| dfrchtrck.com/click.php?project_id=Mc&affiliate_id=fc59df1715&custom2=cokus2k6n9fs73craec0 | 149.3.170.133 | 302 Found | 20 B |
URL User Request GET HTTP/1.1dfrchtrck.com/click.php?project_id=Mc&affiliate_id=fc59df1715&custom2=cokus2k6n9fs73craec0 IP149.3.170.133:443 ASN#213373 IP Connect Inc
CertificateIssuerLet's Encrypt Subjectdfrchtrck.com FingerprintBA:8F:D6:4A:45:F9:DE:A7:88:FE:1A:A0:7F:13:97:E1:A5:0F:25:EE ValiditySat, 20 Apr 2024 05:01:14 GMT - Fri, 19 Jul 2024 05:01:13 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /click.php?project_id=Mc&affiliate_id=fc59df1715&custom2=cokus2k6n9fs73craec0 HTTP/1.1
Host: dfrchtrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 26 Apr 2024 02:10:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq; expires=Fri, 03-May-2024 02:10:59 GMT; Max-Age=604800; path=/; samesite=None; secure
leadID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq; expires=Fri, 03-May-2024 02:10:59 GMT; Max-Age=604800; path=/; samesite=None; secure
Location: https://amazinglyfortunateoffers.com/amazonspecial/?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Content-Encoding: gzip
Vary: Accept-Encoding
X-Server: neque
PX-X-Request-Id: a6ad551f329b75f8a1cbc07181e890d9
|
|
| amazinglyfortunateoffers.com/amazonspecial/?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto | 185.142.238.38 | 302 Found | 0 B |
URL User Request GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto IP185.142.238.38:443
CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /amazonspecial/?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 26 Apr 2024 02:10:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
X-Upstream: sharkolia-***ko
Strict-Transport-Security: max-age=63072000
X-Server: microso
PX-X-Request-Id: 4ac35b55f5e201cf84b57c80bda81281
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto | 185.142.238.38 | 200 OK | 9.0 kB |
URL User Request GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto IP185.142.238.38:443
CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (811) Hash6df522090039168a07183fba74e3d0dc a0596d533fa27bde7784d1fab0ecf9ee3d37645b 1f0678d5db385dd76ef777868eba8c1f88ab435b70b934e190057b1c5d99ce60
GET /amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:10:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: intgrtn_language=en; expires=Sun, 26-May-2024 02:10:59 GMT; Max-Age=2592000; path=/amazonspecial/
X-Upstream: sharkolia-***ko
Content-Encoding: gzip
Strict-Transport-Security: max-age=63072000
X-Server: microso
PX-X-Request-Id: f7793fbae63aeb877ed80187ef3209ae
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/css/style.min5697.css?ver=5.5.3 | 185.142.238.38 | 200 OK | 7.8 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/css/style.min5697.css?ver=5.5.3 IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeASCII text, with very long lines (27100) Hash2e7e1d1c1d4d446a1b6b63295757d859 27a1d9dcbdc4aff486016b5c9f3ece6ad0c028c1 8c626f0f9b5c109539b256b73e72c02b300a184f46b4535c2eb86599215c78af
GET /amazonspecial/css/style.min5697.css?ver=5.5.3 HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-d293"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: 0d26dc01dca1ffbd0b2b2c248b9fa3dd
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/css/style68b3.css?ver=1 | 185.142.238.38 | 200 OK | 313 B |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/css/style68b3.css?ver=1 IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeASCII text, with very long lines (850) Hash53796b73587b4a58b8904d127eaa51f9 b7160b6ceaea4e424cf2f9ef31de57cac1e04397 e8b5c0f1aab454e3dd3d47bdb0d6be1a54c0c350dff5feaa3a595937e2006df1
GET /amazonspecial/css/style68b3.css?ver=1 HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-353"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: aad85f064c106eea097dae5cae918f26
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/css/custom.css | 185.142.238.38 | 200 OK | 2.7 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/css/custom.css IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
Hash3ebbaaf7f2be881619ba53162322571a d75778cbc5db24f7335800b9c6d67453fb56ea20 46a80c3e8ce40e1e839981a7baaddf17b26c9dd01a07523f8c3073e5abcdbfd9
