GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
 143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 24 Oct 2022 03:52:56 GMT
Expires: Mon, 24 Oct 2022 04:22:28 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5PgZ1mf8DjLn5ozFKo0C5LYG8ieXdSjo710Yr5a9jSy-YrtnBoiCrg==
Age: 1917
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
 23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "750BBA81910A4BBD78AB484BA03781A36459A0AEC147D7C47424E9A9BF152B40"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2500
Expires: Mon, 24 Oct 2022 05:06:33 GMT
Date: Mon, 24 Oct 2022 04:24:53 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "82D9EE4948FCE839F7EDB1F8490C4213CDED3912464A4169B0BF6A61278694BD"
Last-Modified: Sat, 22 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2547
Expires: Mon, 24 Oct 2022 05:07:20 GMT
Date: Mon, 24 Oct 2022 04:24:53 GMT
Connection: keep-alive
|
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
x-amz-id-2: IHKr9Jl8S2rdQPxsw/kBLjv/Cz0T2rAyATWfi8gzviMjkc4FtqjYVok46W34Y4fCiRVE1uJlwdE=
x-amz-request-id: J706SEYQYPTHS5EQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 24 Oct 2022 04:08:22 GMT
age: 991
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.117.237.239
HTTP/2 200 OK
content-type: application/json
server: nginx
date: Mon, 24 Oct 2022 04:24:53 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=137491
Date: Mon, 24 Oct 2022 04:24:53 GMT
Etag: "635589a8-1d7"
Expires: Tue, 25 Oct 2022 18:36:24 GMT
Last-Modified: Sun, 23 Oct 2022 18:36:24 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: snDZjqnXkxO31eAt8GKCc-57qgTqaiXPKLf1oc8gxCJm2c9Rxu_hrw==
|
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Mon, 24 Oct 2022 03:33:32 GMT
Expires: Mon, 24 Oct 2022 03:52:18 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FyQNcZJqaEDllafn7mEVZezndrGNGT8wVZVZnVEjwrBTmwuA0jcxkw==
Age: 3081
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Age: 809
Cache-Control: max-age=100518
Date: Mon, 24 Oct 2022 04:24:54 GMT
Etag: "6354f613-1d7"
Expires: Tue, 25 Oct 2022 08:20:12 GMT
Last-Modified: Sun, 23 Oct 2022 08:06:43 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
|
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RZnAZbdI2bF7sMRwlly0Kw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
|
54.186.209.73
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: R/L/DFeQ4WiHSL+0Wc8GLlmMDo0=
|
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=101375
Date: Mon, 24 Oct 2022 04:24:54 GMT
Etag: "6354f4c5-1d7"
Expires: Tue, 25 Oct 2022 08:34:29 GMT
Last-Modified: Sun, 23 Oct 2022 08:01:09 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: p9bDki4Sa3EtoWjiFB9CnC5Ll_l4z1UVdm0vjoXomNbX93Bnl71Vgg==
Age: 2000
|
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=101375
Date: Mon, 24 Oct 2022 04:24:54 GMT
Etag: "6354f4c5-1d7"
Expires: Tue, 25 Oct 2022 08:34:29 GMT
Last-Modified: Sun, 23 Oct 2022 08:01:09 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qZ7LIcBYuU0wvrLL6c9-TiC1H7SmCNP6-80vbSnRqbyVNVvHatR6RQ==
Age: 2000
|
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=102345
Date: Mon, 24 Oct 2022 04:24:54 GMT
Etag: "6354f4c5-1d7"
Expires: Tue, 25 Oct 2022 08:50:39 GMT
Last-Modified: Sun, 23 Oct 2022 08:01:09 GMT
Server: ECS (dcb/7F17)
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rMEzLcgkn2iCVfjuzdaH-SHZmclbiGO3xoXKf0c4tCAAfFPCqdr6Jw==
Age: 2970
|
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=99385
Date: Mon, 24 Oct 2022 04:24:54 GMT
Etag: "6354f4c5-1d7"
Expires: Tue, 25 Oct 2022 08:01:19 GMT
Last-Modified: Sun, 23 Oct 2022 08:01:09 GMT
Server: ECS (nyb/1D1C)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kn9jkGBtYVO2fkINrNiUeuzJj1wAEZWcnUAkLgjITX6wAT-hTQk7TQ==
Age: 10
|
GET /mk-land/dist/svg/landings/226_6/soft_two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 416
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "9cab428314b3d6d14b27b1c135719c23"
cache-control: public, max-age=604800
x-amz-version-id: 9Nz90cyOwx1KpcUWe9_.hucQaEGthL8K
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TmWKMddUfR7K4IfLeyp9r812RQKsT_f43RyK2Rmzq8XC4KNotcrRMg==
age: 416116
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/per_one.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 539
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:55 GMT
etag: "97ea212e1de4543eabca9fd8ddd404de"
cache-control: public, max-age=604800
x-amz-version-id: GTHRvt.ZAHuYF0OtDGQPKnnMNAS2EieE
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PvBQOBeIOOJggcJEI1mHdqMquuGtObFV61ygrv4wOwiYqw98WZsGKg==
age: 416116
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/per_two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 573
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: "f7c01b4f32eceacb4bf0a84f301505c6"
cache-control: public, max-age=604800
x-amz-version-id: INeeTgMqzakR5LaDcvWPGvpXq9_xSm8Q
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wTp1UivcUNnWtA8K4oA6B_Dctwcr7wLjVJnspujX2vDXGdYQcvRU-g==
age: 416116
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/per_three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 720
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:53 GMT
etag: "6827d895741abaebbe73a96f65d28344"
cache-control: public, max-age=604800
x-amz-version-id: mvoCbEizAhsFLH5wdS2MZYQ3AAtx74.A
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q1kPZVoZxEUBy0f8dxFAsUrPhrBMG8e8rgknXthyggYjrNYKNVDTyQ==
age: 416116
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/ant_one.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 432
date: Wed, 19 Oct 2022 08:54:10 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: "48ee3a2cc5a7ac742bd440d7c5497fa3"
cache-control: public, max-age=604800
x-amz-version-id: zITGxENkluD_hWywsBv_mgYkXnAZakoF
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kJQv84TXaHFSMYNN2fcbZboBx5lBzOszwdrsis6RKwt2T-nryZQ74w==
age: 415845
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/security-two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 442
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "1dc4abe3aa5d009df49fbf517f481ccc"
cache-control: public, max-age=604800
x-amz-version-id: JYyDmy0JzcCA_htBP3.Yy0AadPOSkqdB
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y-SjsrqT94pMd7qVZkHqXz63fD5vCjcNBXfku30njYkeU2MgthyHlw==
age: 416116
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/soft_four.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 399
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:57 GMT
etag: "bc4849c8d35e6a210935e7b9fdda0196"
cache-control: public, max-age=604800
x-amz-version-id: cjT7BZtus9OxhFupiCyx1NXoECdT1Iuy
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RL8GkPeDRXWLsHqQp36EzHRiCOXVERmsYwDadj3NXCQaOai3IFRWjg==
age: 416116
X-Firefox-Spdy: h2
|
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
143.204.55.110
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Mon, 24 Oct 2022 01:34:28 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JUeGaAVHPmDM47NeDjwstia2kyKbz64FtdXXiFF9yN8doCIuVfceYw==
age: 10227
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/prive_three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 717
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:00 GMT
etag: "a5c782d385dc0cbbd4afa608cdd1d8f3"
cache-control: public, max-age=604800
x-amz-version-id: hAo3LTGm1kioSzmqbpisk6sFB6F2ne_I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JRC42kW0-I7bxk0kF5aA_IMZdVfhfwBafyCuGubW3FnkAtm6Qtvn8Q==
age: 416116
X-Firefox-Spdy: h2
|
GET /5.5.0/bundle.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
151.101.130.217
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Fri, 11 Nov 2022 05:27:37 GMT
last-modified: Fri, 05 Jul 2019 11:17:04 GMT
etag: W/"39339cf627bc67e34d4c623bea4c0b4a"
x-guploader-response-body-transformations: gunzipped
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 24 Oct 2022 04:24:54 GMT
age: 29977039
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 51570
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/privacy-two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 987
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "102a03f6293726facccabba18c0e9455"
cache-control: public, max-age=604800
