Overview

URL rdt.mackeeperaff.com/629a3e04d84ecc000136838b?affid=61b0a334c1e46db6ffb361cd&pubid=629a3fed4714f70001b234db&ref_id=62c5099135c7b2292c3c4aad&transaction=62c5099135c7b2292c3c4aad&utm_medium=adpartner&utm_source=affiliate
IP85.17.54.17
ASNLeaseWeb Netherlands B.V.
Location Netherlands
Report completed2022-07-06 04:04:04 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS
Added / Verified Severity Host Comment
2022-07-05 2 mackeeperaff.com Sinkholed
2022-07-05 2 mackeeperaff.com Sinkholed


Files

No files detected



Passive DNS (44)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] static-cdn.mackeeper.com (23) 346539 2017-02-03 14:19:51 UTC 2020-04-09 21:38:38 UTC 54.230.111.123
[Mnemonic Passive DNS] t.adcell.com (1) 43380 No data No data 185.5.82.77
[Mnemonic Passive DNS] www.dwin1.com (1) 4572 2012-06-20 07:16:16 UTC 2022-07-05 22:02:55 UTC 54.230.111.103
[Mnemonic Passive DNS] r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-07-05 04:59:43 UTC 23.36.76.226
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-07-05 05:12:14 UTC 34.218.159.206
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-07-05 12:56:13 UTC 34.120.237.76
[Mnemonic Passive DNS] www.google.com (1) 7 2012-05-22 04:23:54 UTC 2022-07-05 15:41:59 UTC 142.250.74.164
[Mnemonic Passive DNS] region1.analytics.google.com (1) 0 No data No data 216.239.32.36 Domain (google.com) ranked at: 1
[Mnemonic Passive DNS] script.hotjar.com (1) 887 2016-01-27 16:53:15 UTC 2020-11-05 09:54:15 UTC 54.230.111.44
[Mnemonic Passive DNS] app2.mackeeperaff.com (1) 0 No data No data 52.5.35.223 Unknown ranking
[Mnemonic Passive DNS] www.facebook.com (1) 99 No data No data 157.240.200.35
[Mnemonic Passive DNS] rdt.mackeeperaff.com (1) 0 2021-12-08 16:20:36 UTC 2022-07-05 04:03:09 UTC 85.17.54.17 Unknown ranking
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] www.linkedin.com (1) 608 2012-07-31 06:29:59 UTC 2022-07-05 21:21:03 UTC 13.107.42.14
[Mnemonic Passive DNS] trc.taboola.com (1) 602 2012-12-27 11:54:42 UTC 2022-07-05 22:02:56 UTC 151.101.85.44
[Mnemonic Passive DNS] sp.analytics.yahoo.com (1) 816 2014-01-31 20:48:24 UTC 2022-07-05 21:59:40 UTC 212.82.100.181
[Mnemonic Passive DNS] browser.sentry-cdn.com (1) 4393 No data No data 151.101.130.217
[Mnemonic Passive DNS] ocsp.pki.goog (10) 175 2017-06-14 07:23:31 UTC 2022-07-05 04:59:45 UTC 142.250.74.3
[Mnemonic Passive DNS] px.ads.linkedin.com (1) 522 2017-08-08 16:28:50 UTC 2022-07-05 22:44:15 UTC 13.107.42.14
[Mnemonic Passive DNS] tr.lfeeder.com (1) 16332 2020-11-03 16:29:50 UTC 2020-11-16 07:22:17 UTC 54.230.111.22
[Mnemonic Passive DNS] www.google.no (1) 25607 2012-05-21 14:04:11 UTC 2014-08-11 22:10:14 UTC 142.250.74.3
[Mnemonic Passive DNS] connect.facebook.net (1) 139 2013-09-20 12:03:21 UTC 2022-07-05 04:59:33 UTC 157.240.200.14
[Mnemonic Passive DNS] s.yimg.com (1) 375 2012-05-20 22:45:00 UTC 2022-07-05 21:30:20 UTC 188.125.94.204
[Mnemonic Passive DNS] b.clarity.ms (2) 3462 2021-07-27 12:49:08 UTC 2022-07-05 21:23:13 UTC 20.75.32.255
[Mnemonic Passive DNS] widget.trustpilot.com (7) 6018 No data No data 54.230.111.99
[Mnemonic Passive DNS] amplify.outbrain.com (1) 2255 2017-04-12 07:58:35 UTC 2022-07-05 15:03:10 UTC 23.38.201.81
[Mnemonic Passive DNS] static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2022-07-05 04:59:56 UTC 54.230.111.113
[Mnemonic Passive DNS] trc-events.taboola.com (2) 1779 2021-01-14 11:54:37 UTC 2022-07-05 16:41:24 UTC 141.226.228.48
[Mnemonic Passive DNS] ocsp.sca1b.amazontrust.com (6) 1015 No data No data 54.230.245.100
[Mnemonic Passive DNS] bat.bing.com (4) 387 2017-01-30 04:52:25 UTC 2022-07-05 21:21:00 UTC 13.107.21.200
[Mnemonic Passive DNS] www.google-analytics.com (1) 40 2017-01-30 05:00:06 UTC 2022-07-05 23:31:20 UTC 142.250.74.174
[Mnemonic Passive DNS] c.clarity.ms (2) 803 2021-02-03 23:22:47 UTC 2022-07-05 05:06:44 UTC 20.234.93.27
[Mnemonic Passive DNS] www.clarity.ms (1) 1404 2018-11-27 11:04:59 UTC 2022-07-05 04:59:43 UTC 104.212.67.142
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.35
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-07-05 05:12:14 UTC 54.230.111.99
[Mnemonic Passive DNS] www.googletagmanager.com (1) 75 2017-01-30 05:00:47 UTC 2022-07-05 04:59:37 UTC 142.250.74.72
[Mnemonic Passive DNS] rp.liadm.com (2) 2705 2017-02-01 20:43:30 UTC 2022-07-05 15:05:12 UTC 34.226.31.46
[Mnemonic Passive DNS] snap.licdn.com (1) 1044 2017-01-30 04:54:22 UTC 2022-07-05 21:21:00 UTC 23.36.76.210
[Mnemonic Passive DNS] stats.g.doubleclick.net (1) 96 2017-01-30 04:59:59 UTC 2022-07-05 05:00:01 UTC 173.194.222.155
[Mnemonic Passive DNS] googleads.g.doubleclick.net (5) 42 2012-05-21 16:28:57 UTC 2021-02-23 09:01:54 UTC 216.58.211.2
[Mnemonic Passive DNS] tr.outbrain.com (2) 2017 2017-04-12 07:58:35 UTC 2022-07-05 22:02:56 UTC 64.202.112.127
[Mnemonic Passive DNS] ocsp.digicert.com (3) 86 2012-11-29 12:49:49 UTC 2022-07-05 22:46:12 UTC 93.184.220.29
[Mnemonic Passive DNS] fonts.googleapis.com (2) 8877 2017-01-30 04:59:43 UTC 2019-10-16 05:12:41 UTC 142.250.74.10
[Mnemonic Passive DNS] c.bing.com (1) 247 2017-01-30 05:00:11 UTC 2022-07-05 21:21:03 UTC 13.107.21.200


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 85.17.54.17

Date UQ / IDS / BL URL IP
2022-08-19 13:55:55 +0000
0 - 0 - 2 rdt.mackeeperaff.com/629a4795d84ecc0001368394 85.17.54.17
2022-08-18 10:42:20 +0000
0 - 0 - 1 rdt.mackeeperaff.com/629a4807d84ecc0001368395 85.17.54.17
2022-08-18 09:36:32 +0000
0 - 0 - 2 rdt.mackeeperaff.com/629a4807d84ecc0001368395 85.17.54.17
2022-08-18 01:56:41 +0000
0 - 0 - 1 rdt.mackeeperaff.com/629a4795d84ecc0001368394 85.17.54.17
2022-08-16 19:56:18 +0000
0 - 0 - 4 rdt.mackeeperaff.com/629a4807d84ecc0001368395 85.17.54.17
2022-08-16 16:55:51 +0000
0 - 0 - 3 rdt.mackeeperaff.com/629a4737b4746a00014c844a 85.17.54.17
2022-08-16 04:42:44 +0000
0 - 0 - 3 rdt.mackeeperaff.com/627a315b1b910300011dd3ae 85.17.54.17
2022-08-15 13:56:31 +0000
0 - 0 - 3 rdt.mackeeperaff.com/629a4737b4746a00014c844a 85.17.54.17
2022-08-14 13:53:51 +0000
0 - 0 - 2 rdt.mackeeperaff.com/627a315b1b910300011dd3ae 85.17.54.17
2022-08-14 08:06:18 +0000
0 - 0 - 4 rdt.mackeeperaff.com/627a315b1b910300011dd3ae 85.17.54.17

Last 10 reports on ASN: LeaseWeb Netherlands B.V.