GET /amazonspecial/css/custom.css HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-2ce1"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: ad25c52e2a44e491f7eecfa4f94507e4
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/css/all.min.css | 185.142.238.38 | 200 OK | 12 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/css/all.min.css IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeASCII text, with very long lines (56772) Hashb231f7b5f8887cad51721323590a8415 eef8a9137ac41df189edb37fa06c2f832e1c4f61 6daf0c6ce9852704badeaa55b3b79c86af9487e1aaca08cd86ec24767a846760
GET /amazonspecial/css/all.min.css HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-de7d"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: d063adcad51e4402b73d27d19a333d14
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097303 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/css/all.css | 185.142.238.38 | 200 OK | 13 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/css/all.css IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeASCII text, with very long lines (59914) Hash42490fcfd11d256da0ca5a98cc5d45d3 f70b8519955ce61bc15cce1718506c737112ad78 54bf65b7f1e2aa35692c2b75c0031c8e48de07efd529d8171078e7c030952f76
GET /amazonspecial/css/all.css HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-eac4"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: ca6705a5fe4a0ec27d83a228e0ee1ded
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/css/funnel.css | 185.142.238.38 | 200 OK | 14 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/css/funnel.css IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
Hashad202fa6b40c6dbfee0cd03ca7bb6bcc a1ceed7036c59aa926182aeaa4d9c6e7c20d6361 922ee0a54eb79fd950e185ccda4dd13ae0edabb33a44d072a9a62bd26c76770e
GET /amazonspecial/css/funnel.css HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-160d1"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: dff388e302754970897953ff31cc8abd
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/css/funnel-additional.css | 185.142.238.38 | 200 OK | 2.7 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/css/funnel-additional.css IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
Hasha2fa282e6bc7b0f9206828b18c2978d1 324dcd69fbbaaf801ca28f6904d41042aaa46e65 b785c6398215d82234d97f5039ed44ebc425b6538dfba459f519c066cbf73a8c
GET /amazonspecial/css/funnel-additional.css HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-2d29"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: 6ffcc32f7de11872747afa3b481faf1a
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097303 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/css/bootstrap.min.css | 185.142.238.38 | 200 OK | 21 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/css/bootstrap.min.css IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeASCII text, with very long lines (65324) Hash04aca1f4cd3ec3c05a75a879f3be75a3 675fcf28f9fbf37139d3b2c0b676f96f601a4203 7928b5ab63c6e89ee0ee26f5ef201a58c72baf91abb688580a1aa26eb57b3c11
GET /amazonspecial/css/bootstrap.min.css HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-22688"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: 1609e2e9ad64fe12aa01b0c7d6328a10
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/css/slick.min.css | 185.142.238.38 | 200 OK | 522 B |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/css/slick.min.css IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeASCII text, with very long lines (1327) Hash6a62ad0f300504c583e7797c79c2d8ab e6e4f113fc2d008516d21228dac93bb6a2fcbb53 50ad448a8a5720bf8a5617db15af31ae60163de06331576f60c6244c012ffc72
GET /amazonspecial/css/slick.min.css HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-559"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: fa1bd5c8ec081e490c4a61519925766a
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/css/v4-shims.css | 185.142.238.38 | 200 OK | 4.2 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/css/v4-shims.css IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeASCII text, with very long lines (26516) Hash0a121a1f354de051316c4fff1ebd1f4d 0fc07c1628b390f6d5a05d1cf4a8121e095b93d9 fda3035030d3843c2751dc0da65fb802230ec00a4008aeed83ddddc7b97cbc93
GET /amazonspecial/css/v4-shims.css HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-684e"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: f8705fc19cb77dabf4777063adfb7968
