
43d475bef7fa1c2d81e08f4c41f4dc2c
7efa9cf0a0e958c535660039f0eaeb649ddf7b5c
cba6f972155518a51a2b4d647a7507b162b886ff5321b88b4af7251a7f390c12

HTTP Headers

GET /gtag/js?id=AW-954523693 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 23 Jun 2025 07:21:45 GMT
expires: Mon, 23 Jun 2025 07:21:45 GMT
cache-control: private, max-age=900
last-modified: Mon, 23 Jun 2025 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 114706
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET todayspecialoffers.io/assets/js/manage_product3.js

212.81.47.13

200 OK

7.6 kB

URL GET
todayspecialoffers.io/assets/js/manage_product3.js
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
7.6 kB (7616 bytes)
Hash
01af68af6e194020f51ee9e8b93f9e42
261a1378edce824e6479800bab1d70ea3ce40a58
f1dee0bd3e15a8850aae8703f6de611045453f7cc17fb278e9bfc81abd81d2ba

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/manage_product3.js HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1614
date: Mon, 23 Jun 2025 07:21:45 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

POST todayspecialoffers.io/api_services/manage.php

212.81.47.13

200 OK

3.1 kB

URL POST
todayspecialoffers.io/api_services/manage.php
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
JSON text data
Size
3.1 kB (3128 bytes)
Hash
5fe1b2883985e95d5bced3d51e0074bb
4701a6bbf32b989c7dd70faf93ca41a8b1f35d7d
98badb08dd0c9dcd0a4f9a76a4f900e90e8fd7d0c03d202cbf5ac94fa6f31c72

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /api_services/manage.php HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 130
Origin: https://todayspecialoffers.io
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Cookie: _gcl_au=1.1.1446439593.1750663306
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
set-cookie: PHPSESSID=b9f87bb28d3efae3704137ff8e6f353f; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Content-Range, Content-Disposition
access-control-allow-methods: GET, HEAD, OPTIONS, POST, PUT
content-length: 681
content-encoding: br
vary: Accept-Encoding
date: Mon, 23 Jun 2025 07:21:47 GMT
server: LiteSpeed

POST www.google.com/ccm/collect?tid=AW-954523693&en=page_view&dl=https%3A%2F%2Ftodayspecialoffers.io%2Fproduct-details%2F7f39f8317fbdb1988ef4c628eba02591%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=1339579092.1750663306&dt=Today%20Special%20Offers&auid=1446439593.1750663306&navt=n&npa=1&gtm=45be56g0h1v9209775894za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~102015666~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&tft=1750663306022&tfd=1675&apve=1&apvf=f

142.250.178.68

200 OK

0 B

URL POST
www.google.com/ccm/collect?tid=AW-954523693&en=page_view&dl=https%3A%2F%2Ftodayspecialoffers.io%2Fproduct-details%2F7f39f8317fbdb1988ef4c628eba02591%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=1339579092.1750663306&dt=Today%20Special%20Offers&auid=1446439593.1750663306&navt=n&npa=1&gtm=45be56g0h1v9209775894za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~102015666~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&tft=1750663306022&tfd=1675&apve=1&apvf=f
IP
142.250.178.68:443
ASN
#15169 GOOGLE

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint4F:74:10:0A:01:21:55:4F:03:B9:F9:8B:6A:DE:A2:47:7C:44:89:73
ValidityMon, 02 Jun 2025 08:37:21 GMT - Mon, 25 Aug 2025 08:37:20 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /ccm/collect?tid=AW-954523693&en=page_view&dl=https%3A%2F%2Ftodayspecialoffers.io%2Fproduct-details%2F7f39f8317fbdb1988ef4c628eba02591%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=1339579092.1750663306&dt=Today%20Special%20Offers&auid=1446439593.1750663306&navt=n&npa=1&gtm=45be56g0h1v9209775894za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~102015666~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&tft=1750663306022&tfd=1675&apve=1&apvf=f HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://todayspecialoffers.io/
Origin: https://todayspecialoffers.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
date: Mon, 23 Jun 2025 07:21:47 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
content-type: text/plain
pragma: no-cache
vary: Origin, X-Origin, Referer
server: scaffolding on HTTPServer2
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://todayspecialoffers.io
access-control-expose-headers: date,vary,vary,vary,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET todayspecialoffers.io/img/plue-fassured.png

