app1.mackeeperaff.com/land/229/?rtkcid=6366e0d5d160dd0001fdaab3&rtkcmpid=627d348f35981a0001d4db71&tid=Affiliate%20-%20Increased%20Hybrid%20(229)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
301 Moved Permanently 134 B URL HTTP/1.1 app1.mackeeperaff.com/land/229/?rtkcid=6366e0d5d160dd0001fdaab3&rtkcmpid=627d348f35981a0001d4db71&tid=Affiliate%20-%20Increased%20Hybrid%20(229)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
Analyzer Verdict Alert quad9 Sinkholed
GET /land/229/?rtkcid=6366e0d5d160dd0001fdaab3&rtkcmpid=627d348f35981a0001d4db71&tid=Affiliate%20-%20Increased%20Hybrid%20(229)%20-%20Shlomi&utm_source=&utm_medium=&pubid= HTTP/1.1
Host: app1.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Sat, 05 Nov 2022 22:17:07 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://app1.mackeeperaff.com:443/land/229/?rtkcid=6366e0d5d160dd0001fdaab3&rtkcmpid=627d348f35981a0001d4db71&tid=Affiliate%20-%20Increased%20Hybrid%20(229)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8286265a56e3e10efd41b41618a54071
5f10ac9a050e15f5598674dc7ee3865b325d01a8
2da2fa0b2b86ccc4029d0baa4e9c5b21a6433228b84b451b72b1d318561d4ef2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2DA2FA0B2B86CCC4029D0BAA4E9C5B21A6433228B84B451B72B1D318561D4EF2"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16288
Expires: Sun, 06 Nov 2022 02:48:35 GMT
Date: Sat, 05 Nov 2022 22:17:07 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 72c64df35304c35cd95e4ed6e101e795
a39287987854d644a8da295da536fb31de8b44c1
a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4413
Cache-Control: max-age=131250
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:07 GMT
Etag: "63662d58-1d7"
Expires: Mon, 07 Nov 2022 10:44:37 GMT
Last-Modified: Sat, 05 Nov 2022 09:31:04 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 72c64df35304c35cd95e4ed6e101e795
a39287987854d644a8da295da536fb31de8b44c1
a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1497
Cache-Control: max-age=128334
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:07 GMT
Etag: "63662d58-1d7"
Expires: Mon, 07 Nov 2022 09:56:01 GMT
Last-Modified: Sat, 05 Nov 2022 09:31:04 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 078950c3ba9ad01927f3da494b1d1de4
443c8a8247e4e3e04c14d21e0227fc4e8f396142
dd5dd09fec51669adf36b3014bbf65d7bff608f72018d037f9ed9b414675037c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DD5DD09FEC51669ADF36B3014BBF65D7BFF608F72018D037F9ED9B414675037C"
Last-Modified: Fri, 04 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16224
Expires: Sun, 06 Nov 2022 02:47:31 GMT
Date: Sat, 05 Nov 2022 22:17:07 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xr73SnowWyx1PU7s6yUZQc8lP5DffMuIIbe+HcYnabfRBVioSutYHCm8fFeujX68IOPbKmGehCg=
x-amz-request-id: QKGCHXNR7PK4K2RB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 05 Nov 2022 21:47:22 GMT
age: 1785
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 22:17:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6efce8e6b8684fbf87ced16647575300
53f3ba2fe01d55fe84fa8a69f114b113b0d21684
9e29e1556a16394d540494183be1b8dab688ed7eac62a6d68d6b1f7dff974fb7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=159557
Date: Sat, 05 Nov 2022 22:17:08 GMT
Etag: "6366ad29-1d7"
Expires: Mon, 07 Nov 2022 18:36:25 GMT
Last-Modified: Sat, 05 Nov 2022 18:36:25 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ATk7w42nHtu8sb6RkqeuE1TNBZ2eLlZkSM-JZcBPb0Cz5ZNDrQRzgg==
ocsp.digicert.com/
200 OK 471 B IP
Hash db63d54b77502dd6c7bdc792d4fd093e
026ad8186833988279468829c004c6e2a2f2626f
eff89ef67baa622e8a196ffcadc44d29aafff009bb531da3e979a1f47c3b1c36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3869
Cache-Control: max-age=125648
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:08 GMT
Etag: "63661997-1d7"
Expires: Mon, 07 Nov 2022 09:11:16 GMT
Last-Modified: Sat, 05 Nov 2022 08:06:47 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YbhwYlY154ssHRqw8hkn5g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mInM09REx4qfinQgm1vs6PgsHYI=
static-cdn.mackeeper.com/mk-land/dist/svg/components/btn-arrow.svg
200 OK 412 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/components/btn-arrow.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (412), with no line terminators
Hash 2bb20d31732674b19f39721677ee98b0
c009a4436fe0fd3e281dcd9f60ab0f2769f25cb5
b5553f16ea66eab43971c73b4115bbe291b2188dc00d0c5d4f5bb21958e3dda2
GET /mk-land/dist/svg/components/btn-arrow.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 412
date: Tue, 01 Nov 2022 14:21:34 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:38:48 GMT
etag: "2bb20d31732674b19f39721677ee98b0"
cache-control: public, max-age=604800
x-amz-version-id: nukWLapdOnZ6K4hroAQrBv4GKBUk7Zxa
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: i04hBIz4dSTdhRgMepi9xvOj0gzlI5CkByY5PErPgXILl3us2L-Hag==
age: 374136
X-Firefox-Spdy: h2
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
200 OK 6.1 kB URL HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sat, 05 Nov 2022 01:24:27 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DR9aSEgGAm1zuRg6LLHH1R7Unj_0eHBPkg8dr2hlfRDmcLnDQ4J6Rw==
age: 75162
X-Firefox-Spdy: h2
browser.sentry-cdn.com/5.5.0/bundle.min.js
200 OK 52 kB URL HTTP/2 browser.sentry-cdn.com/5.5.0/bundle.min.js
IP
File type ASCII text, with very long lines (51441)
Hash b1dcc6195d84cf50c3e882d3d515f848
06562c193663a31a3cabeaa18cffeb882084fcb6
8c04755395b8f232c57d062a7669c3c414658299d29c6b6f83f1f30185d94ecb
GET /5.5.0/bundle.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 11 Nov 2022 05:27:37 GMT
last-modified: Fri, 05 Jul 2019 11:17:04 GMT
etag: W/"39339cf627bc67e34d4c623bea4c0b4a"
content-type: application/javascript; charset=utf-8
x-guploader-response-body-transformations: gunzipped
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sat, 05 Nov 2022 22:17:09 GMT
age: 31078173
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 51570
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash be8886843db6cf18ee23d847a517187b
416d3fc431c2a20b0c03739828ddfecb7e6b3326
73c43d7487ff87b01c8c5480110544b4fb9753779c94547fe22b4faafdf86d64
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127626
Date: Sat, 05 Nov 2022 22:17:09 GMT
Etag: "63661843-1d7"
Expires: Mon, 07 Nov 2022 09:44:15 GMT
Last-Modified: Sat, 05 Nov 2022 08:01:07 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Hn_x27urRWwA2h3KD4WbeGhUYjxIHZLDPEIDVGf8w9Ees8b7ljZHMQ==
Age: 6188
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3ebbd65a2bdd5c6f3dea5a6b99b25f0d
484be27b25b736a7e7e2b1d5ef9760aecdcec01b
5616e6c097b0b7680eeee193b58950faa38c9792e8793c16c315e2554a34cdd1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3ebbd65a2bdd5c6f3dea5a6b99b25f0d
484be27b25b736a7e7e2b1d5ef9760aecdcec01b
5616e6c097b0b7680eeee193b58950faa38c9792e8793c16c315e2554a34cdd1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Roboto:400
200 OK 982 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400
IP
Hash 7caf8c0114338a0e419298be02f0cc5c
238da31c2ee3d35f8545805c011ac451feec5757
24850da5980df5e85b199cb40f07a7b2e563db7aaf89ec98406d87557b36cec4
GET /css?family=Roboto:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 05 Nov 2022 22:17:09 GMT
date: Sat, 05 Nov 2022 22:17:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13e65ad7f6f12300b12d6cd6936d621
575faf606b5c5e39e0fbbef59998bcd3625aa141
10787f99c02b63d52b9b74fcec9497108d67c56c4a9436e0e3c9a7129d727dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/main_bg.webp
200 OK 40 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/main_bg.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x640, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash deb02894bd16d04c1af4311c580606f6
43af2d51f6ab751eda6f8d08e71763dea463637d
72d84ece0758c7ab64080770d563d1ac4f4052a40e83ba435a57000ebe1b8a3e
GET /mk-land/dist/images/landings/229/main_bg.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 40410
date: Tue, 01 Nov 2022 14:25:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:18 GMT
etag: "deb02894bd16d04c1af4311c580606f6"
cache-control: public, max-age=604800
x-amz-version-id: fnChZAz19eI8LnAm6z0gS2PlhZhp5qxB
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nAP05lh7UHfsx-9ehSABcb6vqx8wjDlqDYP56c-oG9_Z8TRAFjqmNQ==
age: 373897
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Antivirus.webp
200 OK 10 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Antivirus.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7538120123ef2faf24b13bed7bed3cdd
624c7cffe87830654466f14c5256fa573cc2cb26
ad9e28f3ec63bf1b97ebb5ad3b86a4bf1f86f27ec19e0c039d028c5f87804dc0
GET /mk-land/dist/images/landings/229/Antivirus.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 10456
date: Thu, 03 Nov 2022 09:02:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:17 GMT
etag: "7538120123ef2faf24b13bed7bed3cdd"
cache-control: public, max-age=604800
x-amz-version-id: qRQsyeDvRCcnrBECMcynHJ2fIgEhWST7
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LmwZGmW1bo_e7pRt0N5-QzSb2ezN7gCPNDp9LX0xjjYdoY2ca63iHg==
age: 220477
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Adware_Cleaner.webp
200 OK 5.7 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Adware_Cleaner.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b694da35aaa0a288094d249ff4ae100b
ac157eb36b23c5f0e0befb6fd297a7ef9df26150
4c7df7067374fd122d7473a726df334a3e52ec3bcb0ab89d9e545cda42f9b2e1
GET /mk-land/dist/images/landings/229/Adware_Cleaner.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 5652
date: Tue, 01 Nov 2022 14:25:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:18 GMT
etag: "b694da35aaa0a288094d249ff4ae100b"
cache-control: public, max-age=604800
x-amz-version-id: 6RgDUQxawqI5P6Z.7.T51hQrk8yyy9fb
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KjdjCTzkGLRujhor6_3cAHZmIS92VUQMraOWMBQtALMLITRbVfHqiQ==
age: 373897
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Safe_Cleanup.webp
200 OK 9.5 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Safe_Cleanup.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash fd8048baa6f3ce2025943dc2c233f884
d381f6105d26a9cf8d8ed453f2ba26db2883e962
6d0c96508390e1c02c3253ac5ff6bc009f8fd690b2c43f174b93fc4642241144
GET /mk-land/dist/images/landings/229/Safe_Cleanup.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 9546
date: Tue, 01 Nov 2022 14:25:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:12 GMT
etag: "fd8048baa6f3ce2025943dc2c233f884"
cache-control: public, max-age=604800
x-amz-version-id: WHB.8.L.B5T33bZxkxk1eUwhMciPOO_C
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QmajVqgPlzvnRcfC5SXTen-qXNbQxKAqRqcgxm6MJzMd7Z653vOJ-w==
age: 373897