Date UQ / IDS / BL URL IP
2022-08-20 02:36:01 +0000
0 - 0 - 2 https://ruiver.nl/fotoalbum/R6oydzYl2ezPTUSKas5/ 87.236.102.130
2022-08-20 01:46:00 +0000
0 - 0 - 15 luckyforbet.com/i/32556 85.17.31.152
2022-08-19 21:11:42 +0000
0 - 0 - 2 https://ruiver.nl/fotoalbum/R6oydzYl2ezPTUSKas5/ 87.236.102.130
2022-08-19 15:51:58 +0000
0 - 0 - 3 neclipspui.com/ 81.171.22.6
2022-08-19 15:49:46 +0000
0 - 0 - 3 apollo3.com/ 37.48.65.144
2022-08-19 15:25:50 +0000
0 - 0 - 4 s35.filefactory.com/get/f/hebnl1hubht/9a9210d (...) 95.211.200.74
2022-08-19 15:25:25 +0000
0 - 0 - 4 s39.filefactory.com/get/p/32e0y9ct1q7a/39eed6 (...) 95.211.200.78
2022-08-19 15:21:44 +0000
0 - 0 - 4 s201.filefactory.com/get/p/1unh42mvafyi/e2250 (...) 95.211.200.201
2022-08-19 13:55:55 +0000
0 - 0 - 2 rdt.mackeeperaff.com/629a4795d84ecc0001368394 85.17.54.17
2022-08-19 07:40:29 +0000
0 - 0 - 3 rajapoker99.asia/ 37.48.65.152

No other reports on domain: mackeeperaff.com



JavaScript

Executed Scripts (43)


Executed Evals (10)

#1 JavaScript::Eval (size: 89, repeated: 1) - SHA256: d5df103b3d6158b5ad05c19ce6f61d6a38c1b9c47f0ce213ac39dccf8a215f2f

                                        (function() {
    return document.querySelector("[data-tidstr]").dataset.tidstr.split(";")
})();
                                    

#2 JavaScript::Eval (size: 69, repeated: 1) - SHA256: 63b1c0ecb5b684e67c9fc03d7d624aafa39a6fabd1ffe7108f77e2e9ab11b623

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(3)[0]
})();
                                    

#3 JavaScript::Eval (size: 333, repeated: 1) - SHA256: 2e916e96c5178535ec8422b931f86b24c207c5242e3b9746195797ad20c0c84b

                                        (function() {
    return function(a) {
        a.set("dimension2", a.get("clientId"));
        a.set("dimension3", google_tag_manager["GTM-PVNC4DL"].macro(15));
        a.set("dimension18", google_tag_manager["GTM-PVNC4DL"].macro(17));
        a.set("dimension19", google_tag_manager["GTM-PVNC4DL"].macro(19));
        a.set("dimension20", google_tag_manager["GTM-PVNC4DL"].macro(21))
    }
})();
                                    

#4 JavaScript::Eval (size: 329, repeated: 1) - SHA256: 660661e9c7f0f890974bbbb23472af1bc93f90cba6c90f0ebb9dbcf9cf8355d4

                                        (function() {
    return function(a) {
        a.set("dimension2", a.get("clientId"));
        a.set("dimension3", google_tag_manager["GTM-PVNC4DL"].macro(2));
        a.set("dimension18", google_tag_manager["GTM-PVNC4DL"].macro(4));
        a.set("dimension19", google_tag_manager["GTM-PVNC4DL"].macro(6));
        a.set("dimension20", google_tag_manager["GTM-PVNC4DL"].macro(8))
    }
})();
                                    

#5 JavaScript::Eval (size: 70, repeated: 1) - SHA256: 5024d23c0216096e391b07dd33d46152f9de7341d425070cb14410a5e5098174

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(20)[2]
})();
                                    

#6 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 4ddd51fa56504fe5c4eaf5321c3bfe9c2f58d248208100f0b73fd2479c8be6b0

                                        (function() {
    return document.querySelector("[data-affid]").dataset.affid
})();
                                    

#7 JavaScript::Eval (size: 69, repeated: 1) - SHA256: 8da159a87b17690597f668f259e641f30925835c139dc682dbf026f304d898fe

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(5)[1]
})();
                                    

#8 JavaScript::Eval (size: 69, repeated: 1) - SHA256: a12eb7029f1bb54eb1b2d9bad442cb478d95f413e74f7206f5f06f3782debb35

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(7)[2]
})();
                                    

#9 JavaScript::Eval (size: 70, repeated: 1) - SHA256: 417e6fdd6687faa89a10b60a8d97de31b9285a6aa23d79f2ed007536cd83f31d

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(18)[1]
})();
                                    

#10 JavaScript::Eval (size: 70, repeated: 1) - SHA256: 27e412e5d5ac610590ad792b5fa21dbc233f79c391dcdf0d02e0801eda3c9ceb

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(16)[0]
})();
                                    

Executed Writes (0)



HTTP Transactions (109)


Request Response
                                        
                                            GET /629a3e04d84ecc000136838b?affid=61b0a334c1e46db6ffb361cd&pubid=629a3fed4714f70001b234db&ref_id=62c5099135c7b2292c3c4aad&transaction=62c5099135c7b2292c3c4aad&utm_medium=adpartner&utm_source=affiliate HTTP/1.1 
Host: rdt.mackeeperaff.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         85.17.54.17
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Wed, 06 Jul 2022 04:03:50 GMT
Content-Length: 271
Connection: keep-alive
Location: https://app2.mackeeperaff.com/land/226/?rtkcid=62c509a63eb8670001339092&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate - CPI campaign (install only) (226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Set-Cookie: redhash=NjJjNTA5YTYzZWI4NjcwMDAxMzM5MDkyfDB8NjI5YTNlMDRkODRlY2MwMDAxMzY4MzhifHw1MDRiMzRhNC1hYjFiLTQwYzItODU4Yy00ZTFmYWVjNzliOTd8MTY1NzA4MDIzMA==; Path=/; Domain=rdt.mackeeperaff.com; Expires=Thu, 06 Jul 2023 04:03:50 GMT; Secure; SameSite=None
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   271
Md5:    52f4e53b94b791f99b33ac049b204d3d
Sha1:   ff81f2c1c2db3c57b7b77190709e663e31f7be7e
Sha256: 4b6708cfb0ab74fda9b3a1943bf4d55716a406758300a4a0c05655245e7da59c

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 06 Jul 2022 03:56:00 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HPU5m3J2BQRGUnB5eX1Wmbq1Y_rnE5patkCgDFmKpNUjoMpmXkqF1g==
Age: 470


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5CA12512DFBE8A007255191678A4ECD570026D865AE741C0D3025D8FE1A58659"
Last-Modified: Mon, 04 Jul 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3944
Expires: Wed, 06 Jul 2022 05:09:34 GMT
Date: Wed, 06 Jul 2022 04:03:50 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-08-10-12-10-21.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.99
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Tue, 21 Jun 2022 12:10:22 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 06 Jul 2022 03:26:46 GMT
etag: "581454acdd98f34fd3fbabd0977ade29"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xEkQTgaPLUZr7UtpzxSZRXs1Q_H86rg5OcPcmcHwklDJiKs8OupdeA==
age: 2225
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    581454acdd98f34fd3fbabd0977ade29
Sha1:   d8d86c0b513137aeb85de01cea7b272c35eb6ab4
Sha256: e98f8f33ba5ed59c3cfdf2ae54957ed32652cf0899f3c8db4b5872e3ece1e4eb
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Wed, 06 Jul 2022 04:03:51 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Wed, 06 Jul 2022 04:03:51 GMT
Etag: "62c3a487-1d7"
Server: ECS (dcb/7F18)
X-Cache: Miss from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Gosz1lsZAnAGHPiVecZdFcRi47eijtFEIR8sCdj28g6xAddEaLZJvA==

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Content-Type, Last-Modified, Alert, Backoff, Pragma, Expires, Content-Length, Cache-Control
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 06 Jul 2022 03:34:59 GMT
Cache-Control: max-age=3600
Expires: Wed, 06 Jul 2022 03:39:05 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Pzz-j6uLiMmMkGYrAyJod-raIz1Xq9FbsIYUw5Af1b6Co1YqVr6VzA==
Age: 1735


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6058
Cache-Control: 'max-age=158059'
Date: Wed, 06 Jul 2022 04:03:51 GMT
Last-Modified: Wed, 06 Jul 2022 02:22:53 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3fYkC2bBL/EC0XeF+lIBQA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         34.218.159.206
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 5I+0aB7lck2pSCiYnFHtAhq4+VM=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 06 Jul 2022 04:03:52 GMT
Etag: "62c427e0-1d7"
Last-Modified: Wed, 06 Jul 2022 03:54:48 GMT
Server: ECS (nyb/1D06)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qmUlSCuQ4klOQZiQCeVTUoslqzb03-_G75JdS9fbcKSONlAwzfPU4g==
Age: 544

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 06 Jul 2022 04:03:52 GMT
Last-Modified: Wed, 06 Jul 2022 02:41:48 GMT
Server: ECS (dcb/7EC9)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TzkcGDTqVfQgHo5g8S2_Z-HqdBELSYIcb4cYXyoqP_1EwmqiYvrllw==
Age: 4924

                                        
                                            GET /mk-land/dist/svg/landings/226_6/per_three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 720
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:53 GMT
etag: "6827d895741abaebbe73a96f65d28344"
cache-control: public, max-age=604800
x-amz-version-id: mvoCbEizAhsFLH5wdS2MZYQ3AAtx74.A
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zGSCJ4mJI3B_zH0IF9_dPHbEM7nGcL1lsfHmtLemR-dYz3k8AwdvFg==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (720), with no line terminators
Size:   720
Md5:    6827d895741abaebbe73a96f65d28344
Sha1:   7b9070dbb0c59f249194f6b182b09507883a627c
Sha256: e6e9d084a55b47d2b0b35022c13168a915b215f34bc43c62fe7c35f7d78896d4
                                        
                                            GET /mk-land/dist/svg/landings/226_6/per_two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 573
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: "f7c01b4f32eceacb4bf0a84f301505c6"
cache-control: public, max-age=604800
x-amz-version-id: INeeTgMqzakR5LaDcvWPGvpXq9_xSm8Q
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m3uvBzX35M8NkApI7yABUnJrR5FhVWjFFMqIrdthN1Glm7XdqFXMXg==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (573), with no line terminators
Size:   573
Md5:    f7c01b4f32eceacb4bf0a84f301505c6
Sha1:   e69ac48a9b8f6ce19faf14bd1014c3943b967c04
Sha256: f26625626a6dd5205a1a10f6c914bdbf6441dd7075b5cff2fdc9d09ecb9f5a67
                                        
