app1.mackeeperaff.com/land/229/?rtkcid=6339fb2a86dba10001b595eb&rtkcmpid=629a4807d84ecc0001368395&tid=Affiliate%20-%20RevShare+CPI%20(229)&utm_source=&utm_medium=&pubid=
301 Moved Permanently 134 B URL HTTP/1.1 app1.mackeeperaff.com/land/229/?rtkcid=6339fb2a86dba10001b595eb&rtkcmpid=629a4807d84ecc0001368395&tid=Affiliate%20-%20RevShare+CPI%20(229)&utm_source=&utm_medium=&pubid=
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
Analyzer Verdict Alert quad9 Sinkholed
GET /land/229/?rtkcid=6339fb2a86dba10001b595eb&rtkcmpid=629a4807d84ecc0001368395&tid=Affiliate%20-%20RevShare+CPI%20(229)&utm_source=&utm_medium=&pubid= HTTP/1.1
Host: app1.mackeeperaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Sun, 02 Oct 2022 20:57:32 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://app1.mackeeperaff.com:443/land/229/?rtkcid=6339fb2a86dba10001b595eb&rtkcmpid=629a4807d84ecc0001368395&tid=Affiliate%20-%20RevShare+CPI%20(229)&utm_source=&utm_medium=&pubid=
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 02 Oct 2022 20:16:50 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9385401cebb473e4ed1da6c81b927c52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: J2xUCyRgEOGaJ0_6eIIDb73wmE0MT08fFBJ4ik_KJM7X4jTO8sdOWA==
Age: 2442
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 60e4edea7b5f4d19f3547a3bb2d5df57
3ee076bab4da3416c2c5808f730cb316c28baef7
763e2dadfdd286a51327cd2000ca335e30cd0b9b7267875d22ca33f7556ba200
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763E2DADFDD286A51327CD2000CA335E30CD0B9B7267875D22CA33F7556BA200"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2345
Expires: Sun, 02 Oct 2022 21:36:37 GMT
Date: Sun, 02 Oct 2022 20:57:32 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 02 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 9632c1f8a2346421f2880c0f89366962.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C1
x-amz-cf-id: BROszwK5CrOf9MBAJvDTLV5S27ri8nmZ49Xw_kQC4vU-DVcQMMshvQ==
age: 55745
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 20:57:32 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0eeb1f98114a8c1c1d549c5e77f59d7e
d9478910d806a7edb0abf6cc2bf420ca07583f35
a97ff60c76dce3d1272022fc98401780f7f75acf2ae3a918de6c4da83584e678
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 20:57:32 GMT
Last-Modified: Sun, 02 Oct 2022 20:35:09 GMT
Server: ECS (dcb/7EEE)
X-Cache: Miss from cloudfront
Via: 1.1 d91961fd00a0c4f7aae668984dcb62a8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: rEKXRCfWWObC4JjEiQjExgfXGuEc4jLTwtP336A-vOWnj1gywxrkRQ==
Age: 1343
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Sun, 02 Oct 2022 20:29:34 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sun, 02 Oct 2022 20:57:58 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: lItHlPrRJik_GurNjRhF0A8NWBWilz7XKDlRhhPfeDXBhBg_PM9HFQ==
Age: 1680
ocsp.digicert.com/
200 OK 471 B IP
Hash 4eb30b4a4234809cf7d5f89fa1f6ceeb
797242aab2f13c820050aa9accd11b7b950cd177
ce9d833a0ac321a908184b655d6632c481f758a04a9c936a7c303bb253444146
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4733
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:33 GMT
Last-Modified: Sun, 02 Oct 2022 19:38:40 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +9BqbQQV63YSdOAswhgPuQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KFnt6sYLHB4/RuSV8x8J1raY2RM=
browser.sentry-cdn.com/5.5.0/bundle.min.js
200 OK 52 kB URL HTTP/2 browser.sentry-cdn.com/5.5.0/bundle.min.js
IP
File type ASCII text, with very long lines (51441)
Hash b1dcc6195d84cf50c3e882d3d515f848
06562c193663a31a3cabeaa18cffeb882084fcb6
8c04755395b8f232c57d062a7669c3c414658299d29c6b6f83f1f30185d94ecb
GET /5.5.0/bundle.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 11 Nov 2022 05:27:37 GMT
last-modified: Fri, 05 Jul 2019 11:17:04 GMT
etag: W/"39339cf627bc67e34d4c623bea4c0b4a"
content-type: application/javascript; charset=utf-8
x-guploader-response-body-transformations: gunzipped
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 02 Oct 2022 20:57:34 GMT
age: 28135798
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 51570
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/components/btn-arrow.svg
200 OK 412 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/components/btn-arrow.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (412), with no line terminators
Hash 2bb20d31732674b19f39721677ee98b0
c009a4436fe0fd3e281dcd9f60ab0f2769f25cb5
b5553f16ea66eab43971c73b4115bbe291b2188dc00d0c5d4f5bb21958e3dda2
GET /mk-land/dist/svg/components/btn-arrow.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 412
date: Wed, 28 Sep 2022 10:11:12 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:38:48 GMT
etag: "2bb20d31732674b19f39721677ee98b0"
cache-control: public, max-age=604800
x-amz-version-id: nukWLapdOnZ6K4hroAQrBv4GKBUk7Zxa
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: pzIY8o_chwXZDE9WVpP4o_5q7izv8cD71__eIhuWM2a5e-qb50cfdg==
age: 384383
X-Firefox-Spdy: h2
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
200 OK 6.1 kB URL HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 02 Oct 2022 05:35:18 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 d3d7cb5a7de36091f7284546b4190a32.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: aeYF8L6Va3E9wKhzLNumD5invgd-3bpDLx9acF4nb2rUocTBUtjsjQ==
age: 55336
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4a3c58c60dbc63f8b0f148df3c60f40e
a64dd1cb52697d53fe0b77632021e0344ee6043d
8a9cc76cf97473915f5ec90beac586fdea4dd9823ef8e69eadf8e5cd511f00dd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 20:57:34 GMT
Last-Modified: Sun, 02 Oct 2022 19:16:04 GMT
Server: ECS (dcb/7EC8)
X-Cache: Miss from cloudfront
Via: 1.1 d91961fd00a0c4f7aae668984dcb62a8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: BuStDvdtOjsZpzJOyemI-v161OM1xsZ8_3dUPc_T70Y0wVwKFPa8Ig==
Age: 6090
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4a3c58c60dbc63f8b0f148df3c60f40e
a64dd1cb52697d53fe0b77632021e0344ee6043d
8a9cc76cf97473915f5ec90beac586fdea4dd9823ef8e69eadf8e5cd511f00dd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 20:57:34 GMT
Last-Modified: Sun, 02 Oct 2022 20:57:24 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 d143bdfb7cce4cf7ec0bcf9ec13e5914.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: fLP0-2vp4UrBADIJCuUova_xGRKvoty7kBMq-1yDT425Fz5zY3gaDA==
Age: 10
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4a3c58c60dbc63f8b0f148df3c60f40e
a64dd1cb52697d53fe0b77632021e0344ee6043d
8a9cc76cf97473915f5ec90beac586fdea4dd9823ef8e69eadf8e5cd511f00dd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 20:57:34 GMT
Last-Modified: Sun, 02 Oct 2022 20:01:05 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 05ec74146f636de45e985d09f62976dc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: VOEc0MZc0ypLA3xiUQogylbaGx-sgFab-7iPlwhIs3cfYoFb5Yjv8Q==
Age: 3389
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 165b2dbf56e36edf32811cc7eea70f58
f9e101da2c4f0f6dcca9cb9d0b36a7b77ef3114e
fcd8956f2d96a85e696ee4ba5eb8d575ad3319bc84c543188f3997ea1079c4e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 165b2dbf56e36edf32811cc7eea70f58
f9e101da2c4f0f6dcca9cb9d0b36a7b77ef3114e
fcd8956f2d96a85e696ee4ba5eb8d575ad3319bc84c543188f3997ea1079c4e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4a3c58c60dbc63f8b0f148df3c60f40e
a64dd1cb52697d53fe0b77632021e0344ee6043d
8a9cc76cf97473915f5ec90beac586fdea4dd9823ef8e69eadf8e5cd511f00dd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 20:57:34 GMT
Server: ECS (dcb/7F80)
X-Cache: Miss from cloudfront
Via: 1.1 aae0a3ddd306e11f8c3d25a657078704.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: wUuDGADb1mwFYHF3vV7ATvWFCkH-bbtDJWQafWD4v4ZCRSRxlDO5gw==
static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
200 OK 6.1 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
IP
Hash e8e397d7dc1d8287930a3e52bf1f1a79
c3cb7275f68d5304fdd8d61a4ca32681efbb5f2e
fb86cdcdb955b72a002cce8488dd6baebf31e669cb73836669e2298bccce26fb
GET /mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Wed, 28 Sep 2022 10:13:42 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Aug 2022 13:13:38 GMT
etag: W/"86717521366a64cd780d0b5c983fabfb"
cache-control: public, max-age=604800
x-amz-version-id: DMAqzu4VJY205UtM3714.rS1VUEIC5_i
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: 3uL4gx_vsWEoaKSiW1sro5FwffAs8dlbcmLdTTEyrWjVuiqKTc8M2w==
age: 384233
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6abe76ca28fe176c44e7475b1d5c93fb
a4a87a771c6f081e5dae3499c090551c6dd31acb
451a8f3a3e654355467b434976022b84820c25b54f7b78472635c7dc3241423f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/main_bg.webp
200 OK 40 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/main_bg.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x640, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash deb02894bd16d04c1af4311c580606f6
43af2d51f6ab751eda6f8d08e71763dea463637d
72d84ece0758c7ab64080770d563d1ac4f4052a40e83ba435a57000ebe1b8a3e
GET /mk-land/dist/images/landings/229/main_bg.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 40410
date: Fri, 30 Sep 2022 05:13:35 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:18 GMT
etag: "deb02894bd16d04c1af4311c580606f6"
cache-control: public, max-age=604800
x-amz-version-id: fnChZAz19eI8LnAm6z0gS2PlhZhp5qxB
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: -e5tdsWUYUDQm1tUN6AobOEUqYKaZn_2qjpedM4ky0JWGwDHdcqNyQ==
age: 229440
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Antivirus.webp
200 OK 10 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Antivirus.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7538120123ef2faf24b13bed7bed3cdd
624c7cffe87830654466f14c5256fa573cc2cb26
ad9e28f3ec63bf1b97ebb5ad3b86a4bf1f86f27ec19e0c039d028c5f87804dc0
GET /mk-land/dist/images/landings/229/Antivirus.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 10456
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:17 GMT
etag: "7538120123ef2faf24b13bed7bed3cdd"
cache-control: public, max-age=604800
x-amz-version-id: qRQsyeDvRCcnrBECMcynHJ2fIgEhWST7
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: RTMupeiSeb_qRv56M0ih1cBekjOzGxKajLadPNEx-de1hlWfPT0Gmw==
age: 382661
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Adware_Cleaner.webp
200 OK 5.7 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Adware_Cleaner.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b694da35aaa0a288094d249ff4ae100b
ac157eb36b23c5f0e0befb6fd297a7ef9df26150
4c7df7067374fd122d7473a726df334a3e52ec3bcb0ab89d9e545cda42f9b2e1
GET /mk-land/dist/images/landings/229/Adware_Cleaner.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 5652