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/worldmap2.webp
200 OK 98 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/worldmap2.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0280cae7040ebf3c142e30e898b5391d
3b10d3bb666690be99a18e1a2b3b1269c4a86c1d
b9c996464eb51fbe15b3da67b686df81f2026c35c3425cbb3b3f2714b0673479
GET /mk-land/dist/images/landings/229/worldmap2.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 97924
date: Tue, 01 Nov 2022 14:25:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:09 GMT
etag: "0280cae7040ebf3c142e30e898b5391d"
cache-control: public, max-age=604800
x-amz-version-id: V10r3H1h9N2Sq8cQkAPTXX2c4XG94Rj6
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BMdk7D3Q31TAmK6wATns3FtwxNVO_yfP1V2HhiIdfKojkCRoGHK1aQ==
age: 373897
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/mac-filing_bg.webp
200 OK 54 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/mac-filing_bg.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash cc457d5d07415603af911bb948127175
532e38c4069c7e63c090fc2772c4bc135e56f047
e3981215ab6db767c6c4e67c4c0b600b453fca25d614f58f5d4929221f8451b7
GET /mk-land/dist/images/landings/229/mac-filing_bg.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 54280
date: Wed, 02 Nov 2022 02:49:24 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:22 GMT
etag: "cc457d5d07415603af911bb948127175"
cache-control: public, max-age=604800
x-amz-version-id: VJpe9WU9AV_Xydsw1cA8h1B6zCOzSI1l
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6zmWF583PNhGqBlgNALAMx2XqOLybwGqcJqibmfmfr_9LNUnma8mxw==
age: 329265
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Security.webp
200 OK 1.6 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Security.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d404fb8736d61918b8205f8f9c0e31b1
71c0db3e60c3140c3615e239ebc4e6ecde112267
89184489f80824ba1ab0b9a298252ceef26b98c6ff6ff7c868e85880c4abfd5d
GET /mk-land/dist/images/landings/229/Security.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1628
date: Tue, 01 Nov 2022 14:25:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:09 GMT
etag: "d404fb8736d61918b8205f8f9c0e31b1"
cache-control: public, max-age=604800
x-amz-version-id: 6Oh9JZrLJ_J5nL4yhJIMA7ihSFxhCxvq
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RMoQBYYU6caJ1elW395iR96tN6_kf-5mG89lCrIQDOkVzujVBkxsTg==
age: 373897
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/check_mark.webp
200 OK 204 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/check_mark.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0c454a063b74d241593c9a7b85fb40e0
27614e675f7752774bf5890231470fa84586d2df
a9a7289c14f651994e9f3a78b8d114e8d94ced8a81308cbfaa29459ff7059ab4
GET /mk-land/dist/images/landings/229/check_mark.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 204
date: Thu, 03 Nov 2022 07:54:57 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:11 GMT
etag: "0c454a063b74d241593c9a7b85fb40e0"
cache-control: public, max-age=604800
x-amz-version-id: Z2sHTvBirexNafiaPhVUQQjKvlRXFlZ9
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F3GOmuBJ_cFEv5-1de-H1WwJ8rLNgNc5rB4mr6SMtK_5X0ccWR5dRw==
age: 224532
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Cleaning.webp
200 OK 1.3 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Cleaning.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2c68008f591c3aef1f17d99754e5dbed
feec12e1ec80e7a1998a95298bb54f362e7b84fb
b031885b640ea8a8ed6d84ef11f89f1e9a335ac437b4764c603881d5cdf26f04
GET /mk-land/dist/images/landings/229/Cleaning.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1290
date: Tue, 01 Nov 2022 14:25:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:20 GMT
etag: "2c68008f591c3aef1f17d99754e5dbed"
cache-control: public, max-age=604800
x-amz-version-id: FCzpMD_2KuIcjE2XkpIlE2HDj4sNg0oA
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E9mJjVeQq02Ymktq0E77-n3TRKu_SIQs4mVEDrrzbVVYv5r5YXd2-Q==
age: 373897
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Privacy.webp
200 OK 1.8 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Privacy.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a11229813d5c09fb40f964fbf885051e
78cb9268ff35a740d43beaafd08c4d607d95918d
07dac36cb20133bf0e991ea4a837207d105f9a76695432263ecd58f6425f2cb2
GET /mk-land/dist/images/landings/229/Privacy.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1780
date: Tue, 01 Nov 2022 14:25:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:13 GMT
etag: "a11229813d5c09fb40f964fbf885051e"
cache-control: public, max-age=604800
x-amz-version-id: Hel7r1AdUG8GWj43_P4TvYgFEHmA4AwM
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zS6spN3HkxcOv9lmEucUx17qlsMOEkK7z4xTiCnB2V8RWXbptutcjw==
age: 373897
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Optimization.webp
200 OK 1.8 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Optimization.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash ece72a2697c3936fcc221a56fa2387ad
87ea1eab45be1ac57788ed756d47be933ec3cfdb
2306ace69404928854c89a5a03bae8aee67a0f579082adbd4f5444e62a919280
GET /mk-land/dist/images/landings/229/Optimization.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1766
date: Tue, 01 Nov 2022 14:25:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:21 GMT
etag: "ece72a2697c3936fcc221a56fa2387ad"
cache-control: public, max-age=604800
x-amz-version-id: mywQFAEP4t6bzE8tEh4vEbbFQjEofsb5
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JDUFw9kkhQ96x-i2ULU7BVwE0pfwFpejA_LgM9USQroKiuDIf38FaA==
age: 373897
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/appesteem.webp
200 OK 2.6 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/appesteem.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c1b3eb2ec3781136a6d18df2a38548ed
93de2c8bcc6cd237563f3e6ab39e3153a2b45e2e
b15f4d9ff61ec1a1a51cce21c2ce60c381a46f96847e8053447fa742ae2b1b61
GET /mk-land/dist/images/landings/229/appesteem.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 2626
date: Tue, 01 Nov 2022 14:25:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:08 GMT
etag: "c1b3eb2ec3781136a6d18df2a38548ed"
cache-control: public, max-age=604800
x-amz-version-id: kkINjuUFRgUz5_5OIq5jLcKaSh9yRG2L
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6Pwm6Aq7qQD7OMYZO0COwGo2k7noMr9z77nmguS_xURY9S7Z4G5dmg==
age: 373897
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/shopper.webp
200 OK 2.8 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/shopper.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 84bf046222ac26db511ffa6eb461b1bd
f8e88eda0e81c431dc33ad36e4106426dd0651a3
20b8e375af4e0abe271de9997903bd612d1c24e9d4d71db7eef229fc59404b67
GET /mk-land/dist/images/landings/229/shopper.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 2790
date: Tue, 01 Nov 2022 14:25:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:19 GMT
etag: "84bf046222ac26db511ffa6eb461b1bd"
cache-control: public, max-age=604800
x-amz-version-id: G4_AxWczEy0GtN.Npa56cBo6orqXhRiL
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: asueFovhkJx4Oi02h8z9LMy1tEwjwQb74ncV9oOL9Iy7cYf7NCiEgA==
age: 373897
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/downloads.webp
200 OK 1.8 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/downloads.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash acaf10ae4dadd8494408a312b754232d
089104a9ad380312932058cab43f3dbebe056cfd
5845704e6a3208e3cda9341d0c24c724d92aa20d907fa9548ca5ba0930a4b131
GET /mk-land/dist/images/landings/229/downloads.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1766
date: Tue, 01 Nov 2022 14:25:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:23 GMT
etag: "acaf10ae4dadd8494408a312b754232d"
cache-control: public, max-age=604800
x-amz-version-id: RE5tnqBV58EkWTMDJXZ6S2WxIxykk_WL
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: isjd-bHbC1AGvWs_bqL4iqAd5faJ9bUXlaJLRpyOqDy9t95CTnCJrw==
age: 373897
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/mac.webp
200 OK 19 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/mac.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7bb7058bbcf4a8a16fc2a115390a6483
e107ffba5a92d48d5296ce9f570553b3f85eb69c
79e7137759d08fe3c84d0d15949839f25736d95ceb49e0bca4097f827cf9a691
GET /mk-land/dist/images/landings/229/mac.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 19422
date: Tue, 01 Nov 2022 14:25:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:20 GMT
etag: "7bb7058bbcf4a8a16fc2a115390a6483"
cache-control: public, max-age=604800
x-amz-version-id: GAmRzovzuKJL5nFSKfJboGrpMH7xVyB7
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f0yyseOZO5VstShAFohVp31bbpWD3ngfZarTklNnrA81xRVBBP1-bw==
age: 373897
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
200 OK 106 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
IP
Size 106 kB (106239 bytes)
Hash 14f3f1509f9d0cae0dd0bb3c2e239da6
91c70bbae2f40cf99882f70c5c1e73db3295533b
dddfcd0036a5b19531dbdd2efaedd48d364f631de883df90fc5c157760416943
GET /mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Tue, 01 Nov 2022 14:25:32 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Aug 2022 13:13:38 GMT
etag: W/"86717521366a64cd780d0b5c983fabfb"
cache-control: public, max-age=604800
x-amz-version-id: DMAqzu4VJY205UtM3714.rS1VUEIC5_i
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VWeh2MwFNW5TLEiqw7TasT6SxPDD3eWLeeQNz5x1QLYWyynXGNjLlQ==
age: 373898
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
200 OK 1.9 kB URL HTTP/2 widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4945)
Hash 1b1a56d9c9fcf8acab07f238231461df
72d6d8ecdb249b20852dc54d67530d0280515bc1
73b167681ae290cac469afde469076a7f222d5c5d2746122b2eaf5d7b4699e91
GET /trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1930
last-modified: Tue, 04 Oct 2022 10:33:40 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sat, 05 Nov 2022 08:02:36 GMT
cache-control: max-age=86400
etag: "1b1a56d9c9fcf8acab07f238231461df"
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iSRJI_qO8ab9-lMGvqRxd4sqMvmnqj6qJuWpjE3aXM08gPssRIupBw==
age: 51274
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
200 OK 3.7 kB URL HTTP/2 widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (15336)
Hash 83355578cdf883e1c6aef6f07b55893f
9d029e5c705fcdf74bb145b41dcf6179adff85e2
a4a8345f2801ecb4907f357a51b22176f217c7f445fbb3bccfe645c536d39842
GET /trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 3697
date: Sat, 05 Nov 2022 01:08:51 GMT
last-modified: Tue, 04 Oct 2022 10:34:05 GMT
etag: "83355578cdf883e1c6aef6f07b55893f"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _2TXqBVznOrzp5zMp9SmXv4Mb-eCOJ5UhyfagG36uWwfwR2arH9Nig==
age: 76099
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Medium.otf
