app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
200 OK 134 B URL User Request GET HTTP/2 app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
IP
Certificate IssuerAmazon
Subjectmkaff.com
Fingerprint8F:7A:F4:B2:4E:7F:BA:7B:D4:62:F0:73:FA:74:2E:7E:53:57:F2:A5
ValidityTue, 21 Feb 2023 00:00:00 GMT - Thu, 19 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid= HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Tue, 02 May 2023 21:26:36 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://app2.mackeeperaff.com:443/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
ocsp.r2m02.amazontrust.com/
471 B URL ocsp.r2m02.amazontrust.com/
IP
Hash b5da2b09f494d11d3f5ebf6cbdf63e12
c2a559345fe22f6ddba3395db109f09485c1478b
f709c25f1c350d353e481d8a2270ff504c3fd1f43a2f7cdc7ee3f12eebeed3ce
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=159360
Date: Tue, 02 May 2023 21:26:36 GMT
Etag: "64513d88-1d7"
Expires: Thu, 04 May 2023 17:42:36 GMT
Last-Modified: Tue, 02 May 2023 16:42:48 GMT
Server: ECAcc (dcb/7F2F)
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xzgNYsn2D39IIvIX3Gl0hWCk7M7Nr-R5VQYtGhkqBN98zg9TKgr86w==
Age: 3588
browser.sentry-cdn.com/5.5.0/bundle.min.js
200 OK 16 kB URL GET HTTP/2 browser.sentry-cdn.com/5.5.0/bundle.min.js
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerGlobalSign nv-sa
Subject*.sentry-cdn.com
Fingerprint0C:18:79:DB:E8:AF:7B:12:35:B0:0E:A6:A8:C1:0C:BD:BF:3C:FA:A4
ValidityWed, 28 Sep 2022 14:23:42 GMT - Mon, 30 Oct 2023 14:23:41 GMT
File type ASCII text, with very long lines (51441)
Hash 39339cf627bc67e34d4c623bea4c0b4a
47573a86920952022a7f13e318b2a317f9775383
3aa35367acf9ff63960975686ebdf9b339676c04a4ba0b2bae83da45e5e27265
GET /5.5.0/bundle.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 03 Feb 2024 18:43:26 GMT
last-modified: Fri, 05 Jul 2019 11:17:04 GMT
etag: "39339cf627bc67e34d4c623bea4c0b4a"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Tue, 02 May 2023 21:26:38 GMT
age: 7612993
vary: X-Goog-Allowed-Resources, Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 16371
X-Firefox-Spdy: h2
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
200 OK 6.1 kB URL GET HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subject*.trustpilot.com
FingerprintED:01:2E:50:4C:98:9B:F1:34:D7:8C:1E:93:45:E6:05:00:3C:47:86
ValidityThu, 02 Feb 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash fff1c1d393a3b4005d81879820ddc23b
a3afa1208a163f51a53e02fa3c75197557f28301
133f8a67eebb492a1d9d3bd2c6206e4041988452272d9d47de00d510492af94c
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Wed, 26 Apr 2023 13:47:19 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Tue, 02 May 2023 13:47:51 GMT
cache-control: max-age=86400
etag: "fff1c1d393a3b4005d81879820ddc23b"
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: w4u9aIyQKTtUONIWFBTKe6JQQuFqxtt1SskQoLHFqv7yM8Jd1-C9wQ==
age: 27528
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
471 B URL ocsp.r2m01.amazontrust.com/
IP
Hash 90f3257b7541d7870607ea632ce6c300
13a698e2c2127f4639623de7c92b9b97526c96c1
5f6b7b1ef49eb5c0572cb0b5d5862491af0ae169095e69b9e02cb2f3d0f299d0
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 02 May 2023 21:26:38 GMT
Last-Modified: Tue, 02 May 2023 20:28:02 GMT
Server: ECAcc (nya/799C)
X-Cache: Miss from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Deew2QYP3ahhfI84tqe8xiV7LUNP9xcf0mgu-AXcrQZregniYjtB_Q==
Age: 3516
ocsp.pki.goog/gts1c3
472 B IP
Hash 12ba8eaf8df351c1b04c5aa90a1654ca
89c8ed3f837bd937b60d8b6862af6e81510a41f5
6b2c88a08976f9b12290abc6f4e7a6cffd00698f8853f3d7bd0a87974c354bfb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 21:26:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 12ba8eaf8df351c1b04c5aa90a1654ca
89c8ed3f837bd937b60d8b6862af6e81510a41f5
6b2c88a08976f9b12290abc6f4e7a6cffd00698f8853f3d7bd0a87974c354bfb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 21:26:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 12ba8eaf8df351c1b04c5aa90a1654ca
89c8ed3f837bd937b60d8b6862af6e81510a41f5
6b2c88a08976f9b12290abc6f4e7a6cffd00698f8853f3d7bd0a87974c354bfb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 21:26:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-cdn.mackeeper.com/mk-land/dist/images/landings/189/macbook.webp
200 OK 128 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/189/macbook.webp
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 128 kB (128184 bytes)
Hash 81201f3e2a6afd62000e3800b33c1fb8
ce32caf4ab517b121758188972d4954f73161c7c
ebfa9db76ae3bf2b287574ca08c1307b0e2041ebcd503eb070b125524af11bbc
GET /mk-land/dist/images/landings/189/macbook.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 128184
date: Thu, 27 Apr 2023 10:59:37 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 05 Apr 2023 08:29:47 GMT
etag: "81201f3e2a6afd62000e3800b33c1fb8"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=604800
x-amz-version-id: 1_esFy1c97SB.V736et37hlmPtP5WYoF
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AkCsGKNet1pppDDGc7dgmDod950Ib76CbJtjEa5hqrzW0ScrO8rMWA==
age: 469622
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/189/btn__arrow_white.webp
200 OK 824 B URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/189/btn__arrow_white.webp
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 77d57961e87b47e38a8a8ffb6fcf74f9
e6ffedfe0331b0bcba6bdd2d63bf2bf60e1bf15d
a55e792765fd4162fde5cca5e88a8ec6e105b4445a16d9ece7fcd7d19ad00e38
GET /mk-land/dist/images/landings/189/btn__arrow_white.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 824
date: Thu, 27 Apr 2023 10:59:38 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 07 Feb 2023 13:46:53 GMT
etag: "77d57961e87b47e38a8a8ffb6fcf74f9"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=604800
x-amz-version-id: 1PTzTg4slidntYbYTS2g44cO_kK3mcJB
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xAXy1wlREs8IEy0QKzvYFUos2KDai7z2C-5OvdG1CkyzOD1_KkE4XQ==
age: 469621
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/189/trust.webp
200 OK 13 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/189/trust.webp
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash b9aa4b0933eeb46267bdaa801d9d9d31
20de1f46aa26051c0e00ce2beff06854f10b6b9f
36967d4492ac9e2ba8477bb87f9c142b6c4d1fb99d476754ec6b3a1ed22b5be1
GET /mk-land/dist/images/landings/189/trust.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 12666
date: Thu, 27 Apr 2023 10:59:37 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 07 Feb 2023 13:46:53 GMT
etag: "b9aa4b0933eeb46267bdaa801d9d9d31"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=604800
x-amz-version-id: 62gmugcCAKA4Cb1wPBYpaJPYF.h9w0H3
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Dk_WFYc3FC28Jw5uSrHTkocOxiWagYSfQfaMteLUzWtqOhb-s2iC9Q==
age: 469622
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
471 B URL ocsp.r2m01.amazontrust.com/
IP
Hash 90f3257b7541d7870607ea632ce6c300
13a698e2c2127f4639623de7c92b9b97526c96c1
5f6b7b1ef49eb5c0572cb0b5d5862491af0ae169095e69b9e02cb2f3d0f299d0
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=156510
Date: Tue, 02 May 2023 21:26:38 GMT
Etag: "6451406c-1d7"
Expires: Thu, 04 May 2023 16:55:08 GMT
Last-Modified: Tue, 02 May 2023 16:55:08 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: isn7eoT6YxF8ci4ASKTXdUQ8bDjbwnQvpJqtQIu0I-_2gj4G01bFQw==
fonts.googleapis.com/css?family=Source+Sans+Pro:400,600
200 OK 17 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro:400,600
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:8B:BB:40:DD:1D:5B:E9:7B:AA:CC:94:45:44:7F:FD:56:6E:E4:60
ValidityMon, 03 Apr 2023 08:24:24 GMT - Mon, 26 Jun 2023 08:24:23 GMT
Hash 35c7fd140364a1a4a33c65643da60293
ebc20c3c9cb1af470eac62d4f410091c2a45546e
6e23d564e258401cebe5e08464e6f72efb6654afd82a72409e9be8275f644a09
GET /css?family=Source+Sans+Pro:400,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 02 May 2023 21:26:38 GMT
date: Tue, 02 May 2023 21:26:38 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/189/tools.webp
200 OK 18 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/189/tools.webp
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 40d3cc9a4df10afd29214d1112452634
eafa7529926aeed7c50dc38a42b1451ed68a75cb
dab6e51f288ee51c45ccdf41043a7dcfe80b929cbca244c5efd9bab2f69fab1e
GET /mk-land/dist/images/landings/189/tools.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 18068
date: Thu, 27 Apr 2023 10:59:38 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 07 Feb 2023 13:46:55 GMT
etag: "40d3cc9a4df10afd29214d1112452634"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=604800
x-amz-version-id: 5W_BZcaC3UhcAqDktQEAds9YfJdpRO3u
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Se5QlLx0WxnHW0tos3PlfFqE6p-KvQnFDyjFCLlT5hTLcDBmqxCu1w==
age: 469621
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
471 B URL ocsp.r2m01.amazontrust.com/
IP
Hash 90f3257b7541d7870607ea632ce6c300
13a698e2c2127f4639623de7c92b9b97526c96c1
5f6b7b1ef49eb5c0572cb0b5d5862491af0ae169095e69b9e02cb2f3d0f299d0
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=156510
Date: Tue, 02 May 2023 21:26:38 GMT
Etag: "6451406c-1d7"
Expires: Thu, 04 May 2023 16:55:08 GMT
Last-Modified: Tue, 02 May 2023 16:55:08 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UT5PB4d6qSF5Rj0SwZN82QDScNFgJ_ddzgGHti8Z4I5qSRqB7mPm2Q==
ocsp.pki.goog/gts1c3
472 B IP
Hash 8d8910a0aae1800af19c6aa5dff19c20
cd6fd6f7577d0391ca4ffe983a7bcafc7ea1f283
1a6186ae61053ca496cd002b135580aaca7a4c0e1accdb89d5b7e94c7ff66dee