212.81.47.13

200 OK

8.4 kB

URL GET
todayspecialoffers.io/img/plue-fassured.png
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
PNG image data, 116 x 30, 8-bit/color RGBA, non-interlaced
Size
8.4 kB (8376 bytes)
Hash
9663c8e44a9494959796fbab6420e00b
38ba5e37d65c4f8fa052f9d378c545a370cc9c50
c777bfad4905b8aaecac2dcd9e15479a3347fbf1f404b95210092ba5df37bc49

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/plue-fassured.png HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:46 GMT
content-type: image/png
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-length: 8376
date: Mon, 23 Jun 2025 07:21:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

GET www.google.com/ccm/collect?tid=AW-954523693&en=page_view&dl=https%3A%2F%2Ftodayspecialoffers.io%2Fproduct-details%2F7f39f8317fbdb1988ef4c628eba02591%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=1339579092.1750663306&dt=Today%20Special%20Offers&auid=1446439593.1750663306&navt=n&npa=1&gtm=45be56g0h1v9209775894za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~102015666~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&tft=1750663306022&tfd=1675&apve=1&apvf=f&img=1

142.250.178.68

200 OK

0 B

URL GET
www.google.com/ccm/collect?tid=AW-954523693&en=page_view&dl=https%3A%2F%2Ftodayspecialoffers.io%2Fproduct-details%2F7f39f8317fbdb1988ef4c628eba02591%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=1339579092.1750663306&dt=Today%20Special%20Offers&auid=1446439593.1750663306&navt=n&npa=1&gtm=45be56g0h1v9209775894za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~102015666~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&tft=1750663306022&tfd=1675&apve=1&apvf=f&img=1
IP
142.250.178.68:443
ASN
#15169 GOOGLE

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerGoogle Trust Services
Subject*.google.com
FingerprintEE:B4:21:E2:07:A7:35:36:27:81:A0:3A:3E:C9:6C:F5:11:A0:7F:5C
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ccm/collect?tid=AW-954523693&en=page_view&dl=https%3A%2F%2Ftodayspecialoffers.io%2Fproduct-details%2F7f39f8317fbdb1988ef4c628eba02591%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=1339579092.1750663306&dt=Today%20Special%20Offers&auid=1446439593.1750663306&navt=n&npa=1&gtm=45be56g0h1v9209775894za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~102015666~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&tft=1750663306022&tfd=1675&apve=1&apvf=f&img=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
pragma: no-cache
content-type: text/plain
expires: Fri, 01 Jan 1990 00:00:00 GMT
date: Mon, 23 Jun 2025 07:21:48 GMT
cache-control: no-cache, no-store, must-revalidate
vary: Origin, X-Origin, Referer
server: scaffolding on HTTPServer2
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET code.jquery.com/jquery-3.7.1.min.js

151.101.130.137

200 OK

88 kB

URL GET
code.jquery.com/jquery-3.7.1.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
Fingerprint56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE
ValidityThu, 12 Jun 2025 00:00:00 GMT - Fri, 26 Jun 2026 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
88 kB (87533 bytes)
Hash
2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a

HTTP Headers

GET /jquery-3.7.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://todayspecialoffers.io
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-155ed"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 23 Jun 2025 07:21:45 GMT
age: 2935031
x-served-by: cache-lga21978-LGA, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 27, 102066
x-timer: S1750663306.632878,VS0,VE0
vary: Accept-Encoding
content-length: 30336
X-Firefox-Spdy: h2

GET todayspecialoffers.io/assets/js/relativeTime.js

212.81.47.13

200 OK

1.8 kB

URL GET
todayspecialoffers.io/assets/js/relativeTime.js
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
JavaScript source, ASCII text, with very long lines (1772), with no line terminators
Size
1.8 kB (1772 bytes)
Hash
3d981b3fc604b6f84880766e93b9afa1
bf805a85cd988d6b0da0f7c605bff22bc6ae85c0
889f6332c69e9a7bf234c4ec913c6adf6775ffe588ad15df185771d306cf7131

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/relativeTime.js HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 768
date: Mon, 23 Jun 2025 07:21:31 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

GET todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/img/small-logo.png

212.81.47.13

404 Not Found

1.3 kB

URL GET
todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/img/small-logo.png
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /product-details/7f39f8317fbdb1988ef4c628eba02591/img/small-logo.png HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Cookie: _gcl_au=1.1.1446439593.1750663306
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Mon, 23 Jun 2025 07:21:47 GMT
server: LiteSpeed

GET m.media-amazon.com/images/I/518cujVk8pL._SL1000_.jpg

54.230.216.66

200 OK

66 kB

URL GET
m.media-amazon.com/images/I/518cujVk8pL._SL1000_.jpg
IP
54.230.216.66:443
ASN
#16509 AMAZON-02