200 OK 53 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Medium.otf
IP
Hash 3b0a8030872b77865bf0193f55d846a5
2eda5b92f23078c15562d09c7d3f0bfd62f6e651
3ac0f5a902422fb3235ce16d0a9948937607358c803de25105fedfab297ff439
GET /mk-land/dist/fonts/MarkOT-Medium.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Tue, 01 Nov 2022 14:22:37 GMT
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
etag: W/"44a8a536b53be74bb2ebfc4fa3403364"
cache-control: public, max-age=604800
x-amz-version-id: adnRDSe0awZldw3c8I6M4tTQa_wDyvz_
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EOCXFPXLCtr-XSB-PjCeRl-c_pnRiFJTZ-6kmQ6dgzacrulHReaVdg==
age: 374073
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js
200 OK 16 kB URL HTTP/2 widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (50697)
Hash 7634c5de39bff7b73e2df27262caface
73bb5656a5b7eee0c6db68d3f708046f390ccb53
bc5f8d22d9a155ee87fe85ef326a9cc5c059a69aa5a6f7389882a88c057acc09
GET /trustboxes/53aa8807dec7e10d38f59f32/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 15505
last-modified: Tue, 04 Oct 2022 10:33:42 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sat, 05 Nov 2022 00:51:31 GMT
cache-control: max-age=86400
etag: "7634c5de39bff7b73e2df27262caface"
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7YrQvxWfmerUBICBVYKIywSQYHWts22B20rw110DdFfSfFXfyo1DoA==
age: 77139
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/main.js
200 OK 30 kB URL HTTP/2 widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/main.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (64281), with no line terminators
Hash bc5c8622de6c884abb3d021c6468b0dc
dcbd21e6c0dc4311f9446a79a36de21f39e7bf1d
08645a2fa7db0564521436d10d659a1a4b2f43ca2db3e9b923d119c38e4ee208
GET /trustboxes/539ad60defb9600b94d7df2c/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 29606
date: Sat, 05 Nov 2022 03:37:12 GMT
last-modified: Tue, 04 Oct 2022 10:34:08 GMT
etag: "bc5c8622de6c884abb3d021c6468b0dc"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GUMYcOGDqNI_NDy9T9SI6ZL9qu9MCAO2wEFtLdLDA-FjW0eOfIFUAA==
age: 67198
X-Firefox-Spdy: h2
widget.trustpilot.com/trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=4dbb14ee00006400050fa293&locale=en-US
200 OK 389 B URL HTTP/2 widget.trustpilot.com/trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=4dbb14ee00006400050fa293&locale=en-US
IP
File type JSON data\012- , ASCII text, with very long lines (881), with no line terminators
Hash 7fb682bed00bd0c432cbc0a40c0b09c4
c2ae2e1472156e455802837d3b2e4f4aee00da5f
c5b730ebe541e1f0ebc5bdf0cff126cd80a48627bed0f52189a9f079551d1e9b
GET /trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=4dbb14ee00006400050fa293&locale=en-US HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 389
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
cache-control: public,max-age=1800
date: Sat, 05 Nov 2022 21:47:56 GMT
etag: "4da7a0bbbec5d0fb33ca22ea1dcde930"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bVsSrOj65S5HbfDOl6xdxeuloggL2WzBhd2GCQC8yuLAXGIxtvyDoQ==
age: 1753
X-Firefox-Spdy: h2
widget.trustpilot.com/trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20
200 OK 3.0 kB URL HTTP/2 widget.trustpilot.com/trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (7745), with no line terminators
Hash a53251158ad81d3fdc7ea1fdcbaa5b63
6e8728a1d21195a93468b31df187641100ca6f51
0b2ba8ff70a32c90382a6d56ac4c2ebfc541313b2e7467da72edd0d418ecbb8b
GET /trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 3046
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
date: Sat, 05 Nov 2022 22:17:09 GMT
cache-control: public,max-age=1800
etag: "47f4297e786d34500270d9e5015bd210"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lekhPV8xAX4ccLWUjN0O5TGoXL1Iq8s3FzKhbbREKMsLrv3Tu5jkWg==
age: 44
X-Firefox-Spdy: h2
widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=150px&styleWidth=12%25&theme=dark&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32
204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=150px&styleWidth=12%25&theme=dark&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxImpression?locale=en-US&styleHeight=150px&styleWidth=12%25&theme=dark&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Sat, 05 Nov 2022 22:17:09 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mXQaekcUeKIBI-Q9PZvu2Ko7Yz-4qgEu9bdbbUm35X-nI4jh6uesCA==
X-Firefox-Spdy: h2
widget.trustpilot.com/stats/TrustboxView?locale=en-US&styleHeight=150px&styleWidth=12%25&theme=dark&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32
204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxView?locale=en-US&styleHeight=150px&styleWidth=12%25&theme=dark&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxView?locale=en-US&styleHeight=150px&styleWidth=12%25&theme=dark&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Sat, 05 Nov 2022 22:17:09 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qy3pO6iHhPbL2xxFaGskyQJHyQ95crqY_zYF65jiwBLp_bvJZzx_0A==
X-Firefox-Spdy: h2
widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c
204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Sat, 05 Nov 2022 22:17:09 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vn0LoJQVA4aLNtGlci2AJ4TDN_FdQWOKKDYP9UCdHFhkbDAU_sEBdQ==
X-Firefox-Spdy: h2
sc.lfeeder.com/lftracker_v1_ywVkO4XWPeW7Z6Bj.js
200 OK 12 kB URL HTTP/2 sc.lfeeder.com/lftracker_v1_ywVkO4XWPeW7Z6Bj.js
IP
Hash 0a0c7fae4cf06027347643948db042c0
aa67c3a4384c2ec6f0503e820730610697ff6079
490d464c89dbfcca5287dd795bb4302a83abc745bfcf57afebc120a949ac621e
GET /lftracker_v1_ywVkO4XWPeW7Z6Bj.js HTTP/1.1
Host: sc.lfeeder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 03 Nov 2022 07:16:25 GMT
x-amz-version-id: 7wgZO7a73uNKrQ7g_NRACy8eiouAIcxB
server: AmazonS3
content-encoding: gzip
date: Sat, 05 Nov 2022 21:47:31 GMT
cache-control: max-age=3600
etag: W/"4daad971335a29095ebc3022654fee6e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FeBjRVsaV9F5C9alHBdeQTJc626EZ9v7JSAsrKfVwtwz2cA2X6cYkw==
age: 3351
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17065
Expires: Sun, 06 Nov 2022 03:01:35 GMT
Date: Sat, 05 Nov 2022 22:17:10 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 01ec1f8fd16a86788c724176bda82021
71a2d66e924dbb8cd897a144fa4f5bae41585298
625b54ead8c1f4c9b18f008c3db3741151ed64345318993f98d36fbee803d3ce
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=95875
Date: Sat, 05 Nov 2022 22:17:09 GMT
Etag: "6365b468-1d7"
Expires: Mon, 07 Nov 2022 00:55:06 GMT
Last-Modified: Sat, 05 Nov 2022 00:55:04 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Djcu9PoBaSjkJSOb_bHD0JCQBape9HsyqKg9BohFuFdObk8H8vk1yw==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17065
Expires: Sun, 06 Nov 2022 03:01:35 GMT
Date: Sat, 05 Nov 2022 22:17:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3420191-fa21-4db2-9043-c0adac7b0820.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3420191-fa21-4db2-9043-c0adac7b0820.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39ac4f41f6bbdba85b2afeb7b011db5f
8e7a2be19b5c7682e86aec81907f6026d14d7313
fbd813af4eb335e1aefa6fb78b672bf89f8606ef688c98d3bd38ffdb77abfba3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3420191-fa21-4db2-9043-c0adac7b0820.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8160
x-amzn-requestid: 31cf0571-0ef2-4c99-a6be-afd806b7f449
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJaroFHhoAMF26g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7e3-269b7bcc1bcb8bdc4aa51dc9;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:43 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: K34CTk465OjihLQjLdqM1DqCxBF3lOA1D0DUaHWBj38krob66WwMzA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:20 GMT
age: 1970
etag: "8e7a2be19b5c7682e86aec81907f6026d14d7313"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F739b1fef-6431-4b6d-bb9d-a3f01980224f.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F739b1fef-6431-4b6d-bb9d-a3f01980224f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 83c047f46d089a4bf3f8fc3268bd8d02
0c7e46d28854bc512252ada34ed2e347a18e5479
87578f25647d4b785b935806658aaafbc0df4b11d8720924326c2734581a40c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F739b1fef-6431-4b6d-bb9d-a3f01980224f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6907
x-amzn-requestid: d9cc225c-f74e-431a-aad8-082b8ed86d46
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabjFazIAMFYUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77c-1dd9396566c54c9e19e777e6;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lG55AkOPLHq9S9MZyRA2V4DlgTNYl9OzJdfLdWVw9Uu2VZ4OzJLaSg==
via: 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:20 GMT
age: 1970
etag: "0c7e46d28854bc512252ada34ed2e347a18e5479"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e2df91e-2f0b-4002-ac48-4266b47a731e.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e2df91e-2f0b-4002-ac48-4266b47a731e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a8423ab18c5c01b37008421d5f759d13
b285226d6b0bbd979fa2a9775be7cbb07c008aac
55a8c2181fe43644c158a466596218735693a89170454fc7e918a13fb93816db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e2df91e-2f0b-4002-ac48-4266b47a731e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5924
x-amzn-requestid: 0d34d489-9d9e-4fcb-835b-6ea0292ec429
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabZFOPoAMFdvw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77b-16a732a9498bfe3078ccf001;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: d4_ZqFNs0orcXlsijqAHrm00n8vIL_yzmLqfL0VlZHdEJLQDj-Pi2g==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:20 GMT
age: 1970
etag: "b285226d6b0bbd979fa2a9775be7cbb07c008aac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabe183b3-9afb-4ba7-a622-b217c22a39e9.webp
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabe183b3-9afb-4ba7-a622-b217c22a39e9.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a155f83a49996f5c121b1f8cd7f72d4b
a9d2555cce6409e90acaa17cc044bfe89da921da
0e9418897e4f36435abf71df44558ae29cf7995d0aed2d80626000ceb997fcbd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabe183b3-9afb-4ba7-a622-b217c22a39e9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9807
x-amzn-requestid: 3b69bade-c97d-4317-83a2-d350ccdd5cf6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabgE47oAMFS6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77c-398c74cf587625ff0ed0616e;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 1FrXQ9djFZPkLU4ZzM5ACOiOhHSI0eB-5VudHaf8AaclWwVnFh6hZw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:20 GMT
age: 1970
etag: "a9d2555cce6409e90acaa17cc044bfe89da921da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcc79e66d1e21452efb26d26650f6739