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 21:26:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-cdn.mackeeper.com/mk-land/dist/images/landings/189/map.webp
200 OK 3.6 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/189/map.webp
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7ca19b30945465fbde145f3fe1da456f
17497c7ef3d8f621bcc9f7e48c3ac8f518e68b81
d9599529d8221140e8fcb8eba22ad408b12bcd05ef6605777c35058cb3a384cb
GET /mk-land/dist/images/landings/189/map.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 3608
date: Thu, 27 Apr 2023 10:59:38 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 07 Feb 2023 13:46:56 GMT
etag: "7ca19b30945465fbde145f3fe1da456f"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=604800
x-amz-version-id: sLPCQHtvE9UoJDWXTsB5EN6hdf6yq9fV
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ex3JXe4ju3x_ZbtRcFCqDSnDPD4pxOKGEUVVVcv1204mxnWB_OCvOQ==
age: 469621
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PVNC4DL
200 OK 100 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PVNC4DL
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint07:22:19:79:30:9E:4C:35:4E:21:BD:55:7D:44:2F:A9:71:9E:4C:AA
ValidityMon, 03 Apr 2023 08:16:11 GMT - Mon, 26 Jun 2023 08:16:10 GMT
File type ASCII text, with very long lines (37182)
Hash 51ce3f1a4ad3eeb7c4d6f0052c1e04b3
4fbc24ed665763d772cb606dd1a913662bb2cbf3
bc37712808b5f5452dc821f57c91e38d3ccd0c955afecd08b867fbd5e1c4fcec
GET /gtm.js?id=GTM-PVNC4DL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 02 May 2023 21:26:38 GMT
expires: Tue, 02 May 2023 21:26:38 GMT
cache-control: private, max-age=900
last-modified: Tue, 02 May 2023 21:10:42 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 99805
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 2ce978767c05692aa24c6454c05de9fc
2daae46f8a6cc154414210a7fa409479f51991e6
2f804b51a4f9a047a1d9de696906484b648e1f6e052a1fc85f3e29a8f0309e2d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 21:26:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 2ce978767c05692aa24c6454c05de9fc
2daae46f8a6cc154414210a7fa409479f51991e6
2f804b51a4f9a047a1d9de696906484b648e1f6e052a1fc85f3e29a8f0309e2d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 21:26:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
200 OK 13 kB URL GET HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint34:5A:0A:3B:4F:02:F9:C6:C9:D7:3F:CA:9D:17:0D:40:27:05:05:0A
ValidityMon, 03 Apr 2023 08:24:23 GMT - Mon, 26 Jun 2023 08:24:22 GMT
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 29 Apr 2023 17:39:39 GMT
expires: Sun, 28 Apr 2024 17:39:39 GMT
cache-control: public, max-age=31536000
age: 272820
last-modified: Wed, 27 Apr 2022 16:04:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Medium.otf
200 OK 53 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Medium.otf
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
Hash 124f9fa19891275cf13ace6b2b5241d5
28854b696ef14b7658bc0c8f2788f507c05f11b8
06bd4a0f3425b7268d5592fa0659a3a57eeeb00cb38f9085b8b109346bf24dfc
GET /mk-land/dist/fonts/MarkOT-Medium.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Thu, 27 Apr 2023 11:00:09 GMT
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
etag: W/"44a8a536b53be74bb2ebfc4fa3403364"
cache-control: public, max-age=604800
x-amz-version-id: adnRDSe0awZldw3c8I6M4tTQa_wDyvz_
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: x93TiwsMR5NBiziP-uKFyApUjnTbho_ZuRQCY8NE_MgTx6Uw3A_Wfw==
age: 469590
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto
200 OK 68 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Roboto
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:8B:BB:40:DD:1D:5B:E9:7B:AA:CC:94:45:44:7F:FD:56:6E:E4:60
ValidityMon, 03 Apr 2023 08:24:24 GMT - Mon, 26 Jun 2023 08:24:23 GMT
Hash 75e4ff69d88e910fa46c97c00b978524
653838edc006a70cf20188e690da281dc821ca63
c351d477dd648182bd201b310763cc2feed56323313f36d48a50a082d954fa64
GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: fonts.googleapis.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 02 May 2023 21:26:38 GMT
date: Tue, 02 May 2023 21:26:38 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Light.otf
200 OK 56 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Light.otf
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type OpenType font data\012- data
Hash a0e2f26748758f9fcc3ddfd239b5cf81
cf2e1be5ff8e4aa666ac0b719153a455b14a6c06
c21fac72a3b041a01724d09198081a2a3577d9ed4ccfc56f9b70ef6501a5678b
GET /mk-land/dist/fonts/MarkOT-Light.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Thu, 27 Apr 2023 11:01:34 GMT
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"48dd0f49a4207634e9062def9074a038"
cache-control: public, max-age=604800
x-amz-version-id: 0k6awkdioEQDqMMUsMLLZL0d1S0LNdte
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6opYwUm1QJGUTDEAjrTFch31pV-bIvgipr9pFsDOvngJct29P6jZKQ==
age: 469505
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 2ce978767c05692aa24c6454c05de9fc
2daae46f8a6cc154414210a7fa409479f51991e6
2f804b51a4f9a047a1d9de696906484b648e1f6e052a1fc85f3e29a8f0309e2d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 21:26:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-cdn.mackeeper.com/mk-land/dist/images/landings/189/star.webp
200 OK 276 B URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/189/star.webp
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2ee49dcad0d956cb8de84883fca4be27
df332994a9b9682c35a8446109b1bf89860d4e61
61edec41e4a76e6a7261e16281a3e0d1f54fef8ee1de89dd9988294cc0729cf5
GET /mk-land/dist/images/landings/189/star.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 276
date: Thu, 27 Apr 2023 10:59:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 30 Mar 2022 09:16:56 GMT
etag: "2ee49dcad0d956cb8de84883fca4be27"
cache-control: public, max-age=604800
x-amz-version-id: .JxM4S4q1B4W9xCj5qPlx_SGVYwXBTbA
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m_G94y9_70DYUskQU6I5Jt0Esc0627OdtuG3_m0BpBGZKTAh4jjbgg==
age: 469621
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js
200 OK 16 kB URL GET HTTP/2 widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js
IP
Requested by https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293#locale=en-US&styleHeight=150px&styleWidth=100%25&theme=light
Certificate IssuerAmazon
Subject*.trustpilot.com
FingerprintED:01:2E:50:4C:98:9B:F1:34:D7:8C:1E:93:45:E6:05:00:3C:47:86
ValidityThu, 02 Feb 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (50697)
Hash 7634c5de39bff7b73e2df27262caface
73bb5656a5b7eee0c6db68d3f708046f390ccb53
bc5f8d22d9a155ee87fe85ef326a9cc5c059a69aa5a6f7389882a88c057acc09
GET /trustboxes/53aa8807dec7e10d38f59f32/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 15505
last-modified: Tue, 04 Oct 2022 10:33:42 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Tue, 02 May 2023 02:12:06 GMT
cache-control: max-age=86400
etag: "7634c5de39bff7b73e2df27262caface"
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hITVukFsbkPQnTYgL2wcBBgy5JOblMxuaA8b0qUHzcyAgpxOlyaXTQ==
age: 69274
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-GYTXD89N1W&l=dataLayer&cx=c
200 OK 76 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-GYTXD89N1W&l=dataLayer&cx=c
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint07:22:19:79:30:9E:4C:35:4E:21:BD:55:7D:44:2F:A9:71:9E:4C:AA
ValidityMon, 03 Apr 2023 08:16:11 GMT - Mon, 26 Jun 2023 08:16:10 GMT
File type ASCII text, with very long lines (3288)
Hash 213f96d603027904ce72d0a184995679
f2c85701204e36975cd0887efc2233da373dc082
71182ca422e4aefa1cf0ecc81067f5181d7c166f610cac217ede3145c58996e1
GET /gtag/js?id=G-GYTXD89N1W&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.googletagmanager.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 02 May 2023 21:26:39 GMT
expires: Tue, 02 May 2023 21:26:39 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76042
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
widget.trustpilot.com/trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=4dbb14ee00006400050fa293&locale=en-US
200 OK 388 B URL GET HTTP/2 widget.trustpilot.com/trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=4dbb14ee00006400050fa293&locale=en-US
IP
Requested by https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293#locale=en-US&styleHeight=150px&styleWidth=100%25&theme=light
Certificate IssuerAmazon
Subject*.trustpilot.com
FingerprintED:01:2E:50:4C:98:9B:F1:34:D7:8C:1E:93:45:E6:05:00:3C:47:86
ValidityThu, 02 Feb 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (881), with no line terminators
Hash 1a4093b5e6d86cd8ffdc9ffa191956af
020491de89e123c938d79e7d9365cf55d3fed867
89c3c81ee0263e1450ad7a2029d836667b86f8ea5d53cd0095a385d7bbb14e63
GET /trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=4dbb14ee00006400050fa293&locale=en-US HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 388
content-encoding: gzip
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
date: Tue, 02 May 2023 21:18:42 GMT
cache-control: public,max-age=1800
etag: "1678c6857e12501259b7fda35261bd92"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: D5x8ypbXfpneIGf5U9-XkGV2PK6KEOuRcBdq8p6xpVTns-_vo6aYVw==
age: 674
X-Firefox-Spdy: h2
widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=150px&styleWidth=100%25&theme=light&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32
204 No Content 0 B URL GET HTTP/2 widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=150px&styleWidth=100%25&theme=light&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32
