Overview

URL www.wownicepop.com/00b40ae7-a33e-43a6-b626-3565e3f6a6d6
IP18.196.84.70
ASNAMAZON-02
Location Germany
Report completed2022-09-23 03:06:34 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-23 2 www.wownicepop.com/00b40ae7-a33e-43a6-b626-3565e3f6a6d6 Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (51)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS www.linkedin.com (1) 608 2014-04-09 13:16:08 UTC 2022-09-22 04:51:34 UTC 13.107.42.14
mnemonic passive DNS sc.lfeeder.com (1) 17815 2020-09-08 06:51:01 UTC 2022-09-22 17:37:47 UTC 143.204.55.84
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-22 05:01:22 UTC 54.200.107.47
mnemonic passive DNS fonts.googleapis.com (2) 8877 2014-07-21 13:19:55 UTC 2022-09-22 22:16:35 UTC 216.58.211.10
mnemonic passive DNS region1.analytics.google.com (1) 0 2022-03-17 11:26:33 UTC 2022-09-22 06:24:51 UTC 216.239.34.36 Domain (google.com) ranked at: 1
mnemonic passive DNS script.hotjar.com (1) 887 2020-11-05 16:23:46 UTC 2022-09-22 19:41:01 UTC 143.204.55.68
mnemonic passive DNS sp.analytics.yahoo.com (1) 816 2014-01-31 20:48:24 UTC 2022-09-22 06:00:19 UTC 212.82.100.181
mnemonic passive DNS tr.outbrain.com (2) 2017 2017-04-12 07:58:35 UTC 2022-09-22 05:36:41 UTC 70.42.32.31
mnemonic passive DNS trc.taboola.com (1) 602 2013-07-11 10:17:31 UTC 2022-09-22 04:54:58 UTC 151.101.85.44
mnemonic passive DNS in.hotjar.com (1) 1746 2018-10-22 17:15:59 UTC 2022-09-22 04:41:35 UTC 54.73.164.173
mnemonic passive DNS affcpatrk.com (1) 468763 2021-01-08 12:44:01 UTC 2022-09-22 05:02:41 UTC 51.255.127.45
mnemonic passive DNS rdt.mackeeperaff.com (1) 0 2021-12-08 16:20:36 UTC 2022-09-22 04:26:10 UTC 85.17.54.17 Unknown ranking
mnemonic passive DNS browser.sentry-cdn.com (1) 4393 2018-07-13 11:42:06 UTC 2022-09-22 08:30:22 UTC 151.101.130.217
mnemonic passive DNS snap.licdn.com (1) 1044 2014-10-06 08:43:45 UTC 2022-09-22 04:33:40 UTC 23.36.76.121
mnemonic passive DNS www.facebook.com (1) 99 2017-01-30 05:00:00 UTC 2022-09-22 04:32:10 UTC 157.240.200.35
mnemonic passive DNS b-code.liadm.com (1) 3597 2016-01-19 10:23:52 UTC 2022-09-22 12:08:54 UTC 143.204.55.54
mnemonic passive DNS ocsp.sectigo.com (1) 487 2018-12-17 11:31:55 UTC 2022-09-23 00:06:47 UTC 104.18.32.68
mnemonic passive DNS widget.trustpilot.com (8) 6018 2017-09-05 07:45:53 UTC 2022-09-22 13:11:18 UTC 143.204.55.78
mnemonic passive DNS ocsp.pki.goog (12) 175 2017-06-14 07:23:31 UTC 2022-09-22 04:32:28 UTC 142.250.74.3
mnemonic passive DNS c.bing.com (1) 247 2012-05-22 10:26:32 UTC 2022-09-22 04:32:57 UTC 13.107.21.200
mnemonic passive DNS vars.hotjar.com (1) 1014 2020-11-05 10:13:14 UTC 2022-09-22 19:41:01 UTC 143.204.55.105
mnemonic passive DNS static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2022-09-22 04:31:54 UTC 54.230.111.39
mnemonic passive DNS status.thawte.com (2) 5123 2017-11-27 12:33:51 UTC 2022-09-22 04:39:42 UTC 93.184.220.29
mnemonic passive DNS www.clarity.ms (2) 1404 2018-08-22 07:41:57 UTC 2022-09-22 04:33:40 UTC 13.107.246.53
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-22 20:22:27 UTC 143.204.55.27
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-22 04:34:04 UTC 34.117.237.239
mnemonic passive DNS connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2022-09-22 04:31:51 UTC 157.240.200.14
mnemonic passive DNS www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-09-22 20:44:09 UTC 142.250.74.164
mnemonic passive DNS www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-09-22 06:07:28 UTC 142.250.74.3
mnemonic passive DNS b.clarity.ms (1) 3462 2021-07-27 12:49:08 UTC 2022-09-22 05:50:48 UTC 20.75.32.255
mnemonic passive DNS r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-09-22 04:32:00 UTC 23.36.76.226
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-22 05:24:31 UTC 143.204.55.49
mnemonic passive DNS ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2022-09-22 21:38:01 UTC 93.184.220.29
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-22 04:31:50 UTC 172.217.21.168
mnemonic passive DNS px.ads.linkedin.com (2) 522 2017-08-08 16:28:50 UTC 2022-09-22 16:31:57 UTC 13.107.42.14
mnemonic passive DNS ocsp.sca1b.amazontrust.com (5) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.158
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-22 14:28:12 UTC 34.120.237.76
mnemonic passive DNS t.adcell.com (1) 43380 2018-11-13 18:43:50 UTC 2022-09-22 23:33:15 UTC 185.5.82.77
mnemonic passive DNS googleads.g.doubleclick.net (5) 42 2021-02-20 15:43:32 UTC 2022-09-23 00:57:59 UTC 142.250.74.66
mnemonic passive DNS trc-events.taboola.com (2) 1779 2020-06-09 13:52:57 UTC 2022-09-22 04:47:39 UTC 141.226.228.48
mnemonic passive DNS static-cdn.mackeeper.com (33) 346539 2021-03-07 15:04:17 UTC 2022-09-22 23:33:14 UTC 54.230.111.78
mnemonic passive DNS tr.lfeeder.com (1) 16332 2020-11-16 14:42:44 UTC 2022-09-22 19:12:46 UTC 143.204.55.84
mnemonic passive DNS www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-09-22 23:10:49 UTC 142.250.74.174
mnemonic passive DNS s.yimg.com (1) 375 2012-05-20 22:45:00 UTC 2022-09-22 06:44:31 UTC 188.125.94.204
mnemonic passive DNS amplify.outbrain.com (1) 2255 2017-04-12 07:58:35 UTC 2022-09-22 06:11:51 UTC 23.38.201.81
mnemonic passive DNS bat.bing.com (4) 387 2014-04-08 09:23:16 UTC 2022-09-22 04:44:30 UTC 13.107.21.200
mnemonic passive DNS c.clarity.ms (2) 803 2021-02-03 23:22:47 UTC 2022-09-22 05:02:19 UTC 20.234.93.27
mnemonic passive DNS www.wownicepop.com (1) 0 2022-05-28 08:52:51 UTC 2022-09-22 04:41:03 UTC 18.196.84.70 Unknown ranking
mnemonic passive DNS dvcasha2.ocsp-certum.com (1) 71753 2014-11-27 08:04:42 UTC 2022-09-22 07:33:26 UTC 23.36.79.17
mnemonic passive DNS rp.liadm.com (1) 2705 2017-02-01 20:43:30 UTC 2022-09-22 12:08:54 UTC 3.222.121.178
mnemonic passive DNS app2.mackeeperaff.com (3) 0 2022-06-14 08:53:06 UTC 2022-09-22 04:26:11 UTC 18.215.214.239 Unknown ranking


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 18.196.84.70

Date UQ / IDS / BL URL IP
2022-12-08 05:08:04 +0000
0 - 0 - 1 www.wownicepop.com/059f37d0-406e-42db-b1f3-51 (...) 18.196.84.70
2022-12-05 06:33:16 +0000
0 - 0 - 1 www.wownicepop.com/f2500dfc-65b8-45d8-9b81-50 (...) 18.196.84.70
2022-12-05 06:32:43 +0000
0 - 0 - 1 www.wownicepop.com/f2500dfc-65b8-45d8-9b81-50 (...) 18.196.84.70
2022-12-04 12:11:34 +0000
0 - 0 - 1 www.wownicepop.com/a849cdb9-3062-4a6b-bfe9-37 (...) 18.196.84.70
2022-12-04 12:07:44 +0000
0 - 0 - 1 www.wownicepop.com/f2500dfc-65b8-45d8-9b81-50 (...) 18.196.84.70