                                            GET /mk-land/dist/svg/landings/226_6/clean_one.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 486
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: "4ef86b2fbcdb943033b3c85e020122da"
cache-control: public, max-age=604800
x-amz-version-id: BK083fsfql.WcGuuNtT06YWzZ5Io0.yQ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -miFbSpNayMx2Kb6rkrwQ3mcrBpgXMIh-LqggOtnmjRO_LfS04R2Fw==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (486), with no line terminators
Size:   486
Md5:    4ef86b2fbcdb943033b3c85e020122da
Sha1:   162e093a49c83d2d01bc48c1c9d398ac57d8b92b
Sha256: 4418d84f10560dd73aef8ddb24712a06de3530a83ec5a2674788a8e3758056da
                                        
                                            GET /mk-land/dist/svg/landings/226_6/ant_one.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 432
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: "48ee3a2cc5a7ac742bd440d7c5497fa3"
cache-control: public, max-age=604800
x-amz-version-id: zITGxENkluD_hWywsBv_mgYkXnAZakoF
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rUz2nE4SYOI5nLUHEwagCuQVlY9r2vaRvaOSEdlttj3d6h-IWOIjdw==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (432), with no line terminators
Size:   432
Md5:    48ee3a2cc5a7ac742bd440d7c5497fa3
Sha1:   052e084834e87565be5632d608316d919ef4a6be
Sha256: eb72a677d24f6679bbdd7ee7c9809a575c294d7e1c458b85d2ad0d3d3f7dc9d5
                                        
                                            GET /mk-land/dist/svg/components/btn-arrow.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 412
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:38:48 GMT
etag: "2bb20d31732674b19f39721677ee98b0"
cache-control: public, max-age=604800
x-amz-version-id: nukWLapdOnZ6K4hroAQrBv4GKBUk7Zxa
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e3wZUBf8qJoMaFXotRr6P8DAc86h3o59WO0xke4fFc3B4C4Y34RZXQ==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (412), with no line terminators
Size:   412
Md5:    2bb20d31732674b19f39721677ee98b0
Sha1:   c009a4436fe0fd3e281dcd9f60ab0f2769f25cb5
Sha256: b5553f16ea66eab43971c73b4115bbe291b2188dc00d0c5d4f5bb21958e3dda2
                                        
                                            GET /mk-land/dist/svg/landings/226_6/clean_three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 583
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:53 GMT
etag: "64036bea66db20718ae3285e9ca951cd"
cache-control: public, max-age=604800
x-amz-version-id: lrmZs4eSsgPFrB9nH9B.ep7npBST6sLn
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q-__UPCYBs6iJOr5kBia_6fQNX42dskKsEmVZGg1dki1XA87Ew12QA==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (583), with no line terminators
Size:   583
Md5:    64036bea66db20718ae3285e9ca951cd
Sha1:   bd5eed2f6cdfd70698fa356785acb13c21768d41
Sha256: 462a1d5d1feb27660a51f000e54ac924bcca7b6d94337593dd0e741560d7da7f
                                        
                                            GET /mk-land/dist/svg/landings/226_6/security-two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 442
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "1dc4abe3aa5d009df49fbf517f481ccc"
cache-control: public, max-age=604800
x-amz-version-id: JYyDmy0JzcCA_htBP3.Yy0AadPOSkqdB
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y8FhPRodKsx8EDMorRuv1eMeX6FQzRN4I5vgfp0hq9vvQsqOgdp6Fw==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (442), with no line terminators
Size:   442
Md5:    1dc4abe3aa5d009df49fbf517f481ccc
Sha1:   c59310139609463fcda8759b2acb5d273cb47b2c
Sha256: 355f6e09902fa7825ed2dcab34dc5b00f874c346397cf1135dd7d04c97e17457
                                        
                                            GET /mk-land/dist/svg/landings/226_6/clean_two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 431
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:55 GMT
etag: "f0f6b52bce4737187d5986d65c2b9a11"
cache-control: public, max-age=604800
x-amz-version-id: pwhnB7X_4WGez_7temaOOVBFmwfQ7lz1
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fVfOLrN1pducKPQfXr6I061D39GtEh_SzVkwTSNP3jAf147SC_H5NQ==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (431), with no line terminators
Size:   431
Md5:    f0f6b52bce4737187d5986d65c2b9a11
Sha1:   420adf24b61c4b96d5dc1b30eb4cbd44106ec3c2
Sha256: b02a16d65bb919592b8b0903e78661c9c6a6b6d39218ce2ca664c5b2fbccad76
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 06 Jul 2022 04:03:52 GMT
Etag: "62c427e0-1d7"
Last-Modified: Wed, 06 Jul 2022 03:54:48 GMT
Server: ECS (nyb/1D06)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HLtpPo31prQtd817B9KR2HXYuDLg0hPvMK1QCA9nKzbCnNv6Aj83eg==
Age: 544

                                        
                                            GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.99
HTTP/2 200 OK
                                        
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Wed, 06 Jul 2022 02:34:22 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UfeslcCM1Mj84BwRZFujJuqafNY2d5lIDbTc7FVloBe006X3KLXkFA==
age: 77782
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Size:   6124
Md5:    5add60196e5f96a414fb4b9586764e5d
Sha1:   633f471b3c2fcedeef9cad90cb5bf56f5fe55588
Sha256: 5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
                                        
                                            GET /mk-land/dist/svg/landings/226_6/prive_three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 717
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:00 GMT
etag: "a5c782d385dc0cbbd4afa608cdd1d8f3"
cache-control: public, max-age=604800
x-amz-version-id: hAo3LTGm1kioSzmqbpisk6sFB6F2ne_I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KgakJobcIbY057a-C_d417OU5efV_P4uAjBoyOJfQbFG7MKTvnEIRg==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (717), with no line terminators
Size:   717
Md5:    a5c782d385dc0cbbd4afa608cdd1d8f3
Sha1:   68087ac49e47e19dba31ef068f54a6c574a8bfc2
Sha256: 6a6809edb7464cf5d45ff57e705bbefcfb37048721518235e12a5fc5b4b801c4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 06 Jul 2022 04:03:52 GMT
Etag: "62c427e0-1d7"
Last-Modified: Wed, 06 Jul 2022 02:53:23 GMT
Server: ECS (dcb/7F3C)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 10M5Jye16iOdrf0eNe-pDBLPDXV9GsWzIgkP0aGrXdKe4YLm0hYQMg==
Age: 4229

                                        
                                            GET /5.5.0/bundle.min.js HTTP/1.1 
Host: browser.sentry-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.130.217
HTTP/2 200 OK
                                        
expires: Fri, 11 Nov 2022 05:27:37 GMT
last-modified: Fri, 05 Jul 2019 11:17:04 GMT
etag: W/"39339cf627bc67e34d4c623bea4c0b4a"
content-type: application/javascript; charset=utf-8
x-guploader-response-body-transformations: gunzipped
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 06 Jul 2022 04:03:52 GMT
age: 20471776
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 51570
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (51441)
Size:   51570
Md5:    b1dcc6195d84cf50c3e882d3d515f848
Sha1:   06562c193663a31a3cabeaa18cffeb882084fcb6
Sha256: 8c04755395b8f232c57d062a7669c3c414658299d29c6b6f83f1f30185d94ecb
                                        
                                            GET /mk-land/dist/svg/landings/226_6/soft_four.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 399
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:57 GMT
etag: "bc4849c8d35e6a210935e7b9fdda0196"
cache-control: public, max-age=604800
x-amz-version-id: cjT7BZtus9OxhFupiCyx1NXoECdT1Iuy
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Kf2XYDC1A89-51mxrakBnCz53woTYdRMKHjaZ_k8P9g1oXiqbgsEiw==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (399), with no line terminators
Size:   399
Md5:    bc4849c8d35e6a210935e7b9fdda0196
Sha1:   ffcc50042a4d7862847115f659b0f099c1b469bb
Sha256: 1c216829b95c0b70220cb919b5889fce57c99a687d7be02f06ded33f80527283
                                        
                                            GET /mk-land/dist/svg/landings/226_6/privacy-two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 987
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "102a03f6293726facccabba18c0e9455"
cache-control: public, max-age=604800
x-amz-version-id: vd2P4eOW5sVryjV60xLUbORWH7nqhDKo
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dhvzxb721ntBpn873CwCG__huTvvk5VJ4rnX6YtyOJAIv2AwY2LtvQ==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (987), with no line terminators
Size:   987
Md5:    102a03f6293726facccabba18c0e9455
Sha1:   a26d09667f914080c04fd009f03f8d95850bb895
Sha256: 1d974ed4e61fc2a77bcd71ffda37e83e83cf0681d1633d5f42c00c3df2226def
                                        
                                            GET /mk-land/dist/svg/landings/226_6/soft_two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 416
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "9cab428314b3d6d14b27b1c135719c23"
cache-control: public, max-age=604800
x-amz-version-id: 9Nz90cyOwx1KpcUWe9_.hucQaEGthL8K
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: faikd9_idHqNp5WVsOlYu9WLGAgmTfmtLJrCKronfJaQRIYJylOI7A==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (416), with no line terminators
Size:   416
Md5:    9cab428314b3d6d14b27b1c135719c23
Sha1:   e02c5b85b10d649435b5930e710056f30ea2cc50
Sha256: 3a275c72443bceadd78236a8c465a5b9285433efd40cd339836380ae06c25279
                                        
                                            GET /mk-land/dist/svg/landings/226_6/per_one.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
content-length: 539
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:55 GMT
etag: "97ea212e1de4543eabca9fd8ddd404de"
cache-control: public, max-age=604800
x-amz-version-id: GTHRvt.ZAHuYF0OtDGQPKnnMNAS2EieE
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: G2TQ3jYJzD13UWEq__n1e2EDD3YC_piU9bcKWOANUgU1BNpNP3oisA==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (539), with no line terminators
Size:   539
Md5:    97ea212e1de4543eabca9fd8ddd404de
Sha1:   007dadc86f73968b1c388e45d8700ecf89d6a50b
Sha256: 0e99a715e4465cdb227652a88f9d4a7a18bb59a56278b447b1ded534bfea4c5c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=115000
Date: Wed, 06 Jul 2022 04:03:52 GMT
Etag: "62c427e0-1d7"
Expires: Thu, 07 Jul 2022 12:00:32 GMT
Last-Modified: Tue, 05 Jul 2022 12:00:32 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6eaIKOBPbhYKBLQn4CNO_FqUHGiM1wGYVk7nLs6oNy3LLeA_bWP-MA==