IP
Requested by https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293#locale=en-US&styleHeight=150px&styleWidth=100%25&theme=light
Certificate IssuerAmazon
Subject*.trustpilot.com
FingerprintED:01:2E:50:4C:98:9B:F1:34:D7:8C:1E:93:45:E6:05:00:3C:47:86
ValidityThu, 02 Feb 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxImpression?locale=en-US&styleHeight=150px&styleWidth=100%25&theme=light&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=53aa8807dec7e10d38f59f32 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Tue, 02 May 2023 21:26:39 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ctw_BqINsDMG4HXy1e0ZzgKjBgavSaBffvmEHKXB2ZG-UqtSW7uZ4w==
X-Firefox-Spdy: h2
dvcasha2.ocsp-certum.com/
1.6 kB URL dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 82b290c48f1f15723976330e75ea5bd6
c57c1f5998d10ee94df6c75f81d03aadcc732081
0280c8259473da1241f0e99eb519c1339fe19f72791131a163be41d7031633c7
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=364
Date: Tue, 02 May 2023 21:26:39 GMT
Connection: keep-alive
X-N: S
tr-rc.lfeeder.com/?sid=ywVkO4XWPeW7Z6Bj&data=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
200 OK 43 B URL GET HTTP/2 tr-rc.lfeeder.com/?sid=ywVkO4XWPeW7Z6Bj&data=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
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subject*.lfeeder.com
Fingerprint69:6A:77:EB:4E:49:95:F6:0B:CA:45:E3:DE:88:8A:41:ED:E9:01:4A
ValidityWed, 22 Mar 2023 00:00:00 GMT - Fri, 19 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /?sid=ywVkO4XWPeW7Z6Bj&data=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 HTTP/1.1
Host: tr-rc.lfeeder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
server: CloudFront
date: Tue, 02 May 2023 21:26:39 GMT
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: p74OPlfBy_UVT1SP0qfeKXgsCpI5AhuReec3L188GjSmVUqkFGlA9A==
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/favicon_ua.webp
200 OK 854 B URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/favicon_ua.webp
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fdb32f5144b860b1efeea8ce9f1c92d
6f590f091bc32dbf589de56edd695a9e8bc4568d
dae7276d7bd641876e49c1aa8e6db0f0f448d54abf8a5c62720eacffd8ef9eb0
GET /mk-land/dist/images/favicon_ua.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 854
date: Thu, 27 Apr 2023 10:49:56 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 04 Apr 2022 09:52:27 GMT
etag: "2fdb32f5144b860b1efeea8ce9f1c92d"
cache-control: public, max-age=604800
x-amz-version-id: ol9VlsO2dTwSbBZPzAkjCHloEMn8CD_x
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yW2KDpKIfHihclbhEB_nVaNQbHeaTT2MoFP0YeYBO0aKqWOxJyLwvw==
age: 470204
X-Firefox-Spdy: h2
app2.mackeeperaff.com/land/api/send-event
200 OK 4.8 kB URL POST HTTP/2 app2.mackeeperaff.com/land/api/send-event
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectmkaff.com
Fingerprint8F:7A:F4:B2:4E:7F:BA:7B:D4:62:F0:73:FA:74:2E:7E:53:57:F2:A5
ValidityTue, 21 Feb 2023 00:00:00 GMT - Thu, 19 Oct 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (13388)
Hash 50f001049bfb4b2b6e40d4c3dceb19f6
b9a0b60afd15c62282161387fb37be5106667410
08a9ca5bc7071f8ea3548034753e510f7d9175458ec5d38471bd45b0c92f15cd
POST /land/api/send-event HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: 1j6iJRaHd4NA5x4V8Y54rF3HUpmDRJIKZyEDZMMb
X-XSRF-TOKEN: eyJpdiI6ImlGeXV4cVA1SkQrTndBaWJwd3ZPRlE9PSIsInZhbHVlIjoiT0c2aUIyNnREZkJyZTNyNitTRmN2YUpBRTBwd3ZBY3ZuY1ZodHNnaGUweEJGZjBucE8xSEF6UFRnWkVTVlVkXC9jZDdCSDNzMUJwNkltbllxOG5GMEtaQVUzZzc1Zm1YZVAwMytKcGtKN0JHSW13MENwNE1VcjJJbmVVSWFKaUp1IiwibWFjIjoiMjI3NjgwN2E3ZDAzMGIwYzA1NThjN2NhMGExYTJlMDY5MTY5NjM1ZmE3ZTg5NWFhMDhjZmQxZWVkYTFlZjFjNiJ9
Content-Length: 100
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Cookie: XSRF-TOKEN=eyJpdiI6ImlGeXV4cVA1SkQrTndBaWJwd3ZPRlE9PSIsInZhbHVlIjoiT0c2aUIyNnREZkJyZTNyNitTRmN2YUpBRTBwd3ZBY3ZuY1ZodHNnaGUweEJGZjBucE8xSEF6UFRnWkVTVlVkXC9jZDdCSDNzMUJwNkltbllxOG5GMEtaQVUzZzc1Zm1YZVAwMytKcGtKN0JHSW13MENwNE1VcjJJbmVVSWFKaUp1IiwibWFjIjoiMjI3NjgwN2E3ZDAzMGIwYzA1NThjN2NhMGExYTJlMDY5MTY5NjM1ZmE3ZTg5NWFhMDhjZmQxZWVkYTFlZjFjNiJ9; mackeeper_session=eyJpdiI6Im5nOWtJXC9qOXV3Yk9FeHU4dmR4Qm1nPT0iLCJ2YWx1ZSI6InRHeWFLTG8rTTNUbmszdjRGcU12QzJYS3BYWng0QWJxUm8zVThEQ1VGeUx1bVVjZWZkTStPZmpjaE1CZldDSVk0V0hWbm42cFlxanJDSFVIdWJCTjFiclZXN1dOQTkyWlRcL3hFcjZ1VldXUGFhNlJMSXhcL3R2N0paWFwvN0pOV1VWIiwibWFjIjoiNzAzY2FmYTM4MDAwNWY3MjRkNGQ0NzY3NmMyMTIwZDFhN2ZhMmIyZDkxM2U5ZDFkMDE3ODlhZDU3OWVjYjgwNiJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 02 May 2023 21:26:39 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 179
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 5faae754d8cdbe86bc5b1476c611b8ef
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 6.8 kB URL GET HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.outbrain.com
Fingerprint59:1B:09:B5:D8:43:16:1E:E5:D5:4C:8C:AA:D2:36:1F:52:F3:D5:09
ValidityThu, 09 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (22526), with no line terminators
Hash 7a3723406a84583c3863f1ee35953720
cd6c0ca8cd896debff5f53e7963ba07588ef0fbc
35a1860e95a82b13006267a2ebe8a4ceb3a2851a2d149338faa597697c5a1173
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "838e9c2ec6e148b2af141d9d77d0f660:1680601866.61769"
Last-Modified: Tue, 04 Apr 2023 09:41:56 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Tue, 02 May 2023 21:46:39 GMT
Date: Tue, 02 May 2023 21:26:39 GMT
Content-Length: 6771
Connection: keep-alive
X-RG: EU
X-CC: NO
static-cdn.mackeeper.com/mk-land/dist/189/script.min.js?9b5d7236368300779f91
200 OK 32 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/189/script.min.js?9b5d7236368300779f91
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (38730)
Hash a0505e3fff136bbc5648aa0b1661eb61
7ab5c2991c28433fc30f5b144c0d51404df5dd0d
df1c63eac426115b9fabc2642eaf84c11b55e8a3e85468bfaac6b9bc4b321dcb
GET /mk-land/dist/189/script.min.js?9b5d7236368300779f91 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 27 Apr 2023 10:53:36 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Apr 2023 13:29:49 GMT
etag: W/"823f2d1fca817e3e7443550bd1178f3e"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=604800
x-amz-version-id: 0KGh_gT4MHx.MajGQEqiOjVJewzyyrPV
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7xrP75_tD8YiR9bZe6Ojzp_g3kzLsQvP1JzsP0hlkXTXFDx43WOKDg==
age: 469983
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintC6:94:6C:D5:87:F6:E9:11:E4:40:13:7F:80:49:D3:4C:A0:04:89:C7
ValidityThu, 16 Feb 2023 03:47:45 GMT - Wed, 16 Aug 2023 03:47:45 GMT
File type Unicode text, UTF-8 text, with very long lines (40990), with no line terminators
Hash 602626c278894a78f93e98512d4d8787
15fdf2bdc9f37f163f2fbd31e3a3cf511ed48215
7664a41a696d8e6b1cacba5a94a43649b37f1d91b78de6d91b53b1583d29a819
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 12048
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 19:01:49 GMT
accept-ranges: bytes
etag: "808c558fba73d91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 32A4F57931E74C62A510C6A80145522B Ref B: OSL30EDGE0214 Ref C: 2023-05-02T21:26:39Z
date: Tue, 02 May 2023 21:26:39 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash f4f11ebbb841619405ecfc1c3fa817c2
48638a670e384a52bfb088e0d750b3852ce86738
07b5d27d838b1f1168a76fa1c4b93ad790823a2090e7af4c007bf78e1e2529d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 21:26:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash e51e83f882638fd363c7e02cbfd53b8e
57fedd6f00b9bc673bfac4a81d0370b139a68da1
900f397ff2f847b08cacbfd0d0ba7d8011c5e530a49ebcfbeb0027774707ee5c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 21:26:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Roboto:400
200 OK 28 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:400
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:8B:BB:40:DD:1D:5B:E9:7B:AA:CC:94:45:44:7F:FD:56:6E:E4:60
ValidityMon, 03 Apr 2023 08:24:24 GMT - Mon, 26 Jun 2023 08:24:23 GMT
File type ASCII text, with very long lines (62196)
Hash 8b676195097ab109fc33859cd7cf1bad
4cacb43fce8f1bcd15e3051b337c8715fef37ce9
7326439382ee543f2f6573267a647ba1c953b4e6d78e1ff4d3fa97e1a8e6658e
GET /css?family=Roboto:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 02 May 2023 21:26:38 GMT
date: Tue, 02 May 2023 21:26:38 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1787751943.1683062805>m=45je3510&aip=1&z=1567254744
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1787751943.1683062805>m=45je3510&aip=1&z=1567254744
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
FingerprintA5:D0:38:67:8E:62:86:24:29:BC:82:07:2E:29:1E:0B:C8:29:09:29
ValidityMon, 03 Apr 2023 08:27:03 GMT - Mon, 26 Jun 2023 08:27:02 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1787751943.1683062805>m=45je3510&aip=1&z=1567254744 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 02 May 2023 21:26:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/1010020041/?random=1683062805002&cv=11&fst=1683062805002&bg=ffffff&guid=ON&async=1>m=45He3510&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&tiba=MacKeeper&value=0&bttype=purchase&auid=971915767.1683062805&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL GET HTTP/2 www.google.com/pagead/1p-conversion/1010020041/?random=1683062805002&cv=11&fst=1683062805002&bg=ffffff&guid=ON&async=1>m=45He3510&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&tiba=MacKeeper&value=0&bttype=purchase&auid=971915767.1683062805&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintC3:7C:54:CD:86:09:A4:3E:2C:6D:EC:7C:FA:65:7B:3E:64:CB:10:E0