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:18 GMT
etag: "b694da35aaa0a288094d249ff4ae100b"
cache-control: public, max-age=604800
x-amz-version-id: 6RgDUQxawqI5P6Z.7.T51hQrk8yyy9fb
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: pRWBFHGzyS7gz8XEl67Dtef4eM-vJAzQMHp32XTBUIbrFvoksUmM2g==
age: 382661
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Safe_Cleanup.webp
200 OK 9.5 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Safe_Cleanup.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash fd8048baa6f3ce2025943dc2c233f884
d381f6105d26a9cf8d8ed453f2ba26db2883e962
6d0c96508390e1c02c3253ac5ff6bc009f8fd690b2c43f174b93fc4642241144
GET /mk-land/dist/images/landings/229/Safe_Cleanup.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 9546
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:12 GMT
etag: "fd8048baa6f3ce2025943dc2c233f884"
cache-control: public, max-age=604800
x-amz-version-id: WHB.8.L.B5T33bZxkxk1eUwhMciPOO_C
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: 6wtpnum2kvg8ThjFZCRVQXzD3_nTYdWB63huRd2q_aEKk8sgqK0IfQ==
age: 382661
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/worldmap2.webp
200 OK 98 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/worldmap2.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0280cae7040ebf3c142e30e898b5391d
3b10d3bb666690be99a18e1a2b3b1269c4a86c1d
b9c996464eb51fbe15b3da67b686df81f2026c35c3425cbb3b3f2714b0673479
GET /mk-land/dist/images/landings/229/worldmap2.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 97924
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:09 GMT
etag: "0280cae7040ebf3c142e30e898b5391d"
cache-control: public, max-age=604800
x-amz-version-id: V10r3H1h9N2Sq8cQkAPTXX2c4XG94Rj6
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: 8EhL1tzEoJArxr1Y8V28eS_zN8GwHa_P_V6Unyt1zvrH_LlyTFiSvQ==
age: 382661
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400
200 OK 95 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400
IP
Hash 11c6a0785376d917e463a5c29787be03
d0a908d17cee9bf31cf5c168b5bc773916831a78
9c76df2956d8758918aa3c2e298dad8dbb0385ebf28a8b501dc545b0185f55ae
GET /css?family=Roboto:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 02 Oct 2022 20:57:34 GMT
date: Sun, 02 Oct 2022 20:57:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/mac-filing_bg.webp
200 OK 54 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/mac-filing_bg.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash cc457d5d07415603af911bb948127175
532e38c4069c7e63c090fc2772c4bc135e56f047
e3981215ab6db767c6c4e67c4c0b600b453fca25d614f58f5d4929221f8451b7
GET /mk-land/dist/images/landings/229/mac-filing_bg.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 54280
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:22 GMT
etag: "cc457d5d07415603af911bb948127175"
cache-control: public, max-age=604800
x-amz-version-id: VJpe9WU9AV_Xydsw1cA8h1B6zCOzSI1l
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: jpcKlk5GvviOMqvqfvXk-sn0Hq-8gX6lxCHCfgosDouKX-LSMh3Lhw==
age: 382661
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Security.webp
200 OK 1.6 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Security.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d404fb8736d61918b8205f8f9c0e31b1
71c0db3e60c3140c3615e239ebc4e6ecde112267
89184489f80824ba1ab0b9a298252ceef26b98c6ff6ff7c868e85880c4abfd5d
GET /mk-land/dist/images/landings/229/Security.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1628
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:09 GMT
etag: "d404fb8736d61918b8205f8f9c0e31b1"
cache-control: public, max-age=604800
x-amz-version-id: 6Oh9JZrLJ_J5nL4yhJIMA7ihSFxhCxvq
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: gecv3286MY2cGU0bx2v65PFKoWVIVzSgNP4DwSYcejHEH-1p7Qp-GQ==
age: 382661
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/check_mark.webp
200 OK 204 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/check_mark.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0c454a063b74d241593c9a7b85fb40e0
27614e675f7752774bf5890231470fa84586d2df
a9a7289c14f651994e9f3a78b8d114e8d94ced8a81308cbfaa29459ff7059ab4
GET /mk-land/dist/images/landings/229/check_mark.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 204
date: Wed, 28 Sep 2022 10:13:43 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:11 GMT
etag: "0c454a063b74d241593c9a7b85fb40e0"
cache-control: public, max-age=604800
x-amz-version-id: Z2sHTvBirexNafiaPhVUQQjKvlRXFlZ9
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: WTs-wFXeHXMB2c0j2SxKHBB1oETKnX3yGn9ClhrozNcciQNMbf4uVg==
age: 384232
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Cleaning.webp
200 OK 1.3 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Cleaning.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2c68008f591c3aef1f17d99754e5dbed
feec12e1ec80e7a1998a95298bb54f362e7b84fb
b031885b640ea8a8ed6d84ef11f89f1e9a335ac437b4764c603881d5cdf26f04
GET /mk-land/dist/images/landings/229/Cleaning.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1290
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:20 GMT
etag: "2c68008f591c3aef1f17d99754e5dbed"
cache-control: public, max-age=604800
x-amz-version-id: FCzpMD_2KuIcjE2XkpIlE2HDj4sNg0oA
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: kmbgjxQwAzHH9UkO-6fim36ISe1ASAdNlDO29EXrH1R4dTyEJibRzg==
age: 382661
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Privacy.webp
200 OK 1.8 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Privacy.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a11229813d5c09fb40f964fbf885051e
78cb9268ff35a740d43beaafd08c4d607d95918d
07dac36cb20133bf0e991ea4a837207d105f9a76695432263ecd58f6425f2cb2
GET /mk-land/dist/images/landings/229/Privacy.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1780
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:13 GMT
etag: "a11229813d5c09fb40f964fbf885051e"
cache-control: public, max-age=604800
x-amz-version-id: Hel7r1AdUG8GWj43_P4TvYgFEHmA4AwM
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: McJAU4ZioGrIR4QWv-73XRoOSQcbbZspMAgZjgfpLy2I4K5zFwx6jw==
age: 382661
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Optimization.webp
200 OK 1.8 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/Optimization.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash ece72a2697c3936fcc221a56fa2387ad
87ea1eab45be1ac57788ed756d47be933ec3cfdb
2306ace69404928854c89a5a03bae8aee67a0f579082adbd4f5444e62a919280
GET /mk-land/dist/images/landings/229/Optimization.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1766
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:21 GMT
etag: "ece72a2697c3936fcc221a56fa2387ad"
cache-control: public, max-age=604800
x-amz-version-id: mywQFAEP4t6bzE8tEh4vEbbFQjEofsb5
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: O32OoH8wcWPaeXqdSHDK8y7E5DwnhKJVZT8-aoW7ZfdVo-gKwVhCsw==
age: 382660
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/appesteem.webp
200 OK 2.6 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/appesteem.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c1b3eb2ec3781136a6d18df2a38548ed
93de2c8bcc6cd237563f3e6ab39e3153a2b45e2e
b15f4d9ff61ec1a1a51cce21c2ce60c381a46f96847e8053447fa742ae2b1b61
GET /mk-land/dist/images/landings/229/appesteem.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 2626
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:08 GMT
etag: "c1b3eb2ec3781136a6d18df2a38548ed"
cache-control: public, max-age=604800
x-amz-version-id: kkINjuUFRgUz5_5OIq5jLcKaSh9yRG2L
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: XLu5Mxs03bmgnm3yftJ9ChG4yU-try1Ies3ai_2GoPQRCQ-nGNWkSw==
age: 382661
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/shopper.webp
200 OK 2.8 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/shopper.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 84bf046222ac26db511ffa6eb461b1bd
f8e88eda0e81c431dc33ad36e4106426dd0651a3
20b8e375af4e0abe271de9997903bd612d1c24e9d4d71db7eef229fc59404b67
GET /mk-land/dist/images/landings/229/shopper.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 2790
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:19 GMT
etag: "84bf046222ac26db511ffa6eb461b1bd"
cache-control: public, max-age=604800
x-amz-version-id: G4_AxWczEy0GtN.Npa56cBo6orqXhRiL
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: jBkBrfKBtRczmw06a8cuWUXkPDHtHItAw45cu6ayXS3Z3slB3Nau-w==
age: 382660
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/downloads.webp
200 OK 1.8 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/downloads.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash acaf10ae4dadd8494408a312b754232d
089104a9ad380312932058cab43f3dbebe056cfd
5845704e6a3208e3cda9341d0c24c724d92aa20d907fa9548ca5ba0930a4b131
GET /mk-land/dist/images/landings/229/downloads.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1766
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:23 GMT
etag: "acaf10ae4dadd8494408a312b754232d"
cache-control: public, max-age=604800
x-amz-version-id: RE5tnqBV58EkWTMDJXZ6S2WxIxykk_WL
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: AJ_-30j8dQ64r91KdAJPsT76tk6fSFXsV4m6uTfKZs2jtyu4wmyyUQ==
age: 382660
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/229/mac.webp
200 OK 19 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/229/mac.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7bb7058bbcf4a8a16fc2a115390a6483
e107ffba5a92d48d5296ce9f570553b3f85eb69c
79e7137759d08fe3c84d0d15949839f25736d95ceb49e0bca4097f827cf9a691
GET /mk-land/dist/images/landings/229/mac.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/229/style.webp.min.css?4268790afcf2065849eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 19422
date: Wed, 28 Sep 2022 10:39:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:39:20 GMT
etag: "7bb7058bbcf4a8a16fc2a115390a6483"
cache-control: public, max-age=604800
x-amz-version-id: GAmRzovzuKJL5nFSKfJboGrpMH7xVyB7
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: MykUsNBY_EPh7uIh5KIfjK299mlvRNeFmiflGBvA3W0Y3vaXLmdn2w==
age: 382660
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6abe76ca28fe176c44e7475b1d5c93fb
a4a87a771c6f081e5dae3499c090551c6dd31acb
451a8f3a3e654355467b434976022b84820c25b54f7b78472635c7dc3241423f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
200 OK 1.8 kB URL HTTP/2 widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4154)
Hash a8a941f7dc068156715b31e54962cad0
4ee56e25135b3b62670b798483fe3678857a1b7d
10e8a6d9cae3724f92b6beabbe625e588ca3519095153ca888aa799e124f63fd
GET /trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1751
last-modified: Tue, 14 Jun 2022 14:06:43 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 02 Oct 2022 05:48:37 GMT