x-amz-version-id: vd2P4eOW5sVryjV60xLUbORWH7nqhDKo
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JLfmKR1MSU8CIOE8ssd68BEDWWfL4GRQSbwA4o3oboIUD4gfn0x9cQ==
age: 416116
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/clean_one.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 486
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: "4ef86b2fbcdb943033b3c85e020122da"
cache-control: public, max-age=604800
x-amz-version-id: BK083fsfql.WcGuuNtT06YWzZ5Io0.yQ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: McWmRj0URPTBSM5v4PmteHjxfAVe1Duo5ZTo0XcHpIiC8xsNfHV4Fw==
age: 416116
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/clean_two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 431
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:55 GMT
etag: "f0f6b52bce4737187d5986d65c2b9a11"
cache-control: public, max-age=604800
x-amz-version-id: pwhnB7X_4WGez_7temaOOVBFmwfQ7lz1
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ieYTZoiXRC8IUI4GgMyRJz9BQ8lFLnRGQ32_V_lgZtXCqQDtg_wVbw==
age: 416116
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/clean_three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 583
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:53 GMT
etag: "64036bea66db20718ae3285e9ca951cd"
cache-control: public, max-age=604800
x-amz-version-id: lrmZs4eSsgPFrB9nH9B.ep7npBST6sLn
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pAdKRqhKRILC868AHmSo-aW2gK3U_DqZorM3UwLk31v-CnHm3qFdZg==
age: 416116
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/components/btn-arrow.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 412
date: Wed, 19 Oct 2022 08:49:38 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:38:48 GMT
etag: "2bb20d31732674b19f39721677ee98b0"
cache-control: public, max-age=604800
x-amz-version-id: nukWLapdOnZ6K4hroAQrBv4GKBUk7Zxa
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Vrf4Li7nEMv3piRNLMrRkCNs89IvavuLmPE0l_BXP0NILsKtGdX7nQ==
age: 416117
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=99375
Date: Mon, 24 Oct 2022 04:24:54 GMT
Etag: "6354f4c5-1d7"
Expires: Tue, 25 Oct 2022 08:01:09 GMT
Last-Modified: Sun, 23 Oct 2022 08:01:09 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IR5UM8i9JxDG5BsdUYDSZ1Nk55uDVPyIzWWxu9kLULHSKlUkSLF7yQ==
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
GET /mk-land/dist/images/landings/226/hero.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 219648
date: Wed, 19 Oct 2022 08:57:34 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:57 GMT
etag: "87dd68aac400d85dfa1db40e1b82d15d"
cache-control: public, max-age=604800
x-amz-version-id: 4L0sXSs7c8B1NC.82r.pHSX7QXp0wcne
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KIxIyUhigZYzRHAaKHSJCMTV5N462E_rTaa3dyhHm41R8lgeNLJVQw==
age: 415642
X-Firefox-Spdy: h2
|
GET /mk-land/dist/images/landings/226/memory.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1420
date: Wed, 19 Oct 2022 08:57:34 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:58 GMT
etag: "e24e191c026b00c1d7a106572ec478ed"
cache-control: public, max-age=604800
x-amz-version-id: 1vAS8O6UcwVIOLifS.J6ICiwtfTXw2jZ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2m28iHUfi-s5xrxZ1LpxKQBUIs7I3Fei47QR2JJtT3AlmjnHZ5PnMw==
age: 415642
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/downloads.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 19 Oct 2022 08:49:40 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:57 GMT
etag: W/"03b2302fb772ce4d148b0099da4362f0"
cache-control: public, max-age=604800
x-amz-version-id: qdj6r2fTLt1__Db.jrwnBLw2hzRzOTH8
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k-t8nvWVIu7lwAAU4yVCVwQeMdfJvjzp-9B-cR5pySMfV_Sq4D1PUQ==
age: 416115
X-Firefox-Spdy: h2
|
GET /mk-land/dist/images/landings/226/virus.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1718
date: Wed, 19 Oct 2022 08:57:34 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:59 GMT
etag: "9b099488f1b2855d4161d0f212c9c4ad"
cache-control: public, max-age=604800
x-amz-version-id: hC8o5xw8Vbs14GyNB7kKk0ruf_0ADI.y
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fpYFcjUKweZyGv_7J_oHtXjA9LervN361XUzBxzVOM_Oir2BCE32cg==
age: 415642
X-Firefox-Spdy: h2
|
GET /mk-land/dist/images/landings/226/performance.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 30230
date: Wed, 19 Oct 2022 08:57:34 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:58 GMT
etag: "f8a37f0c75191e262d9e00b2bbe849e0"
cache-control: public, max-age=604800
x-amz-version-id: WtImzHf7J4uGMuRdFTGvv5Gk2dF.H7tm
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9wlC-bLelHyHOye7utmsXAj47sDjXiFlE4twJtRvKWoBuoma1eOQ-A==
age: 415642
X-Firefox-Spdy: h2
|
GET /gtm.js?id=GTM-PVNC4DL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 24 Oct 2022 04:24:55 GMT
expires: Mon, 24 Oct 2022 04:24:55 GMT
cache-control: private, max-age=900
last-modified: Mon, 24 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100181
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
GET /mk-land/dist/critical/script.min.js?5d40e965e8fcb218406d HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
54.230.111.123
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 19 Oct 2022 08:49:38 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 18 Oct 2022 08:54:23 GMT
etag: W/"978916c1832b2db29b186d1578d5e378"
cache-control: public, max-age=604800
x-amz-version-id: BhWMZZ9PEhWMvFGBfg5J.vwJQdWMdbz2
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GxnntU96pePmQjDiYYhUXGMXuqoV2ikrUgGerPKQM2iQZz6Ga7-SSQ==
age: 416117
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/landings/226_6/shopper.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 19 Oct 2022 08:52:04 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:01 GMT
etag: W/"316255d136699b84962ae8e7e650fb4a"
cache-control: public, max-age=604800
x-amz-version-id: xkKrHSo_G5.knecPGziG7JnbPUaCTCId
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uKqljhT8hT1tt72MDpV50lHWVwVODXmC9wMDPLZ_ASJZFg42_Ixihw==
age: 415971
X-Firefox-Spdy: h2
|
GET /trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
|
143.204.55.110
HTTP/2 200 OK
content-type: text/html
content-length: 3697
last-modified: Tue, 04 Oct 2022 10:34:05 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Mon, 24 Oct 2022 03:58:15 GMT
cache-control: max-age=86400
etag: "83355578cdf883e1c6aef6f07b55893f"
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hgXruEo7J7ENm9bVVzkq64MS0OaGdXLFS0Vrg6m09fERd5iCeaC8qA==
age: 2005
X-Firefox-Spdy: h2
|
GET /trustboxes/5419b637fa0340045cd0c936/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
143.204.55.110
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 17075
last-modified: Tue, 04 Oct 2022 10:33:51 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 23 Oct 2022 17:16:27 GMT
cache-control: max-age=86400
etag: "8efe0f2f2944e9baaa88fd0174e1b459"
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lTfNWXDQ2BVIZEYPp-xfP_hOrabLld_mg65HX6MyF_XCUGtPX1SVoQ==
age: 40109
X-Firefox-Spdy: h2
|
GET /trustboxes/539ad60defb9600b94d7df2c/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
143.204.55.110
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 29606
last-modified: Tue, 04 Oct 2022 10:34:08 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 23 Oct 2022 18:02:58 GMT
cache-control: max-age=86400
etag: "bc5c8622de6c884abb3d021c6468b0dc"
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yOFH2Y3Qj-50pw4Mahvos3eoCDpEmmF0YcNhfTrsRJiGfl7t6tgepg==
age: 37317
X-Firefox-Spdy: h2
|
GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=4dbb14ee00006400050fa293&locale=en-US HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
|
143.204.55.110
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 430
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
cache-control: public,max-age=1800
date: Mon, 24 Oct 2022 04:24:12 GMT
etag: "987ecd9a9472a4811e409b62df3ebd10"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5-SlKTkp4QZA_LOcqqCp6rMJkDRx3FigmAjer_zt7ihs0xpCVdM-wQ==
age: 43
X-Firefox-Spdy: h2
|
GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark%20%7D%7D&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
|
143.204.55.110