ValidityMon, 03 Apr 2023 08:25:07 GMT - Mon, 26 Jun 2023 08:25:06 GMT
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1010020041/?random=1683062805002&cv=11&fst=1683062805002&bg=ffffff&guid=ON&async=1>m=45He3510&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&tiba=MacKeeper&value=0&bttype=purchase&auid=971915767.1683062805&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 02 May 2023 21:26:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1010020041/?random=1683062805002&cv=11&fst=1683062805002&bg=ffffff&guid=ON&async=1>m=45He3510&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&tiba=MacKeeper&value=0&bttype=purchase&auid=971915767.1683062805&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash f4f11ebbb841619405ecfc1c3fa817c2
48638a670e384a52bfb088e0d750b3852ce86738
07b5d27d838b1f1168a76fa1c4b93ad790823a2090e7af4c007bf78e1e2529d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 21:26:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-GYTXD89N1W>m=45je3510&_p=1268247346&_gaz=1&cid=1787751943.1683062805&ul=en-us&sr=1280x1024&_s=1&sid=1683062805&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-GYTXD89N1W>m=45je3510&_p=1268247346&_gaz=1&cid=1787751943.1683062805&ul=en-us&sr=1280x1024&_s=1&sid=1683062805&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint07:22:19:79:30:9E:4C:35:4E:21:BD:55:7D:44:2F:A9:71:9E:4C:AA
ValidityMon, 03 Apr 2023 08:16:11 GMT - Mon, 26 Jun 2023 08:16:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GYTXD89N1W>m=45je3510&_p=1268247346&_gaz=1&cid=1787751943.1683062805&ul=en-us&sr=1280x1024&_s=1&sid=1683062805&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://app2.mackeeperaff.com
date: Tue, 02 May 2023 21:26:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 23b244110c9e48121c6f9e0188310d28
1f93e8aad3e8f335181bde10a961b9b6a09e9e11
fec1cb52107775931e77fec5b69d23ce494337e239bd08c9d995aa22c59cb7f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 21:26:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.yimg.com/wi/config/10013499.json
200 OK 2 B URL GET HTTP/2 s.yimg.com/wi/config/10013499.json
IP
ASN #203220 Yahoo! UK Services Limited
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint6E:2F:30:B9:A3:FC:58:90:E8:A6:E6:0F:B5:08:0E:63:1D:59:94:F0
ValidityMon, 10 Apr 2023 00:00:00 GMT - Wed, 31 May 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10013499.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: MBH9M98XJS3ZD0WY
x-amz-id-2: njTM6Kx1uzhA0/Xk9Hmn63Pf3ZVMw9UAC8XNEShtGMVBdMRPrql9BKWKiLekLsqCVBf9zuktC7o=
content-type: application/json
date: Tue, 02 May 2023 21:15:34 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 666
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=36002432&tm=gtm002&Ver=2&mid=3bfb14d2-4894-4448-935b-f0a02256b00e&sid=0a4d9ec0e93011edb042f30ce440a408&vid=0a4dab00e93011ed8c1525bd160202fa&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&r=<=2755&evt=pageLoad&sv=1&rn=306745
204 No Content 0 B URL GET HTTP/2 bat.bing.com/action/0?ti=36002432&tm=gtm002&Ver=2&mid=3bfb14d2-4894-4448-935b-f0a02256b00e&sid=0a4d9ec0e93011edb042f30ce440a408&vid=0a4dab00e93011ed8c1525bd160202fa&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&r=<=2755&evt=pageLoad&sv=1&rn=306745
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintC6:94:6C:D5:87:F6:E9:11:E4:40:13:7F:80:49:D3:4C:A0:04:89:C7
ValidityThu, 16 Feb 2023 03:47:45 GMT - Wed, 16 Aug 2023 03:47:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=36002432&tm=gtm002&Ver=2&mid=3bfb14d2-4894-4448-935b-f0a02256b00e&sid=0a4d9ec0e93011edb042f30ce440a408&vid=0a4dab00e93011ed8c1525bd160202fa&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&r=<=2755&evt=pageLoad&sv=1&rn=306745 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=09FC530B4E28613F0494400E4FDD60C2; domain=.bing.com; expires=Sun, 26-May-2024 21:26:40 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 927902A6C81F4D94B65205FE291876A0 Ref B: OSL30EDGE0214 Ref C: 2023-05-02T21:26:40Z
date: Tue, 02 May 2023 21:26:39 GMT
X-Firefox-Spdy: h2
connect.facebook.net/signals/config/1593188040964422?v=2.9.103&r=stable
200 OK 110 kB URL GET HTTP/3 connect.facebook.net/signals/config/1593188040964422?v=2.9.103&r=stable
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.facebook.com
Fingerprint88:81:81:32:20:A7:A6:69:02:67:8C:EE:13:B3:19:2D:0E:31:3C:B1
ValidityThu, 09 Feb 2023 00:00:00 GMT - Wed, 10 May 2023 23:59:59 GMT
File type ASCII text, with very long lines (64471)
Size 110 kB (109781 bytes)
Hash 48a5f679e6405a522a2a1f7b13f5e73b
554c8df1954f5913aebabc981318f66c35961f70
3594de953779c845a7147b77772531d56a17e09d4e1f0517cf9190a412355226
GET /signals/config/1593188040964422?v=2.9.103&r=stable HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: connect.facebook.net
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: EqCKpUOsHUZD81lin+MyEOiH6INvT9AQkmc5GSQOcpOlGijoDautBLcji6snlX6urD4zRfOlsiknqLPBXjAOwA==
content-length: 109781
date: Tue, 02 May 2023 21:26:40 GMT
alt-svc: h3=":443"; ma=86400
priority: u=3,i
script.hotjar.com/modules.50a80ed62b384955a8b2.js
200 OK 69 kB URL GET HTTP/2 script.hotjar.com/modules.50a80ed62b384955a8b2.js
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subject*.hotjar.com
FingerprintE4:DA:30:C0:72:F1:FF:85:CF:2E:2D:15:26:8B:D2:4C:E0:B6:FD:4B
ValidityThu, 09 Mar 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (50930)
Hash 64d5841f997872b89ef043f224290bdf
0437ba6d80c92b2007f9ddba077e50a0f32912af
306e7fe2a72b96c68ff25aad876ac39cfbe3f05ee55153a5af6dec6f8a367e7c
GET /modules.50a80ed62b384955a8b2.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 69259
date: Fri, 28 Apr 2023 11:06:07 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "64d5841f997872b89ef043f224290bdf"
last-modified: Fri, 28 Apr 2023 11:05:08 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hTH93IYWppjkymksPvJ612hZD_eUZCkBeCVe-943DYUHKubxYkqvBQ==
age: 382833
X-Firefox-Spdy: h2
bat.bing.com/p/action/36002432.js
200 OK 1.5 kB URL GET HTTP/2 bat.bing.com/p/action/36002432.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintC6:94:6C:D5:87:F6:E9:11:E4:40:13:7F:80:49:D3:4C:A0:04:89:C7
ValidityThu, 16 Feb 2023 03:47:45 GMT - Wed, 16 Aug 2023 03:47:45 GMT
File type ASCII text, with CRLF line terminators
Hash e329e4b90fe4995db6f0ca7395bf9be7
280f4abb6509b2d1e264d646046d036308d959e2
c5f2b6bd182be0ac844008b6989f69738c8c1145ae048c2d56176c69e1ca498b
GET /p/action/36002432.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 1497
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 121FCBEBB5084F2D861D2DC946FAD197 Ref B: OSL30EDGE0214 Ref C: 2023-05-02T21:26:40Z
date: Tue, 02 May 2023 21:26:39 GMT
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1683062805629&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
302 Found 0 B URL GET HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1683062805629&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subjectwww.linkedin.com
Fingerprint1F:CD:8F:F2:82:0B:B9:19:6B:DE:AD:66:B4:F9:B0:8B:F0:91:FF:6C
ValidityTue, 07 Mar 2023 00:00:00 GMT - Thu, 07 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3865705&time=1683062805629&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1683062805629%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F189%252F%253Frtkcid%253D64517ff81fe5810001055857%2526rtkcmpid%253D627d33f635981a0001d4db70%2526tid%253DAffiliate%252520-%252520Increased%252520Hybrid%252520%2528189%2529%252520-%252520Shlomi%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQLQLpkt4nlW6wAAAYfeXEBKHXKfnnT6sSmoxzqo2JR64K4tjThIIoOP_gmzfexz6vAGTOWBGDmVYA; Max-Age=2592000; Expires=Thu, 01 Jun 2023 21:26:40 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQKh7mDUNyazAAAAAYfeXEBKc-1SpMKwQLvSe5W0IWIr-AKequeNYl-cyQxJmoazG2F8JKDtZjpWAZorr4sB1g; Max-Age=2592000; Expires=Thu, 01 Jun 2023 21:26:40 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
bcookie="v=2&3c46f72f-eb91-4cbb-8620-1c04463588d6"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 01-May-2024 21:26:40 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2567:u=1:x=1:i=1683062800:t=1683149200:v=2:sig=AQFkqYcIRdicikjGFs4_hpWGUDhyOfSM"; Expires=Wed, 03 May 2023 21:26:40 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAX6vJhbDLTmx8X2f6AHKw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 6BC90802CE5E44DAA214FEA67E34EEE4 Ref B: OSL30EDGE0318 Ref C: 2023-05-02T21:26:40Z
date: Tue, 02 May 2023 21:26:39 GMT
content-length: 0
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1683062806254&sw=1280&sh=1024&v=2.9.103&r=stable&a=tmgoogletagmanager&ec=0&o=30&cs_est=true&fbp=fb.1.1683062806253.1027406050&it=1683062805919&coo=false&rqm=GET
200 OK 0 B URL GET HTTP/2 www.facebook.com/tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1683062806254&sw=1280&sh=1024&v=2.9.103&r=stable&a=tmgoogletagmanager&ec=0&o=30&cs_est=true&fbp=fb.1.1683062806253.1027406050&it=1683062805919&coo=false&rqm=GET
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.facebook.com
Fingerprint88:81:81:32:20:A7:A6:69:02:67:8C:EE:13:B3:19:2D:0E:31:3C:B1
ValidityThu, 09 Feb 2023 00:00:00 GMT - Wed, 10 May 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1683062806254&sw=1280&sh=1024&v=2.9.103&r=stable&a=tmgoogletagmanager&ec=0&o=30&cs_est=true&fbp=fb.1.1683062806253.1027406050&it=1683062805919&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 02 May 2023 21:26:40 GMT
X-Firefox-Spdy: h2
status.thawte.com/
471 B IP
Hash b96aa2c4a0992044dce8bfd5eff5d00c