Last 5 reports on ASN: AMAZON-02

Date UQ / IDS / BL URL IP
2022-12-08 17:06:34 +0000
0 - 0 - 3 e-serviceparts.info/landingpages/67128afe-85e (...) 143.204.55.82
2022-12-08 16:54:26 +0000
0 - 0 - 3 ww38.agame11.info/patch/gangtiexiongxin2hanhu (...) 76.223.26.96
2022-12-08 16:48:34 +0000
0 - 0 - 1 doppk.com/wp-content/dv/upgraded.zip 3.130.204.160
2022-12-08 16:45:33 +0000
0 - 0 - 0 height.intercom-mail.com/via/e?ob=MIoG6cDJwoC (...) 143.204.55.75
2022-12-08 16:45:33 +0000
0 - 0 - 1 d2oq4dwfbh6gxl.cloudfront.net/f/yandex/files/ (...) 54.230.245.187

Last 5 reports on domain: wownicepop.com

Date UQ / IDS / BL URL IP
2022-12-08 05:08:04 +0000
0 - 0 - 1 www.wownicepop.com/059f37d0-406e-42db-b1f3-51 (...) 18.196.84.70
2022-12-05 06:33:16 +0000
0 - 0 - 1 www.wownicepop.com/f2500dfc-65b8-45d8-9b81-50 (...) 18.196.84.70
2022-12-05 06:32:43 +0000
0 - 0 - 1 www.wownicepop.com/f2500dfc-65b8-45d8-9b81-50 (...) 18.196.84.70
2022-12-04 12:11:34 +0000
0 - 0 - 1 www.wownicepop.com/a849cdb9-3062-4a6b-bfe9-37 (...) 18.196.84.70
2022-12-04 12:07:44 +0000
0 - 0 - 1 www.wownicepop.com/f2500dfc-65b8-45d8-9b81-50 (...) 18.196.84.70

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-09-27 21:02:31 +0000
0 - 0 - 1 www.wownicepop.com/76564c09-72ed-46b9-80ff-a5 (...) 18.196.84.70
2022-09-27 19:05:49 +0000
0 - 0 - 1 www.wownicepop.com/235dfa11-157f-458f-a725-51 (...) 18.196.84.70
2022-09-26 21:04:37 +0000
0 - 0 - 1 www.wownicepop.com/90ed9505-1e59-4fc6-b5c8-fb (...) 18.196.84.70
2022-09-26 15:05:15 +0000
0 - 0 - 1 www.wownicepop.com/90ed9505-1e59-4fc6-b5c8-fb (...) 18.196.84.70
2022-09-25 21:00:07 +0000
0 - 0 - 1 www.wownicepop.com/00b40ae7-a33e-43a6-b626-35 (...) 18.196.84.70


JavaScript

Executed Scripts (44)


Executed Evals (10)

#1 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 4ddd51fa56504fe5c4eaf5321c3bfe9c2f58d248208100f0b73fd2479c8be6b0

                                        (function() {
    return document.querySelector("[data-affid]").dataset.affid
})();
                                    

#2 JavaScript::Eval (size: 89, repeated: 1) - SHA256: d5df103b3d6158b5ad05c19ce6f61d6a38c1b9c47f0ce213ac39dccf8a215f2f

                                        (function() {
    return document.querySelector("[data-tidstr]").dataset.tidstr.split(";")
})();
                                    

#3 JavaScript::Eval (size: 329, repeated: 1) - SHA256: 660661e9c7f0f890974bbbb23472af1bc93f90cba6c90f0ebb9dbcf9cf8355d4

                                        (function() {
    return function(a) {
        a.set("dimension2", a.get("clientId"));
        a.set("dimension3", google_tag_manager["GTM-PVNC4DL"].macro(2));
        a.set("dimension18", google_tag_manager["GTM-PVNC4DL"].macro(4));
        a.set("dimension19", google_tag_manager["GTM-PVNC4DL"].macro(6));
        a.set("dimension20", google_tag_manager["GTM-PVNC4DL"].macro(8))
    }
})();
                                    

#4 JavaScript::Eval (size: 70, repeated: 1) - SHA256: 27e412e5d5ac610590ad792b5fa21dbc233f79c391dcdf0d02e0801eda3c9ceb

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(16)[0]
})();
                                    

#5 JavaScript::Eval (size: 333, repeated: 1) - SHA256: 2e916e96c5178535ec8422b931f86b24c207c5242e3b9746195797ad20c0c84b

                                        (function() {
    return function(a) {
        a.set("dimension2", a.get("clientId"));
        a.set("dimension3", google_tag_manager["GTM-PVNC4DL"].macro(15));
        a.set("dimension18", google_tag_manager["GTM-PVNC4DL"].macro(17));
        a.set("dimension19", google_tag_manager["GTM-PVNC4DL"].macro(19));
        a.set("dimension20", google_tag_manager["GTM-PVNC4DL"].macro(21))
    }
})();
                                    

#6 JavaScript::Eval (size: 70, repeated: 1) - SHA256: 417e6fdd6687faa89a10b60a8d97de31b9285a6aa23d79f2ed007536cd83f31d

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(18)[1]
})();
                                    

#7 JavaScript::Eval (size: 70, repeated: 1) - SHA256: 5024d23c0216096e391b07dd33d46152f9de7341d425070cb14410a5e5098174

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(20)[2]
})();
                                    

#8 JavaScript::Eval (size: 69, repeated: 1) - SHA256: 63b1c0ecb5b684e67c9fc03d7d624aafa39a6fabd1ffe7108f77e2e9ab11b623

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(3)[0]
})();
                                    

#9 JavaScript::Eval (size: 69, repeated: 1) - SHA256: 8da159a87b17690597f668f259e641f30925835c139dc682dbf026f304d898fe

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(5)[1]
})();
                                    

#10 JavaScript::Eval (size: 69, repeated: 1) - SHA256: a12eb7029f1bb54eb1b2d9bad442cb478d95f413e74f7206f5f06f3782debb35

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(7)[2]
})();
                                    

Executed Writes (0)



HTTP Transactions (132)


Request Response
                                        
                                            GET /00b40ae7-a33e-43a6-b626-3565e3f6a6d6 HTTP/1.1 
Host: www.wownicepop.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         18.196.84.70
HTTP/1.1 302
                                        
Server: nginx
Date: Fri, 23 Sep 2022 03:06:23 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://affcpatrk.com/track?id=62e25b4f4c25ad1e44d75aaa&aff_sub=weumpljmo0ft638jiqcrjh7i
Pragma: no-cache
Set-Cookie: 00b40ae7-a33e-43a6-b626-3565e3f6a6d6-v4=0mpAXuR3J1vzDBWNUTdklze9_nrs9XvYofb-ztwSyJE; Max-Age=86400; Expires=Sat, 24-Sep-2022 03:06:23 GMT; Domain=www.wownicepop.com; Path=/; HttpOnly cc-v4=VxqnwAI8k8bN%2BLYXPHqQt1p7pWWr7tzb%2BhhR2GN%2B1A91g2VfHhkxQA3%2FBx07nusVNorlMVxxpRtDbjZ61gx8toDL16suxSdvQ9bNBT9mdBVX0MPQgkBpsX5WV0T8LXWKbR5naq5ygv6hJlqWvkZlRw%3D%3D; Max-Age=31536000; Expires=Sat, 23-Sep-2023 03:06:23 GMT; Domain=www.wownicepop.com; Path=/; HttpOnly


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 23 Sep 2022 02:14:07 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5HhACTFeZ97-NW7fZlBJwcd5ogqWkl1TJiAmrTgPtZzbrKfx6S5rNA==
Age: 3136


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4782
Expires: Fri, 23 Sep 2022 04:26:05 GMT
Date: Fri, 23 Sep 2022 03:06:23 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.49
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pGqzepDH1vOJsgK6U2cVmWnwTG3oeiVCq7rqw6lBbiZCdnWudX-b8A==
age: 81069
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 23 Sep 2022 03:06:23 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F919D29F93801BCE87DC129A7F5294B9A1C057F332C0836B31C45B95751997CF"
Last-Modified: Wed, 21 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10064
Expires: Fri, 23 Sep 2022 05:54:07 GMT
Date: Fri, 23 Sep 2022 03:06:23 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 23 Sep 2022 03:03:23 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Fri, 23 Sep 2022 03:22:12 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MwHyDLc_vvR2QgH6i1c5pLEzcGkc9nySAzH4BiYX2hjFZFugHgETVg==
Age: 181


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /track?id=62e25b4f4c25ad1e44d75aaa&aff_sub=weumpljmo0ft638jiqcrjh7i HTTP/1.1 
Host: affcpatrk.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         51.255.127.45
HTTP/2 302 Found
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Fri, 23 Sep 2022 03:06:24 GMT
content-length: 536
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, x-access-token
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
set-cookie: ToroAdvertising=j%3A%22632d22b05f2c59ef0a507601%22; Max-Age=2592000; Path=/; Expires=Sun, 23 Oct 2022 03:06:24 GMT; HttpOnly; Secure; SameSite=None
location: https://rdt.mackeeperaff.com/629a3e04d84ecc000136838b?affid=61b0a334c1e46db6ffb361cd&pubid=629a3fed4714f70001b234db&ref_id=632d22b05f2c59ef0a507601&transaction=632d22b05f2c59ef0a507601&utm_medium=adpartner&utm_source=affiliate
vary: Accept
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (536), with no line terminators
Size:   536
Md5:    5324cf6821d430331b3d6ca3f80d98d9
Sha1:   e67556dadc0f93bedf722bb67122b66d719ba094
Sha256: 3a349d21c56eda63c5e518e4a49f8e7f8658b88e0b73de121e6018c198d54a8b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2322
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 03:06:24 GMT
Last-Modified: Fri, 23 Sep 2022 02:27:42 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:24 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 22 Sep 2022 23:23:20 GMT
Expires: Thu, 29 Sep 2022 23:23:19 GMT
Etag: "2c10cd11ae20dde84e7b6fc4deb7232f8ea51f13"
Cache-Control: max-age=590814,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74f0106d1ce0b523-OSL

                                        
                                            GET /629a3e04d84ecc000136838b?affid=61b0a334c1e46db6ffb361cd&pubid=629a3fed4714f70001b234db&ref_id=632d22b05f2c59ef0a507601&transaction=632d22b05f2c59ef0a507601&utm_medium=adpartner&utm_source=affiliate HTTP/1.1 
Host: rdt.mackeeperaff.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         85.17.54.17
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Fri, 23 Sep 2022 03:06:24 GMT
Content-Length: 271
Connection: keep-alive
Location: https://app2.mackeeperaff.com/land/226/?rtkcid=632d22b079d11800010c4fd3&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate - CPI campaign (install only) (226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Set-Cookie: redhash=NjMyZDIyYjA3OWQxMTgwMDAxMGM0ZmQzfDB8NjI5YTNlMDRkODRlY2MwMDAxMzY4MzhifHwzNGQzMWUyMy01MDA5LTRkYTctYjhkOS0wNDAyZTYxNzhhYzF8MTY2MzkwMjM4NA==; Path=/; Domain=rdt.mackeeperaff.com; Expires=Sat, 23 Sep 2023 03:06:24 GMT; Secure; SameSite=None
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   271
Md5:    28b8197909f3e2cf2c999a8623a3544e
Sha1:   814ace3a578ba4b3a63a263a253b4182dea1cad9
Sha256: 1e9626d3211524d4a3a708ce033659a665d5bbccc69ad099ab9f96dfb8f2f6bb
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0rg5HMJ2rGD2Zq4cWsxYvw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         54.200.107.47
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 44uUqhZ8O4QGyFPWF5dDzWphkzQ=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.158
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 03:06:24 GMT
Server: ECS (dcb/7F5B)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KytjnAF6R1bWm7entmiyf7FdUPvYI82QhRXCh5RX98zRuHmJ6En2jg==

                                        
                                            GET /mk-land/dist/svg/landings/226_6/clean_two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 431
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:55 GMT
etag: "f0f6b52bce4737187d5986d65c2b9a11"
cache-control: public, max-age=604800
x-amz-version-id: pwhnB7X_4WGez_7temaOOVBFmwfQ7lz1
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AQXSwBajvUvNI1EEfu0MfXAPUan8NiimLfFOEAybIfnL2HpBMvd_Hw==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (431), with no line terminators
Size:   431
Md5:    f0f6b52bce4737187d5986d65c2b9a11
Sha1:   420adf24b61c4b96d5dc1b30eb4cbd44106ec3c2
Sha256: b02a16d65bb919592b8b0903e78661c9c6a6b6d39218ce2ca664c5b2fbccad76
                                        
                                            GET /mk-land/dist/svg/landings/226_6/soft_two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 416
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "9cab428314b3d6d14b27b1c135719c23"
cache-control: public, max-age=604800
x-amz-version-id: 9Nz90cyOwx1KpcUWe9_.hucQaEGthL8K
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l4oA7dx90krFuYbwFtAUpf9HZrAY4zxynrHI_5BPqiN5ncMllBlwJw==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (416), with no line terminators
Size:   416
Md5:    9cab428314b3d6d14b27b1c135719c23
Sha1:   e02c5b85b10d649435b5930e710056f30ea2cc50
Sha256: 3a275c72443bceadd78236a8c465a5b9285433efd40cd339836380ae06c25279
                                        
                                            GET /mk-land/dist/svg/landings/226_6/clean_three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 583
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:53 GMT
etag: "64036bea66db20718ae3285e9ca951cd"
cache-control: public, max-age=604800
x-amz-version-id: lrmZs4eSsgPFrB9nH9B.ep7npBST6sLn
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: i17jDGNgeWr8-bshtp7TnJPxQ-SVEFk9vZSZY2mUxTb9u_rWmN6FBQ==
age: 66794
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (583), with no line terminators
Size:   583
Md5:    64036bea66db20718ae3285e9ca951cd
Sha1:   bd5eed2f6cdfd70698fa356785acb13c21768d41
Sha256: 462a1d5d1feb27660a51f000e54ac924bcca7b6d94337593dd0e741560d7da7f
                                        
                                            GET /mk-land/dist/svg/landings/226_6/per_two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 573
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: "f7c01b4f32eceacb4bf0a84f301505c6"
cache-control: public, max-age=604800
x-amz-version-id: INeeTgMqzakR5LaDcvWPGvpXq9_xSm8Q
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rePAei6lSyFGVgUY6yDjNIMJv5VDiySDC91elRYrdr2cjTLw_IMN8A==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (573), with no line terminators
Size:   573
Md5:    f7c01b4f32eceacb4bf0a84f301505c6
Sha1:   e69ac48a9b8f6ce19faf14bd1014c3943b967c04
Sha256: f26625626a6dd5205a1a10f6c914bdbf6441dd7075b5cff2fdc9d09ecb9f5a67
                                        
                                            GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Fri, 23 Sep 2022 01:22:27 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IoJbq2qvUWfn1UmCHASNy1dUbfnpJTZShvY9Yec0s5PWv6e66N_Vfg==
age: 6239
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Size:   6124
Md5:    5add60196e5f96a414fb4b9586764e5d
Sha1:   633f471b3c2fcedeef9cad90cb5bf56f5fe55588
Sha256: 5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
                                        
                                            GET /mk-land/dist/svg/landings/226_6/per_one.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 539
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:55 GMT
etag: "97ea212e1de4543eabca9fd8ddd404de"
cache-control: public, max-age=604800
x-amz-version-id: GTHRvt.ZAHuYF0OtDGQPKnnMNAS2EieE
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fk-lPUvaSRKljZ9JhGOnqJdVQ4wsCMrd0xhPbTc5cwIp-qsa15H5Vw==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (539), with no line terminators
Size:   539
Md5:    97ea212e1de4543eabca9fd8ddd404de
Sha1:   007dadc86f73968b1c388e45d8700ecf89d6a50b
Sha256: 0e99a715e4465cdb227652a88f9d4a7a18bb59a56278b447b1ded534bfea4c5c
                                        
                                            GET /mk-land/dist/svg/landings/226_6/per_three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 720
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:53 GMT
etag: "6827d895741abaebbe73a96f65d28344"
cache-control: public, max-age=604800
x-amz-version-id: mvoCbEizAhsFLH5wdS2MZYQ3AAtx74.A
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dJsAcx056qoBN-AkM7aS9z5cX2ZG61n-XXuioBlosNKpE0I57TrlKA==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (720), with no line terminators
Size:   720
Md5:    6827d895741abaebbe73a96f65d28344
Sha1:   7b9070dbb0c59f249194f6b182b09507883a627c
Sha256: e6e9d084a55b47d2b0b35022c13168a915b215f34bc43c62fe7c35f7d78896d4
                                        
                                            GET /mk-land/dist/svg/landings/226_6/ant_one.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 432
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: "48ee3a2cc5a7ac742bd440d7c5497fa3"
cache-control: public, max-age=604800
x-amz-version-id: zITGxENkluD_hWywsBv_mgYkXnAZakoF
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bL0faMUGfkgXGk-imxcSTab6gxr_SwEnt7kae4btswFqjKnSBlKmWg==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (432), with no line terminators
Size:   432
Md5:    48ee3a2cc5a7ac742bd440d7c5497fa3
Sha1:   052e084834e87565be5632d608316d919ef4a6be
Sha256: eb72a677d24f6679bbdd7ee7c9809a575c294d7e1c458b85d2ad0d3d3f7dc9d5
                                        
                                            GET /mk-land/dist/svg/landings/226_6/soft_four.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 399
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:57 GMT
etag: "bc4849c8d35e6a210935e7b9fdda0196"
cache-control: public, max-age=604800
x-amz-version-id: cjT7BZtus9OxhFupiCyx1NXoECdT1Iuy
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RF9WKUBsXs5kYs4MJTT4rIwEGITtEemjv-oDStA1zELLiW6I6lzoQg==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (399), with no line terminators
Size:   399
Md5:    bc4849c8d35e6a210935e7b9fdda0196
Sha1:   ffcc50042a4d7862847115f659b0f099c1b469bb
Sha256: 1c216829b95c0b70220cb919b5889fce57c99a687d7be02f06ded33f80527283
                                        
                                            GET /mk-land/dist/svg/landings/226_6/security-two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 442
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "1dc4abe3aa5d009df49fbf517f481ccc"
cache-control: public, max-age=604800
x-amz-version-id: JYyDmy0JzcCA_htBP3.Yy0AadPOSkqdB
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pUAyFE7kAcfXQirzstqRvbO2GFs8gdgnToRSrMyWiLnw-vdnn0aBdg==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (442), with no line terminators
Size:   442
Md5:    1dc4abe3aa5d009df49fbf517f481ccc
Sha1:   c59310139609463fcda8759b2acb5d273cb47b2c
Sha256: 355f6e09902fa7825ed2dcab34dc5b00f874c346397cf1135dd7d04c97e17457
                                        
                                            GET /mk-land/dist/svg/landings/226_6/privacy-two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 987
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "102a03f6293726facccabba18c0e9455"
cache-control: public, max-age=604800
x-amz-version-id: vd2P4eOW5sVryjV60xLUbORWH7nqhDKo
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5r9znTUENgwfFK9m2Vjoryfsb6U_SRGlgT9paIid0hLoAjFugd0p6g==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (987), with no line terminators
Size:   987
Md5:    102a03f6293726facccabba18c0e9455
Sha1:   a26d09667f914080c04fd009f03f8d95850bb895
Sha256: 1d974ed4e61fc2a77bcd71ffda37e83e83cf0681d1633d5f42c00c3df2226def
                                        
                                            GET /mk-land/dist/svg/landings/226_6/prive_three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 717
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:00 GMT
etag: "a5c782d385dc0cbbd4afa608cdd1d8f3"
cache-control: public, max-age=604800
x-amz-version-id: hAo3LTGm1kioSzmqbpisk6sFB6F2ne_I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k5DTg7yDJBeVNo-vUapOi7r4IRtq97WSyW9dw79_NU5IC1Cw-onQxA==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (717), with no line terminators
Size:   717
Md5:    a5c782d385dc0cbbd4afa608cdd1d8f3
Sha1:   68087ac49e47e19dba31ef068f54a6c574a8bfc2
Sha256: 6a6809edb7464cf5d45ff57e705bbefcfb37048721518235e12a5fc5b4b801c4
                                        
                                            GET /mk-land/dist/svg/components/btn-arrow.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 412
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:38:48 GMT
etag: "2bb20d31732674b19f39721677ee98b0"
cache-control: public, max-age=604800
x-amz-version-id: nukWLapdOnZ6K4hroAQrBv4GKBUk7Zxa
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YTf0BzFkPr0c4iIobff6OpwG_ANX9Bwpw4cdA7z5-3adScf1RHa2Iw==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (412), with no line terminators
Size:   412
Md5:    2bb20d31732674b19f39721677ee98b0
Sha1:   c009a4436fe0fd3e281dcd9f60ab0f2769f25cb5
Sha256: b5553f16ea66eab43971c73b4115bbe291b2188dc00d0c5d4f5bb21958e3dda2
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21307
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 03:06:25 GMT
Connection: keep-alive

                                        
                                            GET /5.5.0/bundle.min.js HTTP/1.1 
Host: browser.sentry-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.130.217
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
expires: Fri, 11 Nov 2022 05:27:37 GMT
last-modified: Fri, 05 Jul 2019 11:17:04 GMT
etag: W/"39339cf627bc67e34d4c623bea4c0b4a"
x-guploader-response-body-transformations: gunzipped
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Fri, 23 Sep 2022 03:06:25 GMT
age: 27293929
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 51570
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (51441)
Size:   51570
Md5:    b1dcc6195d84cf50c3e882d3d515f848
Sha1:   06562c193663a31a3cabeaa18cffeb882084fcb6
Sha256: 8c04755395b8f232c57d062a7669c3c414658299d29c6b6f83f1f30185d94ecb
                                        
                                            GET /mk-land/dist/svg/landings/226_6/clean_one.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 486
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: "4ef86b2fbcdb943033b3c85e020122da"
cache-control: public, max-age=604800
x-amz-version-id: BK083fsfql.WcGuuNtT06YWzZ5Io0.yQ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GCFWsp9a_JimEgQyKm9LjadmmMtBuEWGO3bkmmVI8a_i8FqQLj7PZQ==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (486), with no line terminators
Size:   486
Md5:    4ef86b2fbcdb943033b3c85e020122da
Sha1:   162e093a49c83d2d01bc48c1c9d398ac57d8b92b
Sha256: 4418d84f10560dd73aef8ddb24712a06de3530a83ec5a2674788a8e3758056da
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21307
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 03:06:25 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ec986e3-2bce-4ded-85eb-e88df9893a30.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6505
x-amzn-requestid: bc9cc556-8897-4484-ac07-f18e4f5250ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YvrfiFl4oAMF_Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63295930-7a627b7d7683919e41ca599b;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 06:09:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UNlx91pOuttpN-IrQs_g-PRI8C_NmZDKdnOpfayCJ719fa6FwnOIGg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:51 GMT
age: 17674
etag: "265d3e98bcbf5f14f214102279a7911d6fd64048"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6505
Md5:    ff021fa15adb0d3a24158bc00cf0980a
Sha1:   265d3e98bcbf5f14f214102279a7911d6fd64048
Sha256: 211d709fb1851a62f856a78e3b115ef816f78ab9a28f870d48fa3d1912eac16a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bb1df1b-7300-4e0d-ad7a-6e90b6c03299.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12538
x-amzn-requestid: 2ae96766-6999-44ec-8084-a19d26b3e118
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YpOJOHYFIAMFXYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6326c3d4-060b96fa5fc99e79711bde3f;Sampled=0
x-amzn-remapped-date: Sun, 18 Sep 2022 07:08:04 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: f2gWVJG2DTnIblkJjx4bkFIeg8GauM9TnrThPQPZTkAuL7D7AyG2TQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 17:48:34 GMT
age: 33471
etag: "76ac1f33cd006227162e12e7142e754562bec0c0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12538
Md5:    e2bbb3856eeac20d0ee556c96144bf6c
Sha1:   76ac1f33cd006227162e12e7142e754562bec0c0
Sha256: 1e3f6551d401346b6d809d8feb9b36a9e0006f99f518d1130aa9bd630bfb6801
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ea09a2e-db97-4846-b5c4-9bc0e69977bc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13000
x-amzn-requestid: 0658a29b-3c96-431c-ab00-952ab7365e1f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YioLNHd1oAMFkbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632420ad-488015441a19070348de1398;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 07:07:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Vhg1m3Tpmoo68IBbutFCvjCLD6iBW3YWysB7hA837CwDK3DSSFp_KA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 09:35:19 GMT
age: 63066
etag: "06f5f63e681d711bd68626805c5dd2b902ebf9cf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13000
Md5:    634db5bfe2b27e608c3f3518b0c44ebb
Sha1:   06f5f63e681d711bd68626805c5dd2b902ebf9cf
Sha256: 935d3442ed37fe78df5fe40fac87ca00466a3e19ef3c72a80dae17ffbcacd45d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0908c18b-cd0b-41cc-beb5-0347df28884c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11059
x-amzn-requestid: 65fe1c05-a158-4ac2-8368-f26da119ef68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcDTgGV4oAMF0iw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217f49-74fc5c511bee36fd11d6d2eb;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:14:17 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ArtxwEnLiPvfdnNGum0ZbXPBv8Xd6lR2-vWnBj7MnOIq4q3r6rswWQ==
via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:51 GMT
age: 17674
etag: "30ccc2dd2597b5b720d66c960ee8bd63c7115630"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11059
Md5:    9e125802119a2737820b343c4e9ecfb6
Sha1:   30ccc2dd2597b5b720d66c960ee8bd63c7115630
Sha256: 90cce372b2b8c89569fffc55de468bfc7cd4b7454ae7c55c48b7a846506b576e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98db69a9-8416-4b0b-b1b4-1ed196b985e5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5340
x-amzn-requestid: b13bc974-e15d-43a4-a918-fbc35b09a36f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y19HljIAMFY8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4f2-2cb226ba4bd7c7e74d9ab2db;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8DCVWC4Ihr4R21i3ySyiWdUK0aGymTE22B842ZKolG-ZThiKSMX-uQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:26 GMT
age: 17699
etag: "0264e73c4cfff0bb255757c7e1c760a5ad3ece80"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5340
Md5:    3b318ea5c36d2b22b925f7dfe382df5f
Sha1:   0264e73c4cfff0bb255757c7e1c760a5ad3ece80
Sha256: 0c2f58ea4f5f32bb327f292e1b8fb5a4a60230bffc3abc440a624df27ec0d6bc
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53fa68ad-0fdf-4958-b6f1-e38245c20380.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4947
x-amzn-requestid: 2d8325c6-7564-4fab-86ad-75bc44451ac8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YzHtOFNXoAMF5iQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ab987-30ba7b1d6088630236d03486;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 07:13:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3NJdOO87M_on7FBlPCczqwUtjsq75kEXAxq9CcsiHDvuaUDCYhd9LQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:07:32 GMT
age: 17933
etag: "944c0453511761e101cb9e50ba8af7545e32e357"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4947
Md5:    d22173527a1bc9b264170aaa07491248
Sha1:   944c0453511761e101cb9e50ba8af7545e32e357
Sha256: c04b0975162a54e0afc5ae4a863f8e8393415d455e8f7ff3fc67a47868e09ec0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.158
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 03:06:25 GMT
Last-Modified: Fri, 23 Sep 2022 02:43:26 GMT
Server: ECS (dcb/7FA3)
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yhXJHdMU-fOrest6mREWUFHdFHkKVmX1jiIxni466VR4mgU5537OiQ==
Age: 1379

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.158
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 03:06:25 GMT
Server: ECS (dcb/7EA5)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: w-GvDX3HpDt72ktwohpFfvdnoZ56qXV_u41PXAX_nZyZZ_vabd5cXg==

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.158
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 03:06:25 GMT
Server: ECS (dcb/7EC6)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _Udxey3gFL8sC7S7duwk9AMNw5LX9ZuN5mW9cEmrUQMQhw07SkOzqA==

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /mk-land/dist/images/landings/226/hero.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 219648
date: Thu, 22 Sep 2022 08:34:51 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:57 GMT
etag: "87dd68aac400d85dfa1db40e1b82d15d"
cache-control: public, max-age=604800
x-amz-version-id: 4L0sXSs7c8B1NC.82r.pHSX7QXp0wcne
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lPfI2q_a4wmownKIgdb_8rA5R4kEvvJt7bMdoLipKwxr5V1Yz2Zg_w==
age: 66695
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   219648
Md5:    87dd68aac400d85dfa1db40e1b82d15d
Sha1:   120f848d486af3d5ebabd098ceac1a45c5833ae7
Sha256: 1a60fe135354f064139e85467ab8425ecb667362705658f2f17c1b4b03c5ea83
                                        
                                            GET /mk-land/dist/images/landings/226/memory.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 1420
date: Thu, 22 Sep 2022 08:34:51 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:58 GMT
etag: "e24e191c026b00c1d7a106572ec478ed"
cache-control: public, max-age=604800
x-amz-version-id: 1vAS8O6UcwVIOLifS.J6ICiwtfTXw2jZ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mpWsDk9OAyBpsEAkZwzKDplaR_ccugPDbgK3HYVXpKiSYVPvUCK-Vg==
age: 66695
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1420
Md5:    e24e191c026b00c1d7a106572ec478ed
Sha1:   b2929eaa3663327447ebc0a36f971fd5f41ed3bb
Sha256: dfcbf5db55a5b400ad7e7c0cbf38c1dcb6e48199f4acd751a2eb44d579b078fa
                                        
                                            GET /css?family=Roboto:400 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Sep 2022 03:06:25 GMT
date: Fri, 23 Sep 2022 03:06:25 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2335
Md5:    6f5ce854befe2a1049d7dfc35b4a5077
Sha1:   2acd043d0518676dd76f7a7de90ef023d55bfee6
Sha256: 4a5f061bebec74969884ee739e4bcf0e1e923e61ef97bd7817a1390613eabf55
                                        
                                            GET /mk-land/dist/images/landings/226/virus.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 1718
date: Thu, 22 Sep 2022 08:34:51 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:59 GMT
etag: "9b099488f1b2855d4161d0f212c9c4ad"
cache-control: public, max-age=604800
x-amz-version-id: hC8o5xw8Vbs14GyNB7kKk0ruf_0ADI.y
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -dOEILEG1y3FC7Xx1aCLfzbw-RnB6LEeUDV-2mbLVhXoimUDeheHkg==
age: 66695
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1718
Md5:    9b099488f1b2855d4161d0f212c9c4ad
Sha1:   ed56ac97b5e0a671f523aece4ad04cf22dd4a40f
Sha256: 3fbe829b179669affe3b743bb603ff415506fc7d76072980a7900ce6ceb41431
                                        
                                            GET /mk-land/dist/images/landings/226/performance.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 30230
date: Thu, 22 Sep 2022 08:34:51 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:58 GMT
etag: "f8a37f0c75191e262d9e00b2bbe849e0"
cache-control: public, max-age=604800
x-amz-version-id: WtImzHf7J4uGMuRdFTGvv5Gk2dF.H7tm
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KJYtchNP71pz6_a1tncsKTR_prxHxQXgowyo4wQ5U7HdOTYAm6QovA==
age: 66695
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   30230
Md5:    f8a37f0c75191e262d9e00b2bbe849e0
Sha1:   6f18898837773a58c4481fc4bc08cca2cdd69216
Sha256: 1f3376c88f88a4d8be5f4da476e1a2bd337779b975fb3e240e3a01023a872dba
                                        
                                            GET /gtm.js?id=GTM-PVNC4DL HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         172.217.21.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Sep 2022 03:06:25 GMT
expires: Fri, 23 Sep 2022 03:06:25 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93911
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (40316)
Size:   93911
Md5:    c5d37b0ecb7d5752f4a235aec3b4a0e6
Sha1:   f4c9f883a91937009adad18a44f968959b065efa
Sha256: fead34b1c7dfe84fd05353096a749b786a5fbc986bb5dace6eac77fa55a645bd
                                        
                                            GET /trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         143.204.55.78
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 3664
last-modified: Tue, 20 Sep 2022 08:08:24 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Thu, 22 Sep 2022 08:11:12 GMT
cache-control: max-age=86400
etag: "29e5bc4875511d91002c3fcf0bf5464d"
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: h00blr4GEpFqBudZd8W7p2Y5YtQlJ6d1j4g4sMjqoGFsM4G-bNuMjQ==
age: 68115
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (15081)
Size:   3664
Md5:    29e5bc4875511d91002c3fcf0bf5464d
Sha1:   6c3530ff7b521251d2b19fb03662e33b9b893f34
Sha256: 8760bfc59fd072c16fae232ec667a7fb2972e0870454f5b282806b7c60363cc3
                                        
                                            GET /mk-land/dist/fonts/MarkOT.otf HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: font/ttf
                                        
date: Thu, 22 Sep 2022 08:36:02 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"106ae5fa4d0e51fa73ed42c3beecda5e"
cache-control: public, max-age=604800
x-amz-version-id: Eju.irxG68JYjYuEi7BGXEsqN0F4MTaA
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s4Qq6AXk8WjUEq2VPJXNMdj1WHZZUt3vLeHIp6uHkNZtp9fEBm5WyA==
age: 66624
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  OpenType font data\012- data
Size:   56713
Md5:    9cff9658c4b673feb14d3c1d6db78f3d
Sha1:   78d4fe4dd4c069c167471dab4509dbf5bda63d5d
Sha256: 90b29ee18f1a19ba56d191afe5b48c59b25df2b80c2052072c7f8f6c2ec59f2b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Source+Sans+Pro:400,600 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Sep 2022 03:06:25 GMT
date: Fri, 23 Sep 2022 03:06:25 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (59874)
Size:   28421
Md5:    12da7725d9e04bd529554d86cb1136a3
Sha1:   a98f081912c69cfd6ef67d98566139cb7ef56e8c
Sha256: ddb86c7753df3f73c76844f2a0d5f5971d297c38148bd62ea54b44e80eece8d6
                                        
                                            GET /trustboxes/5419b637fa0340045cd0c936/main.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-length: 16721
last-modified: Tue, 14 Jun 2022 14:06:45 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Thu, 22 Sep 2022 03:37:14 GMT
cache-control: max-age=86400
etag: "b8ae7b77bf4e5eced7f75298e44c8e5c"
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CGgPxvY_KpM_u5bWqyFrduge-rJF7GqW0tdSERpQHgk2prb2JwLhDQ==
age: 84553
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (54787)
Size:   16721
Md5:    b8ae7b77bf4e5eced7f75298e44c8e5c
Sha1:   39fbc5ebea334649054ba56d2b806fe6dfd85933
Sha256: 89144288ad9340d732c663d4eed103b9eeb3505133922cfcddf9b37616f7105a
                                        
                                            GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark%20%7D%7D&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.78
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Fri, 23 Sep 2022 03:06:25 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7AA03Aq-LZ-74yXgUX1xN9d8RDJNIShDsTsSOT-R8BMQYwDoCCOG6Q==
X-Firefox-Spdy: h2

                                        
                                            GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=4dbb14ee00006400050fa293&locale=en-US HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.78
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-length: 433
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
cache-control: public,max-age=1800
date: Fri, 23 Sep 2022 03:06:26 GMT
etag: "ce557b722e57cd6fafe212aad6caa175"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: frnHz7VLnBWXaF179cD4ekGHCHoP9-S9G7SxY0kmwweB5K-uNULpog==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (930), with no line terminators
Size:   433
Md5:    6c2feb461060d627362de811a3201cd0
Sha1:   37d8ad2feaf041cf9bb0d5cf0caf2d696a0f9274
Sha256: 49a00821ee271720d9ae2c52a75ab9c310631759206ae15083ae02fe166dfdbd
                                        
                                            GET /stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.78
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Fri, 23 Sep 2022 03:06:25 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: glFIq6280MRfXQ1fFmOZ8oIlxSF7KDoImwHvHyRn7wXSTAk_qYatEw==
X-Firefox-Spdy: h2

                                        
                                            GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark%20%7D%7D&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.78
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Fri, 23 Sep 2022 03:06:26 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mg05hx5vrzlsFKi_ARpntRNBJ1vH6GkbTF1GLiSZyELnVUuJLzhyuA==
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: dvcasha2.ocsp-certum.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.79.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=340
Date: Fri, 23 Sep 2022 03:06:26 GMT
Connection: keep-alive
X-N: S


--- Additional Info ---
Magic:  data
Size:   1599
Md5:    c6e5572dfe9bbe28979715c5f1a6a49d
Sha1:   1d17dfa1b23833ee9edf9cbac4bc64c4036e0564
Sha256: 4dabfb147f0bb12a80393fba958c734cd0ac0c40b165ba50a87af49f3d87ac62
                                        
                                            GET /?sid=ywVkO4XWPeW7Z6Bj&data=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 HTTP/1.1 
Host: tr.lfeeder.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         143.204.55.84
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
server: CloudFront
date: Fri, 23 Sep 2022 03:06:26 GMT
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0EjBOUuFqQkV4rK8VHGxI451XrRLLUhHvQRhtlLAWQQB1WHrbb9P3A==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /j?dtstmp=1663902385735&aid=a-015g&se=e30&duid=f810f9c9df2c--01gdm4z1e3kjpd8mze2tx3t8r5&tna=v2.4.2&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU- HTTP/1.1 
Host: rp.liadm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         3.222.121.178
HTTP/2 302 Found
                                        
date: Fri, 23 Sep 2022 03:06:26 GMT
content-length: 0
trace-id: 40de75a167a636fc
vary: Origin
location: /j?dtstmp=1663902385735&aid=a-015g&se=e30&duid=f810f9c9df2c--01gdm4z1e3kjpd8mze2tx3t8r5&tna=v2.4.2&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520%28install%2520only%29%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true
set-cookie: lidid=8a668feb-0f59-467f-ae6a-7e5956c216ed; Max-Age=63072000; Expires=Sun, 22 Sep 2024 03:06:26 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2

                                        
                                            POST /land/api/send-event HTTP/1.1 
Host: app2.mackeeperaff.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: MSMDBGd6KtXrXIFb7kbPInxgFGIwwEnZBbbtjwIf
X-XSRF-TOKEN: eyJpdiI6IlNGTnhcL1wvcGdEaHpGMktSS1kzZnhPdz09IiwidmFsdWUiOiJyeG95ZjcrMlwvS2hReXF0UmNXYWdWMDJNVWg3WklnNElqYVVZR0VUUTAwZStGbW5FT0xLcGxERVFEd3hNYVNPVzBjRTVHQXA1MklMOWFNekEwaDFLT0U5K2RpdkJMZ3FLakZVSWtFYXg4K0U3dmtoMDdnUlJCRVY4eklIckFCR28iLCJtYWMiOiJmNjI5ODAxN2I1MTRlYzM5NDFhZjJiNTA1MzYxNzhkZGY3NmJhYmFiOGJhNTM1Mjk3YTQzZDQ2Yjc1ODQ4ZDA3In0=
Content-Length: 102
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/226/?rtkcid=632d22b079d11800010c4fd3&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate%20-%20CPI%20campaign%20(install%20only)%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Cookie: XSRF-TOKEN=eyJpdiI6IlNGTnhcL1wvcGdEaHpGMktSS1kzZnhPdz09IiwidmFsdWUiOiJyeG95ZjcrMlwvS2hReXF0UmNXYWdWMDJNVWg3WklnNElqYVVZR0VUUTAwZStGbW5FT0xLcGxERVFEd3hNYVNPVzBjRTVHQXA1MklMOWFNekEwaDFLT0U5K2RpdkJMZ3FLakZVSWtFYXg4K0U3dmtoMDdnUlJCRVY4eklIckFCR28iLCJtYWMiOiJmNjI5ODAxN2I1MTRlYzM5NDFhZjJiNTA1MzYxNzhkZGY3NmJhYmFiOGJhNTM1Mjk3YTQzZDQ2Yjc1ODQ4ZDA3In0%3D; mackeeper_session=eyJpdiI6ImxwWnRKWVR1NTlQdFd2VWZMQWIyc2c9PSIsInZhbHVlIjoiaUd4RHMrU2xmSm1zODBHbVZwTHhNQWphRG96djJmVDdXSTVLb1pzelNOWHhlSm42RFJcL2srN0x4RTljMWhwOCtLTXlFZ3dKWVwvdzZubWRFMXJNM1NSbDFrSEkzNk9hYTNlYlwvdzNiYVM4VWFzUnFXUTBUVTFrSEZSWmZhK3prZkEiLCJtYWMiOiJlZGQyNTllZjVjOGJiYWQ1NzcxMzc0NWY0NWFlZjljYTkzZmNkZWM4YWMyMjViMmMyOGY0YTI2N2M4YTNlMzMwIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         18.215.214.239
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 23 Sep 2022 03:06:26 GMT
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 179
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: b755bc209eb4ca2a0bc265837a55971f
X-Firefox-Spdy: h2

                                        
                                            POST /g/collect?v=2&tid=G-GYTXD89N1W&gtm=2oe9l0&_p=1494125709&_gaz=1&cid=1157578379.1663902386&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663902385&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.analytics.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://app2.mackeeperaff.com
date: Fri, 23 Sep 2022 03:06:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /mk-land/dist/images/favicon_ua.png HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 407
date: Thu, 22 Sep 2022 08:33:14 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 04 Apr 2022 09:52:27 GMT
etag: "471c1c90d41a571f14162d7a8a9c8b9c"
cache-control: public, max-age=604800
x-amz-version-id: fOjB1uVWJszrafJRMb0A4UZGtOA62i.I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oJ6MysigaSd06yccVb0xsmUBQ1MMM-4ZX4-435U_-6cVAN91lQFo3A==
age: 66794
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size:   407
Md5:    471c1c90d41a571f14162d7a8a9c8b9c
Sha1:   b08dfa2783c706945451a8f4890bdb9243936e78
Sha256: eb625a455a490292aa2a7101dd7b3235bc4c92df0f08349c6663df51b7b66c27
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/trad.js HTTP/1.1 
Host: t.adcell.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.5.82.77
HTTP/2 200 OK
content-type: text/javascript
                                        
server: myracloud
date: Fri, 23 Sep 2022 03:06:26 GMT
strict-transport-security: max-age=15768000
content-encoding: gzip
vary: accept-encoding
expires: Fri, 23 Sep 2022 03:12:50 GMT
cache-control: max-age=900
etag: "myra-6bc751ff"
x-cdn: 1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (33739), with NEL line terminators
Size:   21466
Md5:    203702e78f504e36ea49162300dd7e96
Sha1:   2d347480dfbd9d4c69bcc742e205062f689e5d00
Sha256: 37ee59a07e31b6568a71dbf9a3fdf32d573bb8a43964b0e0859d3bc9a08917dc
                                        
                                            GET /li.lms-analytics/insight.min.js HTTP/1.1 
Host: snap.licdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.121
HTTP/2 200 OK
content-type: application/x-javascript;charset=utf-8
                                        
last-modified: Fri, 12 Aug 2022 20:23:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=58933
date: Fri, 23 Sep 2022 03:06:27 GMT
content-length: 3063
x-cdn: AKAM
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7751)
Size:   3063
Md5:    57efbbeb3e1d23c82b677511c67c8b0e
Sha1:   f927ba115ef4be362694c22850ddbdd1c1b054d1
Sha256: 873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
                                        
                                            GET /cp/obtp.js HTTP/1.1 
Host: amplify.outbrain.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.38.201.81
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Fri, 23 Sep 2022 03:26:27 GMT
Date: Fri, 23 Sep 2022 03:06:27 GMT
Content-Length: 3249
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (8072), with no line terminators
Size:   3249
Md5:    9b19340ef7db3cbb26aa923adb8dbe6e
Sha1:   082e699bca6e80ca6c72a43f2894f4a32e785e26
Sha256: c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
                                        