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Mon, 24 Oct 2022 04:24:54 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NxJAWH6hgluB6m2RwgWiie5mAhZsK8KJQj1yF7NftJ76I5ALdMjSXg==
X-Firefox-Spdy: h2
|
GET /mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
54.230.111.123
HTTP/2 200 OK
content-type: text/css
date: Wed, 19 Oct 2022 08:54:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Aug 2022 13:14:40 GMT
etag: W/"a669635cf48725953f46197678261ba4"
cache-control: public, max-age=604800
x-amz-version-id: q9vHpEkF.fC8IKJyFmJ8_ZfmwjRowPdI
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KLNhBVfoDfSIIdtzyT0C-PpLFaU-VGYahcg8IZEmBdSqxNkyv8grfw==
age: 415822
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.79.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=263
Date: Mon, 24 Oct 2022 04:24:55 GMT
Connection: keep-alive
X-N: S
|
GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark%20%7D%7D&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
|
143.204.55.110
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Mon, 24 Oct 2022 04:24:54 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rhGx522RmoFV-OEqI1_xneiqVbs2j8DD7z_12FVXCgCKlgHJeaiVhw==
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "26CD9FF2FB48CC7FB7C83CC325F4CB4713FC442CC4842BAA728C570081BE0445"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3285
Expires: Mon, 24 Oct 2022 05:19:40 GMT
Date: Mon, 24 Oct 2022 04:24:55 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "26CD9FF2FB48CC7FB7C83CC325F4CB4713FC442CC4842BAA728C570081BE0445"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3285
Expires: Mon, 24 Oct 2022 05:19:40 GMT
Date: Mon, 24 Oct 2022 04:24:55 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "26CD9FF2FB48CC7FB7C83CC325F4CB4713FC442CC4842BAA728C570081BE0445"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3285
Expires: Mon, 24 Oct 2022 05:19:40 GMT
Date: Mon, 24 Oct 2022 04:24:55 GMT
Connection: keep-alive
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F456d7d5b-fd41-4fa5-8e9e-d89e82b0dc48.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 8953
x-amzn-requestid: 5085f7ea-72de-43e0-a670-d221fc6af736
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelBzHcPIAMFpqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b53e-1c4bfd5c56b0af173eb43001;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:22 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: pCvtOb9B5beB4xJFbTvDQxO37bcXmPVCAwUOw7hOZLHTe_W-ii4T6Q==
via: 1.1 7dcaa43cd0535d889b549e6a30a57aa0.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:35:12 GMT
etag: "c4dbc6b4b8b9cf4f8868ddc060ee731cf43153d7"
age: 20983
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F337e2b0e-2813-4291-b863-bbc99409db00.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 10380
x-amzn-requestid: 9027dbc2-08da-449f-9a40-59c58169fa28
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelDlG5XIAMFTTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b549-4dd10f5c123194ff6ce4070f;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tNvto_msO-2-BKygBoOYkO_BwaZjdZroH9-tDWwsoyE60iQBH742lQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:09:39 GMT
age: 22516
etag: "c5097681a4dcff980dc788191356e7e7c21ef3b1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee5168c9-3f97-43d9-a9b4-3b0f415b3bc0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 9894
x-amzn-requestid: 8d639b03-49d2-411b-b0ca-39c5dafe21f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelOtF6YIAMF-4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b591-230070a06848d4d90ea4f6ef;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:43:45 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: mYzFAcyUErnaOlGBX0ygFYZ4608EanLq5V4xzX7qCHQRGzkKwwWvHw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:36:45 GMT
age: 20890
etag: "4c5ff521fec700a1cda73325eebbeb88f97baa39"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2aa538fb-7cd1-41f1-aacd-b9ff42991b8b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 8361
x-amzn-requestid: 23942897-d28e-4661-b941-1c8eb5ae9735
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelO4E4BIAMFcpw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b592-4df057fb403df49841961951;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:43:46 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Q87__Hixq9smbYcZ0AmvvM1_Q_LAfyPVhpiK4TcTFTVC6txsVv-Dmw==
via: 1.1 b637bd7696854d7acbf96132dcf53200.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:49:42 GMT
age: 23713
etag: "7becba083c646f4715513e07d297ebc56f9d22ab"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9acbb6c9-f155-44fe-887b-d36b421dfa63.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 11434
x-amzn-requestid: 0970e5a1-a1dd-4685-b2a2-b748327b5e27
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelOOEwHoAMFWzQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b58e-30834eff039ef76267bf3459;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:43:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: e-6v0ngaIOfyng-s9NPa8Df77P2VAl4hhShM4bf41yiXjIF2bdgD8Q==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:10:21 GMT
etag: "b42a826513836e4bad11289a5ccec0966d0c6d11"
age: 22474
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /mk-land/dist/svg/components/logo/mk-logo-ua.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 19 Oct 2022 08:49:38 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Apr 2022 14:50:37 GMT
etag: W/"0443bcb5ae8253499f7df7f80c45fc8c"
cache-control: public, max-age=604800
x-amz-version-id: sx6d65Ik.60EPUJCncti20jd8v0DNMRK
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oSo8p6Qj1AQcjOO3-feeDLsJIfcmHotxfs3QPC1DT9b-r35t2rxTxg==
age: 416117
X-Firefox-Spdy: h2
|
GET /?sid=ywVkO4XWPeW7Z6Bj&data=eyJnYVRyYWNraW5nSWRzIjpbXSwiZ2FNZWFzdXJlbWVudElkcyI6WyJHLUdZVFhEODlOMVciXSwiZ2FDbGllbnRJZHMiOlsiNTE4MzM4NjE5LjE2NjY1NTc2MjUiXSwiY29udGV4dCI6eyJsaWJyYXJ5Ijp7Im5hbWUiOiJsZnRyYWNrZXIiLCJ2ZXJzaW9uIjoiMi41Ni4zIn0sInBhZ2VVcmwiOiJodHRwczovL2FwcDIubWFja2VlcGVyYWZmLmNvbS9sYW5kLzIyNi8/cnRrY2lkPTYzNTVlNTU3ODQ0YmYzMDAwMTU4ZTQwMiZydGtjbXBpZD02MjlhM2UwNGQ4NGVjYzAwMDEzNjgzOGImdGlkPUFmZmlsaWF0ZSUyMC0lMjBDUEklMjBjYW1wYWlnbiUyMChpbnN0YWxsJTIwb25seSklMjAoMjI2KSZ1dG1fc291cmNlPWFmZmlsaWF0ZSZ1dG1fbWVkaXVtPWFkcGFydG5lciZwdWJpZD02MjlhM2ZlZDQ3MTRmNzAwMDFiMjM0ZGIiLCJwYWdlVGl0bGUiOiJNYWNLZWVwZXIiLCJyZWZlcnJlciI6IiJ9LCJldmVudCI6InRyYWNraW5nLWV2ZW50IiwiY2xpZW50RXZlbnRJZCI6IjRkMmU2ODk2NDhkMjY3MGEiLCJzY3JpcHRJZCI6Inl3VmtPNFhXUGVXN1o2QmoiLCJjb29raWVzRW5hYmxlZCI6dHJ1ZSwiY29uc2VudExldmVsIjoibm9uZSIsImFub255bWl6ZUlwIjpmYWxzZSwibGZDbGllbnRJZCI6IkxGMS4xLjIzZjQyZmNhZjIyYjk1M2YuMTY2NjU1NzYyNDU4OSIsImZvcmVpZ25Db29raWVzIjpbXSwicHJvcGVydGllcyI6e30sImF1dG9UcmFja2luZ0VuYWJsZWQiOnRydWUsImF1dG9UcmFja2luZ01vZGUiOiJvbl9zY3JpcHRfbG9hZCJ9 HTTP/1.1
Host: tr-rc.lfeeder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
143.204.55.34
HTTP/2 200 OK
content-type: image/gif
content-length: 43
server: CloudFront
date: Mon, 24 Oct 2022 04:24:55 GMT
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JLU95lLf5iEaoW5tqjS1VmGd9LbCPDlKn9Joh-QPvAPFHgg7lYsZSg==
X-Firefox-Spdy: h2
|
GET /j?dtstmp=1666585495085&aid=a-015g&se=e30&duid=f810f9c9df2c--01gg396g455hgxm4cwhscawcw4&tna=v2.5.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU- HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
3.223.51.75
HTTP/2 302 Found
date: Mon, 24 Oct 2022 04:24:55 GMT
content-length: 0
trace-id: 1a3c748b13e8c133
vary: Origin
location: /j?dtstmp=1666585495085&aid=a-015g&se=e30&duid=f810f9c9df2c--01gg396g455hgxm4cwhscawcw4&tna=v2.5.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520%28install%2520only%29%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true
set-cookie: lidid=ebdb82b3-2664-4046-939b-fbcf3019db4c; Max-Age=63072000; Expires=Wed, 23 Oct 2024 04:24:55 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
|
GET /j?dtstmp=1666585495085&aid=a-015g&se=e30&duid=f810f9c9df2c--01gg396g455hgxm4cwhscawcw4&tna=v2.5.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520%28install%2520only%29%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
|
3.223.51.75
HTTP/2 200 OK
content-type: application/json
date: Mon, 24 Oct 2022 04:24:56 GMT