5805049736f9cab7b61dd91a8a6b7822b004a369
6858aaf30dca4cf8c9bffb504390ad5a8ace1cdaeb357cc4d13ee8dcf7d122a6
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4568
Cache-Control: max-age=86564
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 21:26:40 GMT
Etag: "64501d5c-1d7"
Expires: Wed, 03 May 2023 21:29:24 GMT
Last-Modified: Mon, 01 May 2023 20:13:16 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1683062805629%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F189%252F%253Frtkcid%253D64517ff81fe5810001055857%2526rtkcmpid%253D627d33f635981a0001d4db70%2526tid%253DAffiliate%252520-%252520Increased%252520Hybrid%252520%2528189%2529%252520-%252520Shlomi%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
302 Found 0 B URL GET HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1683062805629%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F189%252F%253Frtkcid%253D64517ff81fe5810001055857%2526rtkcmpid%253D627d33f635981a0001d4db70%2526tid%253DAffiliate%252520-%252520Increased%252520Hybrid%252520%2528189%2529%252520-%252520Shlomi%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subjectwww.linkedin.com
Fingerprint1F:CD:8F:F2:82:0B:B9:19:6B:DE:AD:66:B4:F9:B0:8B:F0:91:FF:6C
ValidityTue, 07 Mar 2023 00:00:00 GMT - Thu, 07 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1683062805629%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F189%252F%253Frtkcid%253D64517ff81fe5810001055857%2526rtkcmpid%253D627d33f635981a0001d4db70%2526tid%253DAffiliate%252520-%252520Increased%252520Hybrid%252520%2528189%2529%252520-%252520Shlomi%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1683062805629&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28189%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
set-cookie: bcookie="v=2&12536fbf-9c04-4ba5-875c-04292c7e0940"; Domain=.linkedin.com; Expires=Wed, 01-May-2024 21:26:40 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202305022126408672403e-a227-4321-8402-3fb142a83393AQEiNEcz470_e6DQ_UJXGCALAhNZjWZL"; Domain=.www.linkedin.com; Expires=Wed, 01-May-2024 21:26:40 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2ODMwNjI4MDA7MjswMjETiFQBVHGFiozAujx5BP9BSDcrHtsykocW+whuLEIKYw==; Domain=.linkedin.com; Expires=Sun, 29 Oct 2023 21:26:40 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2515:u=1:x=1:i=1683062800:t=1683149200:v=2:sig=AQG8o48xNvHOF-jAaWEVV-ja2YakeOlv"; Expires=Wed, 03 May 2023 21:26:40 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; script-src-attr 'report-sample' 'none'; object-src 'none'; media-src blob: *; worker-src 'self' blob: static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAX6vJhd+6r3jbzW8ryDHg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: FE2244D6DD404495BEDC8A32268284F6 Ref B: OSL30EDGE0318 Ref C: 2023-05-02T21:26:40Z
date: Tue, 02 May 2023 21:26:40 GMT
content-length: 0
X-Firefox-Spdy: h2
tr.outbrain.com/unifiedPixel?optOut=false&bust=08928302687696176&referrer=&cht=gtm&marketerId=005ba92794eafc10da81bd91da6dc1a949&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&g=1&obApiVersion=1.1&obtpVersion=2.0.5
200 OK 53 B URL GET HTTP/1.1 tr.outbrain.com/unifiedPixel?optOut=false&bust=08928302687696176&referrer=&cht=gtm&marketerId=005ba92794eafc10da81bd91da6dc1a949&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&g=1&obApiVersion=1.1&obtpVersion=2.0.5
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.outbrain.com
FingerprintBF:54:E3:DD:E9:D0:0A:C0:56:42:45:22:70:53:A0:BF:21:13:F1:0C
ValiditySun, 06 Nov 2022 00:00:00 GMT - Tue, 28 Nov 2023 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?optOut=false&bust=08928302687696176&referrer=&cht=gtm&marketerId=005ba92794eafc10da81bd91da6dc1a949&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&g=1&obApiVersion=1.1&obtpVersion=2.0.5 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 02 May 2023 21:26:40 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: f4d7d01cd2736c3835bc07ddd1357bf2
tr.outbrain.com/cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949
200 OK 35 B URL GET HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.outbrain.com
FingerprintBF:54:E3:DD:E9:D0:0A:C0:56:42:45:22:70:53:A0:BF:21:13:F1:0C
ValiditySun, 06 Nov 2022 00:00:00 GMT - Tue, 28 Nov 2023 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 02 May 2023 21:26:40 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: 0c9826a26e6fa6b320b6f0ea9fdb1d9d
sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2002%20May%202023%2021%3A26%3A46%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&enc=UTF-8&yv=1.14.0&tagmgr=gtm
200 OK 43 B URL GET HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2002%20May%202023%2021%3A26%3A46%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&enc=UTF-8&yv=1.14.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subjectreal.sp.analytics.yahoo.com
Fingerprint5B:A9:E0:5C:CA:A3:99:EB:25:21:93:B0:02:0E:0D:73:86:97:2C:0B
ValidityTue, 03 Jan 2023 00:00:00 GMT - Wed, 28 Jun 2023 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Tue%2C%2002%20May%202023%2021%3A26%3A46%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&enc=UTF-8&yv=1.14.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 02 May 2023 21:26:40 GMT
expires: Tue, 02 May 2023 21:26:40 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBBCAUWQCENtbc3e2UghP7mFoW5VgjBsFEgEBAQHRUmRbZPmbzSMA_eMAAA&S=AQAAAgfDWbssQp61f1orBlp99KU; Expires=Thu, 2 May 2024 03:26:40 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1683062805629&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28189%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
200 OK 0 B URL GET HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1683062805629&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28189%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subjectwww.linkedin.com
Fingerprint1F:CD:8F:F2:82:0B:B9:19:6B:DE:AD:66:B4:F9:B0:8B:F0:91:FF:6C
ValidityTue, 07 Mar 2023 00:00:00 GMT - Thu, 07 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3865705&time=1683062805629&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28189%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: bcookie="v=2&e3fe76cf-05d6-4c6e-82a5-b34db763ea83"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 01-May-2024 21:26:40 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2515:u=1:x=1:i=1683062800:t=1683149200:v=2:sig=AQG8o48xNvHOF-jAaWEVV-ja2YakeOlv"; Expires=Wed, 03 May 2023 21:26:40 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-source-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAX6vJhgzappVP1clblQeA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: CFE977AC8A5247BA9A568C48806974A3 Ref B: OSL30EDGE0318 Ref C: 2023-05-02T21:26:40Z
date: Tue, 02 May 2023 21:26:40 GMT
content-length: 0
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/36002432
200 OK 793 B URL GET HTTP/2 www.clarity.ms/tag/uet/36002432
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subjectwww.clarity.ms
FingerprintA4:B5:B5:C0:42:DF:F8:AB:1A:CE:AD:03:FC:9B:52:B9:0E:5B:6C:FA
ValidityThu, 01 Dec 2022 00:00:00 GMT - Fri, 01 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (793), with no line terminators
Hash f854a19f57430f862da9b45015cefcd5
8d1461fdb19ea74400bab5172d5f2677c1890068
6d99a8d8d41c368ffe7d985b05f5f131fa4c1c52359115a390007e95734fa3a6
GET /tag/uet/36002432 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=2fbde3827e8c48d79b94981e23a9be5a.20230502.20240501; expires=Wed, 01 May 2024 21:26:40 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
x-cache: CONFIG_NOCACHE
x-azure-ref: 0EIBRZAAAAACPdelZzGFiTJxRZXUZYbZcU1ZHMjBFREdFMDUxMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Tue, 02 May 2023 21:26:40 GMT
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=1588&scd=0&ssd=1&est=1683062805701&ver=36&isls=true&src=i&invt=1500&msa=856&rv=1&tim=1683062807291&vi=1683062805699&ri=dd05e4c4fb996eed9d1217c6a34c1b3c&ref=null&cv=20230430-1-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
204 No Content 0 B URL GET HTTP/2 trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=1588&scd=0&ssd=1&est=1683062805701&ver=36&isls=true&src=i&invt=1500&msa=856&rv=1&tim=1683062807291&vi=1683062805699&ri=dd05e4c4fb996eed9d1217c6a34c1b3c&ref=null&cv=20230430-1-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #200478 Taboola.com ltd
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.taboola.com
Fingerprint7A:5C:85:1F:10:60:7D:BF:79:C0:8A:91:67:2A:E3:5C:34:A4:5B:A5
ValidityThu, 08 Dec 2022 00:00:00 GMT - Sun, 31 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=1588&scd=0&ssd=1&est=1683062805701&ver=36&isls=true&src=i&invt=1500&msa=856&rv=1&tim=1683062807291&vi=1683062805699&ri=dd05e4c4fb996eed9d1217c6a34c1b3c&ref=null&cv=20230430-1-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Tue, 02 May 2023 21:26:41 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
app2.mackeeperaff.com/land/api/send-event
200 OK 57 B URL POST HTTP/2 app2.mackeeperaff.com/land/api/send-event
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectmkaff.com
Fingerprint8F:7A:F4:B2:4E:7F:BA:7B:D4:62:F0:73:FA:74:2E:7E:53:57:F2:A5
ValidityTue, 21 Feb 2023 00:00:00 GMT - Thu, 19 Oct 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7881c03c25f83a64ea6bf1af34f7e53c
0c90f884e0dd731a8b1ea3370a3ad21b2e9f96bf
86e2a0e2a47733b3720c139367e0477d0c82a7aa6c20159e4908cd29407b1e83
POST /land/api/send-event HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: 1j6iJRaHd4NA5x4V8Y54rF3HUpmDRJIKZyEDZMMb