cache-control: max-age=86400
etag: "a8a941f7dc068156715b31e54962cad0"
x-cache: Hit from cloudfront
via: 1.1 d3d7cb5a7de36091f7284546b4190a32.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: 2uVgEB2UDC3BdXa91G4OUWb63KTVNv5tlJWXDb9NBTK-h-vXGkmPDQ==
age: 54538
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
200 OK 3.7 kB URL HTTP/2 widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (15081)
Hash 29e5bc4875511d91002c3fcf0bf5464d
6c3530ff7b521251d2b19fb03662e33b9b893f34
8760bfc59fd072c16fae232ec667a7fb2972e0870454f5b282806b7c60363cc3
GET /trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 3664
last-modified: Tue, 20 Sep 2022 08:08:24 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 02 Oct 2022 04:25:49 GMT
cache-control: max-age=86400
etag: "29e5bc4875511d91002c3fcf0bf5464d"
x-cache: Hit from cloudfront
via: 1.1 d3d7cb5a7de36091f7284546b4190a32.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: 5gDaEa4D_QKTEVy1cxoztnHDnPdsgyFASzlJTOMqEC8TwtnHe83hcA==
age: 59506
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js
200 OK 16 kB URL HTTP/2 widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (50317)
Hash 3c2cef4a08f0fe336be6859edd2acbec
09630001b3a8330a44f7f9245f16f7e750f5ccfc
503e9d598072df2784f4511c55bca4072a08453af16a19777e50a3f567f53a77
GET /trustboxes/53aa8807dec7e10d38f59f32/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 15538
last-modified: Tue, 14 Jun 2022 14:06:48 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 02 Oct 2022 05:35:16 GMT
cache-control: max-age=86400
etag: "3c2cef4a08f0fe336be6859edd2acbec"
x-cache: Hit from cloudfront
via: 1.1 d3d7cb5a7de36091f7284546b4190a32.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: UvKqdTHlyi3DZRWy_9CkxsJcpVdSQh_qZqQVhAPb-PDnxlNnEm5hgg==
age: 55339
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/main.js
200 OK 28 kB URL HTTP/2 widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/main.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (64281), with no line terminators
Hash 2e323a9f3281c48f359bf3034b2b968b
83e1c0eba2c41c14e50cde815a85f4a9d1ca6668
a0cb8cc6b3c4ba3a698d941fe4c5ad5bf5cea364ed4543f29691468751fcb7e4
GET /trustboxes/539ad60defb9600b94d7df2c/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 27798
last-modified: Tue, 20 Sep 2022 08:08:26 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 02 Oct 2022 05:57:24 GMT
cache-control: max-age=86400
etag: "2e323a9f3281c48f359bf3034b2b968b"
x-cache: Hit from cloudfront
via: 1.1 d3d7cb5a7de36091f7284546b4190a32.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: DmN0YBqK3ADOWXbXFEVUitS1BhwlvonwMNPf6OpPyr60_dR1NXrVhA==
age: 54011
X-Firefox-Spdy: h2
widget.trustpilot.com/trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=4dbb14ee00006400050fa293&locale=en-US
200 OK 392 B URL HTTP/2 widget.trustpilot.com/trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=4dbb14ee00006400050fa293&locale=en-US
IP
File type JSON data\012- , ASCII text, with very long lines (881), with no line terminators
Hash 1522b6b695085b0016f69d1311a67e6d
3273820df033c4260fcc0b8551441dcafb29237c
094ccbe2a17ce473754133049e73d2e599c2f45de8a60b57b285d3184c3987fc
GET /trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=4dbb14ee00006400050fa293&locale=en-US HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 392
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
cache-control: public,max-age=1800
date: Sun, 02 Oct 2022 20:29:38 GMT
etag: "5fd44e4158e7226768610c34dab30602"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d3d7cb5a7de36091f7284546b4190a32.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: Ut3-HtftVMUzjsB_17yBL8YRUGqDMpoPRX_G4iWJVIPzbk-ys2xLyg==
age: 1676
X-Firefox-Spdy: h2
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 426c7a9f298752f105879cd79837aa73
b9c22abd9773fa432d3dee7e81aa86dbd0c9397d
ad82c2d84c0eb7085edd62800904f4dd57b73aa73724e1e337767ab1bab0cc93
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=416
Date: Sun, 02 Oct 2022 20:57:34 GMT
Connection: keep-alive
X-N: S
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d02198b262df631fd57d491accdeb773
128357dffe99f72fc9f814b03da398eba9571f01
66bf33760bc64211c214effecd7eeaec306735000869e38610b831e0e03bf2a1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 20:57:34 GMT
Server: ECS (dcb/7F38)
X-Cache: Miss from cloudfront
Via: 1.1 d91961fd00a0c4f7aae668984dcb62a8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: 2L2e4jfljkxuxbPq6K6vsiDmGTTZVaEVq1PwUinFPlfS9NfApQSNoQ==
widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=150px&styleWidth=12%25&theme=dark&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32
204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=150px&styleWidth=12%25&theme=dark&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxImpression?locale=en-US&styleHeight=150px&styleWidth=12%25&theme=dark&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Sun, 02 Oct 2022 20:57:33 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 d3d7cb5a7de36091f7284546b4190a32.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: fnVMBCNVSmTyJh5-qMmG1lU-qnVNTtp0TbSwIbRZuz3NE40SgKazKg==
X-Firefox-Spdy: h2
widget.trustpilot.com/stats/TrustboxView?locale=en-US&styleHeight=150px&styleWidth=12%25&theme=dark&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32
204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxView?locale=en-US&styleHeight=150px&styleWidth=12%25&theme=dark&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxView?locale=en-US&styleHeight=150px&styleWidth=12%25&theme=dark&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Sun, 02 Oct 2022 20:57:33 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 d3d7cb5a7de36091f7284546b4190a32.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: _tYIATpgqf9_qdUd9CV97knKYoaKgjb0s8eZR2eY0J3bnbIoTy2Bhw==
X-Firefox-Spdy: h2
widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c
204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Sun, 02 Oct 2022 20:57:34 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 d3d7cb5a7de36091f7284546b4190a32.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: vMc8Ru98WMscEaRWhSLVwHcBBvMcFiDkZaDcD-gu66EpteYWWC-lNg==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d2c52f28457630d1351654939dc69126
11127039fe9c9fd6593d8c18db9b6e3f7c0e2ec6
c64a36619b96af1648f604c686bbbac5b9543239ad8de2bda2cf89e2965c80e5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 20:57:34 GMT
Last-Modified: Sun, 02 Oct 2022 19:15:36 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 d143bdfb7cce4cf7ec0bcf9ec13e5914.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: yNVXgL8xUz6LjetogICaqckliahismBzIItR08DLnABm8UvYV2NSeg==
Age: 6118
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d59ee7b197f347e30ac793231158927
3316937f84c08ad1857d2f663dca353e250815f0
c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11088
Expires: Mon, 03 Oct 2022 00:02:22 GMT
Date: Sun, 02 Oct 2022 20:57:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d59ee7b197f347e30ac793231158927
3316937f84c08ad1857d2f663dca353e250815f0
c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11088
Expires: Mon, 03 Oct 2022 00:02:22 GMT
Date: Sun, 02 Oct 2022 20:57:34 GMT
Connection: keep-alive
sc.lfeeder.com/lftracker_v1_ywVkO4XWPeW7Z6Bj.js
200 OK 11 kB URL HTTP/2 sc.lfeeder.com/lftracker_v1_ywVkO4XWPeW7Z6Bj.js
IP
Hash ec7a446b12fe5b4bc8fc99502e939440
e43aec053d9a6e1b870a507e4ed29ef57227ffcd
3b233b0b682dcda57fed6a60cda07909c6bc58e8edafb51b83778df5b82371eb
GET /lftracker_v1_ywVkO4XWPeW7Z6Bj.js HTTP/1.1
Host: sc.lfeeder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 28 Sep 2022 07:19:30 GMT
x-amz-version-id: kqT.TrORCc57wYjTzg_zBd.4pGamYgWS
server: AmazonS3
content-encoding: gzip
date: Sun, 02 Oct 2022 20:57:25 GMT
cache-control: max-age=3600
etag: W/"c912bdf45fcfdbbc98e971026f8350bd"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cca9137c259ad738f790039a45561cee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: h8-NXXbLAgknB50ziLctWoKhLaP_Lk2kQTDGIW72iz0k_O9APxaMvA==
age: 431
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d59ee7b197f347e30ac793231158927
3316937f84c08ad1857d2f663dca353e250815f0
c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11088
Expires: Mon, 03 Oct 2022 00:02:22 GMT
Date: Sun, 02 Oct 2022 20:57:34 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 463bdcfbec5426e18ecef83b1c373b71
2e533332ee5c49143e58dad32ee3717a39179532
2c40befd28781482b9be249a792571612d68d7045324083d2c832fa5ec42f04b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4987
x-amzn-requestid: 763edd04-7f8d-42ae-8864-482be3549958
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHpFs4oAMFbqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ca-2f7b67e85aa83b69183e62b5;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:26 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2Zoggf30lA-Kvt5QYa-IdhGePHCNiphR7pfFiOaFvL8ZkWZIaiK4pA==
via: 1.1 f4367b41311e3e9a490d7461b7b85490.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:37 GMT
etag: "2e533332ee5c49143e58dad32ee3717a39179532"
content-type: image/jpeg
age: 83337
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F589e050c-3794-45f2-a218-269b944ae739.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F589e050c-3794-45f2-a218-269b944ae739.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 11f2e40823827b62bca89d18ee279cb2
fa7e61b4f2864b8e51acb2cc887c15d5cb41ef38
c7811cb947483a033f31ff1e93b813f1bbc49b03ed78fcedab2090c71e5c4d1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F589e050c-3794-45f2-a218-269b944ae739.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: e83a86d3-f5ab-4645-92df-4b2da3d4afa3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDgmFdlIAMFzQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2d0-48c3fa150800475c790b95bd;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: f1aqkuvCub_vq9gBDgA4VL8hNf16FXzXhQjSHC1yDLISm85uOqJF9w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 22:17:57 GMT
etag: "fa7e61b4f2864b8e51acb2cc887c15d5cb41ef38"
content-type: image/jpeg
age: 81577
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash edded48f558f739287a040151349ef67
d63b6ba630736d32c364b0e6a369274b2389b7ff
33b4a459df0ba7b36b907ba96d74e08660cc75640c42a5748b97d18ec2e9d533
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11083
x-amzn-requestid: 53e2c961-bcc0-4977-8648-ee3c1aed9cde
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHRFWfIAMFhlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3c7-070212d7386d5efa1b4aa8d3;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Z1KmxHJh9QNfg5x0enkqOjbmiqHvg7nlQiMnuDuCRNWQUBFEiKELbw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:36 GMT
