Overview

URLwww.best-offer-for-you.com/c/adc6992645f3e01f
IP 52.19.101.114 (Ireland)
ASN#16509 AMAZON-02
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-05-26 14:31:43 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (2)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
cdn-adef.akamaized.net (7) 125719 2018-02-06 08:56:01 2023-05-26 06:12:30 3165 339104 23.36.76.96
www.best-offer-for-you.com (1) 0 2020-06-14 10:13:13 2023-04-11 22:11:20 503 6204 52.19.101.114

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-05-26 medium www.best-offer-for-you.com/c/adc6992645f3e01f Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 52.19.101.114
Date UQ / IDS / BL URL IP
2023-06-05 23:28:43 UTC 1 - 0 - 0 www.localbeauty.singles/c/462f4a167b4046a5 52.19.101.114
2023-06-05 01:48:44 UTC 0 - 0 - 2 www.moxoxom.com/c/20615ebcec30ab70 52.19.101.114
2023-06-02 11:57:23 UTC 0 - 2 - 0 www.smartfinstories.biz/c/b54962894a76cba6 52.19.101.114
2023-06-01 22:11:48 UTC 0 - 0 - 2 laxebn.unantlcipatedluck.net/ 52.19.101.114
2023-06-01 21:01:52 UTC 0 - 0 - 1 lsel.pollsandpromotions.site/c/4182ef8a9b09fd (...) 52.19.101.114


Last 5 reports on ASN: AMAZON-02
Date UQ / IDS / BL URL IP
2023-06-06 07:15:47 UTC 0 - 4 - 1 54.187.109.199/customer/Remote%20Support-wind (...) 54.187.109.199
2023-06-06 07:09:57 UTC 0 - 4 - 0 files.uniblue.com/cm/cnetint_newc/pcmechanicp (...) 199.59.243.223
2023-06-06 07:04:26 UTC 0 - 0 - 2 tracking.selfserviceib.com/tracking/1/click/e (...) 18.198.163.56
2023-06-06 07:01:19 UTC 0 - 72 - 0 track.uptruckthat.com/redirect?target=BASE64a (...) 18.192.249.87
2023-06-06 07:00:51 UTC 0 - 0 - 5 www.na-amazon-creturns.com/ 52.94.237.108


Last 3 reports on domain: best-offer-for-you.com
Date UQ / IDS / BL URL IP
2023-05-26 14:31:43 UTC 0 - 0 - 1 www.best-offer-for-you.com/c/adc6992645f3e01f 52.19.101.114
2023-04-12 05:37:40 UTC 0 - 0 - 2 www.best-offer-for-you.com/c/e755f3f00bbc5d96 52.19.101.114
2023-03-17 05:31:34 UTC 0 - 0 - 2 www.best-offer-for-you.com/c/e755f3f00bbc5d96 52.19.101.114


No other reports with similar screenshot

JavaScript

Executed Scripts (2)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (8)


Request Response
                                        
                                            GET /landings/210297/1619438687/js/backoffer.js?1619438687 HTTP/1.1 
Host: cdn-adef.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.best-offer-for-you.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.96
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
x-amz-id-2: ZpsbECcP8xM1w3x8rcp0Cp/0gg0PLDx4aLCrmGO82TedvqgxaCesBfDuYE9klGRbSq4lPbqVfGw=
x-amz-request-id: FZW5GN663W4DDWBT
Last-Modified: Mon, 26 Apr 2021 12:04:50 GMT
ETag: "4e39716b4d4469996fc6e68265fa8830"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 618
Date: Fri, 26 May 2023 14:31:27 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   618
Md5:    4e39716b4d4469996fc6e68265fa8830
Sha1:   c8b24994e71f4e58170e639124107fd25757f755
Sha256: 3cc4cdc7b3421264503656474f5b10db20bc711493bfe2df0680da0b7c81a72c
                                        
                                            GET / HTTP/1.1 
Host: cdn-adef.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.best-offer-for-you.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.96
HTTP/1.1 302 Moved Temporarily
                                            
Server: AkamaiGHost
Content-Length: 0
Location: https://cdn-adef.akamaized.net/404
Date: Fri, 26 May 2023 14:31:27 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

                                        
                                            GET /404 HTTP/1.1 
Host: cdn-adef.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.best-offer-for-you.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.96
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Content-Length: 134
Date: Fri, 26 May 2023 14:31:27 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   134
Md5:    9c7c01b7650d428a3540bd1d22390a2f
Sha1:   1de74307526c98f84fe5ef2f7dce7ae7c1f77dd0
Sha256: 08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1
                                        