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 04:03:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 04:03:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Source+Sans+Pro:400,600 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
                                        
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 06 Jul 2022 04:03:53 GMT
date: Wed, 06 Jul 2022 04:03:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1095
Md5:    4a68db98bdad74189709aefb20351e3d
Sha1:   a3281cf2721bf4d05038efc6edec05f738df0806
Sha256: b9319eded8a2529d21a89ee4aac0279be4c84cfaa3c1913e876f4f249b20fc58
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 04:03:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /mk-land/dist/images/landings/226/hero.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?9f661ab702d784a0d4fe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: application/octet-stream
content-length: 219648
date: Fri, 01 Jul 2022 09:51:50 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:57 GMT
etag: "87dd68aac400d85dfa1db40e1b82d15d"
cache-control: public, max-age=604800
x-amz-version-id: 4L0sXSs7c8B1NC.82r.pHSX7QXp0wcne
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TeywXZk5w2urvlkad3OsO3JUxhwQ9wtb_ti466nOzmwYoiq7tbI60w==
age: 411124
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   219648
Md5:    87dd68aac400d85dfa1db40e1b82d15d
Sha1:   120f848d486af3d5ebabd098ceac1a45c5833ae7
Sha256: 1a60fe135354f064139e85467ab8425ecb667362705658f2f17c1b4b03c5ea83
                                        
                                            GET /mk-land/dist/images/landings/226/memory.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?9f661ab702d784a0d4fe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: application/octet-stream
content-length: 1420
date: Fri, 01 Jul 2022 09:52:22 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:58 GMT
etag: "e24e191c026b00c1d7a106572ec478ed"
cache-control: public, max-age=604800
x-amz-version-id: 1vAS8O6UcwVIOLifS.J6ICiwtfTXw2jZ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 30zF9sHhSP3pDqekwp2Q9A7FVTBzJ18E3SuXXDeOjtrajX91zjnC4Q==
age: 411091
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1420
Md5:    e24e191c026b00c1d7a106572ec478ed
Sha1:   b2929eaa3663327447ebc0a36f971fd5f41ed3bb
Sha256: dfcbf5db55a5b400ad7e7c0cbf38c1dcb6e48199f4acd751a2eb44d579b078fa
                                        
                                            GET /mk-land/dist/images/landings/226/back.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?9f661ab702d784a0d4fe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: application/octet-stream
content-length: 1824
date: Fri, 01 Jul 2022 09:52:22 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:59 GMT
etag: "867c21c37d640d99114ca25d1a737ef9"
cache-control: public, max-age=604800
x-amz-version-id: Jur.ibLOiEhGsb_TBRGaIQ2gnsF.i6Re
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ELNQrWQiabcxGlsZlGy13tiSPxyYAv3HGBgOxp2YbkD6nneF5n0zvA==
age: 411091
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1824
Md5:    867c21c37d640d99114ca25d1a737ef9
Sha1:   3c02f083a49ccb824379b4d0b9c4a38b6456417b
Sha256: d6855d6980e680edfe756f5021f6b06e541c033fafa4f0caf78f01ca3424d09f
                                        
                                            GET /mk-land/dist/images/landings/226/virus.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?9f661ab702d784a0d4fe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: application/octet-stream
content-length: 1718
date: Fri, 01 Jul 2022 09:52:22 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:59 GMT
etag: "9b099488f1b2855d4161d0f212c9c4ad"
cache-control: public, max-age=604800
x-amz-version-id: hC8o5xw8Vbs14GyNB7kKk0ruf_0ADI.y
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rvLq4QUAo6aAApKMADyY60CCxtusWLr9b7GQRg7bVWy0hlBc8k2XZQ==
age: 411091
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1718
Md5:    9b099488f1b2855d4161d0f212c9c4ad
Sha1:   ed56ac97b5e0a671f523aece4ad04cf22dd4a40f
Sha256: 3fbe829b179669affe3b743bb603ff415506fc7d76072980a7900ce6ceb41431
                                        
                                            GET /mk-land/dist/images/landings/226/performance.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?9f661ab702d784a0d4fe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: application/octet-stream
content-length: 30230
date: Fri, 01 Jul 2022 09:51:52 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:58 GMT
etag: "f8a37f0c75191e262d9e00b2bbe849e0"
cache-control: public, max-age=604800
x-amz-version-id: WtImzHf7J4uGMuRdFTGvv5Gk2dF.H7tm
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nxd3OEsSwBSpAiCL9_YiWzoiliv5sflMyXn_zydbz39H8VtPRxT3mw==
age: 411122
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   30230
Md5:    f8a37f0c75191e262d9e00b2bbe849e0
Sha1:   6f18898837773a58c4481fc4bc08cca2cdd69216
Sha256: 1f3376c88f88a4d8be5f4da476e1a2bd337779b975fb3e240e3a01023a872dba
                                        
                                            GET /gtm.js?id=GTM-PVNC4DL HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
                                        
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 06 Jul 2022 04:03:53 GMT
expires: Wed, 06 Jul 2022 04:03:53 GMT
cache-control: private, max-age=900
last-modified: Wed, 06 Jul 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91348
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (39542)
Size:   91348
Md5:    a2990834455fa5ac1233fec81049e2f1
Sha1:   a9a7908e2a95a45a84be3f7550664044a182e665
Sha256: 26cb7262ba546919ff8366ec080b69b95ced2b84518cedc9c7054110ffa3c734
                                        
                                            GET /mk-land/dist/svg/landings/226_6/privacy-three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: W/"c8f8481e4694470f0b9d13007ae87187"
cache-control: public, max-age=604800
x-amz-version-id: ztZus3dIf7v8EQhUG0qQzWys_bOlUhvB
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: T4v3o5OLmivLVZZ38GcviPzKqAA8kf5WYC1s_K2hDqNY35xeshdxnw==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6175)
Size:   2710
Md5:    a37406b9d866023ee00f34162b8cb6cb
Sha1:   8ac40be5f299be78c2a76d4c8e275571d888bb37
Sha256: 29fc0749d4f347f5a51c17930fe6231972bc0fd07588b69b4371ec2285ccf48f
                                        
                                            GET /trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.99
HTTP/2 200 OK
                                        
content-type: text/html
content-length: 3103
date: Tue, 05 Jul 2022 06:11:46 GMT
last-modified: Tue, 14 Jun 2022 14:05:46 GMT
etag: "7c645b4a2aad5230b459bda2baff2268"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: d67wYtz6MxzbcctNELIfoTArv5HRbQzeMapQ6TFbbJAUugjaGtifhA==
age: 78727
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12306)
Size:   3103
Md5:    7c645b4a2aad5230b459bda2baff2268
Sha1:   afb1194d84bcbf10eafec0d605388b66d72113d1
Sha256: 2bde49555fd1f22455c8ddcaaf6ca872ce3b57a3d08d74a391d13b5230536da3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 04:03:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Roboto:400 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
                                        
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 06 Jul 2022 04:03:53 GMT
date: Wed, 06 Jul 2022 04:03:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (62774)
Size:   23951
Md5:    5df57dd70b6287a8b3efa93ad0e29b50
Sha1:   2ce57ae317cfe65e78a5527281619538ffafd2bf
Sha256: 59fb75ddee62d792e7b6177e83714fe30ebc8a8b34cbf868533206ca8ca7a55c
                                        
                                            GET /mk-land/dist/svg/landings/226_6/soft_one.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:01 GMT
etag: W/"bf6ed3f56235d31918a17604a3131f52"
cache-control: public, max-age=604800
x-amz-version-id: 8xX6ank4Rs.JT95crMgq3uJJbhi1lzJF
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S-Z5Y1w0Ab0FOr03Dg_jexIgn1i-eszQUi3-Qr4dXQrd313LcZO2xw==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   68456
Md5:    a4d37aa8404c7ef585dbdebf97a0c6e2
Sha1:   979e411af1e14e829d9d8c5ea9ddaff204eac384
Sha256: d894d81f401c8f7355930882ed81b84017cc2003a9b8b07542435b3c42bf5109
                                        
                                            GET /trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.99
HTTP/2 200 OK
                                        
content-type: application/json; charset=utf-8
content-length: 2647
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
date: Wed, 06 Jul 2022 03:54:49 GMT
cache-control: public,max-age=1800
etag: "edfa45dba91760a580a36c06f96ff9f6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yAqOIpZjv4yoyBoTvOF_VS3LgdMek7AMERJvd44sE0xcXB1BZAURBQ==
age: 1298
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (6330), with no line terminators
Size:   2647
Md5:    62f02b40a712083ae668dfdc22c59616
Sha1:   59a9e22377353ddbc772830aff3f2c768bfc9119
Sha256: d6d2322f75662fd04d658f1b5de929b697fb91258e9363a90d9a7e028567f496
                                        
                                            GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=4dbb14ee00006400050fa293&locale=en-US HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.99
HTTP/2 200 OK
                                        
content-type: application/json; charset=utf-8
content-length: 425
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
date: Wed, 06 Jul 2022 03:54:49 GMT
cache-control: public,max-age=1800
etag: "5d0d0a2e76ddfb6566618493ce5df9ee"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Wqsfeo4_bGZPIFWQBVdQBj2faz23nboWcHGsnLQFFpNK9IF3eE1xDQ==
age: 778
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (930), with no line terminators
Size:   425
Md5:    d32c9278c8a09d5ec3ee8c1648e05937
Sha1:   777c1c5f7569d93718cdb04244d342573449c6d5
Sha256: 171ad6899e6f8031a46561e415df094b56502f04ef0469a0a96d83335c6532ed
                                        