1f727a7ea032082658944cf4041686446fb6b5f2
af1fe8de442a365a108d5c03f0d3ae8b0beb1abb4f267a46979f9c885ee026c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8961
x-amzn-requestid: 3a50374d-d90e-452e-bb89-82ca14c94b52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJarpGtqIAMFkPg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7e3-55c356475fb64e6625a338c7;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OR8zISm84Iz0FL3Km-aQOHSnjROX2-S_lKloAhMAThT17igEWRbxkA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:20 GMT
age: 1970
etag: "1f727a7ea032082658944cf4041686446fb6b5f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: z6Lnru_eeTvRGdsz-q37-HGFgFfIT6fLSFcJBvT3oPjAPilszTWkDw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 09:11:34 GMT
age: 47136
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
tr-rc.lfeeder.com/?sid=ywVkO4XWPeW7Z6Bj&data=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
200 OK 43 B URL HTTP/2 tr-rc.lfeeder.com/?sid=ywVkO4XWPeW7Z6Bj&data=eyJnYVRyYWNraW5nSWRzIjpbXSwiZ2FNZWFzdXJlbWVudElkcyI6WyJHLUdZVFhEODlOMVciXSwiZ2FDbGllbnRJZHMiOlsiMTUyOTEwNjM0OS4xNjY3Njg2NjI4Il0sImNvbnRleHQiOnsibGlicmFyeSI6eyJuYW1lIjoibGZ0cmFja2VyIiwidmVyc2lvbiI6IjIuNTcuMCJ9LCJwYWdlVXJsIjoiaHR0cHM6Ly9hcHAxLm1hY2tlZXBlcmFmZi5jb20vbGFuZC8yMjkvP3J0a2NpZD02MzY2ZTBkNWQxNjBkZDAwMDFmZGFhYjMmcnRrY21waWQ9NjI3ZDM0OGYzNTk4MWEwMDAxZDRkYjcxJnRpZD1BZmZpbGlhdGUlMjAtJTIwSW5jcmVhc2VkJTIwSHlicmlkJTIwKDIyOSklMjAtJTIwU2hsb21pJnV0bV9zb3VyY2U9JnV0bV9tZWRpdW09JnB1YmlkPSIsInBhZ2VUaXRsZSI6Ik11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmUiLCJyZWZlcnJlciI6IiJ9LCJldmVudCI6InRyYWNraW5nLWV2ZW50IiwiY2xpZW50RXZlbnRJZCI6ImMwMWY3MTYwYjUzNjgwNTciLCJzY3JpcHRJZCI6Inl3VmtPNFhXUGVXN1o2QmoiLCJjb29raWVzRW5hYmxlZCI6dHJ1ZSwiY29uc2VudExldmVsIjoibm9uZSIsImFub255bWl6ZUlwIjpmYWxzZSwibGZDbGllbnRJZCI6IkxGMS4xLjZlMGIwNTJlZTM1OTVjODcuMTY2NzY4NjYyODUzNiIsImZvcmVpZ25Db29raWVzIjpbXSwicHJvcGVydGllcyI6e30sImF1dG9UcmFja2luZ0VuYWJsZWQiOnRydWUsImF1dG9UcmFja2luZ01vZGUiOiJvbl9zY3JpcHRfbG9hZCJ9
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /?sid=ywVkO4XWPeW7Z6Bj&data=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 HTTP/1.1
Host: tr-rc.lfeeder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
server: CloudFront
date: Sat, 05 Nov 2022 22:17:10 GMT
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9zGXyGThfMB7_JAH4y1tnc58TLnFonJN_5sFJXH7EyYona7Z8nID6Q==
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/favicon_ua.png
200 OK 407 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/favicon_ua.png
IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 471c1c90d41a571f14162d7a8a9c8b9c
b08dfa2783c706945451a8f4890bdb9243936e78
eb625a455a490292aa2a7101dd7b3235bc4c92df0f08349c6663df51b7b66c27
GET /mk-land/dist/images/favicon_ua.png HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 407
date: Tue, 01 Nov 2022 14:21:40 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 04 Apr 2022 09:52:27 GMT
etag: "471c1c90d41a571f14162d7a8a9c8b9c"
cache-control: public, max-age=604800
x-amz-version-id: fOjB1uVWJszrafJRMb0A4UZGtOA62i.I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YxjA-6D6zTEBZ-w-vDVUrw1DQ1no74Kd0jBF6NaX7RnHHpPdYZpwOg==
age: 374130
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 3.5 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (8656), with no line terminators
Hash 6cff2cb49ee772adf066904fd18efd9a
8b876016198b0fc9862d2b6e29a80251c5422e72
85d26923c638ce50f36f7b69f9f50d2a6d6863abed574af143e24a14a343f9d2
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "0d5508c59e34b5d35cde5aea2aa1c2fd:1665301953.026714"
Last-Modified: Sun, 09 Oct 2022 07:50:08 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Sat, 05 Nov 2022 22:37:10 GMT
Date: Sat, 05 Nov 2022 22:17:10 GMT
Content-Length: 3471
Connection: keep-alive
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 471 B URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (996)
Hash e1ec75f64605dcf47d74531bbbd3c525
f5847f130a0353d5de55e058d23c83b7b4d145a9
697f3411ba82530b539f0f22be6bedbd4de261727e3632f259884c4487848124
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 01 Nov 2022 19:12:50 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=41335
date: Sat, 05 Nov 2022 22:17:10 GMT
content-length: 471
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 243a69bd8d356d81bde8ec490bd98764
c0f3e3f5ffa8290320453045e02920ce858ae790
ffea261e024417e07d6483681f3badd05377c2ce0fcd1bd58c8abaf22c681b10
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4071
Cache-Control: max-age=108919
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:10 GMT
Etag: "6365d776-1d7"
Expires: Mon, 07 Nov 2022 04:32:29 GMT
Last-Modified: Sat, 05 Nov 2022 03:24:38 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/gtm/optimize.js?id=OPT-TVNW4WH
200 OK 44 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=OPT-TVNW4WH
IP
File type ASCII text, with very long lines (1921)
Hash 9856891db33b6727e37de11a8f5c7feb
3ff61a89afbc5ef3fdbd6484f883536008986c35
64e855c8bcd7ecf172ee7e8baa1bd173afc24fd9138fea9ce4adb3973d10f6ba
GET /gtm/optimize.js?id=OPT-TVNW4WH HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 05 Nov 2022 22:17:10 GMT
expires: Sat, 05 Nov 2022 22:17:10 GMT
cache-control: private, max-age=900
last-modified: Sat, 05 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43892
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3832eb0418d94ec98c40df1bcf3ce5b
74dd7fa6ff4f9da9324c0772d075da5f42ab5879
cc42acc8dffa6c7f0c4c3a16ffe8c88919daf4859b7524a7a0ffc6e4b169c50d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f522cfb1dc454906f23b71b17ca1afce
65200811b6dead00db7008996571497260968d81
461906f6bfa7f492a4e61faa6d0ba37e7d343a4ef2a1b824ceb35acc89357cf2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Light.otf
200 OK 55 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Light.otf
IP
Hash 1d6a4b9d6b6cac278c6a98bdf26c69bc
f3ee6caea5e37eee43decd6b0a26e940557f391b
412fe3c019b1438a87527dfbad3b63441ccb4943bd84aa0cff90cdf4e4835f72
GET /mk-land/dist/fonts/MarkOT-Light.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Tue, 01 Nov 2022 14:22:37 GMT
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"48dd0f49a4207634e9062def9074a038"
cache-control: public, max-age=604800
x-amz-version-id: 0k6awkdioEQDqMMUsMLLZL0d1S0LNdte
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cs44aS3yKX-30e4gccQfAX8l2u2-YxPMjVpQgPWREWrQ83m0W2F8zQ==
age: 374073
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1529106349.1667686628>m=2oeb20&aip=1&z=539633225
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1529106349.1667686628>m=2oeb20&aip=1&z=539633225
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1529106349.1667686628>m=2oeb20&aip=1&z=539633225 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 05 Nov 2022 22:17:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash babb0d09b27851a7c080c2843211eb91
cf41327a7f5a83c8343e85741bc34cb53050449a
adc4ea8ee48fd9337d951234bd345899ddb116cad409265ee2cf01733ac82e84
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11376
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=0822158926A768F926A107DA275269FA; domain=.bing.com; expires=Thu, 30-Nov-2023 22:17:10 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6AAFCF3BC93B4F76BF6282D24D03F407 Ref B: OSL30EDGE0514 Ref C: 2022-11-05T22:17:10Z
date: Sat, 05 Nov 2022 22:17:10 GMT
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/957119846/?random=1667686628202&cv=11&fst=1667686628202&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=1888586837.1667686628&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/957119846/?random=1667686628202&cv=11&fst=1667686628202&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=1888586837.1667686628&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2293), with no line terminators
Hash 853f6ff5e202cad37692cb77177c29db
05836c85230d0d0ed1534f01f3df2812b3237c63
ad5ef8c268de18f482b2f28caa2e7d0077040d8983d5981257ad2bc116c31f66
GET /pagead/viewthroughconversion/957119846/?random=1667686628202&cv=11&fst=1667686628202&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=1888586837.1667686628&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 05 Nov 2022 22:17:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1018
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 05-Nov-2022 22:32:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6b72bfaacba486284aa2ecb4bcd8ebba
89fa4ef09e60380fc432c73b7919a29f26117088
fed14b27362ffe0dfbe0b1696e8dab5f6bba3e08b76bec620e75f0f3f213f69b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3832eb0418d94ec98c40df1bcf3ce5b
74dd7fa6ff4f9da9324c0772d075da5f42ab5879
cc42acc8dffa6c7f0c4c3a16ffe8c88919daf4859b7524a7a0ffc6e4b169c50d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zchat.account.mackeeper.com/js/zchat.js
200 OK 252 kB URL HTTP/2 zchat.account.mackeeper.com/js/zchat.js
IP
Size 252 kB (252056 bytes)
Hash 5decb119bae2e4b1bc9db88f6424a53f
a3d4d31afcd650cdd6514102c69e82825c1f0eb3
ea379b84a7353d648e850a837d5cb7ecfc391af0b7a69d807da2656342421423
GET /js/zchat.js HTTP/1.1
Host: zchat.account.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 21 Jul 2022 09:41:16 GMT
last-modified: Thu, 21 Jul 2022 09:33:57 GMT
etag: W/"38c06b90253f915d7e6b17ee2a85c17c"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EOsMIyYpbswN-zBideuI1p_M1561N-KcQGh4ecaWYqoliiPon1Pe7w==
age: 9290155
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.beta.min.js
200 OK 4.6 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.beta.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13063)
Hash 7110a57d8502f722577d28bd98e78486
2a050e0e41b02d8e5f2aaca95b19df69f01b4c9a
c454afc1d7661d7af393b5d5c0574c901e0e6ceee10c77c1dc0a83bd86c72671
GET /li.lms-analytics/insight.beta.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 03 Nov 2022 02:12:26 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=74661
date: Sat, 05 Nov 2022 22:17:10 GMT
content-length: 4611
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 243a69bd8d356d81bde8ec490bd98764
c0f3e3f5ffa8290320453045e02920ce858ae790
ffea261e024417e07d6483681f3badd05377c2ce0fcd1bd58c8abaf22c681b10
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5724
Cache-Control: max-age=110572
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:10 GMT
Etag: "6365d776-1d7"
Expires: Mon, 07 Nov 2022 05:00:02 GMT
Last-Modified: Sat, 05 Nov 2022 03:24:38 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1667686628200&cv=11&fst=1667686628200&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=1888586837.1667686628&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1667686628200&cv=11&fst=1667686628200&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=1888586837.1667686628&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2295), with no line terminators