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/css/intgrtn.css | 185.142.238.38 | 200 OK | 820 B |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/css/intgrtn.css IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeASCII text, with very long lines (373) Hashc46ad66370bf7ec1abd88e1fcc21f107 f3cd052a46c51f19e89af42096991e5d95213b7f e4aecdb9b577a378e725fa4e5b185218507bfdb1e63630c77653d62842c0ac79
GET /amazonspecial/css/intgrtn.css HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-d2d"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: 74ecbe9bf7a10989a023487337114bc6
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/js/bootstrap.min.js | 185.142.238.38 | 200 OK | 14 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/js/bootstrap.min.js IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /amazonspecial/js/bootstrap.min.js HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-c75f"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: b2255fc42bc88fd7ebaf1063b3f9b319
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/css/avia-merged-styles-8d3d8e7e41495f6c8fcd447c24837fb2---5fea0759680e5.css | 185.142.238.38 | 200 OK | 53 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/css/avia-merged-styles-8d3d8e7e41495f6c8fcd447c24837fb2---5fea0759680e5.css IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeASCII text, with very long lines (596) Hash41068da7dd9072f622770d9ea1977e7b 69f6bf02af1bbea31f7c8e9702d19d7672aaa150 e4bcf24ba1e17060a1c79f41f9844336594106cb49c26881a2f9b5eb47966dfe
GET /amazonspecial/css/avia-merged-styles-8d3d8e7e41495f6c8fcd447c24837fb2---5fea0759680e5.css HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-5faa0"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: 1f187dd7cda53ad1b1ded0ccba44e3eb
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/js/jquery-1.11.3.min.js | 185.142.238.38 | 200 OK | 33 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/js/jquery-1.11.3.min.js IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeJavaScript source, ASCII text, with very long lines (32038) Hash895323ed2f7258af4fae2c738c8aea49 276c87ff3e1e3155679c318938e74e5c1b76d809 ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8
GET /amazonspecial/js/jquery-1.11.3.min.js HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-176d5"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: 3d74c0230e0710cb38f9fa92ad618f0e
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097303 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/img/5fb67d77d9256_v.jpg | 185.142.238.38 | 200 OK | 22 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/img/5fb67d77d9256_v.jpg IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 695x371, components 3 Hash14d7d54f1bb1086abd8f1d9555141024 653ec36d222af87e40cc34fa1bca905ac35f82e6 f6351b5bfa259de13dae9c9f332855813b99bd8544c8cdad7cc1645c454fb4bd
GET /amazonspecial/img/5fb67d77d9256_v.jpg HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-6293"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: 05abe7ba3d46035653279c42b4159533
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/img/5fb67d77b617d_v.png | 185.142.238.38 | 200 OK | 5.0 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/img/5fb67d77b617d_v.png IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typePNG image data, 240 x 53, 8-bit/color RGBA, non-interlaced Hash7029602ae476113f319a0dbb9cbc01c2 237d47f265f01ab01c170dfd5f7170a5ddfbcedc 1a320a466c1d7d389cd5476d27a0d027a833a96e291ce5267d1506695af486eb
GET /amazonspecial/img/5fb67d77b617d_v.png HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-137e"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: 07a8314b55e438596241034aedcaeaca
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/img/5fb67d78cd12b_v.jpg | 185.142.238.38 | 200 OK | 62 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/img/5fb67d78cd12b_v.jpg IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 534x611, components 3 Hashb6201c67b2117c65998a807d2defaacb ec4cc789c307e81003d12bb8a3a951064c0e951d 856a223e470a7640097f6a83588c41b7d831e364e9db24d1165e1811b026d9a9
GET /amazonspecial/img/5fb67d78cd12b_v.jpg HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-fa5a"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: c7414677496c45fb0f6b3669c63c40e6