etag: "d63b6ba630736d32c364b0e6a369274b2389b7ff"
content-type: image/jpeg
age: 83338
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 206fb65e75dbadf119512f71e0b78402
58ff0bf8ce7528b303d28bab01a80ad721705569
56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 04:41:00 GMT
age: 58594
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18b1ba6d-ca56-4474-afa8-cd3b53cce28e.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18b1ba6d-ca56-4474-afa8-cd3b53cce28e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6047192460abf4afd600948abb5e6ee1
6d6d52fb5024e7772dd45dd459bfe3ec90cb5ce4
d1fd21a5913f6831d2128c8e9e84767d9730bf9e779da5395dc31b82a10e32e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18b1ba6d-ca56-4474-afa8-cd3b53cce28e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9340
x-amzn-requestid: e892265e-836d-4638-871f-0548eda57745
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDf8FCEoAMFyow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cc-7f39bb92066a75a90868dd03;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Sk1Dahp1gliiBIghSCZselE7-Fy45svrCk7TdmunOwNefSNqY1P1jA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:34 GMT
etag: "6d6d52fb5024e7772dd45dd459bfe3ec90cb5ce4"
content-type: image/jpeg
age: 83340
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d657f8a-70bc-42c6-9aae-1127c4403047.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d657f8a-70bc-42c6-9aae-1127c4403047.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 94d82ad8d70761f6ee1384b4183335f3
5d3389a965cfa45dab2202d89b40264368674e8a
ad495dc0ede3bfcbaebfd3bf2eb55fc5596cd7643a539e030ccce0b8a3bcf8dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d657f8a-70bc-42c6-9aae-1127c4403047.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8602
x-amzn-requestid: 89329169-bc7a-46b1-85fc-20383a85cae8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDf9GxzoAMFg0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cc-27952f8357fa25c956b1cd72;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: YDfn3Xd8m6jaBrj_M9hs4dePku_eEhJbYv3NJSHjCdAWifhBkiKUhw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 22:21:15 GMT
age: 81379
etag: "5d3389a965cfa45dab2202d89b40264368674e8a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
tr.lfeeder.com/?sid=ywVkO4XWPeW7Z6Bj&data=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
200 OK 43 B URL HTTP/2 tr.lfeeder.com/?sid=ywVkO4XWPeW7Z6Bj&data=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
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /?sid=ywVkO4XWPeW7Z6Bj&data=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 HTTP/1.1
Host: tr.lfeeder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
server: CloudFront
date: Sun, 02 Oct 2022 20:57:34 GMT
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 e029c86e892e2d8a35492f6625a1d26e.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: tm-BpzhP5Kk7zl-3dpOWGQ7ifosKeknl5CJ2N7H3tgGOESSnGJIhng==
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/favicon_ua.png
200 OK 407 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/favicon_ua.png
IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 471c1c90d41a571f14162d7a8a9c8b9c
b08dfa2783c706945451a8f4890bdb9243936e78
eb625a455a490292aa2a7101dd7b3235bc4c92df0f08349c6663df51b7b66c27
GET /mk-land/dist/images/favicon_ua.png HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 407
date: Wed, 28 Sep 2022 10:11:13 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 04 Apr 2022 09:52:27 GMT
etag: "471c1c90d41a571f14162d7a8a9c8b9c"
cache-control: public, max-age=604800
x-amz-version-id: fOjB1uVWJszrafJRMb0A4UZGtOA62i.I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: 4XtS0zFcMBaSfWzmxyzN45ObYpfhQ1PzmODDUKKHaaC2XxjTFijEnQ==
age: 384383
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 3.1 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (7751)
Hash 57efbbeb3e1d23c82b677511c67c8b0e
f927ba115ef4be362694c22850ddbdd1c1b054d1
873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 12 Aug 2022 20:23:36 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=71484
date: Sun, 02 Oct 2022 20:57:35 GMT
content-length: 3063
x-cdn: AKAM
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 3.2 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (8072), with no line terminators
Hash 9b19340ef7db3cbb26aa923adb8dbe6e
082e699bca6e80ca6c72a43f2894f4a32e785e26
c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Sun, 02 Oct 2022 21:17:35 GMT
Date: Sun, 02 Oct 2022 20:57:35 GMT
Content-Length: 3249
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 72e8c21988f5ecd736fde162321f0984
4bb9f82a2f6114b344600d920f91f1cc9260bc42
326533b2b3a8b24f0b21dbe9b94e5d9086f862ad74a1d01942fb829dff0352f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6592
Cache-Control: max-age=127774
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:35 GMT
Etag: "6339319d-1d7"
Expires: Tue, 04 Oct 2022 08:27:09 GMT
Last-Modified: Sun, 02 Oct 2022 06:37:17 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53aa134dc3b33b709b6ccf39e549055f
2e85a28ef73d7c403ad693fc8602e95fe3d803f3
877de7cadd4fc848afaac488f89ed987929505b563a03eb79e4e9d8fa0b41a0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/gtm/optimize.js?id=OPT-TVNW4WH
200 OK 42 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=OPT-TVNW4WH
IP
File type ASCII text, with very long lines (2039)
Hash 1f75284e06d42506668ad2cc13573511
6329f43fe8d73bea9d119d383297fa6d96289270
999e61598fecbd61146ece65df69e31c53b0917bb56ae44acf432e99ace26a54
GET /gtm/optimize.js?id=OPT-TVNW4WH HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 20:57:35 GMT
expires: Sun, 02 Oct 2022 20:57:35 GMT
cache-control: private, max-age=900
last-modified: Sun, 02 Oct 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41697
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e1327a02d76346c7e23d114e4e508b30
195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: v2R4ZuBAc9b9WVEurLtBHZagc3pG0xWKbI/VMVmho9k6KxXZJS9fd+6TKNWV488Tc7wYgPQCkgMru8i6No8KwA==
content-length: 26840
x-fb-trip-id: 1904183273
date: Sun, 02 Oct 2022 20:57:35 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1212352/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1212352/tfa.js
IP
File type ASCII text, with very long lines (58481)
Hash b52c604504dc239fcccbb9429beb025a
ca61a440289276fce127a2d8b6d74eab978c82d5
777018ad545513f632755d9ada5d2bd01bed95666be9da2c9a5264d47224cf61
GET /libtrc/unip/1212352/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: zQCR1y8kc0URTQnXwPjt7ah8ZnK/QvdaHeknjcw1OMhGeqxINxtEN5bV4VT/O0X61VVRqyWDr+8=
x-amz-request-id: XJJR7FZJQ3MYW4CM
x-amz-replication-status: PENDING
last-modified: Sun, 02 Oct 2022 11:41:47 GMT
etag: "42730f015ee8d2346b4394433d30eef8"
x-amz-version-id: Cb8fEF5vWogWEvq.2lvmOIbKLap5G4b.
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 02 Oct 2022 20:57:35 GMT
via: 1.1 varnish
age: 94
x-served-by: cache-bma1625-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664744255.200717,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 14
content-length: 17943
X-Firefox-Spdy: h2
app1.mackeeperaff.com/land/api/send-event
200 OK 15 kB URL HTTP/2 app1.mackeeperaff.com/land/api/send-event
IP
Hash 10fea6d07fbdeb3c1be66710b9adde45
cc0ff07cf69154945d2b5e778d9f37a6d1590415
e6b853439fd6f358407b26643989b9143f85af799fe59674bc545d119f2b1a97
Analyzer Verdict Alert quad9 Sinkholed
POST /land/api/send-event HTTP/1.1
Host: app1.mackeeperaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: uAXE3xjWwJdVNBlJf5kmaA0qq8CB2kMZ92MmFTpY
X-XSRF-TOKEN: eyJpdiI6Ikl2WFNqS0VlSUFHYjlMS0xCK2dGeUE9PSIsInZhbHVlIjoibEpDY0x1d1JcL2lXSGlwd2EzY3hIRGt1V0xhZk5nbXByc1IzT3NpTkNmRmVmWk56b0VyXC9wZkN5UjhwUFlSb1JpcWJuSG1pbGVmbzk5dElYTHBzNEhsWGY4WUZWVUdpcEV4cWx0UUpWZW5oajNSTWNqZzhEb3R1TVlaNm1laVhXeCIsIm1hYyI6ImJlMTAxYWE0OTc4NWE2ZWJhZTA4MDgwZTEzNTNiMTkyOTk2YmViODcyNDFhNTJjYzc2YzY1YTRmZmVjZmVlZDQifQ==
Content-Length: 102
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/land/229/?rtkcid=6339fb2a86dba10001b595eb&rtkcmpid=629a4807d84ecc0001368395&tid=Affiliate%20-%20RevShare+CPI%20(229)&utm_source=&utm_medium=&pubid=
Cookie: XSRF-TOKEN=eyJpdiI6Ikl2WFNqS0VlSUFHYjlMS0xCK2dGeUE9PSIsInZhbHVlIjoibEpDY0x1d1JcL2lXSGlwd2EzY3hIRGt1V0xhZk5nbXByc1IzT3NpTkNmRmVmWk56b0VyXC9wZkN5UjhwUFlSb1JpcWJuSG1pbGVmbzk5dElYTHBzNEhsWGY4WUZWVUdpcEV4cWx0UUpWZW5oajNSTWNqZzhEb3R1TVlaNm1laVhXeCIsIm1hYyI6ImJlMTAxYWE0OTc4NWE2ZWJhZTA4MDgwZTEzNTNiMTkyOTk2YmViODcyNDFhNTJjYzc2YzY1YTRmZmVjZmVlZDQifQ%3D%3D; mackeeper_session=eyJpdiI6IlRlZ1JyUmE5bWNJc0N3TmQ5KytKMHc9PSIsInZhbHVlIjoiejlJYk1CbWI0VTB3YXVMYWRqR0lcL2dWMDhDYnRKKzhYMjd2TUFWNXZWcGtSTEkzZ1REYUtUMnd3bXVucjgxMFNPakNPQU55NGFEbjhHNGFOdzRGNGVBdHRKWWl2SXlPQ292eEFZTlhwV0pjeFVLVnVTUHhRMUZmekt1NDdiZGJEIiwibWFjIjoiMjhiNzNhOWI1MTJhMGRhNmYyNTc2ZGViZWNmZDcwNjBjMDg3ZjA0ZmIyMGIwYTdhNTQ1ZWM2NzdhNWIwZWZhYiJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 20:57:34 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 179
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 0ba0c75bcb5259c960106e590c4b6faa
X-Firefox-Spdy: h2
t.adcell.com/js/trad.js
200 OK 33 kB IP
File type Unicode text, UTF-8 text, with very long lines (42403), with NEL line terminators
Hash 45ba2ebc730070198ac9df3dbf5f0460
42e36640146716e55a0072cd75bcc1ca920c410c
29d56d622af59c91f508a37c275793d832d664e80d42499074b8702cf9d625c2
GET /js/trad.js HTTP/1.1
Host: t.adcell.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: myracloud
date: Sun, 02 Oct 2022 20:57:34 GMT
content-type: text/javascript
strict-transport-security: max-age=15768000
content-encoding: gzip
vary: accept-encoding
expires: Sun, 02 Oct 2022 20:58:24 GMT
cache-control: max-age=900
etag: "myra-b460a65d"
x-cdn: 1
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 72e8c21988f5ecd736fde162321f0984
4bb9f82a2f6114b344600d920f91f1cc9260bc42
326533b2b3a8b24f0b21dbe9b94e5d9086f862ad74a1d01942fb829dff0352f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6592
Cache-Control: max-age=127774
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:35 GMT
Etag: "6339319d-1d7"
Expires: Tue, 04 Oct 2022 08:27:09 GMT
Last-Modified: Sun, 02 Oct 2022 06:37:17 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 50366815306618737b22afb3327c4db9
d362647235cb883e1a58b6d4d6e6144813667119
8b8aa0dbd637f517324351c700f038a94fc87f5444576c337f2e7c6d860e2c50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=679735867.1664744255>m=2oe9s0&aip=1&z=2051933310
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=679735867.1664744255>m=2oe9s0&aip=1&z=2051933310