Hash 4a8e9e89854a2404187ab3c050be944c
21ef2094a022807e3184715dee73b05fcc6acc86
766561e72f5cf0ded9b9a2fd76c2fcf05d94f78862879fee6dfd27c550d85cd6
GET /pagead/viewthroughconversion/1010020041/?random=1667686628200&cv=11&fst=1667686628200&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=1888586837.1667686628&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 05 Nov 2022 22:17:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1017
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 05-Nov-2022 22:32:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
script.hotjar.com/modules.f1e65ef904544a33c6d0.js
200 OK 68 kB URL HTTP/2 script.hotjar.com/modules.f1e65ef904544a33c6d0.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 0f58b5937c38edb646c879633af2ba34
253ed6753506bdbd2bc9dd85eaa0c724d8592bf6
c5bc2879b3d04080631054a073fc6b4b58f46f3a9732cbcb212cf73e349c1d81
GET /modules.f1e65ef904544a33c6d0.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68402
date: Fri, 04 Nov 2022 12:22:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "0f58b5937c38edb646c879633af2ba34"
last-modified: Fri, 04 Nov 2022 12:21:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lPPvhGB1qXUva1tVXur1AuBQRckGhwDpHgH-Tp2cSl3JpdZqt0b_Iw==
age: 122104
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1667686628205&cv=11&fst=1667686628205&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&value=0&bttype=purchase&auid=1888586837.1667686628&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1667686628205&cv=11&fst=1667686628205&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&value=0&bttype=purchase&auid=1888586837.1667686628&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1010020041/?random=1667686628205&cv=11&fst=1667686628205&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&value=0&bttype=purchase&auid=1888586837.1667686628&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 05 Nov 2022 22:17:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 05-Nov-2022 22:32:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/1010020041/?random=1667686628205&cv=11&fst=1667686628205&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&value=0&bttype=purchase&auid=1888586837.1667686628&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/1010020041/?random=1667686628205&cv=11&fst=1667686628205&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&value=0&bttype=purchase&auid=1888586837.1667686628&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1010020041/?random=1667686628205&cv=11&fst=1667686628205&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&value=0&bttype=purchase&auid=1888586837.1667686628&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 05 Nov 2022 22:17:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1010020041/?random=1667686628205&cv=11&fst=1667686628205&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&value=0&bttype=purchase&auid=1888586837.1667686628&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3832eb0418d94ec98c40df1bcf3ce5b
74dd7fa6ff4f9da9324c0772d075da5f42ab5879
cc42acc8dffa6c7f0c4c3a16ffe8c88919daf4859b7524a7a0ffc6e4b169c50d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.taboola.com/libtrc/unip/1212352/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1212352/tfa.js
IP
File type ASCII text, with very long lines (58481)
Hash c645ac44abefb0edca77c19717c459a7
f05416ba3ac09fa65023295f15af024dc43deec4
d6ae12162f0f0ba970c157322a5bfedb654a898f7cc600b3fa1b96243146606f
GET /libtrc/unip/1212352/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: w/H4iQGFnTxsl6EU6Wm/nF9Q2zyHeN5hALXKeqeCJ3GZfISh2IjKrwpHk8w+cBKWXPEsya11wN8=
x-amz-request-id: 0YS62BATJ6H7W6M3
x-amz-replication-status: COMPLETED
last-modified: Sun, 30 Oct 2022 11:30:51 GMT
etag: "086e2f6123fdeb72f131ebe2919e1e07"
x-amz-version-id: eSN5T8wZg_6Rq6uiGYPrOnxURu5xhFod
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 22:17:10 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1667686631.577938,VS0,VE101
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 12
content-length: 17944
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d2b4c49a0fb79e3d3bc40d2a28b27120
3f53633851cf851451354ccfd2931f2ec7a9e40f
a8a4ca2c09bae5cc3375077e531b357e2c1724693433a085ad038e3e6adfd96b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.linkedin.oribi.io/partner/3865705/domain/app1.mackeeperaff.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/3865705/domain/app1.mackeeperaff.com/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/3865705/domain/app1.mackeeperaff.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://app1.mackeeperaff.com/
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Sat, 05 Nov 2022 14:30:15 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3QV0fqHPO7htXTBjtmRuB_mTFVVwIBXPJE3ZFc-LPZQFHoS2ITIKzw==
age: 28015
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-GYTXD89N1W>m=2oeb20&_p=278776890&_gaz=1&cid=1529106349.1667686628&ul=en-us&sr=1280x1024&_s=1&sid=1667686628&sct=1&seg=0&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&dt=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-GYTXD89N1W>m=2oeb20&_p=278776890&_gaz=1&cid=1529106349.1667686628&ul=en-us&sr=1280x1024&_s=1&sid=1667686628&sct=1&seg=0&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&dt=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GYTXD89N1W>m=2oeb20&_p=278776890&_gaz=1&cid=1529106349.1667686628&ul=en-us&sr=1280x1024&_s=1&sid=1667686628&sct=1&seg=0&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&dt=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://app1.mackeeperaff.com
date: Sat, 05 Nov 2022 22:17:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-GYTXD89N1W&cid=1529106349.1667686628>m=2oeb20&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-GYTXD89N1W&cid=1529106349.1667686628>m=2oeb20&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GYTXD89N1W&cid=1529106349.1667686628>m=2oeb20&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://app1.mackeeperaff.com
date: Sat, 05 Nov 2022 22:17:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vars.hotjar.com/box-c6ca1c87e308a39aabb76b56ba54398b.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-c6ca1c87e308a39aabb76b56ba54398b.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash b6d25d1350d6a014d80689f389e76f97
a957e3d99790759f71a4d9e2fdaf819f60e8c569
fb2a1528b99d3eb4c9374642b5045efaf6e06666fdd48a55560a375449b01079
GET /box-c6ca1c87e308a39aabb76b56ba54398b.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Fri, 04 Nov 2022 12:22:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "b6d25d1350d6a014d80689f389e76f97"
last-modified: Fri, 04 Nov 2022 12:21:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: S7GJBIctk_hvdt28Hm6FA0ND7DoaOdc0YnQ_i2XpdWIwysBvp8GZsA==
age: 122104
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10013499.json
200 OK 22 B URL HTTP/2 s.yimg.com/wi/config/10013499.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 14293ad9ad0ffaf9f7a3acf1b0793b66
718dea6b65b9516e5e33fac53451056397deb255
73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
GET /wi/config/10013499.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: 4M55DMH29B798Y11
x-amz-id-2: s6q37ATiA9AAqIEM2LUTEzH3S3Q9mzw0RxVtj4TO1F05APPUB/Cm+QKr2MxN/iL2UbhFtkWO9io=
content-type: application/json
date: Sat, 05 Nov 2022 22:17:10 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
age: 0
content-encoding: gzip
content-length: 22
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 23ad6facb055ce5a27ec8ed08ab7d888
97d3ab8749dcca84ec08b3486f5a1bb8ffedec83
a6da2d631441861e9f95542d3a7904562fc05936647cb4fdd34071a7299e2c04
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3121
Cache-Control: max-age=134987
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 22:17:10 GMT
Etag: "63664100-1d7"
Expires: Mon, 07 Nov 2022 11:46:57 GMT
Last-Modified: Sat, 05 Nov 2022 10:54:56 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
tr.outbrain.com/cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 22:17:10 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 93d204a522ecbcbc08fcdcd6af53c249
content-encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 532dafbe7569f4bdebb1c177c31e60f2
13248ce0347c10ea0ec826765ec4a427a1df1e9b
169f81dc5f82a91b3632d61a5127b4f3e64dfc72487aaba49f4720e5bea381bd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=148559
Date: Sat, 05 Nov 2022 22:17:10 GMT
Etag: "6366724d-1d7"
Expires: Mon, 07 Nov 2022 15:33:09 GMT
Last-Modified: Sat, 05 Nov 2022 14:25:17 GMT
Server: ECS (bsa/EB18)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Z_IVtzB1gQw1qJkB9VZ9_g_eSfHG1BPFt1aBG7ledFTW5BYFC_Uqig==
Age: 4072
rp.liadm.com/j?dtstmp=1667686629087&aid=a-015g&se=e30&duid=f810f9c9df2c--01gh4xwzdqcaeqj60cs270c60b&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI-
302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1667686629087&aid=a-015g&se=e30&duid=f810f9c9df2c--01gh4xwzdqcaeqj60cs270c60b&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1667686629087&aid=a-015g&se=e30&duid=f810f9c9df2c--01gh4xwzdqcaeqj60cs270c60b&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI- HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 05 Nov 2022 22:17:11 GMT
content-length: 0
trace-id: ddb30ba301b3b9d0
vary: Origin
location: /j?dtstmp=1667686629087&aid=a-015g&se=e30&duid=f810f9c9df2c--01gh4xwzdqcaeqj60cs270c60b&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28229%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI-&n3pc=true
set-cookie: lidid=d4068887-07d2-419b-a8b9-83fe6f3dba00; Max-Age=63072000; Expires=Mon, 04 Nov 2024 22:17:11 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/190484/visit-data?sv=7
200 OK 137 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/190484/visit-data?sv=7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash efcd5932a2aebe7eb6a516dd20ed2446
8333b3d99d90c0e406388c2142c677c8946001be
48c91f69d9bd5e1d17bb328c354355eaf8c714f2619fd0327fec0f7ef242746b
POST /api/v2/client/sites/190484/visit-data?sv=7 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 149
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 22:17:11 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=36002432&Ver=2&mid=ebf964a5-908b-4c3a-b047-04102a9349fd&sid=96a9d3805d5711ed9652378ee0a4c1a2&vid=96a9f7f05d5711edbe0c7956b4319dc2&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=427502