                                            GET /stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.99
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Wed, 06 Jul 2022 04:03:52 GMT
pragma: no-cache
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: o8QSDjKc9iVbOiIN1OfnospFNcMxykh9leY0QZWbT1r4BPoQDz_CKA==
X-Firefox-Spdy: h2

                                        
                                            GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.99
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Wed, 06 Jul 2022 04:03:52 GMT
pragma: no-cache
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ulckLuOeFLlVOgsOChs1lrPeTycPmrccSg95XhIrT0XHrfmokA8okQ==
X-Firefox-Spdy: h2

                                        
                                            GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.99
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Wed, 06 Jul 2022 04:03:53 GMT
pragma: no-cache
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KVdQuoWv6pT7p-DNteXJ2GSeFWbtVMqT8HhIaA40bMy5_nkHNUe1SQ==
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "611E864D4A64EB7175BDED94052A41462E3215D329EF82CBEEA70D511B811E8D"
Last-Modified: Mon, 04 Jul 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11136
Expires: Wed, 06 Jul 2022 07:09:29 GMT
Date: Wed, 06 Jul 2022 04:03:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "611E864D4A64EB7175BDED94052A41462E3215D329EF82CBEEA70D511B811E8D"
Last-Modified: Mon, 04 Jul 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11136
Expires: Wed, 06 Jul 2022 07:09:29 GMT
Date: Wed, 06 Jul 2022 04:03:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "611E864D4A64EB7175BDED94052A41462E3215D329EF82CBEEA70D511B811E8D"
Last-Modified: Mon, 04 Jul 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11136
Expires: Wed, 06 Jul 2022 07:09:29 GMT
Date: Wed, 06 Jul 2022 04:03:53 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabd9505b-43dd-4a15-95da-d320727bc76c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7381
x-amzn-requestid: 7d7f3d3b-e16a-48bd-8df6-62e2eed518db
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UyBSIE-KIAMFegQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c3e273-4aac4b85691586656b440662;Sampled=0
x-amzn-remapped-date: Tue, 05 Jul 2022 07:04:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: D2XIbeEoynUyeLDaTTx-rojkLM42l1GbQGkXcc03kLeOZayVRKqlDw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Tue, 05 Jul 2022 07:20:11 GMT
age: 74622
etag: "0e711cdffbe58041b6567ff9475af3820529038f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7381
Md5:    a419e897adcc5361b4b5000e3f5cef87
Sha1:   0e711cdffbe58041b6567ff9475af3820529038f
Sha256: 8e0c6cecaaf6701faa8b1c2d0a925102074e5ef35b697a3f8e44c0ee75415d40
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a4cf600-0dd5-4efd-86ef-01ccc7e879bc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 12673
x-amzn-requestid: ac95cef3-1997-4c98-9d63-f020b6ea76e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UrcAcGErIAMFX8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c14069-7b39138701d6d3174502509f;Sampled=0
x-amzn-remapped-date: Sun, 03 Jul 2022 07:08:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TEu03dTczKrwGA1_GgB_LsiP6izgKN9aBvvaAJYgY7c1ZPenRs9PnA==
via: 1.1 7f06047c304d80ea094816a27c933914.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 05 Jul 2022 07:11:38 GMT
age: 75135
etag: "f821522cf9fc822ad1417f5a7dab9a362056e550"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12673
Md5:    50d071598961b3fd8a9ff72715a69aab
Sha1:   f821522cf9fc822ad1417f5a7dab9a362056e550
Sha256: 408b237987b3f528c50bae5d38ad44fd2a4af466e22d24298a668577394ea30d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ef4a155-99c7-4810-bb0a-a2795ff0fb56.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 6350
x-amzn-requestid: 069800ee-c9fe-4b73-8708-ca4c9f89584e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U0BUyFkgIAMFccg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c4af51-6495224e662d8fbe63dece74;Sampled=0
x-amzn-remapped-date: Tue, 05 Jul 2022 21:38:25 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SnCaojuy3Ax-0pLF7I9bzLBti2OxdIaWekOiTslJx2dWac-s_THiig==
via: 1.1 020978022b22df6352245f09cfbc410c.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Tue, 05 Jul 2022 21:50:33 GMT
age: 22400
etag: "5c290d39a1ba968f7134d0ae6522bfd74485c42a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6350
Md5:    815fad277a212592f6f19843191eae5c
Sha1:   5c290d39a1ba968f7134d0ae6522bfd74485c42a
Sha256: 9dc39b527d0f49b3df028e63a15ad20c45d9f26a4ad07e557c239c31dfe33ce4
                                        
                                            GET /mk-land/dist/svg/components/logo/mk-logo-ua.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/svg+xml
date: Fri, 01 Jul 2022 09:52:01 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Apr 2022 14:50:37 GMT
etag: W/"0443bcb5ae8253499f7df7f80c45fc8c"
cache-control: public, max-age=604800
x-amz-version-id: sx6d65Ik.60EPUJCncti20jd8v0DNMRK
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BGsd8G-JAXIW7EG7YIaWLiPPp1qoWVbHUzo_jiFPwWdPX3aHR8zZeg==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   21083
Md5:    7fe2b06e12c460ef19f2dadd2a5ca18e
Sha1:   d933ada625103900a7641339735dd4896a7cf756
Sha256: ac9095b5754819bb9db6e639ac5da7b78175721b325a0ad0074f8a9005fe5a3d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff50bf4f9-4824-479c-86a6-8d2e0b8fd7c3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 9548
x-amzn-requestid: fff20dfd-0be7-4d8c-95be-f4362de2060b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UuwDoExCIAMF5qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c293b0-721d93284d8910c619277319;Sampled=0
x-amzn-remapped-date: Mon, 04 Jul 2022 07:16:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Yq34dnXpKH6VEEzEtmMzvixj4n-3wo_egGruZb04RhxYcq9Dsg9lvA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Tue, 05 Jul 2022 07:40:41 GMT
age: 73392
etag: "0285792b38ab8e99544a267dde95be2cf3b35490"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9548
Md5:    ed9055f5cbf86e5c46511c132082d36c
Sha1:   0285792b38ab8e99544a267dde95be2cf3b35490
Sha256: 0e0d96c5e8aadeab85293ca34f9b9ca4aba8ec14ee1f4905276697069282f32a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F431f287f-9907-47aa-be38-0ff4e6db75fc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8553
x-amzn-requestid: 2c1e16d1-357b-493e-bcf7-b4de1a34757f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Utd8tEKYIAMFbmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c21051-7382cb3050c6f13d70dd3706;Sampled=0
x-amzn-remapped-date: Sun, 03 Jul 2022 21:55:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wcT3TQNc1zixQ773IGnG_ghBAa2ELekTK0IyHJ3q_7RrgUTZ83spGQ==
via: 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 03:11:53 GMT
age: 3120
etag: "303f4efaa9b98e39a935fc6514d3731d40d2977c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8553
Md5:    e6f97e6b64100081e8bed56216564854
Sha1:   303f4efaa9b98e39a935fc6514d3731d40d2977c
Sha256: 92dd803f1633bd65a2b4ac3223d8aa93dd55ed64c74b338aff62323585a3623c
                                        
                                            GET /?sid=ywVkO4XWPeW7Z6Bj&data=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 HTTP/1.1 
Host: tr.lfeeder.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.22
HTTP/2 200 OK
                                        
content-type: image/gif
content-length: 43
server: CloudFront
date: Wed, 06 Jul 2022 04:03:53 GMT
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CqLzkQN-RtP9osFXYCI_itWCvZhtkLifjuv217r3gVWasO98YAPaZg==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /j?dtstmp=1657080233546&aid=a-015g&se=e30&duid=f810f9c9df2c--01g78tvfepm9wyrc3dkc7cv7cr&tna=v2.4.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU- HTTP/1.1 
Host: rp.liadm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.226.31.46
HTTP/2 302 Found
                                        
date: Wed, 06 Jul 2022 04:03:54 GMT
content-length: 0
trace-id: be0ed5b5079b7948
vary: Origin
location: /j?dtstmp=1657080233546&aid=a-015g&se=e30&duid=f810f9c9df2c--01g78tvfepm9wyrc3dkc7cv7cr&tna=v2.4.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520%28install%2520only%29%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true
set-cookie: lidid=69fc8342-145b-48b7-9fe2-06d22879ac54; Max-Age=63072000; Expires=Fri, 05 Jul 2024 04:03:54 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2

                                        
                                            GET /cp/obtp.js HTTP/1.1 
Host: amplify.outbrain.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.38.201.81
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Wed, 06 Jul 2022 04:23:54 GMT
Date: Wed, 06 Jul 2022 04:03:54 GMT
Content-Length: 3249
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (8072), with no line terminators
Size:   3249
Md5:    9b19340ef7db3cbb26aa923adb8dbe6e
Sha1:   082e699bca6e80ca6c72a43f2894f4a32e785e26
Sha256: c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
                                        
                                            GET /li.lms-analytics/insight.min.js HTTP/1.1 
Host: snap.licdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.210
HTTP/1.1 200 OK
Content-Type: application/x-javascript;charset=utf-8
                                        
Last-Modified: Wed, 13 Apr 2022 23:25:22 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=76234
Date: Wed, 06 Jul 2022 04:03:54 GMT
Content-Length: 3085
Connection: keep-alive
X-CDN: AKAM


--- Additional Info ---
Magic:  ASCII text, with very long lines (7769)
Size:   3085
Md5:    f635e5cae6eb44fd17f90c7dfaf90f20
Sha1:   0a03870e20430b43753b20899faf3ca391a5fda7
Sha256: c3406383ea55ac3de8e5537bd9816c9ad875d9005e36277846b6c7fbd277ca14
                                        