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/img/5fb67d78c1ea3_v.jpg | 185.142.238.38 | 200 OK | 14 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/img/5fb67d78c1ea3_v.jpg IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 563x277, components 3 Hashcdfe1ad1579ae4b9acd2ae5ed2f5d371 0cffc10442bbe8235b16be7d313fd839dc1900df b5c3c626088edc6bd530c9da23892e3d641fd9fd94e03645164686f5baa1ee30
GET /amazonspecial/img/5fb67d78c1ea3_v.jpg HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-45f6"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: 6f84cfa62234e64b5043af936bfb6ddc
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/img/amazon-1-1.jpg | 185.142.238.38 | 200 OK | 103 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/img/amazon-1-1.jpg IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1852x651, components 3 Size103 kB (103323 bytes) Hash007e095ac668e6c5085a264cea7f5611 09547ffcd4245d8b85b5454c7063eda06f06e4dc c1af3158b052d4a2841d6618e385457afb39c3ebde4e1c29b45a8889aee7ec3a
GET /amazonspecial/img/amazon-1-1.jpg HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-195bd"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: 253585a4008b4f4a6331a8d41a7ae84c
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/fonts/entypo-fontello.woff2 | 185.142.238.38 | 200 OK | 39 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/fonts/entypo-fontello.woff2 IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 38740, version 1.0 Hash5631b5274bab61f34efbfbaef1c21d18 76438f0eceefefdd9958eb19e75b417d94c48ff4 aba14bf4f70a87d173da2171049240f074959c2497caadb37fdba37fbdfabd1f
GET /amazonspecial/fonts/entypo-fontello.woff2 HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: font/woff2
Content-Length: 38740
Connection: keep-alive
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: "631f1743-9754"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Accept-Ranges: bytes
X-Server: microso
PX-X-Request-Id: a2ed3ba3d8a2a7df00ccaf61d1f12ad9
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| fonts.googleapis.com/css2?family=Merriweather:wght@300;400;700&display=swap | 142.250.74.106 | 200 OK | 6.9 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Merriweather:wght@300;400;700&display=swap IP142.250.74.106:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typegzip compressed data, max compression Hash48773c27d32fef99234d8eb48881b77a 30f73b1c26283352634f96fbbe67e78c1882b0b2 65c6cde59c060b251b049a57f00122fa53b8cf4f22fe69e303b9ad048fd7cef2
GET /css2?family=Merriweather:wght@300;400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 02:11:00 GMT
date: Fri, 26 Apr 2024 02:11:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Lato:wght@300;400;700;900&display=swap | 142.250.74.106 | 200 OK | 10 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Lato:wght@300;400;700;900&display=swap IP142.250.74.106:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typegzip compressed data, max compression Hash104026c4b19299b03f8db081c5636227 c50b29b567e789b21f55bba2d22570da416e68bb 29393c76e532611ea1466a6103448708d1ba9049cdde247015f63eea1aa995a6
GET /css2?family=Lato:wght@300;400;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 02:11:00 GMT
date: Fri, 26 Apr 2024 02:11:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2 IP216.58.207.227:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19740, version 1.0 Hash101cf2a65d64322878605fa8472bb025 6dffc15e38c321e4bb567b4bd8107a2e8d97c61d 273c8613cdd2852dd5318f224d804ae6d2fc717c48d3f1dab587b6d396fb4fc8
GET /s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amazinglyfortunateoffers.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:30:50 GMT
expires: Fri, 25 Apr 2025 02:30:50 GMT
cache-control: public, max-age=31536000
age: 85210
last-modified: Tue, 26 Apr 2022 15:48:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| amazinglyfortunateoffers.com/intgrtn/api/v1/integration/sdk.js?v=1202432621 | 185.142.238.38 | 200 OK | 50 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/intgrtn/api/v1/integration/sdk.js?v=1202432621 IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typeJavaScript source, ASCII text Hash5f37dd2e970f1fbe3462a924033d86ca 6cb8dacb8155b2fb3cc69985e686b2e3cdcbc2e9 4d16c2894de15b0875c85383393cfd54e4834b98ea40af076c11f12c67d71124