content-length: 13
trace-id: cad3c6462feb62de
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: 8ed72f86-154b-475c-9bda-3ccada1c093d
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
|
GET /mk-land/dist/images/favicon_ua.png HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/png
content-length: 407
date: Wed, 19 Oct 2022 08:49:42 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 04 Apr 2022 09:52:27 GMT
etag: "471c1c90d41a571f14162d7a8a9c8b9c"
cache-control: public, max-age=604800
x-amz-version-id: fOjB1uVWJszrafJRMb0A4UZGtOA62i.I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JWqT-wHKM-ldLSpVBq3EceAVTpslk7K-mZAYcsi--t1Ny2-50iS_3A==
age: 416115
X-Firefox-Spdy: h2
|
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
23.36.76.210
HTTP/2 200 OK
content-type: application/x-javascript;charset=utf-8
last-modified: Wed, 19 Oct 2022 18:56:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=18048
date: Mon, 24 Oct 2022 04:24:56 GMT
content-length: 3063
x-cdn: AKAM
X-Firefox-Spdy: h2
|
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
23.38.201.81
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Accept-Ranges: bytes
ETag: "0d5508c59e34b5d35cde5aea2aa1c2fd:1665301953.026714"
Last-Modified: Sun, 09 Oct 2022 07:50:08 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Mon, 24 Oct 2022 04:44:56 GMT
Date: Mon, 24 Oct 2022 04:24:56 GMT
Content-Length: 3471
Connection: keep-alive
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
GET /gtm/optimize.js?id=OPT-TVNW4WH HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
142.250.74.174
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 24 Oct 2022 04:24:56 GMT
expires: Mon, 24 Oct 2022 04:24:56 GMT
cache-control: private, max-age=900
last-modified: Mon, 24 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42912
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
GET /23738.js HTTP/1.1
Host: www.dwin1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
143.204.55.42
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
x-amz-replication-status: COMPLETED
last-modified: Wed, 19 Oct 2022 10:19:43 GMT
x-amz-version-id: 9GYo5hJWkotP40DIJz.odQcu8JPBpP_7
server: AmazonS3
content-encoding: gzip
date: Mon, 24 Oct 2022 04:17:46 GMT
cache-control: max-age=600, s-maxage=600
etag: W/"04a63f0a2836817ce6045d6b4bea866b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: s7EVQX1p0AsyqyWCjq2QFWAJpfJUEbKWwdZdvQKq8jc3Wg7AXsdV0A==
age: 431
X-Firefox-Spdy: h2
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Age: 6267
Cache-Control: max-age=165370
Date: Mon, 24 Oct 2022 04:24:56 GMT
Etag: "6355de17-1d7"
Expires: Wed, 26 Oct 2022 02:21:06 GMT
Last-Modified: Mon, 24 Oct 2022 00:36:39 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
|
POST /land/api/send-event HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: Go5CyimL6TiQBeWaEZUt9tjzPABCxUBsI7ctXZKS
X-XSRF-TOKEN: eyJpdiI6IndrY3o3RCtHMWJZbWkrUkEzSGRvdEE9PSIsInZhbHVlIjoiWXFXOVUybklJQXZrZXlJUjUrTGpsdlhBVitiY3RGMUxnblg5UnNjU3BhTTJYVDYyUVN3SllNbDNXR2Rpd2dodlBOcmh6OGVvempITjZTXC9TSlJ2UHJETHpiRnVUMjFhb1dEbGNBSFlQTVhKdHNteU5cL2dQXC92SWdtNWp2UHhIXC9jIiwibWFjIjoiMjdhNTk4MTM2NDIwYTQwOWY1ZDM5NzQ3NzIzZTE5M2Q4MDYwY2VhYjQ1MmJmMDBjNjNiYzcwZTMzNzJjM2RkMCJ9
Content-Length: 100
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/226/?rtkcid=6355e557844bf3000158e402&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate%20-%20CPI%20campaign%20(install%20only)%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Cookie: _gcl_au=1.1.137767847.1666557624; _lc2_fpi=f810f9c9df2c--01gg396g455hgxm4cwhscawcw4; _ga_GYTXD89N1W=GS1.1.1666585452.2.0.1666585458.54.0.0; _ga=GA1.2.518338619.1666557625; _lfa=LF1.1.23f42fcaf22b953f.1666557624589; _gid=GA1.2.700494881.1666557625; _hjSessionUser_190484=eyJpZCI6IjY4OTM0ZGVlLTAzZTYtNTBlMi1iNTIzLTI0ZmY4NmI5ZGE5MSIsImNyZWF0ZWQiOjE2NjY1NTc2MjU0NDgsImV4aXN0aW5nIjp0cnVlfQ==; _fbp=fb.1.1666557625708.521572016; _clck=1iehlzz|1|f5z|0; _clsk=11q31b4|1666585453948|1|1|b.clarity.ms/collect; XSRF-TOKEN=eyJpdiI6IndrY3o3RCtHMWJZbWkrUkEzSGRvdEE9PSIsInZhbHVlIjoiWXFXOVUybklJQXZrZXlJUjUrTGpsdlhBVitiY3RGMUxnblg5UnNjU3BhTTJYVDYyUVN3SllNbDNXR2Rpd2dodlBOcmh6OGVvempITjZTXC9TSlJ2UHJETHpiRnVUMjFhb1dEbGNBSFlQTVhKdHNteU5cL2dQXC92SWdtNWp2UHhIXC9jIiwibWFjIjoiMjdhNTk4MTM2NDIwYTQwOWY1ZDM5NzQ3NzIzZTE5M2Q4MDYwY2VhYjQ1MmJmMDBjNjNiYzcwZTMzNzJjM2RkMCJ9; mackeeper_session=eyJpdiI6ImpCZyt1R1U2K2hPSzk5NzVPN1BiUXc9PSIsInZhbHVlIjoidG5uV2ZLMlwvcnlua3ZmOE94S3cwS05jMGQyVkFZcm1oaDUyREhiM1I4clVkRW5JU05DWmJ5NnE5UUFlZVhLM2xpTEIxK3o2RTNcLzlFUHp2dWdDYnZzZlp2WFRuTWg1cXdyT2tsNUxkQ1dRdG0rZ0tIdUFFbXo4THQwTW0zNytVTiIsIm1hYyI6IjQwOTI4NjkzNjY1NmZhNWI3ZWJiNDIwNGU0OTQ1OGIxMzAzZjUzMzdlMzJiNjQzMWU4NTI5NjAwOGQwZmExOWEifQ%3D%3D; _uetsid=ebfe9360531211ed867429445eebe045; _uetvid=ebfe9d80531211edad883bc3d15c6ad6; _gat_UA-157596782-1=1; _hjIncludedInSessionSample=0; _hjSession_190484=eyJpZCI6IjkzNGZlMWNhLTJlYjktNGM1Ny04MjcyLTg3NjE2MDllZTk2YyIsImNyZWF0ZWQiOjE2NjY1ODU0NTI5OTQsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; outbrain_cid_fetch=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
|
3.225.159.165
HTTP/2 200 OK
content-type: application/json
date: Mon, 24 Oct 2022 04:24:55 GMT
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 176
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: efaf780fa4676acb6d1a3194455c9b3f
X-Firefox-Spdy: h2
|
GET /pagead/viewthroughconversion/957119846/?random=1666585494847&cv=11&fst=1666585494847&bg=ffffff&guid=ON&async=1>m=2wgaj0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=137767847.1666557624&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
142.250.74.98
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 24 Oct 2022 04:24:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1089
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 24-Oct-2022 04:39:56 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
GET /pagead/viewthroughconversion/983482265/?random=1666585494841&cv=11&fst=1666585494841&bg=ffffff&guid=ON&async=1>m=2wgaj0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=137767847.1666557624&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
142.250.74.98
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 24 Oct 2022 04:24:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1087
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 24-Oct-2022 04:39:56 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
GET /pagead/viewthroughconversion/854379023/?random=1666585494837&cv=11&fst=1666585494837&bg=ffffff&guid=ON&async=1>m=2wgaj0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=137767847.1666557624&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
142.250.74.98
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 24 Oct 2022 04:24:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1086
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 24-Oct-2022 04:39:56 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
GET /pagead/viewthroughconversion/1010020041/?random=1666585494844&cv=11&fst=1666585494844&bg=ffffff&guid=ON&async=1>m=2wgaj0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=137767847.1666557624&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
142.250.74.98
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 24 Oct 2022 04:24:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1088
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 24-Oct-2022 04:39:56 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
GET /action/0?ti=36002432&Ver=2&mid=f0eff929-b679-4b53-92e8-d1a2694455c1&sid=ebfe9360531211ed867429445eebe045&vid=ebfe9d80531211edad883bc3d15c6ad6&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&r=<=2363&evt=pageLoad&sv=1&rn=493333 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
13.107.21.200
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0105D95162D962963F9FCB16638E637B; domain=.bing.com; expires=Sat, 18-Nov-2023 04:24:56 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E07AD61532DB4B43ADF35AE549EED746 Ref B: OSL30EDGE0407 Ref C: 2022-10-24T04:24:56Z
date: Mon, 24 Oct 2022 04:24:56 GMT
X-Firefox-Spdy: h2
|