X-XSRF-TOKEN: eyJpdiI6ImlGeXV4cVA1SkQrTndBaWJwd3ZPRlE9PSIsInZhbHVlIjoiT0c2aUIyNnREZkJyZTNyNitTRmN2YUpBRTBwd3ZBY3ZuY1ZodHNnaGUweEJGZjBucE8xSEF6UFRnWkVTVlVkXC9jZDdCSDNzMUJwNkltbllxOG5GMEtaQVUzZzc1Zm1YZVAwMytKcGtKN0JHSW13MENwNE1VcjJJbmVVSWFKaUp1IiwibWFjIjoiMjI3NjgwN2E3ZDAzMGIwYzA1NThjN2NhMGExYTJlMDY5MTY5NjM1ZmE3ZTg5NWFhMDhjZmQxZWVkYTFlZjFjNiJ9
Content-Length: 101
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Cookie: XSRF-TOKEN=eyJpdiI6ImlGeXV4cVA1SkQrTndBaWJwd3ZPRlE9PSIsInZhbHVlIjoiT0c2aUIyNnREZkJyZTNyNitTRmN2YUpBRTBwd3ZBY3ZuY1ZodHNnaGUweEJGZjBucE8xSEF6UFRnWkVTVlVkXC9jZDdCSDNzMUJwNkltbllxOG5GMEtaQVUzZzc1Zm1YZVAwMytKcGtKN0JHSW13MENwNE1VcjJJbmVVSWFKaUp1IiwibWFjIjoiMjI3NjgwN2E3ZDAzMGIwYzA1NThjN2NhMGExYTJlMDY5MTY5NjM1ZmE3ZTg5NWFhMDhjZmQxZWVkYTFlZjFjNiJ9; mackeeper_session=eyJpdiI6Im5nOWtJXC9qOXV3Yk9FeHU4dmR4Qm1nPT0iLCJ2YWx1ZSI6InRHeWFLTG8rTTNUbmszdjRGcU12QzJYS3BYWng0QWJxUm8zVThEQ1VGeUx1bVVjZWZkTStPZmpjaE1CZldDSVk0V0hWbm42cFlxanJDSFVIdWJCTjFiclZXN1dOQTkyWlRcL3hFcjZ1VldXUGFhNlJMSXhcL3R2N0paWFwvN0pOV1VWIiwibWFjIjoiNzAzY2FmYTM4MDAwNWY3MjRkNGQ0NzY3NmMyMTIwZDFhN2ZhMmIyZDkxM2U5ZDFkMDE3ODlhZDU3OWVjYjgwNiJ9; _gcl_au=1.1.971915767.1683062805; _ga_GYTXD89N1W=GS1.1.1683062805.1.0.1683062805.60.0.0; _ga=GA1.1.1787751943.1683062805; _lfa=LF1.1.1b2398e040204887.1683062805304; _uetsid=0a4d9ec0e93011edb042f30ce440a408; _uetvid=0a4dab00e93011ed8c1525bd160202fa; _fbp=fb.1.1683062806253.1027406050; _hjSessionUser_190484=eyJpZCI6IjQ4ODI4MjhkLWY5MWMtNTFkOC1iNDJiLTJiM2QwNzc5OTUyOCIsImNyZWF0ZWQiOjE2ODMwNjI4MDYyODUsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_190484=0; _hjSession_190484=eyJpZCI6ImZmNTYxNjhiLWRhMzItNDVjNS04ZDMyLTc0YjU4NTQ2NGQ1NyIsImNyZWF0ZWQiOjE2ODMwNjI4MDYyODksImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; ln_or=eyIzODY1NzA1IjoiZCJ9; outbrain_cid_fetch=true; _clck=1x3ay09|1|fb9|0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 02 May 2023 21:26:41 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 178
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: f6043a58a45d38c3509415c0e3727152
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=FFC80CC555B2419E8D6A3E85AEAF68BE&MUID=3D96AE077E3C6C1F14A1BD027FC96D23
200 OK 42 B URL GET HTTP/2 c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=FFC80CC555B2419E8D6A3E85AEAF68BE&MUID=3D96AE077E3C6C1F14A1BD027FC96D23
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerMicrosoft Corporation
Subjectc.msn.com
Fingerprint95:8C:38:A5:48:02:4E:A3:AB:97:92:86:83:BA:3E:B0:B3:CE:73:94
ValidityMon, 25 Jul 2022 20:35:56 GMT - Thu, 20 Jul 2023 20:35:56 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?ctsa=mr&CtsSyncId=FFC80CC555B2419E8D6A3E85AEAF68BE&MUID=3D96AE077E3C6C1F14A1BD027FC96D23 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Wed, 19 Apr 2023 15:34:17 GMT
accept-ranges: bytes
etag: "f5c05c67d472d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Tue, 02-May-2023 21:36:41 GMT; path=/; SameSite=None; Secure;
date: Tue, 02 May 2023 21:26:41 GMT
content-length: 42
X-Firefox-Spdy: h2
oneocsp.microsoft.com/ocsp
1.8 kB URL oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 6a53d34a578ef33d4606bb331384a984
4d77b0f90d3c620b73ceeb1ba70080487fc7c1f4
fd3e30b0f95b8a3fbe2bcd4f55741873b6fb23392806aaaef8b14879482fbdf3
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1777
Content-Type: application/ocsp-response
Expires: Fri, 12 May 2023 17:28:22 GMT
Last-Modified: Tue, 02 May 2023 17:08:22 GMT
ETag: "fd3e30b0f95b8a3fbe2bcd4f55741873b6fb23392806aaaef8b14879482fbdf3"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 445940627A6E4EC2A64FCAF76FDE25B0 Ref B: OSL30EDGE0518 Ref C: 2023-05-02T21:26:41Z
Date: Tue, 02 May 2023 21:26:41 GMT
www.clarity.ms/s/0.7.6/clarity.js
200 OK 19 kB URL GET HTTP/2 www.clarity.ms/s/0.7.6/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subjectwww.clarity.ms
FingerprintA4:B5:B5:C0:42:DF:F8:AB:1A:CE:AD:03:FC:9B:52:B9:0E:5B:6C:FA
ValidityThu, 01 Dec 2022 00:00:00 GMT - Fri, 01 Dec 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (56876)
Hash d98f6933949ebc124cc652c76b4523eb
b5cb19f3a4924d02e67b3a41c6474a741a6a6f73
9e3f1271c142e7da1cde822650f2c087db51c39a38db21cbfbad503e882116d5
GET /s/0.7.6/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Sun, 30 Apr 2023 18:07:57 GMT
accept-ranges: bytes
etag: "0x8DB49A5D38416CA"
x-cache: TCP_HIT
x-ms-request-id: 1f61973a-201e-0033-28fa-7b7170000000
x-ms-version: 2018-03-28
access-control-allow-origin: *
x-azure-ref-originshield: 0Tp5QZAAAAACwGQUlZ1UwRLY5qouDCmGVQU1TMDRFREdFMTkxMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
x-azure-ref: 0EIBRZAAAAABmL/F+y3vtSIAs9EVsvkhLU1ZHMjBFREdFMDUxMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Tue, 02 May 2023 21:26:40 GMT
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=4591&scd=0&ssd=1&est=1683062805701&ver=36&isls=true&src=i&invt=3000&msa=856&rv=1&tim=1683062810294&vi=1683062805699&ri=dd05e4c4fb996eed9d1217c6a34c1b3c&ref=null&cv=20230430-1-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
204 No Content 0 B URL GET HTTP/2 trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=4591&scd=0&ssd=1&est=1683062805701&ver=36&isls=true&src=i&invt=3000&msa=856&rv=1&tim=1683062810294&vi=1683062805699&ri=dd05e4c4fb996eed9d1217c6a34c1b3c&ref=null&cv=20230430-1-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #200478 Taboola.com ltd
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.taboola.com
Fingerprint7A:5C:85:1F:10:60:7D:BF:79:C0:8A:91:67:2A:E3:5C:34:A4:5B:A5
ValidityThu, 08 Dec 2022 00:00:00 GMT - Sun, 31 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=4591&scd=0&ssd=1&est=1683062805701&ver=36&isls=true&src=i&invt=3000&msa=856&rv=1&tim=1683062810294&vi=1683062805699&ri=dd05e4c4fb996eed9d1217c6a34c1b3c&ref=null&cv=20230430-1-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 02 May 2023 21:26:44 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=10594&scd=0&ssd=1&est=1683062805701&ver=36&isls=true&src=i&invt=6000&msa=856&rv=1&tim=1683062816297&vi=1683062805699&ri=dd05e4c4fb996eed9d1217c6a34c1b3c&ref=null&cv=20230430-1-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
0 B URL trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=10594&scd=0&ssd=1&est=1683062805701&ver=36&isls=true&src=i&invt=6000&msa=856&rv=1&tim=1683062816297&vi=1683062805699&ri=dd05e4c4fb996eed9d1217c6a34c1b3c&ref=null&cv=20230430-1-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #200478 Taboola.com ltd
Certificate IssuerDigiCert Inc
Subject*.taboola.com
Fingerprint7A:5C:85:1F:10:60:7D:BF:79:C0:8A:91:67:2A:E3:5C:34:A4:5B:A5
ValidityThu, 08 Dec 2022 00:00:00 GMT - Sun, 31 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=10594&scd=0&ssd=1&est=1683062805701&ver=36&isls=true&src=i&invt=6000&msa=856&rv=1&tim=1683062816297&vi=1683062805699&ri=dd05e4c4fb996eed9d1217c6a34c1b3c&ref=null&cv=20230430-1-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 02 May 2023 21:26:50 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-190484.js?sv=7
200 OK 9.0 kB URL GET HTTP/2 static.hotjar.com/c/hotjar-190484.js?sv=7
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subject*.hotjar.com
FingerprintE4:DA:30:C0:72:F1:FF:85:CF:2E:2D:15:26:8B:D2:4C:E0:B6:FD:4B
ValidityThu, 09 Mar 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (9233), with no line terminators
Hash d3bf86162d2ab63031b8064693b10e67
71988b9921c63910d3f7c6d8d8b698887f980372
be4e894869b3fee4892b895c13c3620e721ace0d019370751b130f67ff0b3532
GET /c/hotjar-190484.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Tue, 02 May 2023 21:26:39 GMT
cache-control: max-age=60
etag: W/5582c96bda7ac2706a75c908c6f49f21
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wxUrzIyN_gG-hsqTuGETioZAMbLi_9lt2LygX4zhBIQSVV5Sl_10Qg==
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
200 OK 13 kB URL GET HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint34:5A:0A:3B:4F:02:F9:C6:C9:D7:3F:CA:9D:17:0D:40:27:05:05:0A
ValidityMon, 03 Apr 2023 08:24:23 GMT - Mon, 26 Jun 2023 08:24:22 GMT
File type Web Open Font Format (Version 2), TrueType, length 13052, version 1.0\012- data
Hash 7cf79fbd1df848510d7352274efc2401
5540b5a26cc7dfe25294c4eabe011e2c6cd60143
bc9a16cd945457ad9463cdaed95129b01c589466978dfee3d019d9c604b2171a
GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 29 Apr 2023 16:07:49 GMT
expires: Sun, 28 Apr 2024 16:07:49 GMT
cache-control: public, max-age=31536000
age: 278330
last-modified: Wed, 27 Apr 2022 16:09:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sc.lfeeder.com/lftracker_v1_ywVkO4XWPeW7Z6Bj.js
200 OK 32 kB URL GET HTTP/2 sc.lfeeder.com/lftracker_v1_ywVkO4XWPeW7Z6Bj.js
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subject*.lfeeder.com
Fingerprint6B:75:32:D8:B3:6F:B3:51:58:8A:0B:32:AC:80:74:D5:DB:FC:89:FD
ValidityTue, 28 Feb 2023 00:00:00 GMT - Mon, 07 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (32188), with no line terminators
Hash 5a541ab9cd65ba584fbdb609fb7e6d5c
97ab75c4f46460568ae8c063a0f89a3718696d30
2029b847aa15a583ee4e96bb8020155e4e0ee949b77c6f689f143e7443a6f306
GET /lftracker_v1_ywVkO4XWPeW7Z6Bj.js HTTP/1.1
Host: sc.lfeeder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 06 Apr 2023 07:19:56 GMT
x-amz-version-id: BU_lGGGsdU1MK_wxvI0LZjcI7.PyWnCw
server: AmazonS3
content-encoding: gzip
date: Tue, 02 May 2023 21:04:28 GMT
cache-control: max-age=3600
etag: W/"5a541ab9cd65ba584fbdb609fb7e6d5c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hEX3indQ2a5uXM8xLuYmwOqz1blweBRuQS0rHzBAqBRCJh4uVPcolw==