GET /intgrtn/api/v1/integration/sdk.js?v=1202432621 HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 24 Apr 2024 13:31:05 GMT
Vary: Accept-Encoding
ETag: W/"66290999-79ca7"
Expires: Sat, 26 Apr 2025 02:11:00 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: d903d31660209ae550a0697c2547ab4e
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
PX-Cache-Status: MISS
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 IP216.58.207.227:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14712, version 1.0 Hash3afeae0d768769f5e5f30ac9805c5b70 3ada17c2b462db3e7a1fd85c3f4670dfe7704f4d 0d0a6262c545e8bbc895116e5afb22579c468d7abb77e378f377d6fed57c1dce
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amazinglyfortunateoffers.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14712
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:35:47 GMT
expires: Fri, 25 Apr 2025 17:35:47 GMT
cache-control: public, max-age=31536000
age: 30913
last-modified: Thu, 01 Jun 2023 22:52:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Source+Sans+Pro:wght@300;400;600;700&display=swap | 142.250.74.106 | 200 OK | 16 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Source+Sans+Pro:wght@300;400;600;700&display=swap IP142.250.74.106:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typegzip compressed data, max compression Hashe82a2276b5154768b98e5395da872deb 1ae76728e2c0704387b2119ddfe4e5a94232ea0e 15137455327a3e22b54fa3f6eefb0da6b1a13e6439fe9e60e629c7de335cee89
GET /css2?family=Source+Sans+Pro:wght@300;400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 02:11:00 GMT
date: Fri, 26 Apr 2024 02:11:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/magra/v14/uK_w4ruaZus72nbNDycQGvo.woff2 | 216.58.207.227 | 200 OK | 9.4 kB |
URL GET HTTP/2fonts.gstatic.com/s/magra/v14/uK_w4ruaZus72nbNDycQGvo.woff2 IP216.58.207.227:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 9436, version 1.0 Hash267ecd80d0d89a255f676a8b3cce0db0 215515b0a5be67a4d9c980e8926231225b036ef6 c4920b39f85de27baf31e69b334cdf828ec2875ac4ec3a4a2d7a2e52773f7e79
GET /s/magra/v14/uK_w4ruaZus72nbNDycQGvo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amazinglyfortunateoffers.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9436
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 03:18:16 GMT
expires: Fri, 25 Apr 2025 03:18:16 GMT
cache-control: public, max-age=31536000
age: 82364
last-modified: Tue, 26 Apr 2022 15:28:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0 Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amazinglyfortunateoffers.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:38:02 GMT
expires: Fri, 25 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 84778
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| amazinglyfortunateoffers.com/intgrtn/api/v1/integration/sdk.css?v=2.67.1 | 185.142.238.38 | 200 OK | 8.6 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/intgrtn/api/v1/integration/sdk.css?v=2.67.1 IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
Hash11551ef44c6dccf85a6287f4bfe11182 d9b25491d60633670c86cf7cd76e0abf858bc360 617a4b507a3a45bc358f56b14d884283ab84e61e8ed5956d4d1684d5130e6b47
GET /intgrtn/api/v1/integration/sdk.css?v=2.67.1 HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 24 Apr 2024 13:33:19 GMT
Vary: Accept-Encoding
ETag: W/"66290a1f-14923"
Expires: Thu, 24 Apr 2025 13:46:54 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: a466dcb874f7a32344f15516340d158f
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097303 1714034803
PX-Cache-Status: HIT
|
|
| amazinglyfortunateoffers.com/intgrtn/api/v1/projects/agreements.php?type=4&clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq | 185.142.238.38 | 200 OK | 1.8 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/intgrtn/api/v1/projects/agreements.php?type=4&clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
Hashe0da86ba205195661f8e18115e89aae9 0b26e9f1139f8d20de0fab3240167fcb4b06c1fe f011d5d56a1d721982d7d780d58341602ca84ed4a4d1e53f6c3c3ca9f4f6b4a6