                                            GET /gtm/optimize.js?id=OPT-TVNW4WH HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
                                        
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 06 Jul 2022 04:03:54 GMT
expires: Wed, 06 Jul 2022 04:03:54 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44331
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4626)
Size:   44331
Md5:    2a3fec2993d27025a81df1442c7d2fb9
Sha1:   970e0b8b0b506f14d294d3c948bdae9d01262032
Sha256: 3ea3557042df0a8c4e58edb09bfaae156a7926d6b13c14cdd6ec610f9483f595
                                        
                                            GET /js/trad.js HTTP/1.1 
Host: t.adcell.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.5.82.77
HTTP/2 200 OK
                                        
server: myracloud
date: Wed, 06 Jul 2022 04:03:53 GMT
content-type: text/javascript
strict-transport-security: max-age=15768000
content-encoding: gzip
vary: accept-encoding
expires: Wed, 06 Jul 2022 04:13:34 GMT
cache-control: max-age=900
etag: "myra-9ef31487"
x-cdn: 1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   21938
Md5:    aed440eaef97ccc97e826ee4538cfb66
Sha1:   299f600fecab56e7eb8359a43519a9e948b3409b
Sha256: 15ae3ddbcdff8e1adb2e3aecf465ce59d4f13fb0f891ed57d3c6ec73e11b5d19
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 339
Cache-Control: 'max-age=158059'
Date: Wed, 06 Jul 2022 04:03:54 GMT
Last-Modified: Wed, 06 Jul 2022 03:58:15 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 04:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.107.21.200
HTTP/2 200 OK
                                        
cache-control: private,max-age=1800
content-length: 11360
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 16 Jun 2022 18:22:08 GMT
accept-ranges: bytes
etag: "0c8eafcad81d81:0"
vary: Accept-Encoding
set-cookie: MUID=313ECD13619F68E930CBDCCA606A699E; domain=.bing.com; expires=Mon, 31-Jul-2023 04:03:54 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 665297994B804D239596E3D9A1FEE192 Ref B: OSL30EDGE0513 Ref C: 2022-07-06T04:03:54Z
date: Wed, 06 Jul 2022 04:03:54 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (38764), with no line terminators
Size:   11360
Md5:    89d0cd4aaf03163b7c66bd3ffbcfc757
Sha1:   5301fad6e9295c8cf0814aefc0fdea2e476a78bb
Sha256: c7077624ec66193ab1560dc670643bf6e17f89b27773640915a1a576af84a55f
                                        
                                            GET /j?dtstmp=1657080233546&aid=a-015g&se=e30&duid=f810f9c9df2c--01g78tvfepm9wyrc3dkc7cv7cr&tna=v2.4.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520%28install%2520only%29%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true HTTP/1.1 
Host: rp.liadm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.226.31.46
HTTP/2 200 OK
                                        
date: Wed, 06 Jul 2022 04:03:54 GMT
content-type: application/json
content-length: 13
trace-id: b67c625f1d919b7d
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: 6ad4abf2-0331-4267-bc7e-bedb8d67d14c
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   13
Md5:    97efe0b7ee61e154d57e80758bb797d8
Sha1:   810b4e115fe9f5ae697666febf2a9abf0b21c9ec
Sha256: efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 06 Jul 2022 04:03:54 GMT
expires: Wed, 06 Jul 2022 04:03:54 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 3379859422830751262
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15159
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1716)
Size:   15159
Md5:    cbef4e3fe506f37ad6151e96d28bb454
Sha1:   0c67dd479c7e4413383360df560c32c42c66fd36
Sha256: 3491568be3fb8de41c6d7be1f21813ef0a35c6d3eb2a2e59f705bdd42539f20a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 04:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=988747135.1657080233&gtm=2oe6t0&aip=1&z=1497634481 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.3
HTTP/2 200 OK
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 06 Jul 2022 04:03:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.14
HTTP/2 200 OK
                                        
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 0hog9QxmXpxjMQC1fgxN+5iMvPU9I7uvehbxlYP0nq2rCeLnKy7OkUX18wdQ5x6QxE/CwnIgVYlKjN3gQecG0Q==
content-length: 25939
x-fb-trip-id: 1679558926
date: Wed, 06 Jul 2022 04:03:54 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   25939
Md5:    9600c9778ba46bd2c8c6c08fd1c8fad1
Sha1:   d67f4ebd47bfe9242b14b4144ff0541a12425ebe
Sha256: 6470ae7a89bd23bd652301db0dd3823936c7b00d824c771b482d914b25620bf0
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 04:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /g/collect?v=2&tid=G-GYTXD89N1W&gtm=2oe6t0&_p=1411180452&_z=ccd.v9B&_gaz=1&cid=988747135.1657080233&ul=en-us&sr=1280x1024&_s=1&sid=1657080233&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.analytics.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         216.239.32.36
HTTP/2 204 No Content
                                        
access-control-allow-origin: https://app2.mackeeperaff.com
date: Wed, 06 Jul 2022 04:03:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 339
Cache-Control: 'max-age=158059'
Date: Wed, 06 Jul 2022 04:03:54 GMT
Last-Modified: Wed, 06 Jul 2022 03:58:15 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /wi/config/10013499.json HTTP/1.1 
Host: s.yimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         188.125.94.204
HTTP/2 200 OK
                                        
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 8A1YCXCVTGJT671Z
x-amz-id-2: ddRasWyG7uR4XJdxcVj9kD5TXFaObZqBQmgNR414qch5G3xFZHWRDQ84Z4hn5Hr0Zi4EQ3AvhlI=
content-type: application/json
date: Wed, 06 Jul 2022 03:10:12 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 3222
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            POST /g/collect?v=2&tid=G-GYTXD89N1W&cid=988747135.1657080233&gtm=2oe6t0&aip=1 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         173.194.222.155
HTTP/2 204 No Content
                                        
access-control-allow-origin: https://app2.mackeeperaff.com
date: Wed, 06 Jul 2022 04:03:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 04:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /mk-land/dist/images/favicon_ua.png HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: image/png
content-length: 407
date: Fri, 01 Jul 2022 09:52:03 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 04 Apr 2022 09:52:27 GMT
etag: "471c1c90d41a571f14162d7a8a9c8b9c"
cache-control: public, max-age=604800
x-amz-version-id: fOjB1uVWJszrafJRMb0A4UZGtOA62i.I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -ONpS4gpz6eVgiJEC-q_v4zImFV4QVtPXPfd0IMalnvgCln-osQL7w==
age: 411112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size:   407
Md5:    471c1c90d41a571f14162d7a8a9c8b9c
Sha1:   b08dfa2783c706945451a8f4890bdb9243936e78
Sha256: eb625a455a490292aa2a7101dd7b3235bc4c92df0f08349c6663df51b7b66c27
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 04:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /23738.js HTTP/1.1 
Host: www.dwin1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.103
HTTP/2 200 OK
                                        
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
x-amz-replication-status: COMPLETED
last-modified: Tue, 28 Jun 2022 13:26:29 GMT
x-amz-version-id: YYaUiAkj5P4B7AOqH2DP.U.3.U84Rlbn
server: AmazonS3
content-encoding: gzip
date: Wed, 06 Jul 2022 04:03:08 GMT
cache-control: max-age=600, s-maxage=600
etag: W/"ad00dd1ff8cb50a21e8e47d78b076d55"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Z3ax4tFNzkxSzRYMYNXvgHG1vi79BUL4fxFI3mKW8DbahxoQ5YxzrA==
age: 166
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   9230
Md5:    9221d086e60d3330acbe605a9e82c4f5
Sha1:   8922bbfc229bcb1f0a26da6ce977721d9ff42a63
Sha256: 8acdaeeea65ea1d3424795fb5eacbc0f41ec127edca9142b66464390d41725db
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 04:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /action/0?ti=36002432&Ver=2&mid=17fda4e8-d6b9-4488-b27c-e7c3122ff82a&sid=a6c37810fce011ec87ca1105aa20412a&vid=a6c39e30fce011ecb50cfd49f9c3f08a&vids=1&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&r=&lt=2620&evt=pageLoad&msclkid=N&sv=1&rn=436175 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 204 No Content
                                        
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=25958EA8EACB601E34E19F71EB3E6197; domain=.bing.com; expires=Mon, 31-Jul-2023 04:03:54 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4DB6866DB5A34D6B96B156837E56BAD6 Ref B: OSL30EDGE0513 Ref C: 2022-07-06T04:03:54Z
date: Wed, 06 Jul 2022 04:03:54 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /action/0?ti=36002432&Ver=2&mid=17fda4e8-d6b9-4488-b27c-e7c3122ff82a&sid=a6c37810fce011ec87ca1105aa20412a&vid=a6c39e30fce011ecb50cfd49f9c3f08a&vids=0&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&msclkid=N&rn=396802 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 204 No Content
                                        
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=12D2C86784ED690B007CD9BE85186892; domain=.bing.com; expires=Mon, 31-Jul-2023 04:03:54 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E8C5D79707C0435397A489FAD3D881BF Ref B: OSL30EDGE0513 Ref C: 2022-07-06T04:03:54Z
date: Wed, 06 Jul 2022 04:03:54 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /modules.eaa59710f7e60ac1d235.js HTTP/1.1 
Host: script.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.44
HTTP/2 200 OK
                                        
content-type: application/javascript
content-length: 64077
date: Mon, 04 Jul 2022 08:42:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "db52ab3b370d0f21f8ed961bf7934556"
last-modified: Mon, 04 Jul 2022 08:41:34 GMT
strict-transport-security: max-age=86400; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yfGBVkIbTM4dziYMzeTCYVGeaSIncjDyrAOe8d3NJaHMzxLPmF1LDg==
age: 156108
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43638)
Size:   64077
Md5:    db52ab3b370d0f21f8ed961bf7934556
Sha1:   66b073a60e15827946b447963529391e3f5935d7
Sha256: 06ff10ae8a6ea677132edd9b0165e10ba549d18f6ad9e6edc8368ec7c4185b47
                                        