age: 1332
X-Firefox-Spdy: h2
t.adcell.com/js/trad.js
200 OK 57 kB IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerUnizeto Technologies S.A.
Subjectadcell.com
Fingerprint65:11:29:A4:BE:B9:6A:2B:62:F2:64:FA:FD:49:96:75:E4:AC:DB:26
ValidityMon, 22 Aug 2022 10:29:16 GMT - Tue, 22 Aug 2023 10:29:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/trad.js HTTP/1.1
Host: t.adcell.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: myracloud
date: Tue, 02 May 2023 21:26:39 GMT
content-type: text/javascript
strict-transport-security: max-age=15768000
content-encoding: gzip
vary: accept-encoding
expires: Tue, 02 May 2023 21:32:49 GMT
cache-control: max-age=900
etag: "myra-2fb993e1"
x-cdn: 1
X-Firefox-Spdy: h2
y.clarity.ms/collect
0 B IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 27114
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
www.facebook.com/tr/?id=1593188040964422&ev=Microdata&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1683062807761&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22MacKeeper%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=2.9.103&r=stable&a=tmgoogletagmanager&ec=1&o=30&fbp=fb.1.1683062806253.1027406050&it=1683062805919&coo=false&es=automatic&tm=3&rqm=GET
200 OK 0 B URL GET HTTP/3 www.facebook.com/tr/?id=1593188040964422&ev=Microdata&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1683062807761&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22MacKeeper%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=2.9.103&r=stable&a=tmgoogletagmanager&ec=1&o=30&fbp=fb.1.1683062806253.1027406050&it=1683062805919&coo=false&es=automatic&tm=3&rqm=GET
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.facebook.com
Fingerprint88:81:81:32:20:A7:A6:69:02:67:8C:EE:13:B3:19:2D:0E:31:3C:B1
ValidityThu, 09 Feb 2023 00:00:00 GMT - Wed, 10 May 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1593188040964422&ev=Microdata&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1683062807761&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22MacKeeper%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=2.9.103&r=stable&a=tmgoogletagmanager&ec=1&o=30&fbp=fb.1.1683062806253.1027406050&it=1683062805919&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.facebook.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
priority: u=6
date: Tue, 02 May 2023 21:26:42 GMT
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Bold.otf
200 OK 92 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Bold.otf
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type OpenType font data\012- data
Hash 336e38c18c3ac1666fa496c919b08eca
df2fb73ff795751eca0ff01875e5ed84be0bbc4a
0be3bab455dea7118bdf5e408cd8eee9c2109285159e15517bd46c75e9ba2ca9
GET /mk-land/dist/fonts/MarkOT-Bold.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/ttf
date: Thu, 27 Apr 2023 11:00:09 GMT
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
etag: W/"336e38c18c3ac1666fa496c919b08eca"
cache-control: public, max-age=604800
x-amz-version-id: _SyAJ1U0XNp0EgWFZoSm7jR1ZmFIsGhh
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lpOOQF07gh3STXa2FhYrPKdzWQfa76LVrZkAeXwQYHSSHTClDWtbwg==
age: 469590
X-Firefox-Spdy: h2
y.clarity.ms/collect
0 B IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerMicrosoft Corporation
Subjecta.clarity.ms
FingerprintD2:EB:78:0C:7D:85:99:BC:14:0E:75:ED:BE:19:6E:8A:C6:68:D7:73
ValidityMon, 13 Feb 2023 16:57:32 GMT - Thu, 08 Feb 2024 16:57:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 27114
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
y.clarity.ms/collect
0 B IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 27114
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
static-cdn.mackeeper.com/mk-land/dist/default/script.min.js?eef756407a0b94b3f466
200 OK 88 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/default/script.min.js?eef756407a0b94b3f466
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mk-land/dist/default/script.min.js?eef756407a0b94b3f466 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 27 Apr 2023 10:49:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Apr 2023 13:28:01 GMT
etag: W/"9b3bfec17a02ea59d8fdd6193764f944"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=604800
x-amz-version-id: BPujMSD2G3WhHFQaTuOwjb9zcM8tGv5D
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _o-LlTHoexEQf8n5ZUo1yZ4WtarAUq7vlJvjiCI-TFpKdAJyivyDpw==
age: 470204
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
200 OK 6.2 kB URL GET HTTP/2 widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subject*.trustpilot.com
FingerprintED:01:2E:50:4C:98:9B:F1:34:D7:8C:1E:93:45:E6:05:00:3C:47:86
ValidityThu, 02 Feb 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6343), with no line terminators
Hash 5b0fbc66fe9c0179359c0fa11d720bcc
886f32a21f051568e8722c7034b7f7d7997b9d86
f8384cfb674af931601e7a98b93132e52d4c2e50204286d841e5a2c5864480ed
GET /trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1930
last-modified: Tue, 04 Oct 2022 10:33:40 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Tue, 02 May 2023 04:33:21 GMT
cache-control: max-age=86400
etag: "1b1a56d9c9fcf8acab07f238231461df"
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NYVr2x77AmTMbGr3XROiLMpr7g9lYE-K77GErPXxnGkr7YmDNunqUQ==
age: 60799
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 42 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerMicrosoft Corporation
Subjectc.msn.com
Fingerprint95:8C:38:A5:48:02:4E:A3:AB:97:92:86:83:BA:3E:B0:B3:CE:73:94
ValidityMon, 25 Jul 2022 20:35:56 GMT - Thu, 20 Jul 2023 20:35:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?ctsa=mr&CtsSyncId=FFC80CC555B2419E8D6A3E85AEAF68BE&RedC=c.clarity.ms&MXFR=093D2209E4446189353B310CE0446F66
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=093D2209E4446189353B310CE0446F66; domain=.clarity.ms; expires=Sun, 26-May-2024 21:26:41 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Tue, 02 May 2023 21:26:40 GMT
content-length: 0
X-Firefox-Spdy: h2
y.clarity.ms/collect
0 B IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1127
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
www.dwin1.com/23738.js
200 OK 34 kB IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subject*.dwin1.com
FingerprintA3:A3:07:CB:5A:9B:0F:19:22:8B:65:8F:34:31:D9:DD:8B:1C:66:5E
ValidityTue, 28 Feb 2023 00:00:00 GMT - Fri, 01 Dec 2023 23:59:59 GMT
File type C source, ASCII text, with very long lines (34476), with no line terminators
Hash af93bcd6aa6735a290245ebfef851cb8
75e8b9ebe1c9dd204f1d1cd98e8071d684ed7317
a9f7ee888365d679a0c1d6a2d11ce5a40084cfda21e2b0bb1ac23812aa0dcbb0
GET /23738.js HTTP/1.1
Host: www.dwin1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
x-amz-replication-status: COMPLETED
last-modified: Tue, 25 Apr 2023 07:05:05 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: mTBwes5rrbgmdiL4kK_ey__lqLOPzGjB
server: AmazonS3
content-encoding: gzip
date: Tue, 02 May 2023 21:18:34 GMT
cache-control: max-age=600, s-maxage=600
etag: W/"af93bcd6aa6735a290245ebfef851cb8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1GEnOXo4yPDLI5p06OX0FfOGQouJs79pLDUqLIBfOiHDJovaXQHz7A==
age: 486
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1212352/tfa.js
200 OK 59 kB URL GET HTTP/2 cdn.taboola.com/libtrc/unip/1212352/tfa.js
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.taboola.com
FingerprintD4:63:48:60:AA:B7:C8:F2:90:9B:12:D2:03:99:56:96:37:38:86:CF
ValidityThu, 08 Dec 2022 00:00:00 GMT - Sun, 31 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (59071)
Hash 3f2744cf0d0d3e5d5c37f5efeede6430
be1e2ec63798dcf6079cbce54543797594432955
0402cc5e30620ae291a05b988453bd9a9900a076101e973b1bf280bad1c4bb67
GET /libtrc/unip/1212352/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: xPesXc6ebJNSAASaCxpe+ju0lOXNFEKYOJ2cJ9nfwD72i9g239u1N+M+IOcbHwp/ihoy3xO03rg=
x-amz-request-id: Y8J1AWFSZZH9C8MQ
x-amz-replication-status: COMPLETED
last-modified: Sun, 30 Apr 2023 11:14:29 GMT
etag: "3f2744cf0d0d3e5d5c37f5efeede6430"
x-amz-server-side-encryption: AES256
x-amz-version-id: ZazUCDLZnOJg3ZZAA2x8OXxV8G4Q0j.U
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 02 May 2023 21:26:39 GMT
via: 1.1 varnish
age: 19
x-served-by: cache-bma1670-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1683062800.839234,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 34
access-control-allow-origin: *
content-length: 18190
X-Firefox-Spdy: h2
trc.taboola.com/1212352/trc/3/json?tim=1683062805704&data=%7B%22id%22%3A570%2C%22ii%22%3A%22%2Fland%2F189%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1683062805699%2C%22cv%22%3A%2220230430-1-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1683062805704%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 2.5 kB URL GET HTTP/2 trc.taboola.com/1212352/trc/3/json?tim=1683062805704&data=%7B%22id%22%3A570%2C%22ii%22%3A%22%2Fland%2F189%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1683062805699%2C%22cv%22%3A%2220230430-1-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1683062805704%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.taboola.com
FingerprintD4:63:48:60:AA:B7:C8:F2:90:9B:12:D2:03:99:56:96:37:38:86:CF
ValidityThu, 08 Dec 2022 00:00:00 GMT - Sun, 31 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (2786), with no line terminators
Hash 49d4007dbc644edcfd8a174e2ef6ef0b
03ffe259b63131d94e5190fce8dd1f246e9f3c23
156f4230154efeb9208e3d2083a8549913a208cf1cf071dcf09c7019779ef6c8