GET /action/0?ti=36002432&Ver=2&mid=f0eff929-b679-4b53-92e8-d1a2694455c1&sid=ebfe9360531211ed867429445eebe045&vid=ebfe9d80531211edad883bc3d15c6ad6&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=930240 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
13.107.21.200
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2128136265C463CC3A20012564936227; domain=.bing.com; expires=Sat, 18-Nov-2023 04:24:56 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 77384F3F5639447ABD3122F96D1F2883 Ref B: OSL30EDGE0407 Ref C: 2022-10-24T04:24:56Z
date: Mon, 24 Oct 2022 04:24:56 GMT
X-Firefox-Spdy: h2
|
GET /pagead/viewthroughconversion/1010020041/?random=1666585494852&cv=11&fst=1666585494852&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgaj0&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&value=0&bttype=purchase&auid=137767847.1666557624&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
142.250.74.98
HTTP/2 200 OK
content-type: image/gif
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 24 Oct 2022 04:24:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 24-Oct-2022 04:39:56 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
POST /land/api/send-event HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: Go5CyimL6TiQBeWaEZUt9tjzPABCxUBsI7ctXZKS
X-XSRF-TOKEN: eyJpdiI6IndrY3o3RCtHMWJZbWkrUkEzSGRvdEE9PSIsInZhbHVlIjoiWXFXOVUybklJQXZrZXlJUjUrTGpsdlhBVitiY3RGMUxnblg5UnNjU3BhTTJYVDYyUVN3SllNbDNXR2Rpd2dodlBOcmh6OGVvempITjZTXC9TSlJ2UHJETHpiRnVUMjFhb1dEbGNBSFlQTVhKdHNteU5cL2dQXC92SWdtNWp2UHhIXC9jIiwibWFjIjoiMjdhNTk4MTM2NDIwYTQwOWY1ZDM5NzQ3NzIzZTE5M2Q4MDYwY2VhYjQ1MmJmMDBjNjNiYzcwZTMzNzJjM2RkMCJ9
Content-Length: 101
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/226/?rtkcid=6355e557844bf3000158e402&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate%20-%20CPI%20campaign%20(install%20only)%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Cookie: _gcl_au=1.1.137767847.1666557624; _lc2_fpi=f810f9c9df2c--01gg396g455hgxm4cwhscawcw4; _ga_GYTXD89N1W=GS1.1.1666585452.2.0.1666585458.54.0.0; _ga=GA1.2.518338619.1666557625; _lfa=LF1.1.23f42fcaf22b953f.1666557624589; _gid=GA1.2.700494881.1666557625; _hjSessionUser_190484=eyJpZCI6IjY4OTM0ZGVlLTAzZTYtNTBlMi1iNTIzLTI0ZmY4NmI5ZGE5MSIsImNyZWF0ZWQiOjE2NjY1NTc2MjU0NDgsImV4aXN0aW5nIjp0cnVlfQ==; _fbp=fb.1.1666557625708.521572016; _clck=1iehlzz|1|f5z|0; _clsk=11q31b4|1666585453948|1|1|b.clarity.ms/collect; XSRF-TOKEN=eyJpdiI6IndrY3o3RCtHMWJZbWkrUkEzSGRvdEE9PSIsInZhbHVlIjoiWXFXOVUybklJQXZrZXlJUjUrTGpsdlhBVitiY3RGMUxnblg5UnNjU3BhTTJYVDYyUVN3SllNbDNXR2Rpd2dodlBOcmh6OGVvempITjZTXC9TSlJ2UHJETHpiRnVUMjFhb1dEbGNBSFlQTVhKdHNteU5cL2dQXC92SWdtNWp2UHhIXC9jIiwibWFjIjoiMjdhNTk4MTM2NDIwYTQwOWY1ZDM5NzQ3NzIzZTE5M2Q4MDYwY2VhYjQ1MmJmMDBjNjNiYzcwZTMzNzJjM2RkMCJ9; mackeeper_session=eyJpdiI6ImpCZyt1R1U2K2hPSzk5NzVPN1BiUXc9PSIsInZhbHVlIjoidG5uV2ZLMlwvcnlua3ZmOE94S3cwS05jMGQyVkFZcm1oaDUyREhiM1I4clVkRW5JU05DWmJ5NnE5UUFlZVhLM2xpTEIxK3o2RTNcLzlFUHp2dWdDYnZzZlp2WFRuTWg1cXdyT2tsNUxkQ1dRdG0rZ0tIdUFFbXo4THQwTW0zNytVTiIsIm1hYyI6IjQwOTI4NjkzNjY1NmZhNWI3ZWJiNDIwNGU0OTQ1OGIxMzAzZjUzMzdlMzJiNjQzMWU4NTI5NjAwOGQwZmExOWEifQ%3D%3D; _uetsid=ebfe9360531211ed867429445eebe045; _uetvid=ebfe9d80531211edad883bc3d15c6ad6; _gat_UA-157596782-1=1; _hjIncludedInSessionSample=0; _hjSession_190484=eyJpZCI6IjkzNGZlMWNhLTJlYjktNGM1Ny04MjcyLTg3NjE2MDllZTk2YyIsImNyZWF0ZWQiOjE2NjY1ODU0NTI5OTQsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; outbrain_cid_fetch=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
|
3.225.159.165
HTTP/2 200 OK
content-type: application/json
date: Mon, 24 Oct 2022 04:24:55 GMT
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 175
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: c551e87f95acf26093b28e5be92b19fd
X-Firefox-Spdy: h2
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
GET /modules.5f63ca60a03298133ad8.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
143.204.55.40
HTTP/2 200 OK
content-type: application/javascript
content-length: 66045
date: Tue, 18 Oct 2022 12:18:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "eb4f228026ced3bcaadde65163571860"
last-modified: Tue, 18 Oct 2022 12:17:20 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vIGRiI7egIuUZA83XOIvTrotrIj3Ki3BZJsU24prfdNLst06HOei1A==
age: 490010
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Age: 6267
Cache-Control: max-age=165370
Date: Mon, 24 Oct 2022 04:24:56 GMT
Etag: "6355de17-1d7"
Expires: Wed, 26 Oct 2022 02:21:06 GMT
Last-Modified: Mon, 24 Oct 2022 00:36:39 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
|
GET /p/action/36002432.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
13.107.21.200
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
cache-control: private,max-age=60
content-length: 1423
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=1A065CCED7416ABC2F5A4E89D6166B77; domain=.bing.com; expires=Sat, 18-Nov-2023 04:24:56 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E229816C0C824786954BB74150925D7B Ref B: OSL30EDGE0407 Ref C: 2022-10-24T04:24:56Z
date: Mon, 24 Oct 2022 04:24:56 GMT
X-Firefox-Spdy: h2
|
GET /collect?v=2&fmt=js&pid=3865705&time=1666585495686&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
13.107.42.14
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1666585495686%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F226%252F%253Frtkcid%253D6355e557844bf3000158e402%2526rtkcmpid%253D629a3e04d84ecc000136838b%2526tid%253DAffiliate%252520-%252520CPI%252520campaign%252520%2528install%252520only%2529%252520%2528226%2529%2526utm_source%253Daffiliate%2526utm_medium%253Dadpartner%2526pubid%253D629a3fed4714f70001b234db%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQI4t8tbwjQ2igAAAYQIPIsLUfdclvSZMmiR9esrAVhDcrImAYIbBaSfNgdoFBcIolbHJCLEoXI2Dw; Max-Age=2592000; Expires=Wed, 23 Nov 2022 04:24:56 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQKDF40Iy6uPGQAAAYQIPIsLdWLdMEJpuz-npOnb9yAW51s6YjQQ48xfK3V4HimEtLn3PltTodTOW2n7YsWCvw; Max-Age=2592000; Expires=Wed, 23 Nov 2022 04:24:56 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&38e17d48-324c-44a2-84ce-10730b843754"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 24-Oct-2023 04:24:56 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2414:u=1:x=1:i=1666585496:t=1666671896:v=2:sig=AQFxQfCUC7ax9F1wegMUv1lMtbSBtceF"; Expires=Tue, 25 Oct 2022 04:24:56 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXrwCx/A38XmG4eqCTydQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: A1F09687F59A4401B18BD71082076B94 Ref B: OSL30EDGE0213 Ref C: 2022-10-24T04:24:56Z
date: Mon, 24 Oct 2022 04:24:56 GMT
content-length: 0
X-Firefox-Spdy: h2
|
GET /box-c1417f7b48595d0dbca01c86f95d6dbb.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
|
143.204.55.101
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Tue, 18 Oct 2022 09:12:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "d2c298a660a1ee92f094a3d504e3e2e6"
last-modified: Tue, 18 Oct 2022 09:11:19 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tPo40-QkDJQo9WjWRP43lzS_7ch0BrxMSYLpSQdiAqFPmKNW1oCDHw==
age: 501170
X-Firefox-Spdy: h2
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Age: 2427
Cache-Control: max-age=112229
Date: Mon, 24 Oct 2022 04:24:56 GMT
Etag: "63551d82-1d7"
Expires: Tue, 25 Oct 2022 11:35:25 GMT
Last-Modified: Sun, 23 Oct 2022 10:54:58 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
|
GET /pagead/1p-user-list/1010020041/?random=1666585494844&cv=11&fst=1666584000000&bg=ffffff&guid=ON&async=1>m=2wgaj0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&fmt=3&is_vtc=1&random=3393716758&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
142.250.74.3
HTTP/2 200 OK
content-type: image/gif
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 24 Oct 2022 04:24:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
GET /pagead/1p-user-list/983482265/?random=1666585494841&cv=11&fst=1666584000000&bg=ffffff&guid=ON&async=1>m=2wgaj0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&fmt=3&is_vtc=1&random=3506122756&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
142.250.74.3
HTTP/2 200 OK
content-type: image/gif
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 24 Oct 2022 04:24:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
GET /wi/config/10013499.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