GET /intgrtn/api/v1/projects/agreements.php?type=4&clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Intgrtn-Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:01 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: accept, origin, content-type, authorization, Cache-Control, X-Requested-With, Intgrtn-Referer
Access-Control-Allow-Methods: POST, GET, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
X-Server: microso
PX-X-Request-Id: 4433765d7e482d149ef92328518f6b7b
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/intgrtn/api/v1/integration/assets/img/eye-1a.png | 185.142.238.38 | 200 OK | 1.1 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/intgrtn/api/v1/integration/assets/img/eye-1a.png IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced Hashdd5e71f2dea6c26df18b158e5c3377e7 78a9fd5897690165b888c9db15c73f6fe3c7f452 9505ce3a2d95aa956775178ce80f3e0e89cc58c85906cd04bd1f8a6d6a5768e3
GET /intgrtn/api/v1/integration/assets/img/eye-1a.png HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/intgrtn/api/v1/integration/sdk.css?v=2.67.1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:01 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 09 Nov 2023 15:10:02 GMT
Vary: Accept-Encoding
ETag: W/"654cf64a-42f"
Expires: Sat, 09 Nov 2024 12:46:52 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: 01d416f1c026be292418652759507d00
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
PX-Cache-Status: HIT
|
|
| amazinglyfortunateoffers.com/intgrtn/api/v1/projects/details.php?&clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&language=en | 185.142.238.38 | 200 OK | 7.0 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/intgrtn/api/v1/projects/details.php?&clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&language=en IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
Hash7969c1f0c7684e343c6aec1a8b99c401 95e2091a6ecaad9bf05854aa35adae71ee2b68fe 053f6fa0657ee58e836b3292c49cbcbd676b76bbc6f2a6e851fa68e9c6e0dadb
GET /intgrtn/api/v1/projects/details.php?&clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&language=en HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Intgrtn-Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:01 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: accept, origin, content-type, authorization, Cache-Control, X-Requested-With, Intgrtn-Referer
Access-Control-Allow-Methods: POST, GET, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
X-Server: microso
PX-X-Request-Id: 83e9b3ebab24f8074b4e8ef5b9fbb450
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/amazonspecial/img/Robistix-favicon.png | 185.142.238.38 | 200 OK | 4.1 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/amazonspecial/img/Robistix-favicon.png IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typePNG image data, 73 x 73, 8-bit/color RGBA, non-interlaced Hashdc2a76eb0f806acec3b0ca11bd6eeaa1 5b4f20249e52d9003323ddf5b4aa482ef6c22dc5 5b717b8cc77695398955e8fa1a2621985dd5931d0b24f89e7800a569199a1bf0
GET /amazonspecial/img/Robistix-favicon.png HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Cookie: intgrtn_language=en; intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq; intgrtn_redirectReturningLead=auto; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:01 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 12 Sep 2022 11:25:55 GMT
ETag: W/"631f1743-ffb"
X-Upstream: sharkolia-***ko
PX-Cache-Status: HIT
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: 206492088c053398202743f04ac2b698
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| fonts.googleapis.com/css2?family=Oswald:wght@400;500;600;700&display=swap | 142.250.74.106 | 200 OK | 46 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Oswald:wght@400;500;600;700&display=swap IP142.250.74.106:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hash53d49b2c99f8026b27b7620177f693d3 f612804c1701fdb6b61a9da919a475623413264b 53539cb099b3312b74cf2e3fd4a3d2ba2c25dab8d31a0a3e547a2941702a29af
GET /css2?family=Oswald:wght@400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 02:11:00 GMT
date: Fri, 26 Apr 2024 02:11:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| amazinglyfortunateoffers.com/intgrtn/api/v1/projects/agreements.php?type=4&clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&locale=en-US | 185.142.238.38 | 200 OK | 1.8 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/intgrtn/api/v1/projects/agreements.php?type=4&clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&locale=en-US IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