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=679735867.1664744255>m=2oe9s0&aip=1&z=2051933310 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 02 Oct 2022 20:57:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8c665d81a8995febfec300bd9f554c90
aa3599f282cff5e07d5681ec4854b70a82590f6d
57cd30b987eb23f54208b51c04daefd3657fdd84325f4035817b32e4ad5b5461
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.hotjar.com/c/hotjar-190484.js?sv=7
200 OK 3.3 kB URL HTTP/2 static.hotjar.com/c/hotjar-190484.js?sv=7
IP
File type ASCII text, with very long lines (6696)
Hash aa828597177b3d58e2f1b75a032a4080
97ec077f2e10a5a778de762d8eea218cc08423ec
8dbe261093e9f4240e2625ab37e93d4ca853debb202284cc35930300fc08865c
GET /c/hotjar-190484.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Sun, 02 Oct 2022 20:57:11 GMT
cache-control: max-age=60
etag: W/7ed1f2d5fb7159417a229fadfc2bc19f
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6d424430e2badcd8859fea1f1185697a.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: 8rnZapq1dibp7Lkr7Up8Ydg0bVg22pk5xoCmNlCoECziP3KtVz4-oA==
age: 24
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 544d205b2f709e0bed39ebfc751d6187
71559b505f318323405eeb5ff59499c63e806559
692e14681ceb7536d5c09cf8700810a258b574e02e93c391e7551690111a5bc7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 50366815306618737b22afb3327c4db9
d362647235cb883e1a58b6d4d6e6144813667119
8b8aa0dbd637f517324351c700f038a94fc87f5444576c337f2e7c6d860e2c50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/g/collect?v=2&tid=G-GYTXD89N1W&cid=679735867.1664744255>m=2oe9s0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-GYTXD89N1W&cid=679735867.1664744255>m=2oe9s0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GYTXD89N1W&cid=679735867.1664744255>m=2oe9s0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://app1.mackeeperaff.com
date: Sun, 02 Oct 2022 20:57:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 544d205b2f709e0bed39ebfc751d6187
71559b505f318323405eeb5ff59499c63e806559
692e14681ceb7536d5c09cf8700810a258b574e02e93c391e7551690111a5bc7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1664744254983&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1664744254983&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3865705&time=1664744254983&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1664744254983%26url%3Dhttps%253A%252F%252Fapp1.mackeeperaff.com%252Fland%252F229%252F%253Frtkcid%253D6339fb2a86dba10001b595eb%2526rtkcmpid%253D629a4807d84ecc0001368395%2526tid%253DAffiliate%252520-%252520RevShare%252BCPI%252520%2528229%2529%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQKyvgI5XCF1CgAAAYOafXALJ1ncw872Of-FzYb3PprfHdLDNXeNcFJVEhOto7XJMr-LJgh2Vh4apQ; Max-Age=2592000; Expires=Tue, 01 Nov 2022 20:57:35 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQIHoRBNBV0A1wAAAYOafXALvaC7e4G9i8BatxE18V2_MAAJOygJpV2JBHS4H1vAflYfRrXpWmzyNUqW3L7IPg; Max-Age=2592000; Expires=Tue, 01 Nov 2022 20:57:35 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&08588773-86e1-499a-85a3-4e5073ee6e34"; domain=.linkedin.com; Path=/; Secure; Expires=Mon, 02-Oct-2023 20:57:35 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2396:u=1:x=1:i=1664744255:t=1664830655:v=2:sig=AQFAJLH0aMMZu1CPeYrSAm4d4K8LBDvc"; Expires=Mon, 03 Oct 2022 20:57:35 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXqE3n9is15BfvvSbmyWA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 35E17EB3A92447788F794DB7497BB3AC Ref B: OSL30EDGE0416 Ref C: 2022-10-02T20:57:35Z
date: Sun, 02 Oct 2022 20:57:35 GMT
content-length: 0
X-Firefox-Spdy: h2
vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Hash f6a9ca04b0687ea3c0d98e8430c8c77b
35503b2deb23091a9a9c6c68d4020dbdf879588e
8e4328ecb6b395499567369e3c227231dbdaf361f43ce315934d7a2a3abbed41
GET /box-69edcc3187336f9b0a3fbb4c73be9fe6.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1044
date: Wed, 07 Sep 2022 09:17:07 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "f6a9ca04b0687ea3c0d98e8430c8c77b"
last-modified: Wed, 07 Sep 2022 09:16:57 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 043fc2faaa02eeb59193e3fa300adb6a.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: gGIxPu5YgqETp1NF6EC19PMs83tDSI9JCXKHRb-_AX7xRUnMVCP1Bg==
age: 2202028
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 42d0bd7c48e3a0a5f71ad7f6ec8e69dd
bde6e5c6fa4828d1abb37a77df8113a9d77ac9b4
d64aaf1be6264647973a7db3ce9fbcdc1435290335d4bbcb75d011a5149524ce
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2844
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:35 GMT
Last-Modified: Sun, 02 Oct 2022 20:10:11 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
zchat.account.mackeeper.com/fonts/Moderat-Regular.otf
200 OK 64 kB URL HTTP/2 zchat.account.mackeeper.com/fonts/Moderat-Regular.otf
IP
File type OpenType font data\012- data
Hash fc51cd98c359a1aea6fccaa3e28e8b02
3f344507e29dbafa6f72f4e940f9afb78879dade
b674ca97e1fc00b76bdc3d22935f4818bb439b10e9273f163f939d82a673e046
GET /fonts/Moderat-Regular.otf HTTP/1.1
Host: zchat.account.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://zchat.account.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/font-sfnt
date: Sun, 18 Sep 2022 19:11:25 GMT
last-modified: Thu, 21 Jul 2022 09:33:57 GMT
etag: W/"548a10b46d8da152a9b6e313ad51a5ab"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bf5caee39117de5337c47c748b716e80.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: kxDe0koS_c8L5RZk6TFb9e27GncoFL7CCPWs5EvDmNjgVgulFglcJg==
age: 1215971
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 42d0bd7c48e3a0a5f71ad7f6ec8e69dd
bde6e5c6fa4828d1abb37a77df8113a9d77ac9b4
d64aaf1be6264647973a7db3ce9fbcdc1435290335d4bbcb75d011a5149524ce
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4652
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 20:57:35 GMT
Last-Modified: Sun, 02 Oct 2022 19:40:03 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
rp.liadm.com/j?dtstmp=1664744254968&aid=a-015g&se=e30&duid=f810f9c9df2c--01ged7tv44461ktqfh3qtk5msc&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI-
302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1664744254968&aid=a-015g&se=e30&duid=f810f9c9df2c--01ged7tv44461ktqfh3qtk5msc&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1664744254968&aid=a-015g&se=e30&duid=f810f9c9df2c--01ged7tv44461ktqfh3qtk5msc&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI- HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 02 Oct 2022 20:57:35 GMT
content-length: 0
trace-id: b50d2cdb65da6c40
vary: Origin
location: /j?dtstmp=1664744254968&aid=a-015g&se=e30&duid=f810f9c9df2c--01ged7tv44461ktqfh3qtk5msc&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520%28229%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI-&n3pc=true
set-cookie: lidid=ad46d25f-5dee-4e2a-879f-8443f34cfe7a; Max-Age=63072000; Expires=Tue, 01 Oct 2024 20:57:35 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1664744254968&aid=a-015g&se=e30&duid=f810f9c9df2c--01ged7tv44461ktqfh3qtk5msc&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520%28229%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI-&n3pc=true
200 OK 13 B URL HTTP/2 rp.liadm.com/j?dtstmp=1664744254968&aid=a-015g&se=e30&duid=f810f9c9df2c--01ged7tv44461ktqfh3qtk5msc&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520%28229%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI-&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?dtstmp=1664744254968&aid=a-015g&se=e30&duid=f810f9c9df2c--01ged7tv44461ktqfh3qtk5msc&tna=v2.5.0&pu=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520%28229%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk11bHRpbGF5ZXJlZCBwcm90ZWN0aW9uIHRvIGNsZWFuIHlvdXIgTWFjIG9mIG1hbHdhcmU8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJTY2FuIHlvdXIgTWFjIGZvciB2aXJ1c2VzIGFuZCBtYWx3YXJlIGluIHNlY29uZHMgYW5kIGRlbGV0ZSBpdCBpbiBhIGNsaWNrIHdpdGggTWFjS2VlcGVyLiI-&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Referer: https://app1.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 20:57:35 GMT
content-type: application/json
content-length: 13
trace-id: fbbab1061a25ccbe
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: 6a57d7e2-1bd7-4542-a1bf-f6e9f6dcea7c
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 20:57:35 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: fe414793ca43f8b5803234688f44e398
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&optOut=false&bust=07667282752357898&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&optOut=false&bust=07667282752357898&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&optOut=false&bust=07667282752357898&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 20:57:35 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 22c2d60edec05e4b0261db7a33be7e47
content-encoding: gzip
bat.bing.com/action/0?ti=36002432&Ver=2&mid=cba60d11-1008-49d8-81a8-4869dbdebb34&sid=d7471c70429411ed82c1afb51631ba78&vid=d7470840429411eda5878557ad2b06b3&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=172594
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=36002432&Ver=2&mid=cba60d11-1008-49d8-81a8-4869dbdebb34&sid=d7471c70429411ed82c1afb51631ba78&vid=d7470840429411eda5878557ad2b06b3&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=172594
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=36002432&Ver=2&mid=cba60d11-1008-49d8-81a8-4869dbdebb34&sid=d7471c70429411ed82c1afb51631ba78&vid=d7470840429411eda5878557ad2b06b3&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=172594 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2BAB9CEBB1636EE016CD8EDAB0966F7C; domain=.bing.com; expires=Fri, 27-Oct-2023 20:57:35 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 69993B32492646E1B7163266A28DF8A5 Ref B: OSL30EDGE0110 Ref C: 2022-10-02T20:57:35Z
date: Sun, 02 Oct 2022 20:57:34 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/36002432.js
200 OK 667 B URL HTTP/2 bat.bing.com/p/action/36002432.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash 672ebac5af26e4ba97a8f75d9de57cd7
0490e9d3ff05737ecd9c4c76e94b3188042d07a3
f5bcd97cb6febd75a8b1301d55fcb555df4ee6432a559c6aca91afc325ae4b26
GET /p/action/36002432.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 667
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=36FA36D01DFA6666249C24E11C0F67AD; domain=.bing.com; expires=Fri, 27-Oct-2023 20:57:35 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C1D775B1EE5B48A1A33916E38FC58861 Ref B: OSL30EDGE0110 Ref C: 2022-10-02T20:57:35Z
date: Sun, 02 Oct 2022 20:57:34 GMT
X-Firefox-Spdy: h2
zchat.account.mackeeper.com/fonts/Moderat-Bold.otf
200 OK 65 kB URL HTTP/2 zchat.account.mackeeper.com/fonts/Moderat-Bold.otf
IP
File type OpenType font data\012- data
Hash ab11ee5e2579dafef173031a567404fe
b237ab5e075e5a23cccab6dc6300aac63551d491
fcb35f9f07e23f494a1dbb15324cbc74d1ab5618fb89c265ca487220b0185c2f
GET /fonts/Moderat-Bold.otf HTTP/1.1
Host: zchat.account.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://zchat.account.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/font-sfnt
date: Thu, 25 Aug 2022 00:51:54 GMT
last-modified: Thu, 21 Jul 2022 09:33:57 GMT
etag: W/"16ee66cbb425b45365d258befb59f217"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bf5caee39117de5337c47c748b716e80.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: TRS5m7svkFF4QT8Viyp7s_2USYtmt-i9Hjt6tx8RRPoexHZgXRp_wg==
age: 3355542
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/983482265/?random=1664744255237&cv=9&fst=1664744255237&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/983482265/?random=1664744255237&cv=9&fst=1664744255237&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2644), with no line terminators
Hash ac94ed09162f292e90d5651365f1bac7
bc6860eb1dab8bf1b95adc9078365ad1d589f836
435232e6aec6497f8b8b310526fc5a8d86f8e0f08450e63ea690e5c5daa68a0c
GET /pagead/viewthroughconversion/983482265/?random=1664744255237&cv=9&fst=1664744255237&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 02 Oct 2022 20:57:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1157
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 02-Oct-2022 21:12:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1664744255240&cv=9&fst=1664744255240&num=1&fmt=3&value=0&label=9Uq1COfCvoMDEMndzuED&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1664744255240&cv=9&fst=1664744255240&num=1&fmt=3&value=0&label=9Uq1COfCvoMDEMndzuED&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1010020041/?random=1664744255240&cv=9&fst=1664744255240&num=1&fmt=3&value=0&label=9Uq1COfCvoMDEMndzuED&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 02 Oct 2022 20:57:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 02-Oct-2022 21:12:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1664744255239&cv=9&fst=1664744255239&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1664744255239&cv=9&fst=1664744255239&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2646), with no line terminators
Hash 2c72c6c05854400594b40308316e9a9c
82f8f14dedcab825e6748752e9380bc83e0f628f
e016ce1b40c36db465bd9740935b78c3ea556d5b5619847b3cd7f35d0aa674d5
GET /pagead/viewthroughconversion/1010020041/?random=1664744255239&cv=9&fst=1664744255239&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 02 Oct 2022 20:57:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1159
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 02-Oct-2022 21:12:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/957119846/?random=1664744255239&cv=9&fst=1664744255239&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&async=1
302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/957119846/?random=1664744255239&cv=9&fst=1664744255239&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&async=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/957119846/?random=1664744255239&cv=9&fst=1664744255239&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&async=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 02 Oct 2022 20:57:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-user-list/957119846/?random=1664744255239&cv=9&fst=1664740800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&async=1&is_vtc=1&random=4201996539&resp=GooglemKTybQhCsO
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 02-Oct-2022 21:12:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1664744254983%26url%3Dhttps%253A%252F%252Fapp1.mackeeperaff.com%252Fland%252F229%252F%253Frtkcid%253D6339fb2a86dba10001b595eb%2526rtkcmpid%253D629a4807d84ecc0001368395%2526tid%253DAffiliate%252520-%252520RevShare%252BCPI%252520%2528229%2529%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1664744254983%26url%3Dhttps%253A%252F%252Fapp1.mackeeperaff.com%252Fland%252F229%252F%253Frtkcid%253D6339fb2a86dba10001b595eb%2526rtkcmpid%253D629a4807d84ecc0001368395%2526tid%253DAffiliate%252520-%252520RevShare%252BCPI%252520%2528229%2529%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1664744254983%26url%3Dhttps%253A%252F%252Fapp1.mackeeperaff.com%252Fland%252F229%252F%253Frtkcid%253D6339fb2a86dba10001b595eb%2526rtkcmpid%253D629a4807d84ecc0001368395%2526tid%253DAffiliate%252520-%252520RevShare%252BCPI%252520%2528229%2529%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app1.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1664744254983&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520%28229%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&81d10e41-19cf-4274-85a3-06db504e42a7"; Domain=.linkedin.com; Expires=Mon, 02-Oct-2023 20:57:35 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202210022057351c6333e4-db6f-4f2b-8cf6-1b92e490b613AQGP_9vRYzjMmV9CSA8XoofAE8OPOBXf"; Domain=.www.linkedin.com; Expires=Mon, 02-Oct-2023 20:57:35 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjQ3NDQyNTU7MjswMjGbxNJaHkWqkCaH4FiQcoONPT/3KQsMekAlnjlcPPt7Fg==; Domain=.linkedin.com; Expires=Fri, 31 Mar 2023 20:57:35 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2400:u=1:x=1:i=1664744255:t=1664830655:v=2:sig=AQFwDOx9Ak8I95_E4XiAEoEJTkyF-CrY"; Expires=Mon, 03 Oct 2022 20:57:35 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXqE3oCqauP8XdX9JgAag==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 4CD0AF56152045F882B7AD2E1BE76176 Ref B: OSL30EDGE0416 Ref C: 2022-10-02T20:57:35Z
date: Sun, 02 Oct 2022 20:57:35 GMT
content-length: 0
X-Firefox-Spdy: h2
script.hotjar.com/modules.61e17720cf639c3e96a7.js
200 OK 66 kB URL HTTP/2 script.hotjar.com/modules.61e17720cf639c3e96a7.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash ca82760cd662a268a9b556ae44a96740
7d7e28b6029ab3449f2183a73b8f0dbb93dd9386
0e98f16bb4945f08b2f0e9be3108864e2f2db7ed792bc9049404cac6038d75d3
GET /modules.61e17720cf639c3e96a7.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 66156
date: Fri, 30 Sep 2022 07:19:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "ca82760cd662a268a9b556ae44a96740"
last-modified: Fri, 30 Sep 2022 07:18:43 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a156165ae278c5ddd408f18e7181dccc.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: XMFQhLoynTo3w3K3lqfQ63a6VXhgSKBfGctkXPmvpzXL6NHomWd19w==
age: 221909
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1664744255703&sw=1280&sh=1024&v=2.9.84&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1664744255696.209441389&it=1664744255223&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1664744255703&sw=1280&sh=1024&v=2.9.84&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1664744255696.209441389&it=1664744255223&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1664744255703&sw=1280&sh=1024&v=2.9.84&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1664744255696.209441389&it=1664744255223&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Sun, 02 Oct 2022 20:57:35 GMT
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/854379023/?random=1664744255235&cv=9&fst=1664744255235&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/854379023/?random=1664744255235&cv=9&fst=1664744255235&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2644), with no line terminators
Hash 05a8216fe0668e0ecc4c1cd307a2029e
ae3d569eb7645e70758e08614e82161c53f95d0e
45a6a0547a602dbbd308ca60546e8907f14590788599973c3af4f45117ebfb2c
GET /pagead/viewthroughconversion/854379023/?random=1664744255235&cv=9&fst=1664744255235&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&auid=455537601.1664744254&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 02 Oct 2022 20:57:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1159
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 02-Oct-2022 21:12:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Sun%2C%2002%20Oct%202022%2020%3A57%3A35%20GMT&n=0&b=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&.yp=10013499&f=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Sun%2C%2002%20Oct%202022%2020%3A57%3A35%20GMT&n=0&b=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&.yp=10013499&f=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Sun%2C%2002%20Oct%202022%2020%3A57%3A35%20GMT&n=0&b=Multilayered%20protection%20to%20clean%20your%20Mac%20of%20malware&.yp=10013499&f=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 20:57:35 GMT
expires: Sun, 02 Oct 2022 20:57:35 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBD_7OWMCEH5-3OWuIk1QmwIWRHX1ASgFEgEBAQFMO2NDYwAAAAAA_eMAAA&S=AQAAAvSkpSesKwRupQcpWnEeioM; Expires=Tue, 3 Oct 2023 02:57:35 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/36002432
200 OK 1.9 kB URL HTTP/2 www.clarity.ms/tag/uet/36002432
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (1855), with no line terminators
Hash cc3de49047c8d60fca1dcc3a954c7a52
f08854b363b5c42eba20c3105ca6e8631523174c
0dfb12beaf0b1b4059b65400a9a86a93ed228cd5624e936da850b1369adf63fc
GET /tag/uet/36002432 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-length: 1855
content-type: application/x-javascript
expires: -1
set-cookie: CLID=4afa28c1aa3441d4b08b99e50c8061dd.20221002.20231002; expires=Mon, 02 Oct 2023 20:57:35 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:bdfb7149-d2ee-45f0-9a22-f0b1c5035608
x-cache: CONFIG_NOCACHE
x-azure-ref: 0P/s5YwAAAAB+89ol2ueJTZWbbMX1FzAPT1NMMjMxMDUwMjAzMDA5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Sun, 02 Oct 2022 20:57:35 GMT
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1664744254983&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520%28229%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1664744254983&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520%28229%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3865705&time=1664744254983&url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520%28229%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app1.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&66858c9b-8e37-40d3-80ac-599b40c9895d"; domain=.linkedin.com; Path=/; Secure; Expires=Mon, 02-Oct-2023 20:57:36 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2400:u=1:x=1:i=1664744256:t=1664830656:v=2:sig=AQFmlKb92Ensew1TNyFOGCzfmcQr2YeA"; Expires=Mon, 03 Oct 2022 20:57:36 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXqE3oFLycEA7BLHjXS4A==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: AEAA0E2DA98941D8871948EBC9493674 Ref B: OSL30EDGE0416 Ref C: 2022-10-02T20:57:35Z
date: Sun, 02 Oct 2022 20:57:35 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 55357a586bee6e1df8493f5b4a47cd96