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
FingerprintED:9D:2D:58:76:07:9C:57:88:75:37:D1:AE:71:6D:09:D2:50:48:81
ValidityThu, 10 Oct 2024 00:00:00 GMT - Sun, 28 Sep 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1000, components 3
Size
66 kB (65491 bytes)
Hash
2b829144923aa9943973a23ce3ccfe1f
6d079c2501ed3b33e2d96ee5f2375266610af84d
4fdcee7c82d94feec181f06cfd3145952a1e17108ac5b827ac306f3fa414ff2f

HTTP Headers

GET /images/I/518cujVk8pL._SL1000_.jpg HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpeg
content-length: 65491
date: Mon, 16 Jun 2025 08:37:10 GMT
server: Server
x-amz-ir-id: 47277956-eaf9-4622-9b21-66a306c5fe16
cache-control: max-age=630720000,public
last-modified: Tue, 14 Feb 2023 06:32:52 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-576,/images/I/518cujVk8pL
expires: Mon, 03 Apr 2045 23:23:36 GMT
surrogate-key: x-cache-576 /images/I/518cujVk8pL
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 600277
accept-ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wpIuixA76GThXirYrK2riVsNvQbZ_0CAxfMNX88mhd-HT5a_HbTxkQ==
X-Firefox-Spdy: h2

GET todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/

212.81.47.13

200 OK

30 kB

URL User Request GET
todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
HTML document, ASCII text, with very long lines (8985), with CRLF, LF line terminators
Size
30 kB (29723 bytes)
Hash
23a5864674ee6a8bf9ccecafcf3a24c1
bb55dc81469331345a30b92c6f07cd16ca046237
8e54ad1361dafe8f527f4b6c262cfe777aafaeaacfd3e4bddad37a2df124293d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /product-details/7f39f8317fbdb1988ef4c628eba02591/ HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Mon, 23 Jun 2025 07:21:45 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

GET todayspecialoffers.io/assets/images/non-cod.png

212.81.47.13

200 OK

2.1 kB

URL GET
todayspecialoffers.io/assets/images/non-cod.png
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
PNG image data, 46 x 48, 8-bit colormap, non-interlaced
Size
2.1 kB (2063 bytes)
Hash
1a684d688f9dbe89c011388246f8f766
0d5cee94025760122bd1ae5e419ef0de9858147c
cc408bf77dea6fdbb5ea0fece7fc3df97411d2f077af750456cc9cdd42c9a92b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/non-cod.png HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:46 GMT
content-type: image/png
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-length: 2063
date: Mon, 23 Jun 2025 07:21:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

GET todayspecialoffers.io/assets/images/plue-fassured.png

212.81.47.13

200 OK

8.4 kB

URL GET
todayspecialoffers.io/assets/images/plue-fassured.png
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
PNG image data, 116 x 30, 8-bit/color RGBA, non-interlaced
Size
8.4 kB (8376 bytes)
Hash
9663c8e44a9494959796fbab6420e00b
38ba5e37d65c4f8fa052f9d378c545a370cc9c50
c777bfad4905b8aaecac2dcd9e15479a3347fbf1f404b95210092ba5df37bc49

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/plue-fassured.png HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 30 Jun 2025 07:21:46 GMT
content-type: image/png
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-length: 8376
date: Mon, 23 Jun 2025 07:21:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

GET todayspecialoffers.io/assets/js/days.min.js

212.81.47.13

200 OK

8.2 kB

URL GET
todayspecialoffers.io/assets/js/days.min.js
IP
212.81.47.13:443
ASN
#212238 Datacamp Limited

Requested by
https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Certificate
IssuerLet's Encrypt
Subjecttodayspecialoffers.io
Fingerprint22:BC:99:5A:5F:19:FE:8D:B9:F9:75:3C:6A:5D:19:E6:6C:46:06:60
ValidityWed, 18 Jun 2025 06:39:50 GMT - Tue, 16 Sep 2025 06:39:49 GMT

File type
JavaScript source, ASCII text, with very long lines (8182), with no line terminators
Size
8.2 kB (8182 bytes)
Hash
8a09deaffb8b9baa62dde8aa093c30cc
c597a12e81223ce44967af7d5e44e1196d54f02d
95c4ad39ceee3c22b90a098d104c675e5b7005bf3f5a6d4f82c41d86d19d1bbc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/days.min.js HTTP/1.1
Host: todayspecialoffers.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://todayspecialoffers.io/product-details/7f39f8317fbdb1988ef4c628eba02591/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 17 Jun 2025 04:47:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3085
date: Mon, 23 Jun 2025 07:21:31 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML