app2.mackeeperaff.com/land/189/?rtkcid=637c81636e86d400015ddc4d&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
301 Moved Permanently 134 B URL HTTP/1.1 app2.mackeeperaff.com/land/189/?rtkcid=637c81636e86d400015ddc4d&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
Analyzer Verdict Alert quad9 Sinkholed
GET /land/189/?rtkcid=637c81636e86d400015ddc4d&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid= HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Tue, 22 Nov 2022 07:59:41 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://app2.mackeeperaff.com:443/land/189/?rtkcid=637c81636e86d400015ddc4d&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb72f04bd7a4410640c0543bb4bd402
7c63b7e220b337b6a4f39864e11d6aa9e26c38ac
b7f7a4d355ed3b847a5e28f16030d5cbc715d47326aea20f292cd76dcaf59794
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7F7A4D355ED3B847A5E28F16030D5CBC715D47326AEA20F292CD76DCAF59794"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8569
Expires: Tue, 22 Nov 2022 10:22:30 GMT
Date: Tue, 22 Nov 2022 07:59:41 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4843de3bf95411e6aa89834def44bb86
1f1882351ac63fba73a22014382f69df5e02ec96
1e6ed1df02f8fa6c89ddca66f7c9981f8a06127d7ec90b503703137e823bb4b7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5200
Cache-Control: max-age=100696
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:41 GMT
Etag: "637b5375-1d7"
Expires: Wed, 23 Nov 2022 11:57:57 GMT
Last-Modified: Mon, 21 Nov 2022 10:31:17 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11514
Expires: Tue, 22 Nov 2022 11:11:35 GMT
Date: Tue, 22 Nov 2022 07:59:41 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 22 Nov 2022 07:09:21 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3020
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qxwe0x07M+oytSfAUIAmvu+P0cUYrsCpdtlnIBWvyXZ3sYNJ1GDsQjwz6wsdtfSesAKOT2YRtrU=
x-amz-request-id: G4K9XQASWD84FZDZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 22 Nov 2022 07:39:28 GMT
age: 1213
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:59:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f4a57a8a39aca95d99a095749f7e5416
584fbd9440c4b2d7d13115f160c3e68b9424c212
cd91c5a1b25095b145d7cfb30ce43e12cf977c89b967098e3dde773897db1ec5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=128204
Date: Tue, 22 Nov 2022 07:59:41 GMT
Etag: "637bd339-1d7"
Expires: Wed, 23 Nov 2022 19:36:25 GMT
Last-Modified: Mon, 21 Nov 2022 19:36:25 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zNDSJCdkxkzBdZghnH4q5Oi5_VEC0LMuBwK6Y5pbbGl6_RgK-i6yjQ==
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 22 Nov 2022 07:08:53 GMT
cache-control: public,max-age=3600
age: 3048
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2db0ebb9efcf3be3c92f23b61de5c065
dd830565723f18a7944c26d24b0fb142d06a71a5
8615316184c4d1d64db923a5364363bbb3d25e146a042c5fbd5bf0cfcec8effb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4500
Cache-Control: max-age=94932
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:42 GMT
Etag: "637b3fae-1d7"
Expires: Wed, 23 Nov 2022 10:21:54 GMT
Last-Modified: Mon, 21 Nov 2022 09:06:54 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6UxKq96sJwxT2LkYTDb3wA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /TMeqnhGlOpa/keHKH8S8hMcPIE=
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
200 OK 6.1 kB URL HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Tue, 22 Nov 2022 01:28:24 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: t97JdcB9knvoloH7DfMwoC99w-nLt7XPkO8csV3qh8I3EO6A3dRbhA==
age: 23480
X-Firefox-Spdy: h2
browser.sentry-cdn.com/5.5.0/bundle.min.js
200 OK 52 kB URL HTTP/2 browser.sentry-cdn.com/5.5.0/bundle.min.js
IP
File type ASCII text, with very long lines (51441)
Hash b1dcc6195d84cf50c3e882d3d515f848
06562c193663a31a3cabeaa18cffeb882084fcb6
8c04755395b8f232c57d062a7669c3c414658299d29c6b6f83f1f30185d94ecb
GET /5.5.0/bundle.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 11 Nov 2022 05:27:37 GMT
last-modified: Fri, 05 Jul 2019 11:17:04 GMT
etag: W/"39339cf627bc67e34d4c623bea4c0b4a"
content-type: application/javascript; charset=utf-8
x-guploader-response-body-transformations: gunzipped
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 22 Nov 2022 07:59:43 GMT
age: 1725823
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 51570
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6f5c218263ab34f8b33c53e7d87a46d4
3313c9bf681895fc8369184be17b72bf25c2066d
78d4a9b6945dc16e66e5e9c39283e1fc507eab4d8dd284661193745fb9ab122f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=91689
Date: Tue, 22 Nov 2022 07:59:43 GMT
Etag: "637b3e5e-1d7"
Expires: Wed, 23 Nov 2022 09:27:52 GMT
Last-Modified: Mon, 21 Nov 2022 09:01:18 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: AusF6__nWd2sx88qL1YxwWQx5HWEeC4Xd0yvyR0YOMrx-WYWxx1WQA==
Age: 1594
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6f5c218263ab34f8b33c53e7d87a46d4
3313c9bf681895fc8369184be17b72bf25c2066d
78d4a9b6945dc16e66e5e9c39283e1fc507eab4d8dd284661193745fb9ab122f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=90526
Date: Tue, 22 Nov 2022 07:59:43 GMT
Etag: "637b3e5e-1d7"
Expires: Wed, 23 Nov 2022 09:08:29 GMT
Last-Modified: Mon, 21 Nov 2022 09:01:18 GMT
Server: ECS (dcb/7F81)
X-Cache: Miss from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1qHOwPFLJ9kyq4ZO2ecEzs5pqFkRVz_2kZx8K8-w6tw-2_2nzQypJw==
Age: 431
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6f5c218263ab34f8b33c53e7d87a46d4
3313c9bf681895fc8369184be17b72bf25c2066d
78d4a9b6945dc16e66e5e9c39283e1fc507eab4d8dd284661193745fb9ab122f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=91380
Date: Tue, 22 Nov 2022 07:59:43 GMT
Etag: "637b3e5e-1d7"
Expires: Wed, 23 Nov 2022 09:22:43 GMT
Last-Modified: Mon, 21 Nov 2022 09:01:18 GMT
Server: ECS (dcb/7F5C)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lv27UO9WZM4e-ptIZnoe5cVwcpZUrMAjBfbD7JSFdYqjHlJhtEG6yw==
Age: 1285
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb526d16fc4a304286cf261dc5d8abea
0aed946d28abc21cb11657e6f864b561a0c68fba
551520b0344d58c1b4ddc9dfb452da2acf43080871a7037f4530eec48fb86362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb526d16fc4a304286cf261dc5d8abea
0aed946d28abc21cb11657e6f864b561a0c68fba
551520b0344d58c1b4ddc9dfb452da2acf43080871a7037f4530eec48fb86362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb526d16fc4a304286cf261dc5d8abea
0aed946d28abc21cb11657e6f864b561a0c68fba
551520b0344d58c1b4ddc9dfb452da2acf43080871a7037f4530eec48fb86362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 585eab785e44953b9e6d7c389024ff3e
57582825e9a285177f38cd2fa868ad3a8eab85d1
f1c62af1e27c8510576adcb62b28be35f290d2ee71e873f7000c194980522e80
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-cdn.mackeeper.com/mk-land/dist/images/landings/189/macbook.webp
200 OK 128 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/189/macbook.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 128 kB (128184 bytes)
Hash 81201f3e2a6afd62000e3800b33c1fb8
ce32caf4ab517b121758188972d4954f73161c7c
ebfa9db76ae3bf2b287574ca08c1307b0e2041ebcd503eb070b125524af11bbc
GET /mk-land/dist/images/landings/189/macbook.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 128184
date: Thu, 17 Nov 2022 07:10:02 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 01 Nov 2022 14:19:39 GMT
etag: "81201f3e2a6afd62000e3800b33c1fb8"
cache-control: public, max-age=604800
x-amz-version-id: hx_BbUaaVmPN5X3z_j40GLkYCX1Xbt4P
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zdmMFe_eArOtB9OrLjCU7qqbxLKSrZi6lDDX53U-rJJqSNig-1IAxQ==
age: 434982
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
200 OK 8.0 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
IP
Hash 2edcbb0cff5732718f12c6f000806943
d1aceba46bc60bbaf54d737bbbd2f43b64ffc749
03c9743cba987ef1a50d463cc7d8324a7111a169546420ffc778e0ee7915a1a9
GET /mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Aug 2022 13:14:46 GMT
x-amz-version-id: UJoYhxs2wCOvJHyiwdLuO5O6nF0exQKY
server: AmazonS3
content-encoding: gzip
date: Sun, 20 Nov 2022 06:12:34 GMT
cache-control: public, max-age=604800
etag: W/"93f0838839c973540b3fa83970fd4f47"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k_LqesWvudZRg7tNqd-6YZRZk7y9YYDlzg1sY5kXwruJGnGbF3B-Zw==
age: 179230
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/components/logo/mk-logo-ua.svg
200 OK 14 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/components/logo/mk-logo-ua.svg
IP
Hash 334a73f475720dc51a7ad09abf4cbb0d
4dc7f1b5c6d4994a8f291e8b1074f9160d77e78d
3d4ecbfa6a7358b203932450b85487712efeda5b95f27db7b5e6c20a0f3de3ec
GET /mk-land/dist/svg/components/logo/mk-logo-ua.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Apr 2022 14:50:37 GMT
x-amz-version-id: sx6d65Ik.60EPUJCncti20jd8v0DNMRK
server: AmazonS3
content-encoding: gzip
date: Tue, 22 Nov 2022 07:31:01 GMT
cache-control: public, max-age=604800
etag: W/"0443bcb5ae8253499f7df7f80c45fc8c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8VPhZwyRocGQ0ORbwcuUj-B92iTjZQU8VbvY8keUtyWWbqi2Y_tXNg==
age: 89377
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/189/icon__sprire_small--mk4.webp
200 OK 16 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/189/icon__sprire_small--mk4.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0b884be13d0553f50656549be0f1a897
e61eb5287b5d0d5520ef29a33f17c3b609dd91f5
801795b8d61b71566232e70d0cee0c0324ff025db66afbc92fefe6ccf2058842
GET /mk-land/dist/images/landings/189/icon__sprire_small--mk4.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 16320
date: Thu, 17 Nov 2022 07:10:06 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 30 Mar 2022 09:16:56 GMT
etag: "0b884be13d0553f50656549be0f1a897"
cache-control: public, max-age=604800
x-amz-version-id: iN_v_moRcMOgLSmQ4ImRvYNllA5SgFvF
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Z8L0bjuENrtF5II5gKlBXnPcqMBPISj-tDA0BAICoUgLxJNFZoIVUw==
age: 434978
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400
200 OK 101 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400
IP
Size 101 kB (100825 bytes)
Hash 89fc41f87031bb8ff38bcbcfecc0261d
9539a5472408d969aa19ef5c42102a43d8c64100
36d67a1a3a97323a770db2d20321d8f3f12869289a64dbc5308c8dce7ebb2f06
GET /css?family=Roboto:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 22 Nov 2022 07:59:43 GMT
date: Tue, 22 Nov 2022 07:59:43 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/189/map.webp
200 OK 3.6 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/189/map.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7ca19b30945465fbde145f3fe1da456f
17497c7ef3d8f621bcc9f7e48c3ac8f518e68b81
d9599529d8221140e8fcb8eba22ad408b12bcd05ef6605777c35058cb3a384cb
GET /mk-land/dist/images/landings/189/map.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 3608
x-amz-replication-status: COMPLETED
last-modified: Wed, 30 Mar 2022 09:16:55 GMT
x-amz-version-id: Iay60t54rw79SZWup66tZBeR0r84lhdh
accept-ranges: bytes
server: AmazonS3
date: Sun, 20 Nov 2022 06:12:38 GMT
cache-control: public, max-age=604800
etag: "7ca19b30945465fbde145f3fe1da456f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sByzx4x3sp3JrCDCiYDr3TztYh4aRJUfEwfsaMrTc5MfO_cBgD69-g==
age: 179226
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/189/tools.webp
200 OK 18 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/189/tools.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 40d3cc9a4df10afd29214d1112452634
eafa7529926aeed7c50dc38a42b1451ed68a75cb
dab6e51f288ee51c45ccdf41043a7dcfe80b929cbca244c5efd9bab2f69fab1e
GET /mk-land/dist/images/landings/189/tools.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 18068
date: Thu, 17 Nov 2022 07:10:06 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 30 Mar 2022 09:17:00 GMT
etag: "40d3cc9a4df10afd29214d1112452634"
cache-control: public, max-age=604800
x-amz-version-id: 1bi_Y_XCTKpnupmEavkD_lejn.sfGW.X
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4tLglQVxc_xpgEFbCxauvCnF85T-g_s0F-7wm-cVObcJLUXhVeTEDQ==
age: 434978
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed3ae8e878b9c8c9c5fc3ab22d8547d6
e4d08dc74fa84a3bcc9d442e225e8f7a6c124822
e135b6fb23500cb2edbf836719ed450cdb6b1e86b7c8491289cb4e1ccbd9ce84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Bold.otf
200 OK 58 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Bold.otf
IP
File type OpenType font data\012- data
Hash e5ac8ec6bdb2b2c951f0317045232957
35d14ebb45c2a4951d5053723fdfae11c492f0d9
907bf6745fbc846805fc9834fc283f6845d2f06fa03acbddc7165519ce809ce2
GET /mk-land/dist/fonts/MarkOT-Bold.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
x-amz-version-id: _SyAJ1U0XNp0EgWFZoSm7jR1ZmFIsGhh
server: AmazonS3
content-encoding: gzip
date: Tue, 22 Nov 2022 00:49:29 GMT
cache-control: public, max-age=604800
etag: W/"336e38c18c3ac1666fa496c919b08eca"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TewoxrLLy5IB6Na_rb9UtKDXehVszYVVOBn0T5jBxRrgCRCx9p57DQ==
age: 25815
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 585eab785e44953b9e6d7c389024ff3e
57582825e9a285177f38cd2fa868ad3a8eab85d1
f1c62af1e27c8510576adcb62b28be35f290d2ee71e873f7000c194980522e80
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8820
Expires: Tue, 22 Nov 2022 10:26:43 GMT
Date: Tue, 22 Nov 2022 07:59:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8820
Expires: Tue, 22 Nov 2022 10:26:43 GMT
Date: Tue, 22 Nov 2022 07:59:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8820
Expires: Tue, 22 Nov 2022 10:26:43 GMT
Date: Tue, 22 Nov 2022 07:59:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8820
Expires: Tue, 22 Nov 2022 10:26:43 GMT
Date: Tue, 22 Nov 2022 07:59:43 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed3ae8e878b9c8c9c5fc3ab22d8547d6
e4d08dc74fa84a3bcc9d442e225e8f7a6c124822
e135b6fb23500cb2edbf836719ed450cdb6b1e86b7c8491289cb4e1ccbd9ce84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:26:57 GMT
expires: Thu, 16 Nov 2023 19:26:57 GMT
cache-control: public, max-age=31536000
age: 477166
last-modified: Wed, 27 Apr 2022 16:04:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05ba1792-f86a-406e-8e1c-f133f0fb8d73.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05ba1792-f86a-406e-8e1c-f133f0fb8d73.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 253593d1b3f90aa54d0748688fbb09ac
470c54ca28e1e5c56828c8c7f9849374061f501e
d8d331519f526b1117e4f67b0fb5fb46f400a63d1cb5757a3f22201ea70301ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05ba1792-f86a-406e-8e1c-f133f0fb8d73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9598
x-amzn-requestid: a713ce94-2441-4288-b6d8-cd6b638274b9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IqVGgJoAMFz5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee41-5ed8e45c664203e137f8c92b;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nFfq7s1220lni0ZvVlfHyEHo9IzXlySilW-uCgLVC1nnjo4jOaHDPw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:34:52 GMT
age: 33891
etag: "470c54ca28e1e5c56828c8c7f9849374061f501e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Light.otf
200 OK 59 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Light.otf
IP
Hash 102e3bb5a279bca664c668eb517bf254
9968f4d45d390ef50493cb16067ac12283ff45c5
6c343bccda911ccd2a8eda8035577ee882f7a205335da1d35bb75791bc6226ff
GET /mk-land/dist/fonts/MarkOT-Light.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
x-amz-version-id: 0k6awkdioEQDqMMUsMLLZL0d1S0LNdte
server: AmazonS3
content-encoding: gzip
date: Thu, 17 Nov 2022 21:26:06 GMT
cache-control: public, max-age=604800
etag: W/"48dd0f49a4207634e9062def9074a038"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: C9NoVTidspQsbRoEWQThZIbeNXL6c4gIyA7hDyn_NvoGLgEFJBf0Sg==
age: 383618
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js
200 OK 16 kB URL HTTP/2 widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (50697)
Hash 7634c5de39bff7b73e2df27262caface
73bb5656a5b7eee0c6db68d3f708046f390ccb53
bc5f8d22d9a155ee87fe85ef326a9cc5c059a69aa5a6f7389882a88c057acc09
GET /trustboxes/53aa8807dec7e10d38f59f32/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 15505
last-modified: Tue, 04 Oct 2022 10:33:42 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Tue, 22 Nov 2022 05:09:54 GMT
cache-control: max-age=86400
etag: "7634c5de39bff7b73e2df27262caface"
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CIc3uLkAo42egwbRaabNUazfm60F0x-1I0RWNQYCJGc5qv_emYF4fA==
age: 10190
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd770f2a4-df6c-467f-9831-3297f524941e.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd770f2a4-df6c-467f-9831-3297f524941e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 296559cb68d1f42b8b9e5d5e5a8167bc
a4b04d0296539fa5063b1f464d2c461be37491a5
eeab74cba5a5a12453a831f9d7e002999c6752576f8a2f31a7040158a7f57bee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd770f2a4-df6c-467f-9831-3297f524941e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11343
x-amzn-requestid: 5af18795-3668-4174-a2cf-47a020d665f2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6pEjEIAMF3pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-26f7d1cd340cb8ab3ab6c81b;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: H6tjj0BtgHgcETfLkgynpkUp4BHwPlJq91XFrzdImb-nOJx1hGPQOA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:34:53 GMT
age: 33890
etag: "a4b04d0296539fa5063b1f464d2c461be37491a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Medium.otf
200 OK 64 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Medium.otf
IP
Hash df34c8bcb6d556bef9c932135cdeb508
f22cc9ec8ab7d30a84910142012a22b4f3b8357a
b5f94046753e816da95d6f4d2dc5d14b9d72081c2ac8781a4bb47f4be6b8bfaf
GET /mk-land/dist/fonts/MarkOT-Medium.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
x-amz-version-id: adnRDSe0awZldw3c8I6M4tTQa_wDyvz_
server: AmazonS3
content-encoding: gzip
date: Sun, 20 Nov 2022 01:55:28 GMT
cache-control: public, max-age=604800
etag: W/"44a8a536b53be74bb2ebfc4fa3403364"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4znJQZmK4q1DY3VcHsbsOZMN9MVzyNcRGCpBFRNL5kG3M6SB1dmpWA==
age: 194656
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13052, version 1.0\012- data
Hash 7cf79fbd1df848510d7352274efc2401
5540b5a26cc7dfe25294c4eabe011e2c6cd60143
bc9a16cd945457ad9463cdaed95129b01c589466978dfee3d019d9c604b2171a
GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:26:57 GMT
expires: Thu, 16 Nov 2023 19:26:57 GMT
cache-control: public, max-age=31536000
age: 477166
last-modified: Wed, 27 Apr 2022 16:09:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F559c6770-d162-460d-b372-5ff036a364d6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F559c6770-d162-460d-b372-5ff036a364d6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9defa28d124bae7e5ef29a1fb165ee02
2afe813f0fefae511064297ccff9a6de548104e8
8cfdd12386dcc87cfd874ed0c2d42cd33ae2a05cb35127f1a94e163d17bd5b31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F559c6770-d162-460d-b372-5ff036a364d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11576
x-amzn-requestid: 9dd2cb2e-de79-4937-b525-05be9d57c03b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrdFuxoAMFa9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee49-5437ea0f1568967278fe96ad;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:53 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1daKtJmaZARpzMRiPQaWttMITAndRqZt0VwhiBzbxzxBvw4a28a2sg==
via: 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:59:23 GMT
age: 36020
etag: "2afe813f0fefae511064297ccff9a6de548104e8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dafd9e17dc0023e71ae513c6025e4b80
12e2654db1f384bb04f5c5042848b25dda86b710
e9c885a102dc811648cec4ac292db63564e81a48d7a3611cb31fba73b37286dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4639
x-amzn-requestid: 8a93fa29-158b-4402-aac4-85ad29a74ae1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6oELooAMFWFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-5a85509b26d9aeef7ae59b4c;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bmrDryUp_4bvIikGkppa36e9isEfvK0gjunV6xmU5ApJtxlLR_GYkA==
via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:05:18 GMT
age: 35665
etag: "12e2654db1f384bb04f5c5042848b25dda86b710"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 983 B IP
File type gzip compressed data, max compression\012- data
Hash ce55cafd06c4928b66ed36d128e02b71
fd8f94fb9a7e7486eee81873d389c1a12c5ce6c3
06e441fa9c1272c45033ea05dbd6ef4e5f376a66192786f18260e246d719ec2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-cdn.mackeeper.com/mk-land/dist/images/landings/189/star.webp
200 OK 276 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/189/star.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2ee49dcad0d956cb8de84883fca4be27
df332994a9b9682c35a8446109b1bf89860d4e61
61edec41e4a76e6a7261e16281a3e0d1f54fef8ee1de89dd9988294cc0729cf5
GET /mk-land/dist/images/landings/189/star.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/189/style.webp.min.css?8d189a5fc85a9fc9f8e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 276
date: Wed, 16 Nov 2022 12:08:18 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 30 Mar 2022 09:16:56 GMT
etag: "2ee49dcad0d956cb8de84883fca4be27"
cache-control: public, max-age=604800
x-amz-version-id: .JxM4S4q1B4W9xCj5qPlx_SGVYwXBTbA
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: R_pifC0Y5MIWlRGnD7PC6JH9hqjyC-Mln52ziaMt4HooBIhVJk9zDQ==
age: 503486
X-Firefox-Spdy: h2
widget.trustpilot.com/trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=4dbb14ee00006400050fa293&locale=en-US
200 OK 390 B URL HTTP/2 widget.trustpilot.com/trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=4dbb14ee00006400050fa293&locale=en-US
IP
File type JSON data\012- , ASCII text, with very long lines (881), with no line terminators
Hash 8afdfb6a08e70e5bc1fed4d52db5db0d
e837c3953f2c5690bcbf8660dfdb42def6e37566
45bcf8afdd45668e0211172ce973bf8b6bbf1606d5320c7dc5ef928a6e2958fe
GET /trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=4dbb14ee00006400050fa293&locale=en-US HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?templateId=53aa8807dec7e10d38f59f32&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 390
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
date: Tue, 22 Nov 2022 07:59:43 GMT
cache-control: public,max-age=1800
etag: "1746e3cfce555328a54224efcea5c90a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AN0CIV3T_QDRnacyfnO02XjMr9-IiUtPAAnHfnmVokwc1i6clv3Q4A==
age: 779
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT.otf
200 OK 55 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT.otf
IP
File type OpenType font data\012- data
Hash d810e71512cd266606518e4024e04d25
72a9dfcc7423a19739f610c5045d0f18e03508ac
72c0c21b6921fc08e8e40c8263a4c737b6c169fb009cc47a583708ba199fa55c
GET /mk-land/dist/fonts/MarkOT.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
x-amz-version-id: Eju.irxG68JYjYuEi7BGXEsqN0F4MTaA
server: AmazonS3
content-encoding: gzip
date: Sun, 20 Nov 2022 04:28:50 GMT
cache-control: public, max-age=604800
etag: W/"106ae5fa4d0e51fa73ed42c3beecda5e"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HEm3U3M_5TIpMilyPqK5fxIoLbz9Fw8MMhN-_WtH9nQHFg74C1W2Ew==
age: 185453
X-Firefox-Spdy: h2
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 8d986a0d41e35f40c5a332e7728ca145
57b1ac68498fefdaceb918340e584ac184e637af
bfe4091d4601cd35023fa948f7c7b92edf32882aeef1d397fcdbe6dc0c2f3bd3
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=245
Date: Tue, 22 Nov 2022 07:59:43 GMT
Connection: keep-alive
X-N: S
tr-rc.lfeeder.com/?sid=ywVkO4XWPeW7Z6Bj&data=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
200 OK 43 B URL HTTP/2 tr-rc.lfeeder.com/?sid=ywVkO4XWPeW7Z6Bj&data=eyJnYVRyYWNraW5nSWRzIjpbXSwiZ2FNZWFzdXJlbWVudElkcyI6WyJHLUdZVFhEODlOMVciXSwiZ2FDbGllbnRJZHMiOlsiMTU1MjE0ODU5MS4xNjY5MTAzOTg0Il0sImNvbnRleHQiOnsibGlicmFyeSI6eyJuYW1lIjoibGZ0cmFja2VyIiwidmVyc2lvbiI6IjIuNTguMCJ9LCJwYWdlVXJsIjoiaHR0cHM6Ly9hcHAyLm1hY2tlZXBlcmFmZi5jb20vbGFuZC8xODkvP3J0a2NpZD02MzdjODE2MzZlODZkNDAwMDE1ZGRjNGQmcnRrY21waWQ9NjI3ZDMzZjYzNTk4MWEwMDAxZDRkYjcwJnRpZD1BZmZpbGlhdGUlMjAtJTIwSW5jcmVhc2VkJTIwSHlicmlkJTIwKDE4OSklMjAtJTIwU2hsb21pJnV0bV9zb3VyY2U9JnV0bV9tZWRpdW09JnB1YmlkPSIsInBhZ2VUaXRsZSI6Ik1hY0tlZXBlciIsInJlZmVycmVyIjoiIn0sImV2ZW50IjoidHJhY2tpbmctZXZlbnQiLCJjbGllbnRFdmVudElkIjoiMzQ0NjQ3OTIyOGFiODk2OCIsInNjcmlwdElkIjoieXdWa080WFdQZVc3WjZCaiIsImNvb2tpZXNFbmFibGVkIjp0cnVlLCJjb25zZW50TGV2ZWwiOiJub25lIiwiYW5vbnltaXplSXAiOmZhbHNlLCJsZkNsaWVudElkIjoiTEYxLjEuMTJiOGMyYWY3MDU1MGYzZi4xNjY5MTAzOTgzODIyIiwiZm9yZWlnbkNvb2tpZXMiOltdLCJwcm9wZXJ0aWVzIjp7fSwiYXV0b1RyYWNraW5nRW5hYmxlZCI6dHJ1ZSwiYXV0b1RyYWNraW5nTW9kZSI6Im9uX3NjcmlwdF9sb2FkIn0=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /?sid=ywVkO4XWPeW7Z6Bj&data=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 HTTP/1.1
Host: tr-rc.lfeeder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
server: CloudFront
date: Tue, 22 Nov 2022 07:59:44 GMT
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k1PFIpCz470pPLcjtY0QrQ4EThhyUE9k0sBykzJlQ-sZ4WqdiXYB8g==
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1669103983779&aid=a-015g&se=e30&duid=f810f9c9df2c--01gjf5k71kmdx9xnww1trhq3dg&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-
302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1669103983779&aid=a-015g&se=e30&duid=f810f9c9df2c--01gjf5k71kmdx9xnww1trhq3dg&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1669103983779&aid=a-015g&se=e30&duid=f810f9c9df2c--01gjf5k71kmdx9xnww1trhq3dg&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU- HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 22 Nov 2022 07:59:44 GMT
content-length: 0
trace-id: 54a93bedc7df2865
vary: Origin
location: /j?dtstmp=1669103983779&aid=a-015g&se=e30&duid=f810f9c9df2c--01gjf5k71kmdx9xnww1trhq3dg&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28189%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true
set-cookie: lidid=5ff5c406-627c-455c-ac21-82c2f58deaab; Max-Age=63072000; Expires=Thu, 21 Nov 2024 07:59:44 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1669103983779&aid=a-015g&se=e30&duid=f810f9c9df2c--01gjf5k71kmdx9xnww1trhq3dg&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28189%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true
200 OK 13 B URL HTTP/2 rp.liadm.com/j?dtstmp=1669103983779&aid=a-015g&se=e30&duid=f810f9c9df2c--01gjf5k71kmdx9xnww1trhq3dg&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28189%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?dtstmp=1669103983779&aid=a-015g&se=e30&duid=f810f9c9df2c--01gjf5k71kmdx9xnww1trhq3dg&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28189%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:59:44 GMT
content-type: application/json
content-length: 13
trace-id: b341b4f8fd0d2249
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: 84b1291d-b436-4b5f-add5-cd9cce4d9176
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-GYTXD89N1W>m=2oeb90&_p=1783400616&_gaz=1&cid=1552148591.1669103984&ul=en-us&sr=1280x1024&_s=1&sid=1669103983&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-GYTXD89N1W>m=2oeb90&_p=1783400616&_gaz=1&cid=1552148591.1669103984&ul=en-us&sr=1280x1024&_s=1&sid=1669103983&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GYTXD89N1W>m=2oeb90&_p=1783400616&_gaz=1&cid=1552148591.1669103984&ul=en-us&sr=1280x1024&_s=1&sid=1669103983&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://app2.mackeeperaff.com
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 461760f30678f8aa3ad801eb88dc59d9
7b3c33ec99c429ad19918895014e309ca947f31a
fe8c62f7c90fa17a3d286b4abc0c8d7aa338d26aa4724d0d5dbaaab7b889b382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-cdn.mackeeper.com/mk-land/dist/images/favicon_ua.png
200 OK 407 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/favicon_ua.png
IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 471c1c90d41a571f14162d7a8a9c8b9c
b08dfa2783c706945451a8f4890bdb9243936e78
eb625a455a490292aa2a7101dd7b3235bc4c92df0f08349c6663df51b7b66c27
GET /mk-land/dist/images/favicon_ua.png HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 407
date: Mon, 21 Nov 2022 05:41:14 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 04 Apr 2022 09:52:27 GMT
etag: "471c1c90d41a571f14162d7a8a9c8b9c"
cache-control: public, max-age=604800
x-amz-version-id: fOjB1uVWJszrafJRMb0A4UZGtOA62i.I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DSwsK2Od5oul2me0s7MvqJKJQZpj3eNPzzxcpoMU7OEDFzc3bToUhw==
age: 94711
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-GYTXD89N1W&cid=1552148591.1669103984>m=2oeb90&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-GYTXD89N1W&cid=1552148591.1669103984>m=2oeb90&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GYTXD89N1W&cid=1552148591.1669103984>m=2oeb90&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://app2.mackeeperaff.com
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.6 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (12961)
Hash c1a25b303b61b25e995516f5559bcdea
3c16a6fa3a2a6dc59d57a9ea1588c4f259884688
2063d2d1415ce9437e9331cb9a798714a5b2e106a65d6dc0ef0d426a5a4c30f2
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 17 Nov 2022 18:52:45 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=82645
date: Tue, 22 Nov 2022 07:59:44 GMT
content-length: 4581
x-cdn: AKAM
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1669103983574&cv=11&fst=1669103983574&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=1735227626.1669103984&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1669103983574&cv=11&fst=1669103983574&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=1735227626.1669103984&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1010020041/?random=1669103983574&cv=11&fst=1669103983574&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=1735227626.1669103984&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 22-Nov-2022 08:14:44 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fab2cb3bd48a955d89176110d75459e4
8e642591b32f0095b8302d23b2aa3d4849352c56
71e3ae0dd72335874bd1e42e216d72a6185fb21786e55efbf3012ee0094692a0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 72d50acad831beb6384250b4be217004
4c63b5d7120df90dce65d1d9a449e0779916cd86
948ea04f802c71a04d3a7f3e5a056b195b99d7e4b346b1b2e8afb53fd537b642
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6370
Cache-Control: max-age=150102
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:44 GMT
Etag: "637c0fe4-1d7"
Expires: Thu, 24 Nov 2022 01:41:26 GMT
Last-Modified: Mon, 21 Nov 2022 23:55:16 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/957119846/?random=1669103983570&cv=11&fst=1669103983570&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=1735227626.1669103984&rfmt=3&fmt=4
200 OK 984 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/957119846/?random=1669103983570&cv=11&fst=1669103983570&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=1735227626.1669103984&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2179), with no line terminators
Hash d5039997f7723fd22b50ef8ca219e21d
6f2d44556d5bcc3ac0066146828bdfcc544601d8
7b40a23820ca3df75a93534645ce98463d3ee7515ac0864159400382b0f7e8f3
GET /pagead/viewthroughconversion/957119846/?random=1669103983570&cv=11&fst=1669103983570&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=1735227626.1669103984&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 984
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 22-Nov-2022 08:14:44 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 5.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (16620), with no line terminators
Hash a73a09a868a98d7505575c520aaf6616
ed4e4c3fe9ad7ed18564e5f9aed6a9a68b522c7f
8b22d2e0e3e79c7ea27bf76720b302fd18ba1240fbf8dd99e54ced655d17c8e4
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "c83bb35b39c166b49387a9cb3633d4be:1668418404.864545"
Last-Modified: Mon, 14 Nov 2022 09:17:09 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Tue, 22 Nov 2022 08:19:44 GMT
Date: Tue, 22 Nov 2022 07:59:44 GMT
Content-Length: 5276
Connection: keep-alive
s.yimg.com/wi/ytc.js
200 OK 5.9 kB IP
File type ASCII text, with very long lines (16553), with no line terminators
Hash 2f6a1b8a4843f74a5ba54c055fcb3850
919a5f9166f3f9c73803cebd312ad016570a30d8
1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ChXhlHXxNazYH75ownaCSiqSsiKCO/LChbHPOLsNjBS/ikrKxxFNiC6KakQBSiYQYzJzH+96U6E=
x-amz-request-id: Z6RFZEY9YRKMJ9KZ
date: Tue, 22 Nov 2022 07:51:18 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 508
content-length: 5929
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
t.adcell.com/js/trad.js
200 OK 39 kB IP
File type Unicode text, UTF-8 text, with very long lines (33765), with LF, NEL line terminators
Hash 19abcb86ab5f193c97ed3dce4cc0a0a0
e7ea91933ba5b0acc790c6a0ed73e0d052f1dbbc
807862fd1e6b1e7f7d8df73b500b2c4c211aeedf5621fbcf68688292f4b083ec
GET /js/trad.js HTTP/1.1
Host: t.adcell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: myracloud
date: Tue, 22 Nov 2022 07:59:43 GMT
content-type: text/javascript
strict-transport-security: max-age=15768000
content-encoding: gzip
vary: accept-encoding
expires: Tue, 22 Nov 2022 08:04:10 GMT
cache-control: max-age=900
etag: "myra-26fc7cb8"
x-cdn: 1
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 461760f30678f8aa3ad801eb88dc59d9
7b3c33ec99c429ad19918895014e309ca947f31a
fe8c62f7c90fa17a3d286b4abc0c8d7aa338d26aa4724d0d5dbaaab7b889b382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1669103983568&cv=11&fst=1669103983568&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=1735227626.1669103984&rfmt=3&fmt=4
200 OK 982 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1669103983568&cv=11&fst=1669103983568&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=1735227626.1669103984&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2181), with no line terminators
Hash 36248a3dafde6621076b0ffd1c579daf
11656622792d2afae32e7c883b1caa6256be0046
f54aaf47a62cf5f81f0e3f529630378411ad66a418adb75a4c9641ac0def45ca
GET /pagead/viewthroughconversion/1010020041/?random=1669103983568&cv=11&fst=1669103983568&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=1735227626.1669103984&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 982
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 22-Nov-2022 08:14:44 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/gtm/optimize.js?id=OPT-TVNW4WH
200 OK 44 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=OPT-TVNW4WH
IP
File type ASCII text, with very long lines (1921)
Hash 26a56d34967429ddb959f0fd3ac9c513
b0206dc262fabb7fd46966dfc4e5a9706bdec7d3
d15c0dffd51bfe53bd0c3f0efd885af721b0f9d380118b3244d11f5a360ea802
GET /gtm/optimize.js?id=OPT-TVNW4WH HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 22 Nov 2022 07:59:44 GMT
expires: Tue, 22 Nov 2022 07:59:44 GMT
cache-control: private, max-age=900
last-modified: Tue, 22 Nov 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43985
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/854379023/?random=1669103983561&cv=11&fst=1669103983561&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=1735227626.1669103984&rfmt=3&fmt=4
200 OK 981 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/854379023/?random=1669103983561&cv=11&fst=1669103983561&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=1735227626.1669103984&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2179), with no line terminators
Hash f8964c02c464b52471f56df269d4f3f4
b2ad4fd00cabe7aa6d0ac5fce2fb49e94b469bb9
fd69896ca6ba39f340b79ff5e22dd7f8b73cef7b0ef2c11db74da521b511c386
GET /pagead/viewthroughconversion/854379023/?random=1669103983561&cv=11&fst=1669103983561&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=1735227626.1669103984&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 981
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 22-Nov-2022 08:14:44 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/1010020041/?random=1669103983574&cv=11&fst=1669103983574&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=1735227626.1669103984&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/1010020041/?random=1669103983574&cv=11&fst=1669103983574&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=1735227626.1669103984&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1010020041/?random=1669103983574&cv=11&fst=1669103983574&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=1735227626.1669103984&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1010020041/?random=1669103983574&cv=11&fst=1669103983574&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=1735227626.1669103984&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Hash 22e2e3226eb5ada04929a2e43307eeda
04615fa88f80567974bdeb0f103ca5909746ebd7
41feebdfb0b03cd7fee2eb886adef6f3f1f85d3f14215e9a388d2a50e42efb9b
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11421
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 09 Nov 2022 21:23:50 GMT
accept-ranges: bytes
etag: "077538f81f4d81:0"
vary: Accept-Encoding
set-cookie: MUID=0B3556BAEA4767D9192D44DEEB106663; domain=.bing.com; expires=Sun, 17-Dec-2023 07:59:44 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8B923735EEEC413BADEB1860C5E1D5FC Ref B: OSL30EDGE0407 Ref C: 2022-11-22T07:59:44Z
date: Tue, 22 Nov 2022 07:59:44 GMT
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/983482265/?random=1669103983566&cv=11&fst=1669103983566&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=1735227626.1669103984&rfmt=3&fmt=4
200 OK 983 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/983482265/?random=1669103983566&cv=11&fst=1669103983566&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=1735227626.1669103984&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2179), with no line terminators
Hash 02f992d7a5704259b76990aa7f9cdbf8
e8ddf29a7ea2c98c9703de82ffac495595fb9519
32cc18b76dc4f24d6e0cfee5697837cacfda589c633b3c727fc2145e865fe299
GET /pagead/viewthroughconversion/983482265/?random=1669103983566&cv=11&fst=1669103983566&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=1735227626.1669103984&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 983
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 22-Nov-2022 08:14:44 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: Alb5QFlu5V+HxiR1D8DQ9bDd+Krk62N0DovhEa/fsIsoUQUr/fzIGB+YLTOt3MmiMFcdcp33Bx7HqSSmlj9ZXg==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1679558926
date: Tue, 22 Nov 2022 07:59:44 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dc18476a17e787dc0700f3ee8dc99bcf
4db3ef7edb2683d8141280b9dd780ce4375e3c0f
4082538731e62eb96bd62690e973875ef9e3048432a3a849d7bedd37872b79ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1552148591.1669103984>m=2oeb90&aip=1&z=1155447226
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1552148591.1669103984>m=2oeb90&aip=1&z=1155447226
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1552148591.1669103984>m=2oeb90&aip=1&z=1155447226 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 72d50acad831beb6384250b4be217004
4c63b5d7120df90dce65d1d9a449e0779916cd86
948ea04f802c71a04d3a7f3e5a056b195b99d7e4b346b1b2e8afb53fd537b642
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6370
Cache-Control: max-age=150102
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:44 GMT
Etag: "637c0fe4-1d7"
Expires: Thu, 24 Nov 2022 01:41:26 GMT
Last-Modified: Mon, 21 Nov 2022 23:55:16 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/3865705/domain/app2.mackeeperaff.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://app2.mackeeperaff.com/
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Tue, 22 Nov 2022 05:45:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OQPHC-Tbs7CMSQbV_P7mhXFcjOIgMMhTLSDgHMnXDYCDua2ZInF6kA==
age: 8046
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9ef11a2d1e232b4b45e40ff0c29fa8b0
0966963f13e3b149e3e3c8c2c81e7986d1d8a07b
9ce8b9ab5f1dfdc0686d1660ed64c6eff5cc3d1492d82aa769ac58e3a159dd1b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vars.hotjar.com/box-c6ca1c87e308a39aabb76b56ba54398b.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-c6ca1c87e308a39aabb76b56ba54398b.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash b6d25d1350d6a014d80689f389e76f97
a957e3d99790759f71a4d9e2fdaf819f60e8c569
fb2a1528b99d3eb4c9374642b5045efaf6e06666fdd48a55560a375449b01079
GET /box-c6ca1c87e308a39aabb76b56ba54398b.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Fri, 04 Nov 2022 12:22:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "b6d25d1350d6a014d80689f389e76f97"
last-modified: Fri, 04 Nov 2022 12:21:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 64_w0j4e0_7SDk_8uHylWejajS4PKAd3sRs-57vUyLl0U7P3sd9K6A==
age: 1539458
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10013499.json
200 OK 2 B URL HTTP/2 s.yimg.com/wi/config/10013499.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10013499.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 477HXTDJF6MP2Q91
x-amz-id-2: K8NeptOkgHtnAiPSvJzohlmU54/t51SIyxV9xHf9iC+fCSx0II1qmvK0euYU9gL0Xuw77PhEVkk=
content-type: application/json
date: Tue, 22 Nov 2022 07:31:36 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 1688
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dc18476a17e787dc0700f3ee8dc99bcf
4db3ef7edb2683d8141280b9dd780ce4375e3c0f
4082538731e62eb96bd62690e973875ef9e3048432a3a849d7bedd37872b79ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/1010020041/?random=1669103983568&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2148410367&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1010020041/?random=1669103983568&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2148410367&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1010020041/?random=1669103983568&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2148410367&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/957119846/?random=1669103983570&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2156227086&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/957119846/?random=1669103983570&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2156227086&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/957119846/?random=1669103983570&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2156227086&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
app2.mackeeperaff.com/land/api/send-event
200 OK 20 kB URL HTTP/2 app2.mackeeperaff.com/land/api/send-event
IP
File type JSON data\012- , ASCII text, with very long lines (1325)
Hash fccc980a10bf18eaa60aa22834a7efc4
7657232a419b86e8936dd26e2ddb3dd07685c2ac
bfabf8c98845dcc89f4679fa5b1c2a17302dc342c7015d10875e48d8360f97ca
Analyzer Verdict Alert quad9 Sinkholed
POST /land/api/send-event HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: YqWzSoBImHJBeWwmw9x9lLkBh40TzRG98xD2b5ui
X-XSRF-TOKEN: eyJpdiI6InBra0o3RmFwVjN1amdETFl4TDFQTkE9PSIsInZhbHVlIjoiclVwUml0eW1rdXVmc0tQd0ZkdnhEZzRYTmMyZU42bWVDWHNwa285V1NkckJrbU1mTEE4bWRUQzY0MmgwZHplVk5cL2MrWUpYczZKSUd4STRNNXROY1BPNGFMMzdFSm5XQllXcFRyUnlvQTN0NmF1U3NRQ3NtbkJPTWlGXC9MbW5tUSIsIm1hYyI6IjY1NWU5OTYwZTk5NGQxMGZhZTE5ZTQ0OWJlNzAwYmJiNGQ4OTA4Y2EwOTg3YmUzN2MyOTJkOGNhNjI1YWZlZTQifQ==
Content-Length: 100
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/189/?rtkcid=637c81636e86d400015ddc4d&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Cookie: XSRF-TOKEN=eyJpdiI6InBra0o3RmFwVjN1amdETFl4TDFQTkE9PSIsInZhbHVlIjoiclVwUml0eW1rdXVmc0tQd0ZkdnhEZzRYTmMyZU42bWVDWHNwa285V1NkckJrbU1mTEE4bWRUQzY0MmgwZHplVk5cL2MrWUpYczZKSUd4STRNNXROY1BPNGFMMzdFSm5XQllXcFRyUnlvQTN0NmF1U3NRQ3NtbkJPTWlGXC9MbW5tUSIsIm1hYyI6IjY1NWU5OTYwZTk5NGQxMGZhZTE5ZTQ0OWJlNzAwYmJiNGQ4OTA4Y2EwOTg3YmUzN2MyOTJkOGNhNjI1YWZlZTQifQ%3D%3D; mackeeper_session=eyJpdiI6InNqXC9pcmo5WE1EOXNNMU45bTdnNE1nPT0iLCJ2YWx1ZSI6InNrVDhcL2JDS1FudHZOektuMGVmTndMRHoyVllaeEZrNjFPVERBazljaTBcL2RWRjFaSjJiUytxdkZFck9YYXlQbmZMN2NrVVlwRmNaN3RHUGEzaWZHMWNqVDVBWmVmbmZFUUw2VEI0VHJyd2hyQ0thbjhsKysxVjhna1BBcHdSMTYiLCJtYWMiOiI2ZDgwM2ZhYzdjZGM3ODhhYzNhZmQ1NGUwY2VlOGQ3NjkxMzA5OTRlZjg2NTk2YTljY2RmZDc5NDBkZDZhZWZkIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:59:44 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 179
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 119f773b76e9a53bd74b8dd857f2ca52
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-190484.js?sv=7
200 OK 2.6 kB URL HTTP/2 static.hotjar.com/c/hotjar-190484.js?sv=7
IP
File type ASCII text, with very long lines (4227)
Hash 55a395a08d17a6191721c1a73b81ed58
22965ee0f1b61d9ad837232c888ac9f3625275d8
f142158f0304a3845336612dbbc48585773e6ef37a64423aff1a7fc2c93b25c0
GET /c/hotjar-190484.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Tue, 22 Nov 2022 07:59:36 GMT
cache-control: max-age=60
etag: W/cb005c02366dfb6cddf95e59b1fc5650
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XgJ0D5mKPAdIQwvsVsCWRT8YcbOnFm5n805wTER6LVinVZYZStX0ZQ==
age: 8
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/983482265/?random=1669103983566&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2090175470&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/983482265/?random=1669103983566&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2090175470&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/983482265/?random=1669103983566&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2090175470&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
200 OK 104 B URL HTTP/2 cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
IP
Hash f300e2a4e2aa8ab2dbe3727e273fe4dd
5aa7e29e67ba7e1c003ea9902d9e407e9ed1de33
aad40f368d389709abeef0de0ac56af4c39ef25c8a5aa91bc851e6088a4366a6
GET /partner/3865705/domain/app2.mackeeperaff.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Tue, 22 Nov 2022 07:58:32 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gjQyHnz8drUtvDz6w3YRZhurEuFQmbs6UpDUTmwBDv2NIexexfbPew==
age: 72
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/854379023/?random=1669103983561&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=4148704205&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/854379023/?random=1669103983561&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=4148704205&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/854379023/?random=1669103983561&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=4148704205&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
script.hotjar.com/modules.55241fd65a1af5a1837b.js
200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.55241fd65a1af5a1837b.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 5f82b1a8e62b6a241154cb066c4d1ad8
942982f722f180cb3eac787f0f5edb1f3927696a
36a9999c741ee16ea1337a713b13a62f7e368a437ebe9581c487d42b7c7fe50b
GET /modules.55241fd65a1af5a1837b.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68617
date: Thu, 17 Nov 2022 11:06:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "5f82b1a8e62b6a241154cb066c4d1ad8"
last-modified: Thu, 17 Nov 2022 11:05:52 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3qj9RdtxIdyLdU3GTdGEIF37s_hUPL6NnKBvtmV-Ugh2qJZ-BiIT5w==
age: 420818
X-Firefox-Spdy: h2
bat.bing.com/p/action/36002432.js
200 OK 1.4 kB URL HTTP/2 bat.bing.com/p/action/36002432.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash af03844de699f6e7e0ed552f725a22df
10eae56beeacb28641d52a664eccaf4818bad5fe
472f9e0968b39c41aa022478f9d20e01e5131d6bd50451676cefad81427420ac
GET /p/action/36002432.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 1423
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=19B7D62542B36AFF302FC44143E46B46; domain=.bing.com; expires=Sun, 17-Dec-2023 07:59:44 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0CDC7E32B6E94DEEA996968AF73D9011 Ref B: OSL30EDGE0407 Ref C: 2022-11-22T07:59:44Z
date: Tue, 22 Nov 2022 07:59:44 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=36002432&Ver=2&mid=9eb23a30-6da9-4562-9a0a-4191555b7b1e&sid=a085ce806a3b11eda45d13fa86d65bdd&vid=a08605d06a3b11edb707911d8916b99e&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=437989
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=36002432&Ver=2&mid=9eb23a30-6da9-4562-9a0a-4191555b7b1e&sid=a085ce806a3b11eda45d13fa86d65bdd&vid=a08605d06a3b11edb707911d8916b99e&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=437989
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=36002432&Ver=2&mid=9eb23a30-6da9-4562-9a0a-4191555b7b1e&sid=a085ce806a3b11eda45d13fa86d65bdd&vid=a08605d06a3b11edb707911d8916b99e&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=437989 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0CF4B17063DD6CC8206BA314628A6DE7; domain=.bing.com; expires=Sun, 17-Dec-2023 07:59:44 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: EF4D38C8A595461C9E6A725820F00D86 Ref B: OSL30EDGE0407 Ref C: 2022-11-22T07:59:44Z
date: Tue, 22 Nov 2022 07:59:44 GMT
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1669103984565&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1669103984565&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3865705&time=1669103984565&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1669103984565%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F189%252F%253Frtkcid%253D637c81636e86d400015ddc4d%2526rtkcmpid%253D627d33f635981a0001d4db70%2526tid%253DAffiliate%252520-%252520Increased%252520Hybrid%252520%2528189%2529%252520-%252520Shlomi%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQLtiHQLrVH-rwAAAYSeWaGUH-i7IlqmJ7FaN1W_FNuJIeC9iF6OFbHapiGQF_dp7FyOhwxUmGjU4w; Max-Age=2592000; Expires=Thu, 22 Dec 2022 07:59:45 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQJBdqKJwg-CJgAAAYSeWaGVDeD2-PZ1wnRI0gdZ1IxQsT52LoimZdsTj0bC1yJ4OJJwGDUFiC8tAo0r4zV9Uw; Max-Age=2592000; Expires=Thu, 22 Dec 2022 07:59:45 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&c3b30595-a485-4767-8472-d1c87ed802a9"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 22-Nov-2023 07:59:45 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2419:u=1:x=1:i=1669103985:t=1669190385:v=2:sig=AQGX4fxfD_9K4MXRrdyooddPBchDbQOK"; Expires=Wed, 23 Nov 2022 07:59:45 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXuCo4fAbXX8jzdpK/7lQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 149CD553CE2D420D8EE6CBFDCA08FA5E Ref B: OSL30EDGE0509 Ref C: 2022-11-22T07:59:44Z
date: Tue, 22 Nov 2022 07:59:44 GMT
content-length: 0
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2022%20Nov%202022%2007%3A59%3A44%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2022%20Nov%202022%2007%3A59%3A44%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Tue%2C%2022%20Nov%202022%2007%3A59%3A44%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:59:45 GMT
expires: Tue, 22 Nov 2022 07:59:45 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBHGBfGMCECKhQmU84NpTgJFc2NLK9-4FEgEBAQHSfWOGYwAAAAAA_eMAAA&S=AQAAAisZAr6FA9vfan71essJDe0; Expires=Wed, 22 Nov 2023 13:59:45 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 0297c26dd85ac836c9ee4b0d8dc86452
3123acd6ec5a63ed7d2e9f7c853ef8ba77aa2496
b7874e5ad214b9e945f614fdb85df2b4677903e2432da39739ce365af34f4263
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4181
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:45 GMT
Last-Modified: Tue, 22 Nov 2022 06:50:04 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 0297c26dd85ac836c9ee4b0d8dc86452
3123acd6ec5a63ed7d2e9f7c853ef8ba77aa2496
b7874e5ad214b9e945f614fdb85df2b4677903e2432da39739ce365af34f4263
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5379
Cache-Control: max-age=139386
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:59:45 GMT
Etag: "637be9e8-1d7"
Expires: Wed, 23 Nov 2022 22:42:51 GMT
Last-Modified: Mon, 21 Nov 2022 21:13:12 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
www.facebook.com/tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1669103984970&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1669103984969.1168502254&it=1669103984728&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1669103984970&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1669103984969.1168502254&it=1669103984728&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1669103984970&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1669103984969.1168502254&it=1669103984728&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 22 Nov 2022 07:59:45 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8f8dec112501459d9c055745389b3e97
d02d3e7a0c6d48a463c9fe280eca1e4ec07b61de
eae703ac8ba04d7da656f5d1ec8ca0b1746e16510fb9323c887a920b753d4bdf
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 22 Nov 2022 07:59:45 GMT
Last-Modified: Tue, 22 Nov 2022 06:38:09 GMT
Server: ECS (bsa/EB1E)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6A9RhKr4MBvqp1Em1KbYj_uGGvVsiZTrRnGqybB-FG0jcqpniWBS-w==
Age: 4896
tr.outbrain.com/cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 07:59:45 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 0e45161ada009ffec558f33286876ada
content-encoding: gzip
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1669103984565%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F189%252F%253Frtkcid%253D637c81636e86d400015ddc4d%2526rtkcmpid%253D627d33f635981a0001d4db70%2526tid%253DAffiliate%252520-%252520Increased%252520Hybrid%252520%2528189%2529%252520-%252520Shlomi%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1669103984565%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F189%252F%253Frtkcid%253D637c81636e86d400015ddc4d%2526rtkcmpid%253D627d33f635981a0001d4db70%2526tid%253DAffiliate%252520-%252520Increased%252520Hybrid%252520%2528189%2529%252520-%252520Shlomi%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1669103984565%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F189%252F%253Frtkcid%253D637c81636e86d400015ddc4d%2526rtkcmpid%253D627d33f635981a0001d4db70%2526tid%253DAffiliate%252520-%252520Increased%252520Hybrid%252520%2528189%2529%252520-%252520Shlomi%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1669103984565&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28189%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&58621faf-3d8a-495e-8d1d-b9ffd3119bb3"; Domain=.linkedin.com; Expires=Wed, 22-Nov-2023 07:59:45 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202211220759450a0b6f2d-22f3-40bb-86cf-206c07cd5028AQG0fAmbxUFY7wGZfRvLS6LZvScjYXib"; Domain=.www.linkedin.com; Expires=Wed, 22-Nov-2023 07:59:45 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjkxMDM5ODU7MjswMjGD+jT0IrddXAuU7U65anmrmSoSeedxzAwELkXZyy16NA==; Domain=.linkedin.com; Expires=Sun, 21 May 2023 07:59:45 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2377:u=1:x=1:i=1669103985:t=1669190385:v=2:sig=AQFpFMgWypf87uVpybavyRWjv746dP1D"; Expires=Wed, 23 Nov 2022 07:59:45 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXuCo4jKqkIKQgmApwXBA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: E8D72C04A459486EA6F03260540D1B61 Ref B: OSL30EDGE0509 Ref C: 2022-11-22T07:59:45Z
date: Tue, 22 Nov 2022 07:59:44 GMT
content-length: 0
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/190484/visit-data?sv=7
200 OK 55 kB URL HTTP/2 in.hotjar.com/api/v2/client/sites/190484/visit-data?sv=7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 43bcb0bc4cea4323f991df74351c154d
97f2708a28b4425284dd438f479fc19de986614d
7bd214a3117d2952d0a61ec7139c6561e8efd812f114ddfa7d59a9c5b653b767
POST /api/v2/client/sites/190484/visit-data?sv=7 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 148
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:59:45 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=11741323A53C4473B9847D6B68466782&RedC=c.clarity.ms&MXFR=0D876F409181654114AC7D2495816B86
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=0D876F409181654114AC7D2495816B86; domain=.clarity.ms; expires=Sun, 17-Dec-2023 07:59:45 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Tue, 22 Nov 2022 07:59:45 GMT
content-length: 0
X-Firefox-Spdy: h2
tr.outbrain.com/unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&apiObjVersion=1.1&obtpVersion=2.0.4&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&optOut=false&bust=09485912458847107&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&apiObjVersion=1.1&obtpVersion=2.0.4&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&optOut=false&bust=09485912458847107&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&apiObjVersion=1.1&obtpVersion=2.0.4&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&optOut=false&bust=09485912458847107&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 07:59:45 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 75dfa4acd8af6acd1649619ccf322cc3
content-encoding: gzip
c.bing.com/c.gif?CtsSyncId=11741323A53C4473B9847D6B68466782&RedC=c.clarity.ms&MXFR=0D876F409181654114AC7D2495816B86
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=11741323A53C4473B9847D6B68466782&RedC=c.clarity.ms&MXFR=0D876F409181654114AC7D2495816B86
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=11741323A53C4473B9847D6B68466782&RedC=c.clarity.ms&MXFR=0D876F409181654114AC7D2495816B86 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=11741323A53C4473B9847D6B68466782&MUID=2A7478BF8576611229C46ADB842160D7