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=36002432&Ver=2&mid=ebf964a5-908b-4c3a-b047-04102a9349fd&sid=96a9d3805d5711ed9652378ee0a4c1a2&vid=96a9f7f05d5711edbe0c7956b4319dc2&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=427502
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=36002432&Ver=2&mid=ebf964a5-908b-4c3a-b047-04102a9349fd&sid=96a9d3805d5711ed9652378ee0a4c1a2&vid=96a9f7f05d5711edbe0c7956b4319dc2&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=427502 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2A5B567BA017611B2FF44428A1E26082; domain=.bing.com; expires=Thu, 30-Nov-2023 22:17:11 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6BDCF514525C46C38B790A72B4EC697C Ref B: OSL30EDGE0514 Ref C: 2022-11-05T22:17:11Z
date: Sat, 05 Nov 2022 22:17:11 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=36002432&Ver=2&mid=ebf964a5-908b-4c3a-b047-04102a9349fd&sid=96a9d3805d5711ed9652378ee0a4c1a2&vid=96a9f7f05d5711edbe0c7956b4319dc2&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&p=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&r=<=2212&evt=pageLoad&sv=1&rn=373479
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=36002432&Ver=2&mid=ebf964a5-908b-4c3a-b047-04102a9349fd&sid=96a9d3805d5711ed9652378ee0a4c1a2&vid=96a9f7f05d5711edbe0c7956b4319dc2&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&p=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&r=<=2212&evt=pageLoad&sv=1&rn=373479
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=36002432&Ver=2&mid=ebf964a5-908b-4c3a-b047-04102a9349fd&sid=96a9d3805d5711ed9652378ee0a4c1a2&vid=96a9f7f05d5711edbe0c7956b4319dc2&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&p=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&r=<=2212&evt=pageLoad&sv=1&rn=373479 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0FC407D5EBA565CE3B531586EA506457; domain=.bing.com; expires=Thu, 30-Nov-2023 22:17:11 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2ABB4129EDAB4C6191AB1FD86A15A257 Ref B: OSL30EDGE0514 Ref C: 2022-11-05T22:17:11Z
date: Sat, 05 Nov 2022 22:17:11 GMT
X-Firefox-Spdy: h2
tr.outbrain.com/unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.10.0&name=PAGE_VIEW&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&optOut=false&bust=039308102016211155&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.10.0&name=PAGE_VIEW&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&optOut=false&bust=039308102016211155&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.10.0&name=PAGE_VIEW&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&optOut=false&bust=039308102016211155&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 22:17:11 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: d5a2ec54e557ddeeb803152b8f6321d8
content-encoding: gzip
bat.bing.com/p/action/36002432.js
200 OK 1.4 kB URL HTTP/2 bat.bing.com/p/action/36002432.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash af03844de699f6e7e0ed552f725a22df
10eae56beeacb28641d52a664eccaf4818bad5fe
472f9e0968b39c41aa022478f9d20e01e5131d6bd50451676cefad81427420ac
GET /p/action/36002432.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 1423
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=23742C411ACF6FE007A63E121B3A6E6E; domain=.bing.com; expires=Thu, 30-Nov-2023 22:17:11 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4A18D8CF7E1B412493379182C8732F9A Ref B: OSL30EDGE0514 Ref C: 2022-11-05T22:17:11Z
date: Sat, 05 Nov 2022 22:17:11 GMT
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1667686629087&aid=a-015g&se=e30&duid=f810f9c9df2c--01gh4xwzdqcaeqj60cs270c60b&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28229%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI-&n3pc=true
200 OK 13 B URL HTTP/2 rp.liadm.com/j?dtstmp=1667686629087&aid=a-015g&se=e30&duid=f810f9c9df2c--01gh4xwzdqcaeqj60cs270c60b&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28229%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI-&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?dtstmp=1667686629087&aid=a-015g&se=e30&duid=f810f9c9df2c--01gh4xwzdqcaeqj60cs270c60b&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28229%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI-&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Referer: https://app1.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 22:17:11 GMT
content-type: application/json
content-length: 13
trace-id: 0ec531c2df0f24bc
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: 93574029-62f4-438b-b8b2-0143b687ecdb
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
zchat.account.mackeeper.com/fonts/Moderat-Bold.otf
200 OK 65 kB URL HTTP/2 zchat.account.mackeeper.com/fonts/Moderat-Bold.otf
IP
Hash 6a7cbbad1f486ba14329698135a50938
93a8af05e1dd785a5491cd5a26e38974d9b6011f
51caa39fe064838373f7289c93bcd8fdd9710b06c31d747511b30dc6a6fb79da
GET /fonts/Moderat-Bold.otf HTTP/1.1
Host: zchat.account.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://zchat.account.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/font-sfnt
date: Thu, 25 Aug 2022 00:51:54 GMT
last-modified: Thu, 21 Jul 2022 09:33:57 GMT
etag: W/"16ee66cbb425b45365d258befb59f217"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nWFk15-kz0JV-9YYfmmQFU7-fm7_QBXEAX9htSIJksNuLpEhTlHLHw==
age: 6297917
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1667686628989&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1667686628989&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3865705&time=1667686628989&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1667686628989%26url%3Dhttps%253A%252F%252Fapp1.mackeeperaff.com%252Fland%252F229%252F%253Frtkcid%253D6366e0d5d160dd0001fdaab3%2526rtkcmpid%253D627d348f35981a0001d4db71%2526tid%253DAffiliate%252520-%252520Increased%252520Hybrid%252520%2528229%2529%252520-%252520Shlomi%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQKzm0C8k_UFEQAAAYRJ3oekeoyllBRvrOfRyDimJUVV350KjANaKQbd3jHINxURhLZCwvpM6xt8zw; Max-Age=2592000; Expires=Mon, 05 Dec 2022 22:17:11 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQIjIhQ4QC8dQQAAAYRJ3oel1PqXC1NEmMppQFiFinnDepyzjvHlH_5-IIUlw5Ew0zJEy0KeWJbZCLfFuJKa9A; Max-Age=2592000; Expires=Mon, 05 Dec 2022 22:17:11 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&e84b082a-a5cc-42aa-8373-c3173802c0da"; domain=.linkedin.com; Path=/; Secure; Expires=Sun, 05-Nov-2023 22:17:11 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2370:u=1:x=1:i=1667686631:t=1667773031:v=2:sig=AQHz-reog8DRoWsrF2crXTUIUYZxvIQ5"; Expires=Sun, 06 Nov 2022 22:17:11 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXswI1BuPVHSXabZH/oxg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: BEC60CD6349545EE99EC807893FE1253 Ref B: OSL30EDGE0220 Ref C: 2022-11-05T22:17:11Z
date: Sat, 05 Nov 2022 22:17:10 GMT
content-length: 0
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1667686628989%26url%3Dhttps%253A%252F%252Fapp1.mackeeperaff.com%252Fland%252F229%252F%253Frtkcid%253D6366e0d5d160dd0001fdaab3%2526rtkcmpid%253D627d348f35981a0001d4db71%2526tid%253DAffiliate%252520-%252520Increased%252520Hybrid%252520%2528229%2529%252520-%252520Shlomi%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1667686628989%26url%3Dhttps%253A%252F%252Fapp1.mackeeperaff.com%252Fland%252F229%252F%253Frtkcid%253D6366e0d5d160dd0001fdaab3%2526rtkcmpid%253D627d348f35981a0001d4db71%2526tid%253DAffiliate%252520-%252520Increased%252520Hybrid%252520%2528229%2529%252520-%252520Shlomi%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1667686628989%26url%3Dhttps%253A%252F%252Fapp1.mackeeperaff.com%252Fland%252F229%252F%253Frtkcid%253D6366e0d5d160dd0001fdaab3%2526rtkcmpid%253D627d348f35981a0001d4db71%2526tid%253DAffiliate%252520-%252520Increased%252520Hybrid%252520%2528229%2529%252520-%252520Shlomi%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app1.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1667686628989&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28229%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&4f504cd9-9b69-4c39-84d5-82266d78866b"; Domain=.linkedin.com; Expires=Sun, 05-Nov-2023 22:17:11 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20221105221711592a2f00-85ac-40bd-8203-1ed4ada9e93fAQHmzCyyxQd_zWnLcQDeO-EuVtI_6N8p"; Domain=.www.linkedin.com; Expires=Sun, 05-Nov-2023 22:17:11 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2Njc2ODY2MzE7MjswMjG/i/4p63zDJ0v4zimdP7Z18b0rXR48Z08NOiHgMiAMfQ==; Domain=.linkedin.com; Expires=Thu, 04 May 2023 22:17:11 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2370:u=1:x=1:i=1667686631:t=1667773031:v=2:sig=AQHz-reog8DRoWsrF2crXTUIUYZxvIQ5"; Expires=Sun, 06 Nov 2022 22:17:11 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com *.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXswI1Ewt6gcmUn9yMoaA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 03705BC70582467C9E18E5D2522CA426 Ref B: OSL30EDGE0220 Ref C: 2022-11-05T22:17:11Z
date: Sat, 05 Nov 2022 22:17:10 GMT
content-length: 0
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.43/clarity.js
200 OK 55 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.43/clarity.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (55029)
Hash 441723b72633b1ac9757ad7c63168005
806166ca9ebb5839dd90a5e5c9335e3e0b18c169
cc8a16ce849d72f106bd67187e4b60c20da3093375202bf0b53f23e8f40a8b11
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 55116
content-type: application/javascript;charset=utf-8
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8ec7677589f4c"
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 05+BmYwAAAAB0IAuOtaGNSJ6IxyrKFGg1U1ZHMjBFREdFMDUyMAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Sat, 05 Nov 2022 22:17:11 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1667686629956&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1667686629954.1469350252&it=1667686628944&coo=false&rqm=GET
200 OK 86 kB URL HTTP/2 www.facebook.com/tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1667686629956&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1667686629954.1469350252&it=1667686628944&coo=false&rqm=GET
IP
File type gzip compressed data, from Unix\012- data
Hash 53bfb9235aa3205e330103358bf28e7a
483425fbb12e2a51a6ce152ba7fa7f38a35a7530
7dc704c9c444bd33584d8d63e55fe0d7d352bf0cc18b3a6c11ac776d9da69c06
GET /tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1667686629956&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1667686629954.1469350252&it=1667686628944&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 05 Nov 2022 22:17:11 GMT
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1667686628989&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28229%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1667686628989&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28229%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3865705&time=1667686628989&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28229%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app1.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&d7bffc44-03a3-41be-8c3a-f00efd1cfebc"; domain=.linkedin.com; Path=/; Secure; Expires=Sun, 05-Nov-2023 22:17:11 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2370:u=1:x=1:i=1667686631:t=1667773031:v=2:sig=AQHz-reog8DRoWsrF2crXTUIUYZxvIQ5"; Expires=Sun, 06 Nov 2022 22:17:11 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXswI1IDwwpbG8uFrHmKA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 83AA0129122F460CA0A1794E6F9C319D Ref B: OSL30EDGE0220 Ref C: 2022-11-05T22:17:11Z
date: Sat, 05 Nov 2022 22:17:11 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=052CB8B0AB724206BDFF7C29FB0AD9A2&RedC=c.clarity.ms&MXFR=3C31D0426A986DA53D65C2116E9863FA
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=3C31D0426A986DA53D65C2116E9863FA; domain=.clarity.ms; expires=Thu, 30-Nov-2023 22:17:12 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Sat, 05 Nov 2022 22:17:11 GMT
content-length: 0
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 22949
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-credentials: true
date: Sat, 05 Nov 2022 22:17:11 GMT
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=052CB8B0AB724206BDFF7C29FB0AD9A2&RedC=c.clarity.ms&MXFR=3C31D0426A986DA53D65C2116E9863FA
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=052CB8B0AB724206BDFF7C29FB0AD9A2&RedC=c.clarity.ms&MXFR=3C31D0426A986DA53D65C2116E9863FA
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=052CB8B0AB724206BDFF7C29FB0AD9A2&RedC=c.clarity.ms&MXFR=3C31D0426A986DA53D65C2116E9863FA HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app1.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=052CB8B0AB724206BDFF7C29FB0AD9A2&MUID=2706BE007CA8658A275CAC537D5D643E
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=2706BE007CA8658A275CAC537D5D643E; domain=c.bing.com; expires=Thu, 30-Nov-2023 22:17:12 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9775CFF5DCB44025B8EEDA47AAAA847B Ref B: OSL30EDGE0514 Ref C: 2022-11-05T22:17:12Z
date: Sat, 05 Nov 2022 22:17:12 GMT
content-length: 0
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=1582&scd=19&ssd=1&est=1667686629077&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1667686630660&vi=1667686629075&ri=366d31eafa7d03b47915faf0c935faa5&ref=null&cv=20221029-3-RELEASE&item-url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=1582&scd=19&ssd=1&est=1667686629077&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1667686630660&vi=1667686629075&ri=366d31eafa7d03b47915faf0c935faa5&ref=null&cv=20221029-3-RELEASE&item-url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=1582&scd=19&ssd=1&est=1667686629077&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1667686630660&vi=1667686629075&ri=366d31eafa7d03b47915faf0c935faa5&ref=null&cv=20221029-3-RELEASE&item-url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 22:17:12 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/36002432
200 OK 2.0 kB URL HTTP/2 www.clarity.ms/tag/uet/36002432
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 694c342ae4b5569da2a8d8a713db0755
ca0b138b843fce298de9c7727f568ca135ab31e7
6d9db3f906e9b00666647dd3d788d635d33b4da29eeaeff4693d833e0deed009
GET /tag/uet/36002432 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=908b5439e8844a498c30c9b21176fece.20221105.20231105; expires=Sun, 05 Nov 2023 22:17:11 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:b1d896b3-bec7-448b-b764-240152e813e8
x-cache: CONFIG_NOCACHE
x-azure-ref: 05+BmYwAAAAAFr+VirmjtTrG4u2XMJY6rU1ZHMjBFREdFMDUyMAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Sat, 05 Nov 2022 22:17:11 GMT
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=4584&scd=19&ssd=1&est=1667686629077&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1667686633662&vi=1667686629075&ri=366d31eafa7d03b47915faf0c935faa5&ref=null&cv=20221029-3-RELEASE&item-url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=4584&scd=19&ssd=1&est=1667686629077&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1667686633662&vi=1667686629075&ri=366d31eafa7d03b47915faf0c935faa5&ref=null&cv=20221029-3-RELEASE&item-url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=4584&scd=19&ssd=1&est=1667686629077&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1667686633662&vi=1667686629075&ri=366d31eafa7d03b47915faf0c935faa5&ref=null&cv=20221029-3-RELEASE&item-url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 22:17:15 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/components/logo/mk-logo-ua.svg
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/components/logo/mk-logo-ua.svg
IP
GET /mk-land/dist/svg/components/logo/mk-logo-ua.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 01 Nov 2022 14:21:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Apr 2022 14:50:37 GMT
etag: W/"0443bcb5ae8253499f7df7f80c45fc8c"
cache-control: public, max-age=604800
x-amz-version-id: sx6d65Ik.60EPUJCncti20jd8v0DNMRK
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YO3uNCbvZgJldaCwSjw3DfiN1mD656uZPSqKowSnraCo_bZanl_84g==
age: 374137
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/default/script.min.js?17ab72af24a83de6eb4b
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/default/script.min.js?17ab72af24a83de6eb4b
IP
GET /mk-land/dist/default/script.min.js?17ab72af24a83de6eb4b HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 01 Nov 2022 14:21:33 GMT
x-amz-replication-status: PENDING
last-modified: Tue, 01 Nov 2022 14:18:44 GMT
etag: W/"f39243185bab35a6e62fc592e4ee5976"
cache-control: public, max-age=604800
x-amz-version-id: MqlWLhbTvSNRNbExGkOtw0bKSdtMf3rQ
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vjMp8MSwxqL4epG2I1evd0w4Fwa0D-tftCelyn1WUW8bPbyb0bwq0A==
age: 374137
X-Firefox-Spdy: h2
www.dwin1.com/23738.js
200 OK 0 B IP
GET /23738.js HTTP/1.1
Host: www.dwin1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
x-amz-replication-status: COMPLETED
last-modified: Thu, 03 Nov 2022 12:52:47 GMT
x-amz-version-id: JgyCpvTOLAAVjoZX_9Q.RSRkREPFuhKJ
server: AmazonS3
content-encoding: gzip
date: Sat, 05 Nov 2022 22:17:10 GMT
cache-control: max-age=600, s-maxage=600
etag: W/"04a63f0a2836817ce6045d6b4bea866b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: piywSJnNgCTbhlc_0_ZQbYkzcLS51_NzTjfrhF8BpdxMLdhpDQMaNA==
age: 537
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/3865705/domain/app1.mackeeperaff.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/3865705/domain/app1.mackeeperaff.com/token
IP
GET /partner/3865705/domain/app1.mackeeperaff.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Sat, 05 Nov 2022 21:22:25 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3Kl1laUb2VKcAH_4lW_KY7L_RgjjR_XjfU2fFRvO-h9C4F7B5MbDSw==
age: 3285
X-Firefox-Spdy: h2
trc.taboola.com/1212352/trc/3/json?tim=1667686629080&data=%7B%22id%22%3A733%2C%22ii%22%3A%22%2Fland%2F229%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1667686629075%2C%22cv%22%3A%2220221029-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1667686629079%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A19%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1212352/trc/3/json?tim=1667686629080&data=%7B%22id%22%3A733%2C%22ii%22%3A%22%2Fland%2F229%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1667686629075%2C%22cv%22%3A%2220221029-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1667686629079%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A19%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1212352/trc/3/json?tim=1667686629080&data=%7B%22id%22%3A733%2C%22ii%22%3A%22%2Fland%2F229%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1667686629075%2C%22cv%22%3A%2220221029-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1667686629079%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6366e0d5d160dd0001fdaab3%26rtkcmpid%3D627d348f35981a0001d4db71%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(229)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A19%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 22:17:11 GMT
via: 1.1 varnish
x-served-by: cache-bma1622-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667686631.213741,VS0,VE93
vary: Accept-Encoding
x-vcl-time-ms: 93
X-Firefox-Spdy: h2
app1.mackeeperaff.com/land/229/?rtkcid=6366e0d5d160dd0001fdaab3&rtkcmpid=627d348f35981a0001d4db71&tid=Affiliate%20-%20Increased%20Hybrid%20(229)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
200 OK 0 B URL HTTP/2 app1.mackeeperaff.com/land/229/?rtkcid=6366e0d5d160dd0001fdaab3&rtkcmpid=627d348f35981a0001d4db71&tid=Affiliate%20-%20Increased%20Hybrid%20(229)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /land/229/?rtkcid=6366e0d5d160dd0001fdaab3&rtkcmpid=627d348f35981a0001d4db71&tid=Affiliate%20-%20Increased%20Hybrid%20(229)%20-%20Shlomi&utm_source=&utm_medium=&pubid= HTTP/1.1
Host: app1.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 05 Nov 2022 22:17:09 GMT
content-type: text/html; charset=UTF-8
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
content-security-policy: default-src 'self' *.hotjar.com *.mackeeper.com;frame-ancestors 'none';frame-src 'self' 'unsafe-inline' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com *.surveygizmo.com *.liadm.com *.typeform.com mc.yandex.ru *.js.ad-score.com *.cdn.onesignal.com *.onesignal.com *.criteo.com static-cdn.mackeeper.com;child-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com blob: *.cdn.onesignal.com *.onesignal.com *.liadm.com static-cdn.mackeeper.com;form-action 'self' *.mackeeper.com *.facebook.com;img-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com data: *.2mdn.net *.pagead2.googlesyndication.com *.glotgrx.com *.lporirxe.com *.exelator.com *.owox.com *.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.yahoo.co.jp *.apimzb-adserver.cloudmccloud.com *.3lift.com *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com mc.yandex.ru cx.atdmt.com *.baidu.com *.gstatstrk.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.zoomsupport.com *.cloudmccloud.com linkconnector.com *.linkconnector.com *.linkedin.com https://p.adsymptotic.com *.clarity.ms *.lfeeder.com static-cdn.mackeeper.com *.imcounting.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com disqus.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com l2.io *.inspectlet.com *.googlesyndication.com *.sagetrc.com *.glotgrx.com *.lporirxe.com b-code.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.cloudfront.net *.yimg.jp *.addtocalendar.com *.yahoo.co.jp blob: *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com *.s.ytimg.com *.typeform.com *.calendly.com *.linkconnector.com mc.yandex.ru *.js.ad-score.com *.baidu.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.engine.4dsply.com *.engine.spotscenered.info *.engine.3dspk.com *.we3red.com *.engine.asadap.com *.engine.nictelroalps.com *.engine.liondigitalserving.com *.engine.addroplet.com *.beritapria.com cdnjs.cloudflare.com *.clickcease.com *.sentry-cdn.com *.criteo.net *.criteo.com https://snpa.licdn.com linkconnector.com *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com *.licdn.com *.liadm.com *.clarity.ms *.adcell.com *.lfeeder.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;style-src 'self' 'unsafe-inline' *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.a.disquscdn.com *.disqus.com *.googleapis.com *.fonts.gstatic.com *.referrer.disqus.com *.google.com *.google.com.ua *.addtocalendar.com *.surveygizmo.com *.cdn.onesignal.com *.onesignal.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com *.googletagmanager.com;font-src 'self' data: *.doubleclick.net *.mackeeper.com *.twimg.com *.twitter.com fonts.googleapis.com fonts.gstatic.com *.surveygizmo.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;object-src *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.pagead2.googlesyndication.com *.liadm.com static-cdn.mackeeper.com;connect-src 'self' *.mackeeper.com *.hotjar.com ws://*.hotjar.com wss://*.hotjar.com *.g.doubleclick.net *.lcidc.liadm.com *.google-analytics.com *.api.ipify.org *.mc.yandex.ru mc.yandex.ru *.data.ad-score.com *.baidu.com *.pushdata.onesignal.com:* *.onesignal.com *.taboola.com *.hotjar.io *.clickcease.com s.yimg.com *.facebook.com *.google.com bat.bing.com sentry.cloudmccloud.com *.liadm.com *.macupdate.com https://api.account.mackeeper.com https://api.account.sz.mackeeper.com https://api-ne.mackeeper.com *.adcell.com *.clarity.ms *.lfeeder.com *.static-cdn.mackeeper.com https://crm.account.mackeeper.com https://chat-crm.account.mackeeper.com static-cdn.mackeeper.com https://cdn.linkedin.oribi.io/
set-cookie: XSRF-TOKEN=eyJpdiI6IjU2RkFqaDFRYnRtOFhHVzRGbUFSTXc9PSIsInZhbHVlIjoiVk9za2FtUHBsbXRcLzM2a2RHRERcL1d0b3pNSUhQXC9YUG11cE1Zc2lVSm83RDlWR21YSTNXSVNqMmtsbnZ2bmo5UHZxVEI1OThiMXRsemdNUDhHK2RQZXNkRkFoa0RUOUFCOVduT1IyYVVRSVpjVkt5b1BcL3lpaGpvTUxwcjZScXN4IiwibWFjIjoiM2NmM2Q5NjQ1MTgwMzAyYmFjYzIwNTZlOWI2Mzg2MzMzYTVlMzZmOGVjMGE1Y2YwNTc5NjkyNDExNjEzMjg1ZSJ9; expires=Sun, 06-Nov-2022 00:17:09 GMT; Max-Age=7200; path=/; secure; samesite=lax
mackeeper_session=eyJpdiI6Ikdjb1VnaHVMTUQ3anVVeG5MdWN5VUE9PSIsInZhbHVlIjoiWVdTYUg5ZU9JUmlxaW5ORVlCUUwzejRFOGtLSXpwQmVBeXlabWVhYThkek1HTkpaRTNZQk5TdWtCNmpVdHVxMEY4dGExRkpXVW5NTXVacCtJbUxPcDRzcnE5Wk1YYnJwbGdoV2RJTFl1XC84V0dRR0ZNR05WVVB4dUpPekdLakVpIiwibWFjIjoiMTcwNThkZmUxNjA4NGM5MzlkZTZkMzBmYzBmNzBjMWU2OTUwNWEwNmU1ZmRjZWEzNTNhNmU3ODVjNTMyZjM1NyJ9; expires=Sun, 06-Nov-2022 00:17:09 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax
get_params_landings=%7B%22rtkcid%22%3A%226366e0d5d160dd0001fdaab3%22%2C%22rtkcmpid%22%3A%22627d348f35981a0001d4db71%22%2C%22tid%22%3A%22Affiliate%20-%20Increased%20Hybrid%20%28229%29%20-%20Shlomi%22%2C%22utm_source%22%3A%22%22%2C%22utm_medium%22%3A%22%22%2C%22pubid%22%3A%22%22%7D; expires=Sun, 06-Nov-2022 22:17:08 GMT; Max-Age=86399; path=/; domain=.mackeeper.com; secure; samesite=lax
globalAffid=mc-6366e0d68d129306f6d5314c; expires=Thu, 04-May-2023 22:17:08 GMT; Max-Age=15551999; path=/; domain=.mackeeper.com; secure; samesite=lax
country=NO; expires=Thu, 04-May-2023 22:17:08 GMT; Max-Age=15551999; path=/; domain=.mackeeper.com; secure; samesite=lax
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 7951f8523e4a163fa1715ac02a98c383
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/critical/script.min.js?713042b92e8e26034ff5
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/critical/script.min.js?713042b92e8e26034ff5
IP
GET /mk-land/dist/critical/script.min.js?713042b92e8e26034ff5 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 01 Nov 2022 14:21:33 GMT
x-amz-replication-status: PENDING
last-modified: Tue, 01 Nov 2022 14:19:26 GMT
etag: W/"ae9c9df33a1c1fcfb8e94b7c77f9ad66"
cache-control: public, max-age=604800
x-amz-version-id: mBt3HOpoZzV_BXxKf5m06Uut_dgFAc_H
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RVyVfwmDyA14VZrA2zuPETOCEeBgvL1fSuUinYlDrqkXAj4wnNTUsg==
age: 374137
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT.otf
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT.otf
IP
GET /mk-land/dist/fonts/MarkOT.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Tue, 01 Nov 2022 14:22:37 GMT
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"106ae5fa4d0e51fa73ed42c3beecda5e"
cache-control: public, max-age=604800
x-amz-version-id: Eju.irxG68JYjYuEi7BGXEsqN0F4MTaA
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: soJIR2ioBxZqnEYMovcpQFC21eY68duqhlMB_Bw_F_hxV8UBwmWHfQ==
age: 374073
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Bold.otf
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Bold.otf
IP
GET /mk-land/dist/fonts/MarkOT-Bold.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Tue, 01 Nov 2022 14:22:37 GMT
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
etag: W/"336e38c18c3ac1666fa496c919b08eca"
cache-control: public, max-age=604800
x-amz-version-id: _SyAJ1U0XNp0EgWFZoSm7jR1ZmFIsGhh
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Bh_Go2Ollqch4Yf3Xlj-MCmV66gmVm2846gkT9ad_dY_lIqqdXg8zw==
age: 374073
X-Firefox-Spdy: h2
b-code.liadm.com/a-015g.min.js
200 OK 0 B URL HTTP/2 b-code.liadm.com/a-015g.min.js
IP
GET /a-015g.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 05 Nov 2022 04:42:17 GMT
cache-control: public, max-age=86400
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: K5KmiygqoYJGT3hdd9OFddAEIUJJYHX2wcLAi4BLNKBO2DvJ7mNR-g==
age: 63293
X-Firefox-Spdy: h2
app1.mackeeperaff.com/land/api/send-event
200 OK 0 B URL HTTP/2 app1.mackeeperaff.com/land/api/send-event
IP
Analyzer Verdict Alert quad9 Sinkholed
POST /land/api/send-event HTTP/1.1
Host: app1.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: 8EmEn6utvVE1hK5FFIriU9NwMqWBK8fqYIfLZIHz
X-XSRF-TOKEN: eyJpdiI6IjU2RkFqaDFRYnRtOFhHVzRGbUFSTXc9PSIsInZhbHVlIjoiVk9za2FtUHBsbXRcLzM2a2RHRERcL1d0b3pNSUhQXC9YUG11cE1Zc2lVSm83RDlWR21YSTNXSVNqMmtsbnZ2bmo5UHZxVEI1OThiMXRsemdNUDhHK2RQZXNkRkFoa0RUOUFCOVduT1IyYVVRSVpjVkt5b1BcL3lpaGpvTUxwcjZScXN4IiwibWFjIjoiM2NmM2Q5NjQ1MTgwMzAyYmFjYzIwNTZlOWI2Mzg2MzMzYTVlMzZmOGVjMGE1Y2YwNTc5NjkyNDExNjEzMjg1ZSJ9
Content-Length: 102
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/land/229/?rtkcid=6366e0d5d160dd0001fdaab3&rtkcmpid=627d348f35981a0001d4db71&tid=Affiliate%20-%20Increased%20Hybrid%20(229)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Cookie: XSRF-TOKEN=eyJpdiI6IjU2RkFqaDFRYnRtOFhHVzRGbUFSTXc9PSIsInZhbHVlIjoiVk9za2FtUHBsbXRcLzM2a2RHRERcL1d0b3pNSUhQXC9YUG11cE1Zc2lVSm83RDlWR21YSTNXSVNqMmtsbnZ2bmo5UHZxVEI1OThiMXRsemdNUDhHK2RQZXNkRkFoa0RUOUFCOVduT1IyYVVRSVpjVkt5b1BcL3lpaGpvTUxwcjZScXN4IiwibWFjIjoiM2NmM2Q5NjQ1MTgwMzAyYmFjYzIwNTZlOWI2Mzg2MzMzYTVlMzZmOGVjMGE1Y2YwNTc5NjkyNDExNjEzMjg1ZSJ9; mackeeper_session=eyJpdiI6Ikdjb1VnaHVMTUQ3anVVeG5MdWN5VUE9PSIsInZhbHVlIjoiWVdTYUg5ZU9JUmlxaW5ORVlCUUwzejRFOGtLSXpwQmVBeXlabWVhYThkek1HTkpaRTNZQk5TdWtCNmpVdHVxMEY4dGExRkpXVW5NTXVacCtJbUxPcDRzcnE5Wk1YYnJwbGdoV2RJTFl1XC84V0dRR0ZNR05WVVB4dUpPekdLakVpIiwibWFjIjoiMTcwNThkZmUxNjA4NGM5MzlkZTZkMzBmYzBmNzBjMWU2OTUwNWEwNmU1ZmRjZWEzNTNhNmU3ODVjNTMyZjM1NyJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 22:17:10 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 179
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: b73b29edd459af896f84d47fc87c02d8
X-Firefox-Spdy: h2
zchat.account.mackeeper.com/theme/zchat.css?ver=395562
200 OK 0 B URL HTTP/2 zchat.account.mackeeper.com/theme/zchat.css?ver=395562
IP
GET /theme/zchat.css?ver=395562 HTTP/1.1
Host: zchat.account.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Thu, 21 Jul 2022 09:41:17 GMT
last-modified: Thu, 21 Jul 2022 09:33:57 GMT
etag: W/"b0ab2838d417636ab90440dd45e70d60"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DtwUbpABjJVAzwM2fpEFxpfKctnMmgbn4jpeXbXEJiGbQqgX23WbcQ==
age: 9290154
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 0 B URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 5bI+8BciDHfXD/7B5m4CPD2TWyRdP08OdSZS+0K/iZRalRwFo25hua1jnZ56bmy2clTi+Q9KkTTR5rrsbjh78A==
content-length: 27337
x-fb-trip-id: 1904183273
date: Sat, 05 Nov 2022 22:17:10 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
zchat.account.mackeeper.com/fonts/Moderat-Regular.otf
200 OK 0 B URL HTTP/2 zchat.account.mackeeper.com/fonts/Moderat-Regular.otf
IP
GET /fonts/Moderat-Regular.otf HTTP/1.1
Host: zchat.account.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://zchat.account.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/font-sfnt
date: Fri, 04 Nov 2022 13:59:50 GMT
last-modified: Thu, 21 Jul 2022 09:33:57 GMT
etag: W/"548a10b46d8da152a9b6e313ad51a5ab"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gCuU-i2WQzhPd-7h079G7E2DgWlwVEqShNp5GGatk3llWr49rrElIA==
age: 116241
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/229/script.min.js?552e898b69a118f4e377
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/229/script.min.js?552e898b69a118f4e377
IP
GET /mk-land/dist/229/script.min.js?552e898b69a118f4e377 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 01 Nov 2022 14:25:32 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 01 Nov 2022 14:19:15 GMT
etag: W/"4bc9563382966b4742690521478f9ff3"
cache-control: public, max-age=604800
x-amz-version-id: QzZi6IUmS_NtHrOBBuhZWNfaouJfcFDE
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L7v3ENwheAmyGBGhTyTAYCiTzvm2kO60POfenOSumdb9KHHXBmt_Mg==
age: 373898
X-Firefox-Spdy: h2
t.adcell.com/js/trad.js
200 OK 0 B IP
GET /js/trad.js HTTP/1.1
Host: t.adcell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: myracloud
date: Sat, 05 Nov 2022 22:17:10 GMT
content-type: text/javascript
strict-transport-security: max-age=15768000
content-encoding: gzip
vary: accept-encoding
expires: Sat, 05 Nov 2022 22:22:53 GMT
cache-control: max-age=900
etag: "myra-99442b08"
x-cdn: 1
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 0 B IP
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +pWTadjr43MEAymDgYj6aNrAd/qvyM0iQrb9Al0o/rTkgsHbs8o+JgtewkGKy5pYtoB6obaejcM=
x-amz-request-id: RZWR20FPPTYAFR46
date: Sat, 05 Nov 2022 21:57:16 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 1195
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
54.80.71.222
52.48.139.15
23.36.76.210
151.101.85.44
141.226.228.48
93.184.220.29
185.5.82.77
0.0.0.0