87.248.119.252
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: TS59CFFBZVEZEX6D
x-amz-id-2: 8epdodcMsS0Hmz+NTmetX809mm2DfFhwZMTDERKMietPOTqPNDuo77nCAON4rqikb+3iYHPtibQ=
date: Mon, 24 Oct 2022 03:31:45 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 3191
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
GET /pagead/1p-user-list/957119846/?random=1666585494847&cv=11&fst=1666584000000&bg=ffffff&guid=ON&async=1>m=2wgaj0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&fmt=3&is_vtc=1&random=3909648513&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
142.250.74.3
HTTP/2 200 OK
content-type: image/gif
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 24 Oct 2022 04:24:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
POST /land/api/send-event HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: Go5CyimL6TiQBeWaEZUt9tjzPABCxUBsI7ctXZKS
X-XSRF-TOKEN: eyJpdiI6IndrY3o3RCtHMWJZbWkrUkEzSGRvdEE9PSIsInZhbHVlIjoiWXFXOVUybklJQXZrZXlJUjUrTGpsdlhBVitiY3RGMUxnblg5UnNjU3BhTTJYVDYyUVN3SllNbDNXR2Rpd2dodlBOcmh6OGVvempITjZTXC9TSlJ2UHJETHpiRnVUMjFhb1dEbGNBSFlQTVhKdHNteU5cL2dQXC92SWdtNWp2UHhIXC9jIiwibWFjIjoiMjdhNTk4MTM2NDIwYTQwOWY1ZDM5NzQ3NzIzZTE5M2Q4MDYwY2VhYjQ1MmJmMDBjNjNiYzcwZTMzNzJjM2RkMCJ9
Content-Length: 102
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/226/?rtkcid=6355e557844bf3000158e402&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate%20-%20CPI%20campaign%20(install%20only)%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Cookie: _gcl_au=1.1.137767847.1666557624; _lc2_fpi=f810f9c9df2c--01gg396g455hgxm4cwhscawcw4; _ga_GYTXD89N1W=GS1.1.1666585452.2.0.1666585458.54.0.0; _ga=GA1.2.518338619.1666557625; _lfa=LF1.1.23f42fcaf22b953f.1666557624589; _gid=GA1.2.700494881.1666557625; _hjSessionUser_190484=eyJpZCI6IjY4OTM0ZGVlLTAzZTYtNTBlMi1iNTIzLTI0ZmY4NmI5ZGE5MSIsImNyZWF0ZWQiOjE2NjY1NTc2MjU0NDgsImV4aXN0aW5nIjp0cnVlfQ==; _fbp=fb.1.1666557625708.521572016; _clck=1iehlzz|1|f5z|0; _clsk=11q31b4|1666585453948|1|1|b.clarity.ms/collect; XSRF-TOKEN=eyJpdiI6IndrY3o3RCtHMWJZbWkrUkEzSGRvdEE9PSIsInZhbHVlIjoiWXFXOVUybklJQXZrZXlJUjUrTGpsdlhBVitiY3RGMUxnblg5UnNjU3BhTTJYVDYyUVN3SllNbDNXR2Rpd2dodlBOcmh6OGVvempITjZTXC9TSlJ2UHJETHpiRnVUMjFhb1dEbGNBSFlQTVhKdHNteU5cL2dQXC92SWdtNWp2UHhIXC9jIiwibWFjIjoiMjdhNTk4MTM2NDIwYTQwOWY1ZDM5NzQ3NzIzZTE5M2Q4MDYwY2VhYjQ1MmJmMDBjNjNiYzcwZTMzNzJjM2RkMCJ9; mackeeper_session=eyJpdiI6ImpCZyt1R1U2K2hPSzk5NzVPN1BiUXc9PSIsInZhbHVlIjoidG5uV2ZLMlwvcnlua3ZmOE94S3cwS05jMGQyVkFZcm1oaDUyREhiM1I4clVkRW5JU05DWmJ5NnE5UUFlZVhLM2xpTEIxK3o2RTNcLzlFUHp2dWdDYnZzZlp2WFRuTWg1cXdyT2tsNUxkQ1dRdG0rZ0tIdUFFbXo4THQwTW0zNytVTiIsIm1hYyI6IjQwOTI4NjkzNjY1NmZhNWI3ZWJiNDIwNGU0OTQ1OGIxMzAzZjUzMzdlMzJiNjQzMWU4NTI5NjAwOGQwZmExOWEifQ%3D%3D; _uetsid=ebfe9360531211ed867429445eebe045; _uetvid=ebfe9d80531211edad883bc3d15c6ad6; _gat_UA-157596782-1=1; _hjIncludedInSessionSample=0; _hjSession_190484=eyJpZCI6IjkzNGZlMWNhLTJlYjktNGM1Ny04MjcyLTg3NjE2MDllZTk2YyIsImNyZWF0ZWQiOjE2NjY1ODU0NTI5OTQsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; outbrain_cid_fetch=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
|
3.225.159.165
HTTP/2 200 OK
content-type: application/json
date: Mon, 24 Oct 2022 04:24:55 GMT
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 176
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 2605cb13108b6e91caf75e65d5c82c5a
X-Firefox-Spdy: h2
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 04:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
GET /unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.10.0&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&optOut=false&bust=04288544064255827&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
64.202.112.31
HTTP/1.1 200 OK
Content-Type: image/gif;
Date: Mon, 24 Oct 2022 04:24:56 GMT
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 81ebcbc5c7bab9e6af8a18fda048c3c6
content-encoding: gzip
|
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1666585495686%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F226%252F%253Frtkcid%253D6355e557844bf3000158e402%2526rtkcmpid%253D629a3e04d84ecc000136838b%2526tid%253DAffiliate%252520-%252520CPI%252520campaign%252520%2528install%252520only%2529%252520%2528226%2529%2526utm_source%253Daffiliate%2526utm_medium%253Dadpartner%2526pubid%253D629a3fed4714f70001b234db%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
13.107.42.14
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1666585495686&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520%28install%2520only%29%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&d6b5106f-cfef-47ea-841c-80a515ee5ccc"; Domain=.linkedin.com; Expires=Tue, 24-Oct-2023 04:24:56 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20221024042456743d4fc9-cb27-4928-87f5-e2481f036b4bAQEHwrMQczty0FuAD-8M5IDtWzcTpug_"; Domain=.www.linkedin.com; Expires=Tue, 24-Oct-2023 04:24:56 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjY1ODU0OTY7MjswMjGC15RytfiPYUEmAauCdA/HaRQv7/AP8ASU0JgM4jZjuA==; Domain=.linkedin.com; Expires=Sat, 22 Apr 2023 04:24:56 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2414:u=1:x=1:i=1666585496:t=1666671896:v=2:sig=AQFxQfCUC7ax9F1wegMUv1lMtbSBtceF"; Expires=Tue, 25 Oct 2022 04:24:56 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com *.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXrwCyCkFFJPoVb4b32GQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 799F2D7DF2C24A3B9B6D978E4284D6E4 Ref B: OSL30EDGE0213 Ref C: 2022-10-24T04:24:56Z
date: Mon, 24 Oct 2022 04:24:56 GMT
content-length: 0
X-Firefox-Spdy: h2
|
GET /tag/uet/36002432 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
13.107.213.53
HTTP/2 200 OK
content-type: application/x-javascript
cache-control: no-cache, no-store
expires: -1
set-cookie: CLID=3c60766a21c54762a15e8df2744c96eb.20221024.20231024; expires=Tue, 24 Oct 2023 04:24:56 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:3f60b293-70d6-4805-b0bb-3484f0a73bf0
x-cache: CONFIG_NOCACHE
x-azure-ref: 0mBNWYwAAAAB3jXrIt4bsQ5EBejqKrFkMU1ZHMjBFREdFMDYxMAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Mon, 24 Oct 2022 04:24:55 GMT
X-Firefox-Spdy: h2
|
GET /collect?v=2&fmt=js&pid=3865705&time=1666585495686&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520%28install%2520only%29%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
13.107.42.14
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&fd0e20ed-7990-4726-81f8-855ed8f42065"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 24-Oct-2023 04:24:56 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2405:u=1:x=1:i=1666585496:t=1666671896:v=2:sig=AQFwwro1BFF4DH338YipPpF4KrUPsKIg"; Expires=Tue, 25 Oct 2022 04:24:56 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXrwCyE5H7sieBw5HD6rA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 64934714C22B4B058643349C7AE55E0A Ref B: OSL30EDGE0213 Ref C: 2022-10-24T04:24:56Z
date: Mon, 24 Oct 2022 04:24:56 GMT
content-length: 0
X-Firefox-Spdy: h2
|
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
20.234.93.27
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=59E98BBC57AC4051ADC0395B546CA28C&RedC=c.clarity.ms&MXFR=12F41F7C1DBE60381C730D3B19BE6E2C
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=12F41F7C1DBE60381C730D3B19BE6E2C; domain=.clarity.ms; expires=Sat, 18-Nov-2023 04:24:56 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Mon, 24 Oct 2022 04:24:56 GMT
content-length: 0
X-Firefox-Spdy: h2
|
GET /c.gif?CtsSyncId=59E98BBC57AC4051ADC0395B546CA28C&RedC=c.clarity.ms&MXFR=12F41F7C1DBE60381C730D3B19BE6E2C HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
13.107.21.200
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=59E98BBC57AC4051ADC0395B546CA28C&MUID=0608EB58553F6AF9054DF91F54686BBB
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=0608EB58553F6AF9054DF91F54686BBB; domain=c.bing.com; expires=Sat, 18-Nov-2023 04:24:56 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 284B023E2F8843339B858222A3FCDF6A Ref B: OSL30EDGE0407 Ref C: 2022-10-24T04:24:56Z
date: Mon, 24 Oct 2022 04:24:56 GMT
content-length: 0
X-Firefox-Spdy: h2
|
GET /sp.pl?a=10000&d=Mon%2C%2024%20Oct%202022%2004%3A24%3A55%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