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=2A7478BF8576611229C46ADB842160D7; domain=c.bing.com; expires=Sun, 17-Dec-2023 07:59:45 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E9AA805C9C0E4D769EB57B627ABBAF7D Ref B: OSL30EDGE0407 Ref C: 2022-11-22T07:59:45Z
date: Tue, 22 Nov 2022 07:59:45 GMT
content-length: 0
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1669103984565&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28189%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1669103984565&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28189%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3865705&time=1669103984565&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520%28189%29%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&5162b522-9953-4246-8f9b-91d6742efa33"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 22-Nov-2023 07:59:45 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2419:u=1:x=1:i=1669103985:t=1669190385:v=2:sig=AQGX4fxfD_9K4MXRrdyooddPBchDbQOK"; Expires=Wed, 23 Nov 2022 07:59:45 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXuCo4mDrAwzO0MBAQ1Ag==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: CB4ADEF51F6542FABF401775DDAB891A Ref B: OSL30EDGE0509 Ref C: 2022-11-22T07:59:45Z
date: Tue, 22 Nov 2022 07:59:44 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=11741323A53C4473B9847D6B68466782&MUID=2A7478BF8576611229C46ADB842160D7
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=11741323A53C4473B9847D6B68466782&MUID=2A7478BF8576611229C46ADB842160D7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=11741323A53C4473B9847D6B68466782&MUID=2A7478BF8576611229C46ADB842160D7 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Tue, 22-Nov-2022 08:09:45 GMT; path=/; SameSite=None; Secure;
date: Tue, 22 Nov 2022 07:59:45 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 28771
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
date: Tue, 22 Nov 2022 07:59:45 GMT
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=1574&scd=49&ssd=1&est=1669103984655&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1669103986231&vi=1669103984653&ri=b5d3762e914da8ac3c01d712723c07b1&ref=null&cv=20221117-23-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=1574&scd=49&ssd=1&est=1669103984655&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1669103986231&vi=1669103984653&ri=b5d3762e914da8ac3c01d712723c07b1&ref=null&cv=20221117-23-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=1574&scd=49&ssd=1&est=1669103984655&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1669103986231&vi=1669103984653&ri=b5d3762e914da8ac3c01d712723c07b1&ref=null&cv=20221117-23-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 22 Nov 2022 07:59:46 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=4578&scd=49&ssd=1&est=1669103984655&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1669103989235&vi=1669103984653&ri=b5d3762e914da8ac3c01d712723c07b1&ref=null&cv=20221117-23-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=4578&scd=49&ssd=1&est=1669103984655&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1669103989235&vi=1669103984653&ri=b5d3762e914da8ac3c01d712723c07b1&ref=null&cv=20221117-23-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=4578&scd=49&ssd=1&est=1669103984655&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1669103989235&vi=1669103984653&ri=b5d3762e914da8ac3c01d712723c07b1&ref=null&cv=20221117-23-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 22 Nov 2022 07:59:49 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2362
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
date: Tue, 22 Nov 2022 07:59:49 GMT
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/default/script.min.js?17ab72af24a83de6eb4b
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/default/script.min.js?17ab72af24a83de6eb4b
IP
GET /mk-land/dist/default/script.min.js?17ab72af24a83de6eb4b HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 21 Nov 2022 05:41:12 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 01 Nov 2022 14:18:44 GMT
etag: W/"f39243185bab35a6e62fc592e4ee5976"
cache-control: public, max-age=604800
x-amz-version-id: MqlWLhbTvSNRNbExGkOtw0bKSdtMf3rQ
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: taj16Xt0BhOrwpJrosFqGv7yaB2NhwenIudUNwWHIwo5H3WTA-Ga0w==
age: 94712
X-Firefox-Spdy: h2
b-code.liadm.com/a-015g.min.js
200 OK 0 B URL HTTP/2 b-code.liadm.com/a-015g.min.js
IP
GET /a-015g.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 22 Nov 2022 04:49:18 GMT
cache-control: "public, max-age=86400"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2aXSeKyVQVWVd6ojPWg5NPs0mS4qmVx_iZnmEUqwU3dYubIhWshRCg==
age: 11425
X-Firefox-Spdy: h2
app2.mackeeperaff.com/land/api/send-event
200 OK 0 B URL HTTP/2 app2.mackeeperaff.com/land/api/send-event
IP
Analyzer Verdict Alert quad9 Sinkholed
POST /land/api/send-event HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: YqWzSoBImHJBeWwmw9x9lLkBh40TzRG98xD2b5ui
X-XSRF-TOKEN: eyJpdiI6InBra0o3RmFwVjN1amdETFl4TDFQTkE9PSIsInZhbHVlIjoiclVwUml0eW1rdXVmc0tQd0ZkdnhEZzRYTmMyZU42bWVDWHNwa285V1NkckJrbU1mTEE4bWRUQzY0MmgwZHplVk5cL2MrWUpYczZKSUd4STRNNXROY1BPNGFMMzdFSm5XQllXcFRyUnlvQTN0NmF1U3NRQ3NtbkJPTWlGXC9MbW5tUSIsIm1hYyI6IjY1NWU5OTYwZTk5NGQxMGZhZTE5ZTQ0OWJlNzAwYmJiNGQ4OTA4Y2EwOTg3YmUzN2MyOTJkOGNhNjI1YWZlZTQifQ==
Content-Length: 102
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/189/?rtkcid=637c81636e86d400015ddc4d&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Cookie: XSRF-TOKEN=eyJpdiI6InBra0o3RmFwVjN1amdETFl4TDFQTkE9PSIsInZhbHVlIjoiclVwUml0eW1rdXVmc0tQd0ZkdnhEZzRYTmMyZU42bWVDWHNwa285V1NkckJrbU1mTEE4bWRUQzY0MmgwZHplVk5cL2MrWUpYczZKSUd4STRNNXROY1BPNGFMMzdFSm5XQllXcFRyUnlvQTN0NmF1U3NRQ3NtbkJPTWlGXC9MbW5tUSIsIm1hYyI6IjY1NWU5OTYwZTk5NGQxMGZhZTE5ZTQ0OWJlNzAwYmJiNGQ4OTA4Y2EwOTg3YmUzN2MyOTJkOGNhNjI1YWZlZTQifQ%3D%3D; mackeeper_session=eyJpdiI6InNqXC9pcmo5WE1EOXNNMU45bTdnNE1nPT0iLCJ2YWx1ZSI6InNrVDhcL2JDS1FudHZOektuMGVmTndMRHoyVllaeEZrNjFPVERBazljaTBcL2RWRjFaSjJiUytxdkZFck9YYXlQbmZMN2NrVVlwRmNaN3RHUGEzaWZHMWNqVDVBWmVmbmZFUUw2VEI0VHJyd2hyQ0thbjhsKysxVjhna1BBcHdSMTYiLCJtYWMiOiI2ZDgwM2ZhYzdjZGM3ODhhYzNhZmQ1NGUwY2VlOGQ3NjkxMzA5OTRlZjg2NTk2YTljY2RmZDc5NDBkZDZhZWZkIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:59:44 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 179
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 33a86335cead2c769edbc374bb22ac40
X-Firefox-Spdy: h2
www.dwin1.com/23738.js
200 OK 0 B IP
GET /23738.js HTTP/1.1
Host: www.dwin1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
x-amz-replication-status: COMPLETED
last-modified: Wed, 16 Nov 2022 01:01:46 GMT
x-amz-version-id: 0uegheH4XCK.kmhHWkbYthnbd2Uc3dUA
server: AmazonS3
content-encoding: gzip
date: Tue, 22 Nov 2022 07:55:02 GMT
cache-control: max-age=600, s-maxage=600
etag: W/"91fc23aa2a18949b2feabfe01e397134"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wmeT-ttlIjvS0Bd8J8k0B-XXueBrMr7yM7XkOQajYyBEN76cqV71qQ==
age: 513
X-Firefox-Spdy: h2
trc.taboola.com/1212352/trc/3/json?tim=1669103984666&data=%7B%22id%22%3A749%2C%22ii%22%3A%22%2Fland%2F189%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669103984653%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669103984665%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A8%2C%22ssd%22%3A1%2C%22scd%22%3A49%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1212352/trc/3/json?tim=1669103984666&data=%7B%22id%22%3A749%2C%22ii%22%3A%22%2Fland%2F189%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669103984653%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669103984665%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A8%2C%22ssd%22%3A1%2C%22scd%22%3A49%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1212352/trc/3/json?tim=1669103984666&data=%7B%22id%22%3A749%2C%22ii%22%3A%22%2Fland%2F189%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669103984653%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669103984665%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F189%2F%3Frtkcid%3D637c81636e86d400015ddc4d%26rtkcmpid%3D627d33f635981a0001d4db70%26tid%3DAffiliate%2520-%2520Increased%2520Hybrid%2520(189)%2520-%2520Shlomi%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A8%2C%22ssd%22%3A1%2C%22scd%22%3A49%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 07:59:45 GMT
via: 1.1 varnish
x-served-by: cache-bma1649-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669103985.934685,VS0,VE95
vary: Accept-Encoding
x-vcl-time-ms: 95
X-Firefox-Spdy: h2
app2.mackeeperaff.com/land/api/send-event
200 OK 0 B URL HTTP/2 app2.mackeeperaff.com/land/api/send-event
IP
Analyzer Verdict Alert quad9 Sinkholed
POST /land/api/send-event HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: YqWzSoBImHJBeWwmw9x9lLkBh40TzRG98xD2b5ui
X-XSRF-TOKEN: eyJpdiI6InBra0o3RmFwVjN1amdETFl4TDFQTkE9PSIsInZhbHVlIjoiclVwUml0eW1rdXVmc0tQd0ZkdnhEZzRYTmMyZU42bWVDWHNwa285V1NkckJrbU1mTEE4bWRUQzY0MmgwZHplVk5cL2MrWUpYczZKSUd4STRNNXROY1BPNGFMMzdFSm5XQllXcFRyUnlvQTN0NmF1U3NRQ3NtbkJPTWlGXC9MbW5tUSIsIm1hYyI6IjY1NWU5OTYwZTk5NGQxMGZhZTE5ZTQ0OWJlNzAwYmJiNGQ4OTA4Y2EwOTg3YmUzN2MyOTJkOGNhNjI1YWZlZTQifQ==
Content-Length: 101
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/189/?rtkcid=637c81636e86d400015ddc4d&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