                                            GET /gtm/optimize.js?id=OPT-TVNW4WH HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Sep 2022 03:06:27 GMT
expires: Fri, 23 Sep 2022 03:06:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42592
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1720)
Size:   42592
Md5:    e9ceba4aaeabf4501ca80275eecf6d0f
Sha1:   b29405066ab59734c7f81c4e84184f050a39a892
Sha256: e9f461500491c0f6e357f7678c5e1dad1326157b038a85e0a9dbef43fb16405a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2918
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 03:06:27 GMT
Last-Modified: Fri, 23 Sep 2022 02:17:49 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.107.21.200
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: private,max-age=1800
content-length: 11367
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=2567560661046BC6002A442E60536A45; domain=.bing.com; expires=Wed, 18-Oct-2023 03:06:27 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6D3B439EBEB94BD3ABDF21710FEF9737 Ref B: OSL30EDGE0414 Ref C: 2022-09-23T03:06:27Z
date: Fri, 23 Sep 2022 03:06:26 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Size:   11367
Md5:    293ae3e0fc8b0d5c143fdf9d8490228d
Sha1:   3976c659b908e70818a3a1ac71860b497fe2d1a9
Sha256: 04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
                                        
                                            GET /modules.f4179535429bf14e77ee.js HTTP/1.1 
Host: script.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.68
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 65420
date: Tue, 20 Sep 2022 16:01:07 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "4a99ec558aff503901b33da3d9b4ec1b"
last-modified: Tue, 20 Sep 2022 16:00:26 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WfzCRMufJIm2GCPfgpkd0DO_M77kL-fRZ0p5LxiTxXMiKKXxC7YxLA==
age: 212720
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (48714)
Size:   65420
Md5:    4a99ec558aff503901b33da3d9b4ec1b
Sha1:   83d1a24dacc650c18594a5334ae15a144b5704ec
Sha256: ad082098bddf0eed29c4d958450687924b052f783a834f58e59495e0c8f3143b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.14
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: cLykztyttOZRcT9ULqlbE/nf7HUlT+rbgN96/oQ/rZqR26O6lzqbUt6gn1OfNicyKS6uZjc8u4NAK1PkdkYTfg==
priority: u=3,i
content-length: 26839
x-fb-trip-id: 1679558926
date: Fri, 23 Sep 2022 03:06:27 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   26839
Md5:    9ecd89752214ef749272eef344b9089a
Sha1:   70a58a49c08934265ee34c74efb01d6b3124095d
Sha256: f76c51487e348977288fcaf83984cd8fe4e73758cc352402774d9eb94680d528
                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 23 Sep 2022 03:06:27 GMT
expires: Fri, 23 Sep 2022 03:06:27 GMT
cache-control: private, max-age=3600
etag: 3080337328058561381
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15693
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1654)
Size:   15693
Md5:    890f716858b5f72587e47c5eca121cb5
Sha1:   91871a0acd9a0ab644d51036bb5ca0c3bdc5e687
Sha256: 7a3629e375468328b3fb25e1a6cc5749604f09099e8d2109f366e7e0226aee4a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2918
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 03:06:27 GMT
Last-Modified: Fri, 23 Sep 2022 02:17:49 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1157578379.1663902386&gtm=2oe9l0&aip=1&z=1596275122 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Sep 2022 03:06:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /box-69edcc3187336f9b0a3fbb4c73be9fe6.html HTTP/1.1 
Host: vars.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.105
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1044
date: Wed, 07 Sep 2022 09:17:07 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "f6a9ca04b0687ea3c0d98e8430c8c77b"
last-modified: Wed, 07 Sep 2022 09:16:57 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XOOU_8XkHKLSyjLc22jRn1eX5unM7W9OFnAkv0lj-l4F1rdU3Dmlgg==
age: 1360160
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Size:   1044
Md5:    f6a9ca04b0687ea3c0d98e8430c8c77b
Sha1:   35503b2deb23091a9a9c6c68d4020dbdf879588e
Sha256: 8e4328ecb6b395499567369e3c227231dbdaf361f43ce315934d7a2a3abbed41
                                        
                                            GET /wi/config/10013499.json HTTP/1.1 
Host: s.yimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         188.125.94.204
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 5V342VNXMMW76574
x-amz-id-2: uuek3eUH+bGUHey6UAtTJ1IevLOsaK7hcVhweZfk6XUjBvO4IKlshqG9HZHeGO9xjOctml8BICo=
date: Fri, 23 Sep 2022 02:44:06 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 1341
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 03:06:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /c/hotjar-190484.js?sv=7 HTTP/1.1 
Host: static.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.39
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
date: Fri, 23 Sep 2022 03:06:23 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
etag: W/4cac2c6d8f5f3f42f3a069a21d6f0d16
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h0O0G1mnsAjMRrjvIKXd9qiuQcVu4Fz_ARsBNdv9DYwQrP_t61iomQ==
age: 4
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6695)
Size:   3372
Md5:    2f6c795c0fe603d0a66d4d3ee7066fde
Sha1:   e097e20acfe05e736ab7643b1f3b6f41dd735a76
Sha256: 5e3ce0533a6751ce569aca93b1491c938942f042c75a85fb24076d73f75ad861
                                        
                                            GET /action/0?ti=36002432&Ver=2&mid=cbe8ebda-48cd-4914-b933-9ce29875856d&sid=b67080603aec11ed9a8899f2dee721fa&vid=b6709a403aec11edbb5d5138767159a0&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&r=&lt=3019&evt=pageLoad&sv=1&rn=579218 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 204 No Content
                                        
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=32CCCDCAD8F76C5D1A78DFE2D9A06DC1; domain=.bing.com; expires=Wed, 18-Oct-2023 03:06:27 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 47AD17446ECC4198BE7D69B9AF2C1E81 Ref B: OSL30EDGE0414 Ref C: 2022-09-23T03:06:27Z
date: Fri, 23 Sep 2022 03:06:26 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /action/0?ti=36002432&Ver=2&mid=cbe8ebda-48cd-4914-b933-9ce29875856d&sid=b67080603aec11ed9a8899f2dee721fa&vid=b6709a403aec11edbb5d5138767159a0&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=527147 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 204 No Content
                                        
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2DD6BD59F5D1602B0788AF71F48661AE; domain=.bing.com; expires=Wed, 18-Oct-2023 03:06:27 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 027A6E92A8594352B0D19518F2079414 Ref B: OSL30EDGE0414 Ref C: 2022-09-23T03:06:27Z
date: Fri, 23 Sep 2022 03:06:26 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /pagead/viewthroughconversion/1010020041/?random=1663902386607&cv=9&fst=1663902386607&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1543062489.1663902386&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.66
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Sep 2022 03:06:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1154
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Sep-2022 03:21:27 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2664), with no line terminators
Size:   1154
Md5:    ca54898f7a0a6208f12a573412ff85d9
Sha1:   3f2c74b6fdce02e3d0dd879491743616d38e43aa
Sha256: 0dab9d53dfadfb7285bbaa122d9198c35bd9b64dd9af43ca4448aaccc71dddf9
                                        
                                            GET /collect?v=2&fmt=js&pid=3865705&time=1663902386480&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.107.42.14
HTTP/2 302 Found
                                        
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1663902386480%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F226%252F%253Frtkcid%253D632d22b079d11800010c4fd3%2526rtkcmpid%253D629a3e04d84ecc000136838b%2526tid%253DAffiliate%252520-%252520CPI%252520campaign%252520%2528install%252520only%2529%252520%2528226%2529%2526utm_source%253Daffiliate%2526utm_medium%253Dadpartner%2526pubid%253D629a3fed4714f70001b234db%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQLI3w_x8Rq8CgAAAYNoT4w4DSVcqnwAJgARu7kIib7xaOtpq8MyenkoDLo5e5602WfkoEIICOhaZg; Max-Age=2592000; Expires=Sun, 23 Oct 2022 03:06:27 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure AnalyticsSyncHistory=AQI9Ljojy75O9wAAAYNoT4w4s3VXP-SiUvw8qrpa-2EvKrorXCBhyZCfE76RNkTORc-jXEoRr4Dt1K9PrDAgvA; Max-Age=2592000; Expires=Sun, 23 Oct 2022 03:06:27 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&b17e007c-c889-4143-8e23-e568d14df206"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 23-Sep-2023 03:06:27 GMT; SameSite=None lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2388:u=1:x=1:i=1663902387:t=1663988787:v=2:sig=AQGlVw1NOQonLogEgZLVwHhzkv6O-VDX"; Expires=Sat, 24 Sep 2022 03:06:27 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXpT3a7mMBKM+IUtmhdbQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F0C862961DA14BCBA7BA02808A97D2AF Ref B: OSL30EDGE0317 Ref C: 2022-09-23T03:06:27Z
date: Fri, 23 Sep 2022 03:06:27 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /pagead/viewthroughconversion/957119846/?random=1663902386608&cv=9&fst=1663902386608&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1543062489.1663902386&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.66
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Sep 2022 03:06:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1156
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Sep-2022 03:21:27 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2662), with no line terminators
Size:   1156
Md5:    dc0ecc1a866fe4c1d717e49a28662b67
Sha1:   3de466fa7ad2e79a82f4f96ab8c8b0ea237b72fb
Sha256: 20b4fb8b729de943fad6d04686cc18973de1d568680f256717045dde9a6e995b
                                        