GET /1212352/trc/3/json?tim=1683062805704&data=%7B%22id%22%3A570%2C%22ii%22%3A%22%2Fland%2F189%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1683062805699%2C%22cv%22%3A%2220230430-1-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1683062805704%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D64517ff81fe5810001055857%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Tue, 02 May 2023 21:26:40 GMT
via: 1.1 varnish
x-served-by: cache-bma1670-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1683062800.350669,VS0,VE101
vary: Accept-Encoding
x-vcl-time-ms: 101
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 108 kB URL GET HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.facebook.com
Fingerprint88:81:81:32:20:A7:A6:69:02:67:8C:EE:13:B3:19:2D:0E:31:3C:B1
ValidityThu, 09 Feb 2023 00:00:00 GMT - Wed, 10 May 2023 23:59:59 GMT
File type ASCII text, with very long lines (64347)
Size 108 kB (107896 bytes)
Hash 53c40bf221f12e2e748f7690cd2e6498
6d8c290e28414d8b6e2d7ae17020bf60bf6fa72b
9f7b103418c76d3c630fa9ac6128249bebab1e97454948c2fcfc22fc88f4ea3a
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: JYoGm7gHpT6+Ezxa+uwudKsSxe/JPGOMZBwdzLtxiYSiWReNfdrbdlQBoEeAU1NOUksJ6+pxUL0+Ra+/Uo+ZVg==
content-length: 27428
x-fb-trip-id: 1679558926
date: Tue, 02 May 2023 21:26:39 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 18 kB IP
ASN #203220 Yahoo! UK Services Limited
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint6E:2F:30:B9:A3:FC:58:90:E8:A6:E6:0F:B5:08:0E:63:1D:59:94:F0
ValidityMon, 10 Apr 2023 00:00:00 GMT - Wed, 31 May 2023 23:59:59 GMT
File type ASCII text, with very long lines (17649), with no line terminators
Hash e896178ac557f4e393e0a05405c33633
5df2c56160b6ba806cf7d9bf209ed48f3c5ef4ad
72750dc5cdcaa538491728c6a58d6d1d97d28024f227ce7f13e63ddeba908226
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: NH/hZFut+6DNuXIPJDCehUSpfgXPlUuraVRJuvXP81B6DUTx1WhqR9tG6MCbQYB0hkAf+mrZSrEQhZsy1UOTnjrQhywhnVMs
x-amz-request-id: GDGVPCD62N4KHW6C
date: Tue, 02 May 2023 21:26:38 GMT
last-modified: Wed, 26 Apr 2023 11:08:30 GMT
x-amz-expiration: expiry-date="Fri, 31 May 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "e896178ac557f4e393e0a05405c33633-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: JGW8wXvjjj83MVu5c5k1Bd2u8_DD2rYy
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 2
content-encoding: gzip
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/critical/script.min.js?805604a8b498e8b94e2a
200 OK 72 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/critical/script.min.js?805604a8b498e8b94e2a
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mk-land/dist/critical/script.min.js?805604a8b498e8b94e2a HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 27 Apr 2023 10:49:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Apr 2023 13:29:19 GMT
etag: W/"97c6b3ccf474f728869c1848df06b116"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=604800
x-amz-version-id: ki8K586r6PHUwPtQQBoWVmJPZfVV9GII
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: plO6H5jrXOypv53Kh8Hz3rB-wOQlZEi0h1DsUmIWUVyUKgg5SrnDCA==
age: 470204
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT.otf
200 OK 91 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT.otf
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type OpenType font data\012- data
Hash 106ae5fa4d0e51fa73ed42c3beecda5e
0da40d6e9caa466739878577e2c00141491f4924
f4f918e40a541c456c98ebdb8ea468bf723f7b43ed9b4b22271bc4c9fe0b49e7
GET /mk-land/dist/fonts/MarkOT.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/ttf
date: Thu, 27 Apr 2023 11:00:09 GMT
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"106ae5fa4d0e51fa73ed42c3beecda5e"
cache-control: public, max-age=604800
x-amz-version-id: Eju.irxG68JYjYuEi7BGXEsqN0F4MTaA
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: t-AQu9n5FDQVtVQOdA1eA7DS0WeyfbvMwH7b2UYdrc9i0XowatX9JA==
age: 469590
X-Firefox-Spdy: h2
c.bing.com/c.gif?ctsa=mr&CtsSyncId=FFC80CC555B2419E8D6A3E85AEAF68BE&RedC=c.clarity.ms&MXFR=093D2209E4446189353B310CE0446F66
302 Found 42 B URL GET HTTP/2 c.bing.com/c.gif?ctsa=mr&CtsSyncId=FFC80CC555B2419E8D6A3E85AEAF68BE&RedC=c.clarity.ms&MXFR=093D2209E4446189353B310CE0446F66
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintC6:94:6C:D5:87:F6:E9:11:E4:40:13:7F:80:49:D3:4C:A0:04:89:C7
ValidityThu, 16 Feb 2023 03:47:45 GMT - Wed, 16 Aug 2023 03:47:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?ctsa=mr&CtsSyncId=FFC80CC555B2419E8D6A3E85AEAF68BE&RedC=c.clarity.ms&MXFR=093D2209E4446189353B310CE0446F66 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=FFC80CC555B2419E8D6A3E85AEAF68BE&MUID=3D96AE077E3C6C1F14A1BD027FC96D23
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: MUID=3D96AE077E3C6C1F14A1BD027FC96D23; domain=.bing.com; expires=Sun, 26-May-2024 21:26:41 GMT; path=/; SameSite=None; Secure; Priority=High;
MR=0; domain=c.bing.com; expires=Tue, 09-May-2023 21:26:41 GMT; path=/; SameSite=None; Secure;
SRM_B=3D96AE077E3C6C1F14A1BD027FC96D23; domain=c.bing.com; expires=Sun, 26-May-2024 21:26:41 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 044453DDBD144D5B8C15A44D6FED4E26 Ref B: OSL30EDGE0214 Ref C: 2023-05-02T21:26:41Z
date: Tue, 02 May 2023 21:26:41 GMT
content-length: 0
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
200 OK 38 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (37906), with no line terminators
Hash 8646e404ee04b4d33c2f86ec0baae905
5c3b66fd327df3fca5ce6c0c404ecbb6882efd85
1894260039ef6f1b060ae2774ce97c66796670e201bd409bac48631c0427fae1
GET /mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Thu, 27 Apr 2023 10:59:35 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Apr 2023 13:29:49 GMT
etag: W/"8646e404ee04b4d33c2f86ec0baae905"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=604800
x-amz-version-id: .guTxY.qoKft86KtZdPes63r8eo6oLUS
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F_jNpgQ5MeDQ4zv5-LyFsaMU_Axj9HwVXMxkQFXMY0Xe3PI945eAZQ==
age: 469624
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 13 kB URL GET HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerDigiCert Inc
Subjectsnap.licdn.com
FingerprintC5:08:87:7C:56:2D:12:22:84:85:35:3B:B2:1C:B5:4D:DA:F1:3A:64
ValidityWed, 01 Feb 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (13351)
Hash b846c9d158853dd4aa95d3d7407ed8bb
2cf0eb02a22e8bd80d19a50a84593420d777d5db
f56ccb2db87aacedd9415232e40f80bff9939703df2f9c3f9ec8a092e545349f
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=71239
date: Tue, 02 May 2023 21:26:39 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
200 OK 36 B URL GET HTTP/2 cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectlinkedin.oribi.io
FingerprintBE:46:90:54:17:C8:57:FD:82:7C:7D:E5:DF:7D:7E:01:F1:B8:4B:47
ValidityFri, 24 Feb 2023 00:00:00 GMT - Sun, 06 Aug 2023 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash f88459604b22a349c9291c7936892986
b71cbeba083ccf69827ce1038215c820830995f6
c2e42e0acc157987c88cf7c5a802ba8aaca4a94d72e38b43ae6b3fe7632cde22
GET /partner/3865705/domain/app2.mackeeperaff.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
date: Tue, 02 May 2023 20:59:03 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jQIlfSppKd0lXqqyP7zQHwlpYDU14v_lraJ4TabEuJ-KjNW2-psWXQ==
age: 1657
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/components/logo/mk-logo-ua.svg
200 OK 4.3 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/components/logo/mk-logo-ua.svg
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4422), with no line terminators
Hash 1745a1b5e2a23192aeb83428de49768c
72b82ba8ebe21c7dbd81e7fe262fd9157bfc0351
099e61c487d2bfb160c9fdb39a8f6267b5a7ec7143adfd1ef3d77b672ebbf714
GET /mk-land/dist/svg/components/logo/mk-logo-ua.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 27 Apr 2023 10:50:33 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Apr 2022 14:50:37 GMT
etag: W/"0443bcb5ae8253499f7df7f80c45fc8c"
cache-control: public, max-age=604800
x-amz-version-id: sx6d65Ik.60EPUJCncti20jd8v0DNMRK
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X84eqp5BdP61kvRJfHV53BamjpcUYZUMDMjG8s22uFCrCWu-XqaGjA==
age: 470166
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/189/icon__sprire_small--mk4.webp
200 OK 16 kB URL GET HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/189/icon__sprire_small--mk4.webp
IP
Requested by https://app2.mackeeperaff.com/land/189/?rtkcid=64517ff81fe5810001055857&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Certificate IssuerAmazon
Subjectstatic-cdn.mackeeper.com
FingerprintDA:40:3C:2C:66:78:C8:76:A4:E4:FD:18:69:9D:17:3A:51:AF:2B:E9
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 01 Oct 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0b884be13d0553f50656549be0f1a897
e61eb5287b5d0d5520ef29a33f17c3b609dd91f5
801795b8d61b71566232e70d0cee0c0324ff025db66afbc92fefe6ccf2058842
GET /mk-land/dist/images/landings/189/icon__sprire_small--mk4.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 16320
date: Thu, 27 Apr 2023 10:59:37 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 07 Feb 2023 13:46:54 GMT
etag: "0b884be13d0553f50656549be0f1a897"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=604800
x-amz-version-id: wCqpXJKBxR9ibO2gkIgHX6YezPpkypuJ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WhrO9HXlDkPXccuWISMFxE9GEuNrnjEj_bx7Jeuil3DYFUSFuVvtCQ==
age: 469622
X-Firefox-Spdy: h2
52.206.54.179
0.0.0.0
23.36.76.210
87.248.119.251
141.226.228.48
185.5.82.77
31.13.72.12
212.82.100.181
0.0.0.0