Hash22ad4d9bddb40ae3961b82ecbf8a0c62 9893290d9a69e6c612028168849e8b9f270e1bd2 dc74cbafd5095dc2cc40430190557fea90646ad364715fc31b0dbbf27d15d106
GET /intgrtn/api/v1/projects/agreements.php?type=4&clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&locale=en-US HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Intgrtn-Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:01 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: accept, origin, content-type, authorization, Cache-Control, X-Requested-With, Intgrtn-Referer
Access-Control-Allow-Methods: POST, GET, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
X-Server: microso
PX-X-Request-Id: 0fd7da8be0ed47a0252b317b4f738769
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/intgrtn/api/v1/projects/agreements.php?type=4&clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&locale=en-US | 185.142.238.38 | 200 OK | 1.8 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/intgrtn/api/v1/projects/agreements.php?type=4&clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&locale=en-US IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
Hashe966874dac58e3434b42f1d8bcd4cdbd 7f6049e98b2e2b91b0ef880fe20bcfd48e0fd575 0503446730450bd17e33068b052e34031fe97813f2bcd4a70638ec6f04abe83d
GET /intgrtn/api/v1/projects/agreements.php?type=4&clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&locale=en-US HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Intgrtn-Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:01 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: accept, origin, content-type, authorization, Cache-Control, X-Requested-With, Intgrtn-Referer
Access-Control-Allow-Methods: POST, GET, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
X-Server: microso
PX-X-Request-Id: 80352eb10834f0dca59e17fab578fc94
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
|
|
| amazinglyfortunateoffers.com/intgrtn/api/v1/events/add.php | 185.142.238.38 | 200 OK | 161 B |
URL POST HTTP/1.1amazinglyfortunateoffers.com/intgrtn/api/v1/events/add.php IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
Hash1393899b357e6cfdcc574a77463ad118 a6cf2e96773350c56077c4d30344c6cf182244a0 a241c043ce4b8c2707e300112c90baf2b47e5976853d98ac0230cc681ca7a7b6
POST /intgrtn/api/v1/events/add.php HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Intgrtn-Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Content-Length: 92
Origin: https://amazinglyfortunateoffers.com
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:01 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://amazinglyfortunateoffers.com
Access-Control-Allow-Headers: accept, origin, content-type, authorization, Cache-Control, X-Requested-With, Intgrtn-Referer
Access-Control-Allow-Methods: POST, GET, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
X-Server: microso
PX-X-Request-Id: 61056ce9d3f04e2f3955717ffdab1ed8
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097303 1714034803
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap | 142.250.74.106 | 200 OK | 9.3 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap IP142.250.74.106:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (9600), with no line terminators Hash14947237ea2dd749ae125083525bd957 c5538d47cbd2b0959fee2e6837a1fc2e33563fbc 3cda3e604a3f1c5d1b7e5dd035dfacb996f1fe40e90e0279e9ee77ea01d5f944
GET /css2?family=Roboto:wght@300;400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 02:11:00 GMT
date: Fri, 26 Apr 2024 02:11:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Montserrat:wght@300;400;600;700&display=swap | 142.250.74.106 | 200 OK | 7.3 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Montserrat:wght@300;400;600;700&display=swap IP142.250.74.106:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (7500), with no line terminators Hashe36e314efc8e1b30504b9b94cf0506fd 5a58171c942ab69d47023b5a2bfdbed2ded482e2 59643028eb4a88da388c5c92811427eaba8aec5a661e047da49d8be58133c75a
GET /css2?family=Montserrat:wght@300;400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 02:11:00 GMT