Cookie: XSRF-TOKEN=eyJpdiI6InBra0o3RmFwVjN1amdETFl4TDFQTkE9PSIsInZhbHVlIjoiclVwUml0eW1rdXVmc0tQd0ZkdnhEZzRYTmMyZU42bWVDWHNwa285V1NkckJrbU1mTEE4bWRUQzY0MmgwZHplVk5cL2MrWUpYczZKSUd4STRNNXROY1BPNGFMMzdFSm5XQllXcFRyUnlvQTN0NmF1U3NRQ3NtbkJPTWlGXC9MbW5tUSIsIm1hYyI6IjY1NWU5OTYwZTk5NGQxMGZhZTE5ZTQ0OWJlNzAwYmJiNGQ4OTA4Y2EwOTg3YmUzN2MyOTJkOGNhNjI1YWZlZTQifQ%3D%3D; mackeeper_session=eyJpdiI6InNqXC9pcmo5WE1EOXNNMU45bTdnNE1nPT0iLCJ2YWx1ZSI6InNrVDhcL2JDS1FudHZOektuMGVmTndMRHoyVllaeEZrNjFPVERBazljaTBcL2RWRjFaSjJiUytxdkZFck9YYXlQbmZMN2NrVVlwRmNaN3RHUGEzaWZHMWNqVDVBWmVmbmZFUUw2VEI0VHJyd2hyQ0thbjhsKysxVjhna1BBcHdSMTYiLCJtYWMiOiI2ZDgwM2ZhYzdjZGM3ODhhYzNhZmQ1NGUwY2VlOGQ3NjkxMzA5OTRlZjg2NTk2YTljY2RmZDc5NDBkZDZhZWZkIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:59:44 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 178
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: d4e034fd5d2f5a66b611c4b9a951d3ee
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/189/script.min.js?410f45539e1dbcb98790
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/189/script.min.js?410f45539e1dbcb98790
IP
GET /mk-land/dist/189/script.min.js?410f45539e1dbcb98790 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Tue, 01 Nov 2022 14:19:42 GMT
x-amz-version-id: s73Qlchvu6bwh5MmjxIODNWG2jTqcwP_
server: AmazonS3
content-encoding: gzip
date: Fri, 18 Nov 2022 08:44:56 GMT
cache-control: public, max-age=604800
etag: W/"7e516217258446374981dd7cbc8dbac2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ynf1734AP3MwnhAJlyeqefsVWQQ-X2d1DZcdMyXd9nX-t8Rk7Cf2pw==
age: 342888
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/critical/script.min.js?713042b92e8e26034ff5
200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/critical/script.min.js?713042b92e8e26034ff5
IP
GET /mk-land/dist/critical/script.min.js?713042b92e8e26034ff5 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Tue, 01 Nov 2022 14:19:26 GMT
x-amz-version-id: mBt3HOpoZzV_BXxKf5m06Uut_dgFAc_H
server: AmazonS3
content-encoding: gzip
date: Tue, 22 Nov 2022 00:47:45 GMT
cache-control: public, max-age=604800
etag: W/"ae9c9df33a1c1fcfb8e94b7c77f9ad66"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KQlW3eXbkMTvoh5OFEmMZFXPBc2qNPkY6IC0AN1UDt2BKLZyZafxhg==
age: 25919
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Source+Sans+Pro:400,600
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro:400,600
IP
GET /css?family=Source+Sans+Pro:400,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 22 Nov 2022 07:59:43 GMT
date: Tue, 22 Nov 2022 07:59:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
app2.mackeeperaff.com/land/189/?rtkcid=637c81636e86d400015ddc4d&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
200 OK 0 B URL HTTP/2 app2.mackeeperaff.com/land/189/?rtkcid=637c81636e86d400015ddc4d&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid=
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /land/189/?rtkcid=637c81636e86d400015ddc4d&rtkcmpid=627d33f635981a0001d4db70&tid=Affiliate%20-%20Increased%20Hybrid%20(189)%20-%20Shlomi&utm_source=&utm_medium=&pubid= HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:59:42 GMT
content-type: text/html; charset=UTF-8
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
content-security-policy: default-src 'self' *.hotjar.com *.mackeeper.com;frame-ancestors 'none';frame-src 'self' 'unsafe-inline' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com *.surveygizmo.com *.liadm.com *.typeform.com mc.yandex.ru *.js.ad-score.com *.cdn.onesignal.com *.onesignal.com *.criteo.com static-cdn.mackeeper.com;child-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com blob: *.cdn.onesignal.com *.onesignal.com *.liadm.com static-cdn.mackeeper.com;form-action 'self' *.mackeeper.com *.facebook.com;img-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com data: *.2mdn.net *.pagead2.googlesyndication.com *.glotgrx.com *.lporirxe.com *.exelator.com *.owox.com *.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.yahoo.co.jp *.apimzb-adserver.cloudmccloud.com *.3lift.com *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com mc.yandex.ru cx.atdmt.com *.baidu.com *.gstatstrk.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.zoomsupport.com *.cloudmccloud.com linkconnector.com *.linkconnector.com *.linkedin.com https://p.adsymptotic.com *.clarity.ms *.lfeeder.com static-cdn.mackeeper.com *.imcounting.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com disqus.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com l2.io *.inspectlet.com *.googlesyndication.com *.sagetrc.com *.glotgrx.com *.lporirxe.com b-code.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.cloudfront.net *.yimg.jp *.addtocalendar.com *.yahoo.co.jp blob: *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com *.s.ytimg.com *.typeform.com *.calendly.com *.linkconnector.com mc.yandex.ru *.js.ad-score.com *.baidu.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.engine.4dsply.com *.engine.spotscenered.info *.engine.3dspk.com *.we3red.com *.engine.asadap.com *.engine.nictelroalps.com *.engine.liondigitalserving.com *.engine.addroplet.com *.beritapria.com cdnjs.cloudflare.com *.clickcease.com *.sentry-cdn.com *.criteo.net *.criteo.com https://snpa.licdn.com linkconnector.com *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com *.licdn.com *.liadm.com *.clarity.ms *.adcell.com *.lfeeder.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;style-src 'self' 'unsafe-inline' *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.a.disquscdn.com *.disqus.com *.googleapis.com *.fonts.gstatic.com *.referrer.disqus.com *.google.com *.google.com.ua *.addtocalendar.com *.surveygizmo.com *.cdn.onesignal.com *.onesignal.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com *.googletagmanager.com;font-src 'self' data: *.doubleclick.net *.mackeeper.com *.twimg.com *.twitter.com fonts.googleapis.com fonts.gstatic.com *.surveygizmo.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;object-src *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.pagead2.googlesyndication.com *.liadm.com static-cdn.mackeeper.com;connect-src 'self' *.mackeeper.com *.hotjar.com ws://*.hotjar.com wss://*.hotjar.com *.g.doubleclick.net *.lcidc.liadm.com *.google-analytics.com *.api.ipify.org *.mc.yandex.ru mc.yandex.ru *.data.ad-score.com *.baidu.com *.pushdata.onesignal.com:* *.onesignal.com *.taboola.com *.hotjar.io *.clickcease.com s.yimg.com *.facebook.com *.google.com bat.bing.com sentry.cloudmccloud.com *.liadm.com *.macupdate.com https://api.account.mackeeper.com https://api.account.sz.mackeeper.com https://api-ne.mackeeper.com *.adcell.com *.clarity.ms *.lfeeder.com *.static-cdn.mackeeper.com https://crm.account.mackeeper.com https://chat-crm.account.mackeeper.com static-cdn.mackeeper.com https://cdn.linkedin.oribi.io/
set-cookie: XSRF-TOKEN=eyJpdiI6InBra0o3RmFwVjN1amdETFl4TDFQTkE9PSIsInZhbHVlIjoiclVwUml0eW1rdXVmc0tQd0ZkdnhEZzRYTmMyZU42bWVDWHNwa285V1NkckJrbU1mTEE4bWRUQzY0MmgwZHplVk5cL2MrWUpYczZKSUd4STRNNXROY1BPNGFMMzdFSm5XQllXcFRyUnlvQTN0NmF1U3NRQ3NtbkJPTWlGXC9MbW5tUSIsIm1hYyI6IjY1NWU5OTYwZTk5NGQxMGZhZTE5ZTQ0OWJlNzAwYmJiNGQ4OTA4Y2EwOTg3YmUzN2MyOTJkOGNhNjI1YWZlZTQifQ%3D%3D; expires=Tue, 22-Nov-2022 09:59:42 GMT; Max-Age=7200; path=/; secure; samesite=lax
mackeeper_session=eyJpdiI6InNqXC9pcmo5WE1EOXNNMU45bTdnNE1nPT0iLCJ2YWx1ZSI6InNrVDhcL2JDS1FudHZOektuMGVmTndMRHoyVllaeEZrNjFPVERBazljaTBcL2RWRjFaSjJiUytxdkZFck9YYXlQbmZMN2NrVVlwRmNaN3RHUGEzaWZHMWNqVDVBWmVmbmZFUUw2VEI0VHJyd2hyQ0thbjhsKysxVjhna1BBcHdSMTYiLCJtYWMiOiI2ZDgwM2ZhYzdjZGM3ODhhYzNhZmQ1NGUwY2VlOGQ3NjkxMzA5OTRlZjg2NTk2YTljY2RmZDc5NDBkZDZhZWZkIn0%3D; expires=Tue, 22-Nov-2022 09:59:42 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax
get_params_landings=%7B%22rtkcid%22%3A%22637c81636e86d400015ddc4d%22%2C%22rtkcmpid%22%3A%22627d33f635981a0001d4db70%22%2C%22tid%22%3A%22Affiliate%20-%20Increased%20Hybrid%20%28189%29%20-%20Shlomi%22%2C%22utm_source%22%3A%22%22%2C%22utm_medium%22%3A%22%22%2C%22pubid%22%3A%22%22%7D; expires=Wed, 23-Nov-2022 07:59:42 GMT; Max-Age=86400; path=/; domain=.mackeeper.com; secure; samesite=lax
globalAffid=mc-637c8163770a23f9efd60fff; expires=Sun, 21-May-2023 07:59:42 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax
country=NO; expires=Sun, 21-May-2023 07:59:42 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 978ec8f7a36b230e0708b965a0341607
X-Firefox-Spdy: h2
sc.lfeeder.com/lftracker_v1_ywVkO4XWPeW7Z6Bj.js
200 OK 0 B URL HTTP/2 sc.lfeeder.com/lftracker_v1_ywVkO4XWPeW7Z6Bj.js
IP
GET /lftracker_v1_ywVkO4XWPeW7Z6Bj.js HTTP/1.1
Host: sc.lfeeder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 22 Nov 2022 07:31:32 GMT
cache-control: max-age=3600
last-modified: Tue, 22 Nov 2022 07:16:22 GMT
x-amz-version-id: lDy2Z.RLQNoGtb5UZ6mVm3abGgK6xCEP
etag: W/"a40c3b808d81ec85326e1c68aacd9b4d"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 12HsN2w99BrifFDKzRza6eT2hwHhVDAYwAdoGJMiqymIcvXevZjnGQ==
age: 1692
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/36002432
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/uet/36002432
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/uet/36002432 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=30a309f3569746e4a38632fd5cbe7bd8.20221122.20231122; expires=Wed, 22 Nov 2023 07:59:45 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:593e4080-f032-4d00-a652-e17f01252a9d
x-cache: CONFIG_NOCACHE
x-azure-ref: 0cYF8YwAAAAB5+8QXmk/IQ5zJ4hQ7swk/QU1TMDRFREdFMTkxNgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Tue, 22 Nov 2022 07:59:45 GMT
X-Firefox-Spdy: h2
34.203.24.156
212.82.100.181
93.184.220.29
23.36.79.10
157.240.200.35
188.125.94.206
141.226.228.48
185.5.82.77
0.0.0.0