4809fff87e91133ab9c2d95cd0c3b3cc6386ddd8
056e3d2a4dd8c1155b4f6e3c62df0a5ee0b5c10c57f46258d3685d83966ed3b9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 20:57:36 GMT
Last-Modified: Sun, 02 Oct 2022 19:56:39 GMT
Server: ECS (bsa/EB1F)
X-Cache: Miss from cloudfront
Via: 1.1 05ec74146f636de45e985d09f62976dc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: lgq-LE0FwYOjuosgqhfWrydC35_ribfasq_zJDe9xy0LOi88bwVD5g==
Age: 3657
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1657
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Sun, 02 Oct 2022 20:57:36 GMT
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=B43F39343DAA4D049E8E792D9FBAA37E&RedC=c.clarity.ms&MXFR=0B6BAC6AA1F36F521097BE5BA5F3611F
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=0B6BAC6AA1F36F521097BE5BA5F3611F; domain=.clarity.ms; expires=Fri, 27-Oct-2023 20:57:36 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Sun, 02 Oct 2022 20:57:36 GMT
content-length: 0
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 22134
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Sun, 02 Oct 2022 20:57:36 GMT
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.42/clarity.js
200 OK 24 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.42/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (54141)
Hash 31104d4f759f45b25b3943837dc288ab
19422ff1ef6145f3bf9676edc1de3331f68fa582
331b33c8de0cc108d1f1bc50387b588dec065209f6d289fd0e5f33070dc58d88
GET /eus2/s/0.6.42/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8d4495324d7d4"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0QPs5YwAAAADOtmbNdcXaSID6L/wNu0p0T1NMMjMxMDUwMjAzMDA5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Sun, 02 Oct 2022 20:57:35 GMT
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=B43F39343DAA4D049E8E792D9FBAA37E&RedC=c.clarity.ms&MXFR=0B6BAC6AA1F36F521097BE5BA5F3611F
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=B43F39343DAA4D049E8E792D9FBAA37E&RedC=c.clarity.ms&MXFR=0B6BAC6AA1F36F521097BE5BA5F3611F
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=B43F39343DAA4D049E8E792D9FBAA37E&RedC=c.clarity.ms&MXFR=0B6BAC6AA1F36F521097BE5BA5F3611F HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app1.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=B43F39343DAA4D049E8E792D9FBAA37E&MUID=3E10B352D12C680B121BA163D0D9693F
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=3E10B352D12C680B121BA163D0D9693F; domain=c.bing.com; expires=Fri, 27-Oct-2023 20:57:36 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 13648A3FA0E64D139EE35B562A556E1C Ref B: OSL30EDGE0110 Ref C: 2022-10-02T20:57:36Z
date: Sun, 02 Oct 2022 20:57:36 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=B43F39343DAA4D049E8E792D9FBAA37E&MUID=3E10B352D12C680B121BA163D0D9693F
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=B43F39343DAA4D049E8E792D9FBAA37E&MUID=3E10B352D12C680B121BA163D0D9693F
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=B43F39343DAA4D049E8E792D9FBAA37E&MUID=3E10B352D12C680B121BA163D0D9693F HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app1.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Tue, 13 Sep 2022 19:54:52 GMT
accept-ranges: bytes
etag: "8d3298b0aac7d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Sun, 02-Oct-2022 21:07:36 GMT; path=/; SameSite=None; Secure;
date: Sun, 02 Oct 2022 20:57:36 GMT
content-length: 42
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=1555&scd=19&ssd=1&est=1664744255251&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1664744256808&vi=1664744255249&ri=9482259e6a70280a987dd2ee73ae4c10&ref=null&cv=20221002-6-RELEASE&item-url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=1555&scd=19&ssd=1&est=1664744255251&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1664744256808&vi=1664744255249&ri=9482259e6a70280a987dd2ee73ae4c10&ref=null&cv=20221002-6-RELEASE&item-url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=1555&scd=19&ssd=1&est=1664744255251&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1664744256808&vi=1664744255249&ri=9482259e6a70280a987dd2ee73ae4c10&ref=null&cv=20221002-6-RELEASE&item-url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 02 Oct 2022 20:57:37 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=4558&scd=19&ssd=1&est=1664744255251&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1664744259811&vi=1664744255249&ri=9482259e6a70280a987dd2ee73ae4c10&ref=null&cv=20221002-6-RELEASE&item-url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=4558&scd=19&ssd=1&est=1664744255251&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1664744259811&vi=1664744255249&ri=9482259e6a70280a987dd2ee73ae4c10&ref=null&cv=20221002-6-RELEASE&item-url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=4558&scd=19&ssd=1&est=1664744255251&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1664744259811&vi=1664744255249&ri=9482259e6a70280a987dd2ee73ae4c10&ref=null&cv=20221002-6-RELEASE&item-url=https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 02 Oct 2022 20:57:40 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT.otf
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT.otf
IP
GET /mk-land/dist/fonts/MarkOT.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Wed, 28 Sep 2022 10:28:29 GMT
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"106ae5fa4d0e51fa73ed42c3beecda5e"
cache-control: public, max-age=604800
x-amz-version-id: Eju.irxG68JYjYuEi7BGXEsqN0F4MTaA
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: 6-mCmZ309Va3NZnmBc30mKhLa175nR5zU-Faymcyv_bbML4eLRjMGQ==
age: 383346
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Bold.otf
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Bold.otf
IP
GET /mk-land/dist/fonts/MarkOT-Bold.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Wed, 28 Sep 2022 10:28:29 GMT
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
etag: W/"336e38c18c3ac1666fa496c919b08eca"
cache-control: public, max-age=604800
x-amz-version-id: _SyAJ1U0XNp0EgWFZoSm7jR1ZmFIsGhh
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: qmKQ_LYBhZp8G2OXyJtPfZGGXXTyTe6wvqkLHGp3FDu01iMegPXcRw==
age: 383346
X-Firefox-Spdy: h2
widget.trustpilot.com/trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20
200 OK 0 B URL HTTP/2 widget.trustpilot.com/trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20
IP
GET /trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
date: Sun, 02 Oct 2022 20:57:25 GMT
cache-control: public,max-age=1800
etag: "4aa8f6bf27bd5b633bcda94ef8d64c50"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d3d7cb5a7de36091f7284546b4190a32.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: u3sBUNG5syEHt9-rFWyXcR_9fdE0lcQy4A1wuvTNrT_KOiv0OCyXEg==
age: 679
X-Firefox-Spdy: h2
b-code.liadm.com/a-015g.min.js
200 OK 0 B URL HTTP/2 b-code.liadm.com/a-015g.min.js
IP
GET /a-015g.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 02 Oct 2022 04:31:50 GMT
cache-control: public, max-age=86400
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 084f866feba2345e668d9a32662696ce.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: RsHdPVZFMY6kHo8CRtA-8ifJiItRD1A67GszUtQHQnnbNqSSjQ3NsQ==
age: 59144
X-Firefox-Spdy: h2
app1.mackeeperaff.com/land/api/send-event
200 OK 0 B URL HTTP/2 app1.mackeeperaff.com/land/api/send-event
IP
Analyzer Verdict Alert quad9 Sinkholed
POST /land/api/send-event HTTP/1.1
Host: app1.mackeeperaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: uAXE3xjWwJdVNBlJf5kmaA0qq8CB2kMZ92MmFTpY
X-XSRF-TOKEN: eyJpdiI6Ikl2WFNqS0VlSUFHYjlMS0xCK2dGeUE9PSIsInZhbHVlIjoibEpDY0x1d1JcL2lXSGlwd2EzY3hIRGt1V0xhZk5nbXByc1IzT3NpTkNmRmVmWk56b0VyXC9wZkN5UjhwUFlSb1JpcWJuSG1pbGVmbzk5dElYTHBzNEhsWGY4WUZWVUdpcEV4cWx0UUpWZW5oajNSTWNqZzhEb3R1TVlaNm1laVhXeCIsIm1hYyI6ImJlMTAxYWE0OTc4NWE2ZWJhZTA4MDgwZTEzNTNiMTkyOTk2YmViODcyNDFhNTJjYzc2YzY1YTRmZmVjZmVlZDQifQ==
Content-Length: 100
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/land/229/?rtkcid=6339fb2a86dba10001b595eb&rtkcmpid=629a4807d84ecc0001368395&tid=Affiliate%20-%20RevShare+CPI%20(229)&utm_source=&utm_medium=&pubid=
Cookie: XSRF-TOKEN=eyJpdiI6Ikl2WFNqS0VlSUFHYjlMS0xCK2dGeUE9PSIsInZhbHVlIjoibEpDY0x1d1JcL2lXSGlwd2EzY3hIRGt1V0xhZk5nbXByc1IzT3NpTkNmRmVmWk56b0VyXC9wZkN5UjhwUFlSb1JpcWJuSG1pbGVmbzk5dElYTHBzNEhsWGY4WUZWVUdpcEV4cWx0UUpWZW5oajNSTWNqZzhEb3R1TVlaNm1laVhXeCIsIm1hYyI6ImJlMTAxYWE0OTc4NWE2ZWJhZTA4MDgwZTEzNTNiMTkyOTk2YmViODcyNDFhNTJjYzc2YzY1YTRmZmVjZmVlZDQifQ%3D%3D; mackeeper_session=eyJpdiI6IlRlZ1JyUmE5bWNJc0N3TmQ5KytKMHc9PSIsInZhbHVlIjoiejlJYk1CbWI0VTB3YXVMYWRqR0lcL2dWMDhDYnRKKzhYMjd2TUFWNXZWcGtSTEkzZ1REYUtUMnd3bXVucjgxMFNPakNPQU55NGFEbjhHNGFOdzRGNGVBdHRKWWl2SXlPQ292eEFZTlhwV0pjeFVLVnVTUHhRMUZmekt1NDdiZGJEIiwibWFjIjoiMjhiNzNhOWI1MTJhMGRhNmYyNTc2ZGViZWNmZDcwNjBjMDg3ZjA0ZmIyMGIwYTdhNTQ1ZWM2NzdhNWIwZWZhYiJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 20:57:35 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 176
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 9f43535a11f688693f6346bfc2a49b2d
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/229/script.min.js?87420cf5c72538ab7bea
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/229/script.min.js?87420cf5c72538ab7bea
IP
GET /mk-land/dist/229/script.min.js?87420cf5c72538ab7bea HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 02 Oct 2022 06:23:15 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 22 Sep 2022 08:31:37 GMT
etag: W/"50754b2252f3e0ef75e96ee9d0a9bb1b"
cache-control: public, max-age=604800
x-amz-version-id: L6AyAD3l86ESWbiiks4t3VOCGWqAuoYk
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: SaEcc1bcutlmUMviTgYw0eNnKr5Gru7rhZHTl9VsSSUj71xQnzkugg==
age: 52460
X-Firefox-Spdy: h2
zchat.account.mackeeper.com/js/zchat.js
200 OK 0 B URL HTTP/2 zchat.account.mackeeper.com/js/zchat.js
IP
GET /js/zchat.js HTTP/1.1
Host: zchat.account.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 30 Sep 2022 07:15:47 GMT
last-modified: Thu, 21 Jul 2022 09:33:57 GMT
etag: W/"38c06b90253f915d7e6b17ee2a85c17c"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bf5caee39117de5337c47c748b716e80.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: Cy6bep2AyCrAWT0GtsV106mkkvcX15qD4fPh_hZKR1_1ZgeY5O8Hgw==
age: 222108
X-Firefox-Spdy: h2
zchat.account.mackeeper.com/theme/zchat.css?ver=395562
200 OK 0 B URL HTTP/2 zchat.account.mackeeper.com/theme/zchat.css?ver=395562
IP
GET /theme/zchat.css?ver=395562 HTTP/1.1
Host: zchat.account.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Fri, 26 Aug 2022 07:32:29 GMT
last-modified: Thu, 21 Jul 2022 09:33:57 GMT
etag: W/"b0ab2838d417636ab90440dd45e70d60"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bf5caee39117de5337c47c748b716e80.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: 1Dnece17EGOsbqwFV7txhlAec4qet9jwe_Wh_4BNspdDUUW630J1JQ==