date: Fri, 26 Apr 2024 02:11:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Magra:wght@400;700&display=swap | 142.250.74.106 | 200 OK | 1.5 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Magra:wght@400;700&display=swap IP142.250.74.106:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (1580), with no line terminators Hashdf7d7f9fd3d822eb7f0add75baae7f69 7b596f9e862b1be4a91ec192b5c5aed55cfd0f27 cb2fb8ba985f4b1988506b6d8ee27a1825bd4ab8540f451c0c5a9874b15a6cf8
GET /css2?family=Magra:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 02:11:00 GMT
date: Fri, 26 Apr 2024 02:11:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP216.58.207.227:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amazinglyfortunateoffers.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:27:12 GMT
expires: Fri, 25 Apr 2025 17:27:12 GMT
cache-control: public, max-age=31536000
age: 31428
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=PT+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap | 142.250.74.106 | 200 OK | 5.6 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=PT+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap IP142.250.74.106:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (5730), with no line terminators Hash50394b1255bd633044f73c8b4cfe9118 607747f8b36e32147f606b887e4a9767f6b644e1 970492966183e51cc09d32ecef137a6eab62580641b325389df663916d606e58
GET /css2?family=PT+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 02:11:00 GMT
date: Fri, 26 Apr 2024 02:11:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Work+Sans:wght@400;600;700;800;900&display=swap | 142.250.74.106 | 200 OK | 5.6 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Work+Sans:wght@400;600;700;800;900&display=swap IP142.250.74.106:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (5745), with no line terminators Hash3a02096bc4652017ff2e2b8950df3609 bfb4a8cc2d91fc63d085e00e0d9f4f6b408fd344 e9c2cfa9cbdd577b705041980a4a472056ddb41d5bb323bc4f971a882ab5d42c
GET /css2?family=Work+Sans:wght@400;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 02:11:00 GMT
date: Fri, 26 Apr 2024 02:11:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CABeeZee%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=5.5.3 | 142.250.74.106 | 200 OK | 62 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CABeeZee%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=5.5.3 IP142.250.74.106:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hashd9d8e856164149cbd7a996dfe882631e 7067d2c7194cdc9530c95c66dbabf12f0d268111 ef7ced6cae87fb134411706b50c565fc12e3adc2a28d2b80cd6039df72385359
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CABeeZee%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=5.5.3 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 02:11:00 GMT
date: Fri, 26 Apr 2024 02:11:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| amazinglyfortunateoffers.com/intgrtn/api/v1/integration/assets/img/flags32.png | 185.142.238.38 | 200 OK | 45 kB |
URL GET HTTP/1.1amazinglyfortunateoffers.com/intgrtn/api/v1/integration/assets/img/flags32.png IP185.142.238.38:443
Requested byhttps://amazinglyfortunateoffers.com/amazonspecial/en/index.php?intgrtn_clickID=nPKRMXAg5D369xdW1b4lmNx9ZAGDBL0v2OpYezZ7ywkoVGrEq&country=NO&intgrtn_redirectReturningLead=auto CertificateIssuerLet's Encrypt Subjectamazinglyfortunateoffers.com Fingerprint0B:C7:86:3D:42:E3:34:7F:4E:04:4C:0F:23:4A:14:DB:57:BD:40:9B ValidityThu, 14 Mar 2024 13:20:15 GMT - Wed, 12 Jun 2024 13:20:14 GMT
File typePNG image data, 32 x 8352, 8-bit colormap, non-interlaced Hashd9783e9c947c7184442c2111424ec896 b6ba479c15af54364e09af6230239c9746a5deae 681c58beadf3030753d8d5bb7c85c5f631704a515a9da8fd7a3744be46e12419
GET /intgrtn/api/v1/integration/assets/img/flags32.png HTTP/1.1
Host: amazinglyfortunateoffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amazinglyfortunateoffers.com/intgrtn/api/v1/integration/sdk.css?v=2.67.1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 02:11:01 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 09 Nov 2023 15:10:02 GMT
Vary: Accept-Encoding
ETag: W/"654cf64a-afed"
Expires: Sat, 09 Nov 2024 12:26:26 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
X-Server: microso
PX-X-Request-Id: f68555a58a2380cc062d44d496ccbff6
PX-IPCountryISO: NO
PX-IPTimestamp: 1713876360 1714097163 1714034803
PX-Cache-Status: HIT
|
|