                                            GET /pagead/viewthroughconversion/1010020041/?random=1657080234254&cv=9&fst=1657080234254&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg6t0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.2
HTTP/2 200 OK
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 06 Jul 2022 04:03:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1152
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 06-Jul-2022 04:18:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2666), with no line terminators
Size:   1152
Md5:    f2459c7b8bbf5e39254accdc3c252470
Sha1:   d00b3c03b4b56be76daf5e0ff311a5ae4d9e24d0
Sha256: b7a1c69bde59abec30fc0f7387d153183491811d3813db1c20d5a3e5cfd9a423
                                        
                                            GET /pagead/viewthroughconversion/957119846/?random=1657080234255&cv=9&fst=1657080234255&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg6t0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.2
HTTP/2 200 OK
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 06 Jul 2022 04:03:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1155
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 06-Jul-2022 04:18:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2664), with no line terminators
Size:   1155
Md5:    029f061fbd2be4ebe9eeb9a1191e08ca
Sha1:   f9a54ab52521f19cfc1d4ffe1fc49cf6c41388d7
Sha256: 328acb1ea264df55e37df2d36bd45ce8913ee2f490d05a48cbabe80260aa75d3
                                        
                                            GET /pagead/viewthroughconversion/1010020041/?random=1657080234256&cv=9&fst=1657080234256&num=1&fmt=3&value=0&label=9Uq1COfCvoMDEMndzuED&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg6t0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1466181682.1657080233&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.2
HTTP/2 200 OK
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 06 Jul 2022 04:03:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 06-Jul-2022 04:18:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/viewthroughconversion/983482265/?random=1657080234253&cv=9&fst=1657080234253&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg6t0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.2
HTTP/2 200 OK
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 06 Jul 2022 04:03:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1152
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 06-Jul-2022 04:18:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2664), with no line terminators
Size:   1152
Md5:    fdcdec9b20e9d775993747d17a543c17
Sha1:   d5e7f3e8a7f8048c520a8b853125b6d990afe4b8
Sha256: 019881db8e7e6e03b4ec6f0ae29db7f0c0d1f08629f3ac2425f2dc4040da48e6
                                        
                                            GET /pagead/viewthroughconversion/854379023/?random=1657080234251&cv=9&fst=1657080234251&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg6t0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.2
HTTP/2 200 OK
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 06 Jul 2022 04:03:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1150
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 06-Jul-2022 04:18:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2664), with no line terminators
Size:   1150
Md5:    b2e13083a98e490c55849b394096a0dd
Sha1:   dc70c6c307e8a1684d637c5e3702d9f93be61f12
Sha256: 61fb940c222c4a384b6c293c9f58f785030239fde55e812e5c434d8a8286ec6e
                                        
                                            GET /p/action/36002432.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 200 OK
                                        
cache-control: private,max-age=60
content-length: 572
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=1EAA250DE6A46E96074634D4E7516FF8; domain=.bing.com; expires=Mon, 31-Jul-2023 04:03:54 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 430FF385DC35466DBE2A66AA0677360D Ref B: OSL30EDGE0513 Ref C: 2022-07-06T04:03:54Z
date: Wed, 06 Jul 2022 04:03:54 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   572
Md5:    8de156232c8b40f824db13a58f6e71c8
Sha1:   c30a8ce9ab84f4c0dba768031f4d520d95f1af36
Sha256: a9ab7a8a620ee1110872878e8e851806991e48bbd04ee82363f6055639349982
                                        
                                            GET /c/hotjar-190484.js?sv=7 HTTP/1.1 
Host: static.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.113
HTTP/2 200 OK
                                        
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=86400; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Wed, 06 Jul 2022 04:03:54 GMT
cache-control: max-age=60
etag: W/7bf5eec21ce8274ec3fbe171e6abd936
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: reWBjvuNSj5JhdLVAsF6GcycP1drvtwlx6HexDd1VLx2xioKmiegpg==
age: 2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18664)
Size:   3516
Md5:    ea4b3e165c8c0dd0005dd5c415955a55
Sha1:   82e3ad1f270ed7205c036fed87b9f2bd9d38ca1c
Sha256: c537fad9fa0f4711285ccd4411792ed3ec6bcafe1d330750b32a801a17e1868e
                                        
                                            POST /land/api/send-event HTTP/1.1 
Host: app2.mackeeperaff.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: ILbT69p6T2zJwe8pTnmrXT5CJNhsw4GWkOVWFwpU
X-XSRF-TOKEN: eyJpdiI6Imc2RHVJaXlcL3JWOURrNXhNeU9JZlBRPT0iLCJ2YWx1ZSI6IjVQb1p3TFN2R3lIRTNoMFE4TWs3VGp5VUo5d0pDVDdEaXdcL0lMWXRjRDNYdXAxek8zS2ZhY3J6REdKOVk2a2laWDdwVHkxenF3aHc3QTdPQ1h1S3F6bUpzaGFxVzB3Szl0NjR1V0FpTWJyMk8ybk9TeGZcLzFYa0hZWENOU0RJR0IiLCJtYWMiOiIwMzNjYzJlNmM4NTY5MmEzZTM1YjM2ZTI3YjliYzJkNjlkNThjYTRjYTQwYTg2MmZjNDU0NWY4NjQ2MTIxZWI2In0=
Content-Length: 101
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/226/?rtkcid=62c509a63eb8670001339092&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate%20-%20CPI%20campaign%20(install%20only)%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Cookie: XSRF-TOKEN=eyJpdiI6Imc2RHVJaXlcL3JWOURrNXhNeU9JZlBRPT0iLCJ2YWx1ZSI6IjVQb1p3TFN2R3lIRTNoMFE4TWs3VGp5VUo5d0pDVDdEaXdcL0lMWXRjRDNYdXAxek8zS2ZhY3J6REdKOVk2a2laWDdwVHkxenF3aHc3QTdPQ1h1S3F6bUpzaGFxVzB3Szl0NjR1V0FpTWJyMk8ybk9TeGZcLzFYa0hZWENOU0RJR0IiLCJtYWMiOiIwMzNjYzJlNmM4NTY5MmEzZTM1YjM2ZTI3YjliYzJkNjlkNThjYTRjYTQwYTg2MmZjNDU0NWY4NjQ2MTIxZWI2In0%3D; mackeeper_session=eyJpdiI6Ikl3a1lkUkJud2xIOCtQd09wWk9OckE9PSIsInZhbHVlIjoiaWxqRzdEQm0yUUIwZXVDdkhyak80YTlzY1ZPRjRHc1dEbmFwb1RKWmN2cDdXeGtSdUZ5eFV6STdNaThhdGhBc1hxc1hMOWMrQ3B1N3NlNkowSGtLalFCWFVwSGdYbTl1azJyNlNteGlzVU1JaWprYjhkSHdPOTloNGJZV0xnUVoiLCJtYWMiOiIwNDFlMWM0NDNmMjdjMmM0ZjMxMjI4N2JmMDc5YTNmOTc2ODUyZTNhNmI1M2MwMzMwYmJiZTkyODY0MDY0ZTg1In0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         52.5.35.223
HTTP/2 200 OK
                                        
date: Wed, 06 Jul 2022 04:03:54 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 178
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: d0ebc44298d18b045e103a5fd81e6dc1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   143
Md5:    6e90e1e11328bc0ac5cbe3a8fd94c465
Sha1:   0169664283deaae4c4a756ea928df17830bd5ebf
Sha256: 67f7a49a4fee4fd21cb8e0dc7ed73ef3df4855ce96675b55bc9fdb8aa041dd2f

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /sp.pl?a=10000&d=Wed%2C%2006%20Jul%202022%2004%3A03%3A54%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1 
Host: sp.analytics.yahoo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         212.82.100.181
HTTP/2 200 OK
                                        
date: Wed, 06 Jul 2022 04:03:54 GMT
expires: Wed, 06 Jul 2022 04:03:54 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBKoJxWICEJnwP9i6bX4_u0-EvM5IY8oFEgEBAQFbxmLOYgAAAAAA_eMAAA&S=AQAAAkEKUC8ZBKAM_jJITACx1CI; Expires=Thu, 6 Jul 2023 10:03:54 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    bff56ce49dd485d195fdfa0a02342568
Sha1:   74fb4071deab7d3ab083562067b735df32c43397
Sha256: 0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
                                        
                                            GET /tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&rl=&if=false&ts=1657080234465&sw=1280&sh=1024&v=2.9.64&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1657080234464.984022480&it=1657080234267&coo=false&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.35
HTTP/2 200 OK
                                        
content-type: image/gif
date: Wed, 06 Jul 2022 04:03:54 GMT
expires: Wed, 06 Jul 2022 04:03:54 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   44
Md5:    b798f4ce7359fd815df4bdf76503b295
Sha1:   f8cc6addf1707ad236ad9970b0a48f9733d07da5
Sha256: 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
                                        
                                            GET /collect?v=2&fmt=js&pid=3865705&time=1657080234164&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Ftid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26rtkcmpid%3D629a3e04d84ecc000136838b%26rtkcid%3D62c509a63eb8670001339092%26pubid%3D629a3fed4714f70001b234db%26utm_source%3Daffiliate%26utm_medium%3Dadpartner HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.107.42.14
HTTP/2 302 Found
                                        