age: 3245106
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/components/logo/mk-logo-ua.svg
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/components/logo/mk-logo-ua.svg
IP
GET /mk-land/dist/svg/components/logo/mk-logo-ua.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 28 Sep 2022 10:11:12 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Apr 2022 14:50:37 GMT
etag: W/"0443bcb5ae8253499f7df7f80c45fc8c"
cache-control: public, max-age=604800
x-amz-version-id: sx6d65Ik.60EPUJCncti20jd8v0DNMRK
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: FyttfWI4mVMX_dkJCF1co05QHSM-zl7jUspu0wNWwKR5INVfoEGSMg==
age: 384383
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/190484/visit-data?sv=7
200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/190484/visit-data?sv=7
IP
POST /api/v2/client/sites/190484/visit-data?sv=7 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 147
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 20:57:36 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
app1.mackeeperaff.com/land/229/?rtkcid=6339fb2a86dba10001b595eb&rtkcmpid=629a4807d84ecc0001368395&tid=Affiliate%20-%20RevShare+CPI%20(229)&utm_source=&utm_medium=&pubid=
200 OK 0 B URL HTTP/2 app1.mackeeperaff.com/land/229/?rtkcid=6339fb2a86dba10001b595eb&rtkcmpid=629a4807d84ecc0001368395&tid=Affiliate%20-%20RevShare+CPI%20(229)&utm_source=&utm_medium=&pubid=
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /land/229/?rtkcid=6339fb2a86dba10001b595eb&rtkcmpid=629a4807d84ecc0001368395&tid=Affiliate%20-%20RevShare+CPI%20(229)&utm_source=&utm_medium=&pubid= HTTP/1.1
Host: app1.mackeeperaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 02 Oct 2022 20:57:33 GMT
content-type: text/html; charset=UTF-8
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
content-security-policy: default-src 'self' *.hotjar.com *.mackeeper.com;frame-ancestors 'none';frame-src 'self' 'unsafe-inline' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com *.surveygizmo.com *.liadm.com *.typeform.com mc.yandex.ru *.js.ad-score.com *.cdn.onesignal.com *.onesignal.com *.criteo.com static-cdn.mackeeper.com;child-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com blob: *.cdn.onesignal.com *.onesignal.com *.liadm.com static-cdn.mackeeper.com;form-action 'self' *.mackeeper.com *.facebook.com;img-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com data: *.2mdn.net *.pagead2.googlesyndication.com *.glotgrx.com *.lporirxe.com *.exelator.com *.owox.com *.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.yahoo.co.jp *.apimzb-adserver.cloudmccloud.com *.3lift.com *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com mc.yandex.ru cx.atdmt.com *.baidu.com *.gstatstrk.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.zoomsupport.com *.cloudmccloud.com linkconnector.com *.linkconnector.com *.linkedin.com https://p.adsymptotic.com *.clarity.ms *.lfeeder.com static-cdn.mackeeper.com *.imcounting.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com disqus.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com l2.io *.inspectlet.com *.googlesyndication.com *.sagetrc.com *.glotgrx.com *.lporirxe.com b-code.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.cloudfront.net *.yimg.jp *.addtocalendar.com *.yahoo.co.jp blob: *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com *.s.ytimg.com *.typeform.com *.calendly.com *.linkconnector.com mc.yandex.ru *.js.ad-score.com *.baidu.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.engine.4dsply.com *.engine.spotscenered.info *.engine.3dspk.com *.we3red.com *.engine.asadap.com *.engine.nictelroalps.com *.engine.liondigitalserving.com *.engine.addroplet.com *.beritapria.com cdnjs.cloudflare.com *.clickcease.com *.sentry-cdn.com *.criteo.net *.criteo.com https://snpa.licdn.com linkconnector.com *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com *.licdn.com *.liadm.com *.clarity.ms *.adcell.com *.lfeeder.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;style-src 'self' 'unsafe-inline' *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.a.disquscdn.com *.disqus.com *.googleapis.com *.fonts.gstatic.com *.referrer.disqus.com *.google.com *.google.com.ua *.addtocalendar.com *.surveygizmo.com *.cdn.onesignal.com *.onesignal.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com *.googletagmanager.com;font-src 'self' data: *.doubleclick.net *.mackeeper.com *.twimg.com *.twitter.com fonts.googleapis.com fonts.gstatic.com *.surveygizmo.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;object-src *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.pagead2.googlesyndication.com *.liadm.com static-cdn.mackeeper.com;connect-src 'self' *.mackeeper.com *.hotjar.com ws://*.hotjar.com wss://*.hotjar.com *.g.doubleclick.net *.lcidc.liadm.com *.google-analytics.com *.api.ipify.org *.mc.yandex.ru mc.yandex.ru *.data.ad-score.com *.baidu.com *.pushdata.onesignal.com:* *.onesignal.com *.taboola.com *.hotjar.io *.clickcease.com s.yimg.com *.facebook.com *.google.com bat.bing.com sentry.cloudmccloud.com *.liadm.com *.macupdate.com https://api.account.mackeeper.com https://api.account.sz.mackeeper.com https://api-ne.mackeeper.com *.adcell.com *.clarity.ms *.lfeeder.com *.static-cdn.mackeeper.com https://crm.account.mackeeper.com https://chat-crm.account.mackeeper.com static-cdn.mackeeper.com
set-cookie: XSRF-TOKEN=eyJpdiI6Ikl2WFNqS0VlSUFHYjlMS0xCK2dGeUE9PSIsInZhbHVlIjoibEpDY0x1d1JcL2lXSGlwd2EzY3hIRGt1V0xhZk5nbXByc1IzT3NpTkNmRmVmWk56b0VyXC9wZkN5UjhwUFlSb1JpcWJuSG1pbGVmbzk5dElYTHBzNEhsWGY4WUZWVUdpcEV4cWx0UUpWZW5oajNSTWNqZzhEb3R1TVlaNm1laVhXeCIsIm1hYyI6ImJlMTAxYWE0OTc4NWE2ZWJhZTA4MDgwZTEzNTNiMTkyOTk2YmViODcyNDFhNTJjYzc2YzY1YTRmZmVjZmVlZDQifQ%3D%3D; expires=Sun, 02-Oct-2022 22:57:33 GMT; Max-Age=7200; path=/; secure; samesite=lax
mackeeper_session=eyJpdiI6IlRlZ1JyUmE5bWNJc0N3TmQ5KytKMHc9PSIsInZhbHVlIjoiejlJYk1CbWI0VTB3YXVMYWRqR0lcL2dWMDhDYnRKKzhYMjd2TUFWNXZWcGtSTEkzZ1REYUtUMnd3bXVucjgxMFNPakNPQU55NGFEbjhHNGFOdzRGNGVBdHRKWWl2SXlPQ292eEFZTlhwV0pjeFVLVnVTUHhRMUZmekt1NDdiZGJEIiwibWFjIjoiMjhiNzNhOWI1MTJhMGRhNmYyNTc2ZGViZWNmZDcwNjBjMDg3ZjA0ZmIyMGIwYTdhNTQ1ZWM2NzdhNWIwZWZhYiJ9; expires=Sun, 02-Oct-2022 22:57:33 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax
get_params_landings=%7B%22rtkcid%22%3A%226339fb2a86dba10001b595eb%22%2C%22rtkcmpid%22%3A%22629a4807d84ecc0001368395%22%2C%22tid%22%3A%22Affiliate%20-%20RevShare%20CPI%20%28229%29%22%2C%22utm_source%22%3A%22%22%2C%22utm_medium%22%3A%22%22%2C%22pubid%22%3A%22%22%7D; expires=Mon, 03-Oct-2022 20:57:33 GMT; Max-Age=86400; path=/; domain=.mackeeper.com; secure; samesite=lax
globalAffid=mc-6339fb2af8c0eaf251c70b9c; expires=Fri, 31-Mar-2023 20:57:33 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax
country=NO; expires=Fri, 31-Mar-2023 20:57:33 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: ee05556092a70e7246dae5434384e47a
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/critical/script.min.js?e7cf19f3a210c6c6b206
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/critical/script.min.js?e7cf19f3a210c6c6b206
IP
GET /mk-land/dist/critical/script.min.js?e7cf19f3a210c6c6b206 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 28 Sep 2022 10:11:12 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 22 Sep 2022 08:31:47 GMT
etag: W/"4b345b7c24a7ebb374b458ba77f2ebc3"
cache-control: public, max-age=604800
x-amz-version-id: Zb_eOpssY4YuKooiuyx_lIGBxSDfD9O3
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: skCwhC95HmktNzjOHsJX-fP7zUM7L1Dy8Ys-ZzwV4ioWW8EX3VuODw==
age: 384383
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Light.otf
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Light.otf
IP
GET /mk-land/dist/fonts/MarkOT-Light.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Sat, 01 Oct 2022 02:46:04 GMT
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"48dd0f49a4207634e9062def9074a038"
cache-control: public, max-age=604800
x-amz-version-id: 0k6awkdioEQDqMMUsMLLZL0d1S0LNdte
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: b9I162HhEqqMgsk0WZ2sM5Pee7nbnlZVDRrJiUaLz-ekrnA5hHMG7w==
age: 151891
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Medium.otf
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Medium.otf
IP
GET /mk-land/dist/fonts/MarkOT-Medium.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app1.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Wed, 28 Sep 2022 10:28:30 GMT
access-control-allow-origin: https://app1.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
etag: W/"44a8a536b53be74bb2ebfc4fa3403364"
cache-control: public, max-age=604800
x-amz-version-id: adnRDSe0awZldw3c8I6M4tTQa_wDyvz_
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 8e4700eb43d0f5579f360cfc02e71fac.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: 1XGUlgAyxh29Hal5hzID9Xm_75h-y9HGs9ZOVyeZ-VE-5KjhplsNxQ==
age: 383344
X-Firefox-Spdy: h2
trc.taboola.com/1212352/trc/3/json?tim=1664744255254&data=%7B%22id%22%3A20%2C%22ii%22%3A%22%2Fland%2F229%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1664744255249%2C%22cv%22%3A%2220221002-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1664744255254%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A19%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1212352/trc/3/json?tim=1664744255254&data=%7B%22id%22%3A20%2C%22ii%22%3A%22%2Fland%2F229%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1664744255249%2C%22cv%22%3A%2220221002-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1664744255254%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A19%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1212352/trc/3/json?tim=1664744255254&data=%7B%22id%22%3A20%2C%22ii%22%3A%22%2Fland%2F229%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1664744255249%2C%22cv%22%3A%2220221002-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1664744255254%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp1.mackeeperaff.com%2Fland%2F229%2F%3Frtkcid%3D6339fb2a86dba10001b595eb%26rtkcmpid%3D629a4807d84ecc0001368395%26tid%3DAffiliate%2520-%2520RevShare%2BCPI%2520(229)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A19%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app1.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sun, 02 Oct 2022 20:57:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1625-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664744256.779367,VS0,VE97
vary: Accept-Encoding
x-vcl-time-ms: 97
X-Firefox-Spdy: h2
18.215.214.239
23.36.77.32
31.13.72.12
141.226.228.48
93.184.220.29
185.5.82.77
212.82.100.181
0.0.0.0