98.137.155.8
HTTP/2 200 OK
content-type: image/gif
date: Mon, 24 Oct 2022 04:24:56 GMT
expires: Mon, 24 Oct 2022 04:24:56 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBJgTVmMCEH7Wcfx4k5RJc3fU9XtCUx0FEgEBAQFlV2NfYwAAAAAA_eMAAA&S=AQAAArb1jDtmvOG87UAnGPQO4nc; Expires=Tue, 24 Oct 2023 10:24:56 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
|
GET /c.gif?CtsSyncId=59E98BBC57AC4051ADC0395B546CA28C&MUID=0608EB58553F6AF9054DF91F54686BBB HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
20.234.93.27
HTTP/2 200 OK
content-type: image/gif
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Mon, 24-Oct-2022 04:34:57 GMT; path=/; SameSite=None; Secure;
date: Mon, 24 Oct 2022 04:24:56 GMT
content-length: 42
X-Firefox-Spdy: h2
|
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 32208
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
20.75.32.255
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
date: Mon, 24 Oct 2022 04:24:57 GMT
X-Firefox-Spdy: h2
|
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=1554&scd=21&ssd=1&est=1666585495798&ver=35&isls=true&src=i&invt=1500&rv=2&tim=1666585497353&vi=1666585495795&ri=f0d23807b3c547ec223bad3c55d39bb6&ref=null&cv=20221023-7-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
 141.226.228.48
HTTP/2 204 No Content
server: nginx
date: Mon, 24 Oct 2022 04:24:57 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
|
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=4555&scd=21&ssd=1&est=1666585495798&ver=35&isls=true&src=i&invt=3000&rv=2&tim=1666585500354&vi=1666585495795&ri=f0d23807b3c547ec223bad3c55d39bb6&ref=null&cv=20221023-7-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
|
141.226.228.48
HTTP/2 204 No Content
server: nginx
date: Mon, 24 Oct 2022 04:25:00 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
|
POST /g/collect?v=2&tid=G-GYTXD89N1W>m=2oeaj0&_p=1067985827&cid=518338619.1666557625&ul=en-us&sr=1280x1024&_s=1&sid=1666585452&sct=2&seg=1&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&dt=MacKeeper&en=page_view HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
|
216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
access-control-allow-origin: https://app2.mackeeperaff.com
date: Mon, 24 Oct 2022 04:25:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
GET /land/226/?rtkcid=6355e557844bf3000158e402&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate%20-%20CPI%20campaign%20(install%20only)%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: _gcl_au=1.1.137767847.1666557624; _lc2_fpi=f810f9c9df2c--01gg396g455hgxm4cwhscawcw4; _ga_GYTXD89N1W=GS1.1.1666585452.2.0.1666585458.54.0.0; _ga=GA1.2.518338619.1666557625; _lfa=LF1.1.23f42fcaf22b953f.1666557624589; _gid=GA1.2.700494881.1666557625; _hjSessionUser_190484=eyJpZCI6IjY4OTM0ZGVlLTAzZTYtNTBlMi1iNTIzLTI0ZmY4NmI5ZGE5MSIsImNyZWF0ZWQiOjE2NjY1NTc2MjU0NDgsImV4aXN0aW5nIjp0cnVlfQ==; _fbp=fb.1.1666557625708.521572016; _clck=1iehlzz|1|f5z|0; _clsk=11q31b4|1666585453948|1|1|b.clarity.ms/collect; XSRF-TOKEN=eyJpdiI6IjVBQkxxeFJRRXVVenhnbnZoQ004MFE9PSIsInZhbHVlIjoibWxDZ0l0Y3NLdzk1dW1YbzJxUytVZzZnU0FoQ0d5R1hCa3hzNnNkNnlIdnlSZXVtcVJIOExmRFNOUGVOTDJWVVVWZjdFQmc3YnlNK01neUs1MlBSdFJ5SnNKSVRpXC9ydytJNnFHaU04bVV6bXY0cVQ3N2xkMGJkMXRPM0RcL0x2dCIsIm1hYyI6IjdhYWI5MjRjNDFjY2IxYmFmMTVhYjJjZGE1MWMwY2M4N2JmN2QyMTQxYjIxYjYzMTU4NzQzOGU2NTRjMGI5MTUifQ%3D%3D; mackeeper_session=eyJpdiI6IjdlOWZxdmNPaTlrOHUyaXoxZGRJZVE9PSIsInZhbHVlIjoiQkNJaVV0TkJIWG9NMVwvSFBcL1k0NUxvNGJaMDNvNWJKUVNPekthbEdZcGpQekwzc1lOdTRYMXN6ck5DVkJWOHBwR0JqcWR4RUNVSE1JeFRGMVJDblwvV0RPR3c0dmc2dlBLTnRTXC9qaE51dEpjaFVvY0pMR1dZcDVlODV4VUl3Z3l6IiwibWFjIjoiOGI2ZDU2ZGI1Mzg0NDlkNTVlNDhiMTMyNGU2NDE0N2I0YWVjY2Q1YmUzODdmYmNkODhkYTA3YzcwYTk5YWM1ZSJ9; _uetsid=ebfe9360531211ed867429445eebe045; _uetvid=ebfe9d80531211edad883bc3d15c6ad6; _gat_UA-157596782-1=1; _hjIncludedInSessionSample=0; _hjSession_190484=eyJpZCI6IjkzNGZlMWNhLTJlYjktNGM1Ny04MjcyLTg3NjE2MDllZTk2YyIsImNyZWF0ZWQiOjE2NjY1ODU0NTI5OTQsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; outbrain_cid_fetch=true
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
|
3.225.159.165
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Mon, 24 Oct 2022 04:24:54 GMT
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
content-security-policy: default-src 'self' *.hotjar.com *.mackeeper.com;frame-ancestors 'none';frame-src 'self' 'unsafe-inline' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com *.surveygizmo.com *.liadm.com *.typeform.com mc.yandex.ru *.js.ad-score.com *.cdn.onesignal.com *.onesignal.com *.criteo.com static-cdn.mackeeper.com;child-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com blob: *.cdn.onesignal.com *.onesignal.com *.liadm.com static-cdn.mackeeper.com;form-action 'self' *.mackeeper.com *.facebook.com;img-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com data: *.2mdn.net *.pagead2.googlesyndication.com *.glotgrx.com *.lporirxe.com *.exelator.com *.owox.com *.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.yahoo.co.jp *.apimzb-adserver.cloudmccloud.com *.3lift.com *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com mc.yandex.ru cx.atdmt.com *.baidu.com *.gstatstrk.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.zoomsupport.com *.cloudmccloud.com linkconnector.com *.linkconnector.com *.linkedin.com https://p.adsymptotic.com *.clarity.ms *.lfeeder.com static-cdn.mackeeper.com *.imcounting.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com disqus.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com l2.io *.inspectlet.com *.googlesyndication.com *.sagetrc.com *.glotgrx.com *.lporirxe.com b-code.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.cloudfront.net *.yimg.jp *.addtocalendar.com *.yahoo.co.jp blob: *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com *.s.ytimg.com *.typeform.com *.calendly.com *.linkconnector.com mc.yandex.ru *.js.ad-score.com *.baidu.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.engine.4dsply.com *.engine.spotscenered.info *.engine.3dspk.com *.we3red.com *.engine.asadap.com *.engine.nictelroalps.com *.engine.liondigitalserving.com *.engine.addroplet.com *.beritapria.com cdnjs.cloudflare.com *.clickcease.com *.sentry-cdn.com *.criteo.net *.criteo.com https://snpa.licdn.com linkconnector.com *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com *.licdn.com *.liadm.com *.clarity.ms *.adcell.com *.lfeeder.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;style-src 'self' 'unsafe-inline' *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.a.disquscdn.com *.disqus.com *.googleapis.com *.fonts.gstatic.com *.referrer.disqus.com *.google.com *.google.com.ua *.addtocalendar.com *.surveygizmo.com *.cdn.onesignal.com *.onesignal.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com *.googletagmanager.com;font-src 'self' data: *.doubleclick.net *.mackeeper.com *.twimg.com *.twitter.com fonts.googleapis.com fonts.gstatic.com *.surveygizmo.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;object-src *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.pagead2.googlesyndication.com *.liadm.com static-cdn.mackeeper.com;connect-src 'self' *.mackeeper.com *.hotjar.com ws://*.hotjar.com wss://*.hotjar.com *.g.doubleclick.net *.lcidc.liadm.com *.google-analytics.com *.api.ipify.org *.mc.yandex.ru mc.yandex.ru *.data.ad-score.com *.baidu.com *.pushdata.onesignal.com:* *.onesignal.com *.taboola.com *.hotjar.io *.clickcease.com s.yimg.com *.facebook.com *.google.com bat.bing.com sentry.cloudmccloud.com *.liadm.com *.macupdate.com https://api.account.mackeeper.com https://api.account.sz.mackeeper.com https://api-ne.mackeeper.com *.adcell.com *.clarity.ms *.lfeeder.com *.static-cdn.mackeeper.com https://crm.account.mackeeper.com https://chat-crm.account.mackeeper.com static-cdn.mackeeper.com
set-cookie: XSRF-TOKEN=eyJpdiI6IndrY3o3RCtHMWJZbWkrUkEzSGRvdEE9PSIsInZhbHVlIjoiWXFXOVUybklJQXZrZXlJUjUrTGpsdlhBVitiY3RGMUxnblg5UnNjU3BhTTJYVDYyUVN3SllNbDNXR2Rpd2dodlBOcmh6OGVvempITjZTXC9TSlJ2UHJETHpiRnVUMjFhb1dEbGNBSFlQTVhKdHNteU5cL2dQXC92SWdtNWp2UHhIXC9jIiwibWFjIjoiMjdhNTk4MTM2NDIwYTQwOWY1ZDM5NzQ3NzIzZTE5M2Q4MDYwY2VhYjQ1MmJmMDBjNjNiYzcwZTMzNzJjM2RkMCJ9; expires=Mon, 24-Oct-2022 06:24:54 GMT; Max-Age=7200; path=/; secure; samesite=lax