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1657080234164%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F226%252F%253Ftid%253DAffiliate%252520-%252520CPI%252520campaign%252520%2528install%252520only%2529%252520%2528226%2529%2526rtkcmpid%253D629a3e04d84ecc000136838b%2526rtkcid%253D62c509a63eb8670001339092%2526pubid%253D629a3fed4714f70001b234db%2526utm_source%253Daffiliate%2526utm_medium%253Dadpartner%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQLHJ7pheLmC4gAAAYHRrcIEvSgURo4DsstpmZK0i16FsiwCPkgl-VBN5YU3CP7ttnAbFhBBxLhIAQ; Max-Age=2592000; Expires=Fri, 05 Aug 2022 04:03:54 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure AnalyticsSyncHistory=AQICQYzGrOHLoAAAAYHRrcIErVbwcEB525vOXSm2EQPzMfmVeZddgpxgup_8zohZ2omiO7gPlrGfBQUOjU4ctA; Max-Age=2592000; Expires=Fri, 05 Aug 2022 04:03:54 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&0f9f2399-7f96-46a3-8f6d-47c658b583d5"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 05-Jul-2024 15:41:26 GMT; SameSite=None lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2322:u=1:x=1:i=1657080234:t=1657166634:v=2:sig=AQF-pYraWKBS2SF-Y-JayAyaQlo2Okl2"; Expires=Thu, 07 Jul 2022 04:03:54 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXjGw69rrW1QY/GBmbJXg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 5A1F4B4ED8D94F0D81F80195C2F0414F Ref B: OSL30EDGE0314 Ref C: 2022-07-06T04:03:54Z
date: Wed, 06 Jul 2022 04:03:54 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /mk-land/dist/226/style.webp.min.css?9f661ab702d784a0d4fe HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.123
HTTP/2 200 OK
                                        
content-type: text/css
date: Fri, 01 Jul 2022 09:51:48 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 05 May 2022 09:54:56 GMT
etag: W/"0407b40a83f4ff9190da5bbf214bda2c"
cache-control: public, max-age=604800
x-amz-version-id: A0jpPU.rH8MZXSy7JugeF.OBpxu60chT
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: z_V-doTWpUqsVI8x-VYwfwudaC5Haz8wA3BburitxJapdzVw4zqbrA==
age: 411125
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   6487
Md5:    97a5cc2c8f9b29e24c78ee06d78e84cc
Sha1:   d36a302fc28ffb3642fe3a658275802f14c6610a
Sha256: 18be8c9fa71092da6c0584d94eb8dcb0a85c20a4d0f237a857981a1b0a7523b9
                                        
                                            GET /unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&optOut=false&bust=017244115457304032&referrer= HTTP/1.1 
Host: tr.outbrain.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         64.202.112.127
HTTP/1.1 200 OK
Content-Type: image/gif;
                                        
Date: Wed, 06 Jul 2022 04:03:54 GMT
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 6d9bbfd698359d3e51f7c317db87cf17
content-encoding: gzip


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   60
Md5:    fb0fc5c090282e372b8bf8ff13ae3ee2
Sha1:   2de3834253ece606ce4d2a6f10a59654b6fa378b
Sha256: 90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
                                        
                                            GET /cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949 HTTP/1.1 
Host: tr.outbrain.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         64.202.112.127
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 06 Jul 2022 04:03:54 GMT
Content-Length: 56
X-TraceId: ffe2f43577e891d4a462736510deb27e
content-encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   56
Md5:    77fbe8ab311fa20557d95906363035ed
Sha1:   5806df80f09a37e070d5f37c49f19797c2763fd0
Sha256: 4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
                                        
                                            GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1657080234164%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F226%252F%253Ftid%253DAffiliate%252520-%252520CPI%252520campaign%252520%2528install%252520only%2529%252520%2528226%2529%2526rtkcmpid%253D629a3e04d84ecc000136838b%2526rtkcid%253D62c509a63eb8670001339092%2526pubid%253D629a3fed4714f70001b234db%2526utm_source%253Daffiliate%2526utm_medium%253Dadpartner%26liSync%3Dtrue HTTP/1.1 
Host: www.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.42.14
HTTP/2 302 Found
                                        
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1657080234164&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Ftid%3DAffiliate%2520-%2520CPI%2520campaign%2520%28install%2520only%29%2520%28226%29%26rtkcmpid%3D629a3e04d84ecc000136838b%26rtkcid%3D62c509a63eb8670001339092%26pubid%3D629a3fed4714f70001b234db%26utm_source%3Daffiliate%26utm_medium%3Dadpartner&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None bcookie="v=2&48d18f1c-9ef9-4093-83f6-38583df5ac4f"; Domain=.linkedin.com; Expires=Fri, 05-Jul-2024 15:41:26 GMT; Path=/; Secure; SameSite=None bscookie="v=1&20220706040354faad63ba-91d9-44c5-8942-2cebd4d5a4ecAQGBvBLEXB24Vz70VaY-ETo1U_23IOc6"; Domain=.www.linkedin.com; Expires=Fri, 05-Jul-2024 15:41:26 GMT; Path=/; HttpOnly; Secure; SameSite=None li_gc=MTswOzE2NTcwODAyMzQ7MjswMjH4ncUieidvW4QTQQuYl5mCYETYhDh8nYZ0a+LQPi0DTQ==; Domain=.linkedin.com; Expires=Sat, 29 Jun 2024 08:30:09 GMT; Path=/; Secure; SameSite=None lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2285:u=1:x=1:i=1657080234:t=1657166634:v=2:sig=AQHhuY33Sjtzc4nTgkz_qlJ-lbTC3F8n"; Expires=Thu, 07 Jul 2022 04:03:54 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXjGw7AToVhmclnMYvPaw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 0F4764AA7C7B4E68A499147DFF508F25 Ref B: OSL30EDGE0314 Ref C: 2022-07-06T04:03:54Z
date: Wed, 06 Jul 2022 04:03:54 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /1212352/trc/3/json?tim=1657080234435&data=%7B%22id%22%3A885%2C%22ii%22%3A%22%2Fland%2F226%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1657080234429%2C%22cv%22%3A%2220220630-24-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1657080234434%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1 
Host: trc.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
                                        
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 06 Jul 2022 04:03:54 GMT
via: 1.1 varnish
x-served-by: cache-bma1678-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1657080234.488004,VS0,VE114
vary: Accept-Encoding
x-vcl-time-ms: 114
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2393), with no line terminators
Size:   1315
Md5:    0a0a17a435fbd6ae01e685faf5372e05
Sha1:   ccf8f7fc29a4bdbc28a7b2ec33e118f0b0675d18
Sha256: 1ec4a986a0192e9b728f2be514516715cc8ff559e87cecb06248655163cd0c4f
                                        
                                            GET /c.gif HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         20.234.93.27
HTTP/2 302 Found
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=92AB53E7415A457BBDCBCB441F502A30&RedC=c.clarity.ms&MXFR=25C55997830A67C500E4484E870A6910
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure; MUID=25C55997830A67C500E4484E870A6910; domain=.clarity.ms; expires=Mon, 31-Jul-2023 04:03:55 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Wed, 06 Jul 2022 04:03:54 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /c.gif?CtsSyncId=92AB53E7415A457BBDCBCB441F502A30&RedC=c.clarity.ms&MXFR=25C55997830A67C500E4484E870A6910 HTTP/1.1 
Host: c.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 302 Found
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=92AB53E7415A457BBDCBCB441F502A30&MUID=30BEBA880CC3620C2FC3AB510D3663E6
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=30BEBA880CC3620C2FC3AB510D3663E6; domain=c.bing.com; expires=Mon, 31-Jul-2023 04:03:55 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 54E6F1FB66EA4088B981DF7BC45C8032 Ref B: OSL30EDGE0513 Ref C: 2022-07-06T04:03:55Z
date: Wed, 06 Jul 2022 04:03:55 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /c.gif?CtsSyncId=92AB53E7415A457BBDCBCB441F502A30&MUID=30BEBA880CC3620C2FC3AB510D3663E6 HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         20.234.93.27
HTTP/2 200 OK
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Sat, 02 Jul 2022 00:08:47 GMT
accept-ranges: bytes
etag: "8a177e6a78dd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Wed, 06-Jul-2022 04:13:55 GMT; path=/; SameSite=None; Secure;
date: Wed, 06 Jul 2022 04:03:54 GMT
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    32023bb33cfb2a1990a4ef2d85b6ac16
Sha1:   23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
Sha256: 99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
                                        
                                            GET /eus2/s/0.6.34/clarity.js HTTP/1.1 
Host: www.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.212.67.142
HTTP/2 200 OK
                                        
cache-control: public,max-age=86400
content-length: 23150
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d88bc3d8d26054"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0qwnFYgAAAAAY4sAI8cmWQZJiuE1hpdFBTE9TMzBFREdFMDIxOAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Wed, 06 Jul 2022 04:03:55 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (53759)
Size:   23150
Md5:    272cf57974160fee48176cbeb5dda063
Sha1:   2724e47341b27179dc019151aedcd9da9bcebb35
Sha256: 9ab56052de22264c3552c68f3b375b0ccde081a462319d16d80207aa81d8c33e
                                        
                                            POST /collect HTTP/1.1 
Host: b.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1634
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         20.75.32.255
HTTP/2 204 No Content
                                        
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Wed, 06 Jul 2022 04:03:55 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=1561&scd=22&ssd=1&est=1657080234431&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1657080235993&vi=1657080234429&ri=b009d2b1e5148d336494c9aa5c7b316b&ref=null&cv=20220630-24-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         141.226.228.48
HTTP/2 204 No Content
                                        
server: nginx
date: Wed, 06 Jul 2022 04:03:56 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            POST /collect HTTP/1.1 
Host: b.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 30725
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         20.75.32.255
HTTP/2 204 No Content
                                        
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Wed, 06 Jul 2022 04:03:55 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=4564&scd=22&ssd=1&est=1657080234431&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1657080238996&vi=1657080234429&ri=b009d2b1e5148d336494c9aa5c7b316b&ref=null&cv=20220630-24-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D62c509a63eb8670001339092%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         141.226.228.48
HTTP/2 204 No Content
                                        
server: nginx
date: Wed, 06 Jul 2022 04:03:59 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2