                                            GET /landings/210297/1619438687/images/girl_1.gif HTTP/1.1 
Host: cdn-adef.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.best-offer-for-you.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.96
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
x-amz-id-2: HnUvJ1WfNcXEdo5BKCg5h+2xqJUUwS7qZe5C8nShy8oOrulfgaJWWL4zVQofoUu9Z0IqtFEhmew=
x-amz-request-id: FZW2ET81R9R0JN7Z
Last-Modified: Mon, 26 Apr 2021 12:04:50 GMT
ETag: "5453a462e8adaa794b8fbaf19fbab9c4"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 121739
Date: Fri, 26 May 2023 14:31:27 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 200\012- data
Size:   121739
Md5:    5453a462e8adaa794b8fbaf19fbab9c4
Sha1:   a06a38a05984ce3cba355e6896ff94495ffaa5a1
Sha256: 5daadcfa9b70e613cd543c04db74064af43e8befc71672d6314a17a0b0338723
                                        
                                            GET /landings/210297/1619438687/images/ezgif.com-gif-maker.gif HTTP/1.1 
Host: cdn-adef.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.best-offer-for-you.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.96
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
x-amz-id-2: cj11KZha+yj618IZXipXcxnd2/+BzVi8FXed8n7HSnJnCPXzmjnQxTTUHQrgb7xVLBn2CLGP2ww=
x-amz-request-id: FZW8GF5R0KEZRSF5
Last-Modified: Mon, 26 Apr 2021 12:04:50 GMT
ETag: "1dffa40fb8c265b97f3fc968ae51df26"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 213498
Date: Fri, 26 May 2023 14:31:27 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  GIF image data, version 89a, 374 x 103\012- data
Size:   213498
Md5:    1dffa40fb8c265b97f3fc968ae51df26
Sha1:   d62dff78bdfa7dffe5c7fd66583f17499a10f0b9
Sha256: a61ea42859731659d5f560fe4b428208b4cee67c16ad8489c38f77c8d07f3098
                                        
                                            GET /landings/210297/js/backoffer.js HTTP/1.1 
Host: cdn-adef.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.best-offer-for-you.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.96
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
x-amz-id-2: etqpa/pODe9ZHsYOupEpk2v5WGa6snV8sgZ/AmstRQ5b3n4XhBZ0SQY5obpHj+tbHOacPDF/UQM=
x-amz-request-id: 002R33DB4BZJNKA5
Last-Modified: Mon, 26 Apr 2021 12:02:52 GMT
ETag: "4e39716b4d4469996fc6e68265fa8830"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 618
Date: Fri, 26 May 2023 14:31:28 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   618
Md5:    4e39716b4d4469996fc6e68265fa8830
Sha1:   c8b24994e71f4e58170e639124107fd25757f755
Sha256: 3cc4cdc7b3421264503656474f5b10db20bc711493bfe2df0680da0b7c81a72c
                                        
                                            GET / HTTP/1.1 
Host: cdn-adef.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.best-offer-for-you.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             23.36.76.96
HTTP/1.1 302 Moved Temporarily
                                            
Server: AkamaiGHost
Content-Length: 0
Location: https://cdn-adef.akamaized.net/404
Date: Fri, 26 May 2023 14:31:27 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


                                        
                                            GET /c/adc6992645f3e01f HTTP/1.1 
Host: www.best-offer-for-you.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             52.19.101.114
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Fri, 26 May 2023 14:31:26 GMT
set-cookie: unique_id=6470c2be00094ab9; Path=/; Expires=Tue, 25 Jul 2023 14:31:26 GMT; Secure; SameSite=None unique_id2=6470c2be00095073; Path=/; Expires=Thu, 24 Aug 2023 14:31:26 GMT; Secure; SameSite=None impression=; Path=/; Expires=Fri, 26 May 2023 14:31:26 GMT; Secure; SameSite=None 6470c2be00095073_sl=[210297]; Path=/; Expires=Fri, 09 Jun 2023 14:31:26 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5907), with no line terminators
Size:   5662
Md5:    35433cd08a11b2d4b91c12cbc3b1b22d
Sha1:   543c9455e46806271473142eee58123db1e7e63f
Sha256: 0e2681629b60943300e3c61acf4c7cdbaadc00248e211f37422d3c403996cee8

Blocklists:
  - fortinet: Phishing