mackeeper_session=eyJpdiI6ImpCZyt1R1U2K2hPSzk5NzVPN1BiUXc9PSIsInZhbHVlIjoidG5uV2ZLMlwvcnlua3ZmOE94S3cwS05jMGQyVkFZcm1oaDUyREhiM1I4clVkRW5JU05DWmJ5NnE5UUFlZVhLM2xpTEIxK3o2RTNcLzlFUHp2dWdDYnZzZlp2WFRuTWg1cXdyT2tsNUxkQ1dRdG0rZ0tIdUFFbXo4THQwTW0zNytVTiIsIm1hYyI6IjQwOTI4NjkzNjY1NmZhNWI3ZWJiNDIwNGU0OTQ1OGIxMzAzZjUzMzdlMzJiNjQzMWU4NTI5NjAwOGQwZmExOWEifQ%3D%3D; expires=Mon, 24-Oct-2022 06:24:54 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax
get_params_landings=%7B%22rtkcid%22%3A%226355e557844bf3000158e402%22%2C%22rtkcmpid%22%3A%22629a3e04d84ecc000136838b%22%2C%22tid%22%3A%22Affiliate%20-%20CPI%20campaign%20%28install%20only%29%20%28226%29%22%2C%22utm_source%22%3A%22affiliate%22%2C%22utm_medium%22%3A%22adpartner%22%2C%22pubid%22%3A%22629a3fed4714f70001b234db%22%7D; expires=Tue, 25-Oct-2022 04:24:54 GMT; Max-Age=86400; path=/; domain=.mackeeper.com; secure; samesite=lax
globalAffid=mc-6355e558bf6c9f5ac2dde7bd; expires=Sat, 22-Apr-2023 04:24:54 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax
country=NO; expires=Sat, 22-Apr-2023 04:24:54 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: d61832b56166e78a1183852e46228837
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
Blocklists:
- quad9: Sinkholed
|
GET /mk-land/dist/svg/landings/226_6/soft_three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: W/"1e8437e5f03b2dcd725fcf19c843ede9"
cache-control: public, max-age=604800
x-amz-version-id: C1G2RqiXpQdLiH1cTB.L_Ya5eHDrJ_3n
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: boQRZOJrDkERx0si8JwO599-M-T5E0Q22zZNA43q0izFoMA7TBO5aQ==
age: 416116
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /mk-land/dist/226/script.min.js?86fdb65e7ecb32396afd HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 19 Oct 2022 08:49:38 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 18 Oct 2022 08:54:32 GMT
etag: W/"25a2b4dbcd892fc102a3e1bad89857fd"
cache-control: public, max-age=604800
x-amz-version-id: xQ88ZN6ioctIHyw.Pcoiz56yv3nQIIqf
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f6h4C0xvw2sx2UEAHKfCsy8FzC2hKG2V-Ny1g81xNn1f8IXKDUcDSQ==
age: 416117
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /lftracker_v1_ywVkO4XWPeW7Z6Bj.js HTTP/1.1
Host: sc.lfeeder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
143.204.55.127
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 20 Oct 2022 09:29:36 GMT
x-amz-version-id: ITqgO9ELHxvwt2xHFpWEbQUcw8uIiuvx
server: AmazonS3
content-encoding: gzip
date: Mon, 24 Oct 2022 03:58:15 GMT
cache-control: max-age=3600
etag: W/"6fa0006a6525677a49c8de289a869036"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FUBaEgmT_aWlNWvW_wR6gRYwfYv5XZ-m4SB9FWSVJgcclBAued0JYg==
age: 1900
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /mk-land/dist/fonts/MarkOT-Light.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: font/ttf
date: Wed, 19 Oct 2022 08:54:33 GMT
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"48dd0f49a4207634e9062def9074a038"
cache-control: public, max-age=604800
x-amz-version-id: 0k6awkdioEQDqMMUsMLLZL0d1S0LNdte
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QilvvfAYlQcN3O1GxB-_Jzl3eBKf0871Nyi8Zj1dY2dV4fSLk2HA7Q==
age: 415822
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
13.107.213.53
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
cache-control: public,max-age=86400
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8e6ea47462a4c"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 0mBNWYwAAAAD2kZTa9OfiRIxbbnUMesB4U1ZHMjBFREdFMDYxMAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Mon, 24 Oct 2022 04:24:55 GMT
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /mk-land/dist/default/script.min.js?1706ac1b0b33a225018b HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 19 Oct 2022 08:49:38 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 18 Oct 2022 08:53:51 GMT
etag: W/"3c7ecd3bbc051c9d58e97691b50ec183"
cache-control: public, max-age=604800
x-amz-version-id: o1ARDtX94834dnRNyRmhv138jjvDSbDi
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lj3NLIHex0LsAgrS1za6fL2bXjjhY6ZTgnxwT_GDnqs-2OF8J6eEcw==
age: 416117
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /mk-land/dist/svg/landings/226_6/soft_one.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 19 Oct 2022 08:54:10 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:01 GMT
etag: W/"bf6ed3f56235d31918a17604a3131f52"
cache-control: public, max-age=604800
x-amz-version-id: 8xX6ank4Rs.JT95crMgq3uJJbhi1lzJF
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gkyh3Q8aE9Aqqc9lOYxsx-mSI206yro71xwLbGReSu4LPPfel53jEg==
age: 415845
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /1212352/trc/3/json?tim=1666585495802&data=%7B%22id%22%3A675%2C%22ii%22%3A%22%2Fland%2F226%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1666585495795%2C%22cv%22%3A%2220221023-7-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1666585495801%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6355e557844bf3000158e402%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A21%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
 151.101.85.44
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
server: nginx
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 04:24:56 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666585496.336707,VS0,VE99
vary: Accept-Encoding
x-vcl-time-ms: 99
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /c/hotjar-190484.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
54.230.111.8
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Mon, 24 Oct 2022 04:24:56 GMT
cache-control: max-age=60
etag: W/944d9d8b31b8b3b4b55eeefce75f5970
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AY3GYcLTry97u2M3DD_6QfiTT2_i6gdGFdgrIeyyJ0U-AGMbwlY9yg==
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /a-015g.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
143.204.55.58
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 23 Oct 2022 04:35:37 GMT
cache-control: public, max-age=86400
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JQjnEI2XGPQ3FqbLLo2aNzdjnVD5BfcKB0a8b_yQ-lZ73_hOKDqD3g==
age: 85758
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /js/trad.js HTTP/1.1
Host: t.adcell.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
 185.5.82.77
HTTP/2 200 OK
content-type: text/javascript
server: myracloud
date: Mon, 24 Oct 2022 04:24:55 GMT
strict-transport-security: max-age=15768000
content-encoding: gzip
vary: accept-encoding
expires: Mon, 24 Oct 2022 04:32:29 GMT
cache-control: max-age=900
etag: "myra-49f438e8"
x-cdn: 1
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /mk-land/dist/svg/landings/226_6/privacy-three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 19 Oct 2022 08:49:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: W/"c8f8481e4694470f0b9d13007ae87187"
cache-control: public, max-age=604800
x-amz-version-id: ztZus3dIf7v8EQhUG0qQzWys_bOlUhvB
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9QIZ1fzRkGhzMG47iCZTirwlRSdQMaOURSo2IXFe7g6_DgigON0fhQ==
age: 416116
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /mk-land/dist/svg/landings/226_6/appesteem.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 19 Oct 2022 08:49:40 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: W/"11483e7c23b09ca50a06de72c255ce87"
cache-control: public, max-age=604800
x-amz-version-id: lnXVyN4uq0eoJjwYvOqqHWivzHFq_g5q
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RV8NCYCH67-EMWZ2ZLYm01XNUXLdvjZhBlLNRfSbsxA5ZnTBVEu4qA==
age: 416115
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
GET /mk-land/dist/fonts/MarkOT.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
|
54.230.111.123
HTTP/2 200 OK
content-type: font/ttf
date: Wed, 19 Oct 2022 08:54:33 GMT
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"106ae5fa4d0e51fa73ed42c3beecda5e"
cache-control: public, max-age=604800
x-amz-version-id: Eju.irxG68JYjYuEi7BGXEsqN0F4MTaA
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YmZ6XEnZiMUCFS-gssmFRx59QB7uuCJXFaku66j2g949eFg7VTiVZQ==
age: 415823
X-Firefox-Spdy: h2
--- Additional Info ---
Magic:
Size: 0
Md5:
Sha1:
Sha256:
|
51.255.127.44