                                            GET /pagead/viewthroughconversion/854379023/?random=1663902386603&cv=9&fst=1663902386603&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1543062489.1663902386&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.66
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Sep 2022 03:06:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1153
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Sep-2022 03:21:27 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2660), with no line terminators
Size:   1153
Md5:    ac8e6ada4df83e703b27818b2b8500b3
Sha1:   feded781f6b544619519d71a00353b33d4a382e5
Sha256: c08a7a9b10401256a878f00fc5c0872b8ede5632f8bdeebd0e8b1a200e06cce2
                                        
                                            GET /pagead/viewthroughconversion/1010020041/?random=1663902386609&cv=9&fst=1663902386609&num=1&fmt=3&value=0&label=9Uq1COfCvoMDEMndzuED&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1543062489.1663902386&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.66
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Sep 2022 03:06:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Sep-2022 03:21:27 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /mk-land/dist/svg/components/logo/mk-logo-ua.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Apr 2022 14:50:37 GMT
etag: W/"0443bcb5ae8253499f7df7f80c45fc8c"
cache-control: public, max-age=604800
x-amz-version-id: sx6d65Ik.60EPUJCncti20jd8v0DNMRK
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sK75vLUfiuaABvpPAhA6cL2N1ocuAAychKdhZDApxivvbLEHGpP0-A==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (58481)
Size:   19578
Md5:    9f31ab3cfaae558e97175911ce0dcd5b
Sha1:   088a1eb8f438cda8d4cd100fcb3e899a250a0688
Sha256: 50e91d2af28199e937180940b7e59b33ebc32fb9b1df56a74205b4fa795a1c71
                                        
                                            GET /pagead/viewthroughconversion/983482265/?random=1663902386605&cv=9&fst=1663902386605&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1543062489.1663902386&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.66
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Sep 2022 03:06:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1156
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Sep-2022 03:21:27 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2662), with no line terminators
Size:   1156
Md5:    dcf8f48848b984f17902b3ff694131f5
Sha1:   68e44038b6c1f3bd731493cdca0aa9f1c30d12e2
Sha256: b22709c1e74796d13152bb32fc7b051f269aa0316e0ebbf1011ee54a6d8f581c
                                        
                                            GET /p/action/36002432.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
cache-control: private,max-age=60
content-length: 667
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=1CC6BDCA4CCD6E923009AFE24D9A6F82; domain=.bing.com; expires=Wed, 18-Oct-2023 03:06:27 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6DA3B2D2EDF54740B6E06F7E89F18AAA Ref B: OSL30EDGE0414 Ref C: 2022-09-23T03:06:27Z
date: Fri, 23 Sep 2022 03:06:26 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   667
Md5:    672ebac5af26e4ba97a8f75d9de57cd7
Sha1:   0490e9d3ff05737ecd9c4c76e94b3188042d07a3
Sha256: f5bcd97cb6febd75a8b1301d55fcb555df4ee6432a559c6aca91afc325ae4b26
                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6319
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 03:06:27 GMT
Last-Modified: Fri, 23 Sep 2022 01:21:09 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6319
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 03:06:27 GMT
Last-Modified: Fri, 23 Sep 2022 01:21:09 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /sp.pl?a=10000&d=Fri%2C%2023%20Sep%202022%2003%3A06%3A26%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1 
Host: sp.analytics.yahoo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         212.82.100.181
HTTP/2 200 OK
content-type: image/gif
                                        
date: Fri, 23 Sep 2022 03:06:27 GMT
expires: Fri, 23 Sep 2022 03:06:27 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBLMiLWMCED1DuID9KSGNxMqxMMu9WoAFEgEBAQF0LmM3YwAAAAAA_eMAAA&S=AQAAAolqoe_q-RCC9LP2vY6Hj78; Expires=Sat, 23 Sep 2023 09:06:27 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    bff56ce49dd485d195fdfa0a02342568
Sha1:   74fb4071deab7d3ab083562067b735df32c43397
Sha256: 0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.158
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 03:06:27 GMT
Last-Modified: Fri, 23 Sep 2022 02:08:50 GMT
Server: ECS (nyb/1D12)
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cMiQGqpcUKyh7-TctL-kX8sGazSK_STIFYSrJNA5zvCRxEHJD9s42Q==
Age: 3457

                                        
                                            GET /unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&optOut=false&bust=014578753612473727&referrer= HTTP/1.1 
Host: tr.outbrain.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         70.42.32.31
HTTP/1.1 200 OK
Content-Type: image/gif;
                                        
Date: Fri, 23 Sep 2022 03:06:27 GMT
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 90caf1de2415efaf45f3c94ea53d475a
content-encoding: gzip


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   60
Md5:    fb0fc5c090282e372b8bf8ff13ae3ee2
Sha1:   2de3834253ece606ce4d2a6f10a59654b6fa378b
Sha256: 90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
                                        
                                            GET /cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949 HTTP/1.1 
Host: tr.outbrain.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         70.42.32.31
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 23 Sep 2022 03:06:27 GMT
Content-Length: 56
X-TraceId: 4186e2de53a76c29d7783d87d2389d9f
content-encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   56
Md5:    77fbe8ab311fa20557d95906363035ed
Sha1:   5806df80f09a37e070d5f37c49f19797c2763fd0
Sha256: 4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
                                        
                                            GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1663902386480%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F226%252F%253Frtkcid%253D632d22b079d11800010c4fd3%2526rtkcmpid%253D629a3e04d84ecc000136838b%2526tid%253DAffiliate%252520-%252520CPI%252520campaign%252520%2528install%252520only%2529%252520%2528226%2529%2526utm_source%253Daffiliate%2526utm_medium%253Dadpartner%2526pubid%253D629a3fed4714f70001b234db%26liSync%3Dtrue HTTP/1.1 
Host: www.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.42.14
HTTP/2 302 Found
                                        
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1663902386480&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520%28install%2520only%29%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None bcookie="v=2&4dcbff38-3fae-4135-86bd-978ed68c1476"; Domain=.linkedin.com; Expires=Sat, 23-Sep-2023 03:06:27 GMT; Path=/; Secure; SameSite=None bscookie="v=1&20220923030627c2892c42-309b-4012-8264-eeda21ce60ceAQHSRchqD1CG40jedLUyezYl5W6MOBhy"; Domain=.www.linkedin.com; Expires=Sat, 23-Sep-2023 03:06:27 GMT; Path=/; HttpOnly; Secure; SameSite=None li_gc=MTswOzE2NjM5MDIzODc7MjswMjEbHylGMmoX9Htyf/nws9DVUeOPD8/t3lEIP4y+ZgLIrA==; Domain=.linkedin.com; Expires=Wed, 22 Mar 2023 03:06:27 GMT; Path=/; Secure; SameSite=None lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2388:u=1:x=1:i=1663902387:t=1663988787:v=2:sig=AQGlVw1NOQonLogEgZLVwHhzkv6O-VDX"; Expires=Sat, 24 Sep 2022 03:06:27 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXpT3bArpk75YwBMserzQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 2423D86F6FEA4EA1A0E7D56083C1518D Ref B: OSL30EDGE0317 Ref C: 2022-09-23T03:06:27Z
date: Fri, 23 Sep 2022 03:06:27 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /tag/uet/36002432 HTTP/1.1 
Host: www.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.107.246.53
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: no-cache, no-store
content-length: 1901
expires: -1
set-cookie: CLID=c8887459678b4750b926787f45118fa6.20220923.20230923; expires=Sat, 23 Sep 2023 03:06:27 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0syItYwAAAAAI4kCfEAIkRKjvjKVFHPuTTE9OMjFFREdFMTYwNQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 23 Sep 2022 03:06:27 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1901), with no line terminators
Size:   1901
Md5:    aadf473239656ee932f239210a6617fc
Sha1:   cc0b104bc40e52ab5d31fdcd703c45e7a1928760
Sha256: 4ab0ddbef9fd966c425e01ae747539b72a675fc077525236cc792e4e375c8824
                                        
                                            GET /collect?v=2&fmt=js&pid=3865705&time=1663902386480&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520%28install%2520only%29%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&liSync=true HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.42.14
HTTP/2 200 OK
content-type: application/javascript
                                        
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&36bc21e9-6009-41fd-8ca3-aa6edee9efec"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 23-Sep-2023 03:06:27 GMT; SameSite=None lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2393:u=1:x=1:i=1663902387:t=1663988787:v=2:sig=AQGTWEa1kAlEAnE7PkKAiuJtARSVv60p"; Expires=Sat, 24 Sep 2022 03:06:27 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXpT3bC+LfzDW7TJeLSPw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 1B35143982FA47598038B13792E83402 Ref B: OSL30EDGE0317 Ref C: 2022-09-23T03:06:27Z
date: Fri, 23 Sep 2022 03:06:27 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /c.gif HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         20.234.93.27
HTTP/2 302 Found
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=91528899BA1F48788E6D99BA077B8D80&RedC=c.clarity.ms&MXFR=19796F12DD576FB900DE7D3AD95761C2
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure; MUID=19796F12DD576FB900DE7D3AD95761C2; domain=.clarity.ms; expires=Wed, 18-Oct-2023 03:06:27 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Fri, 23 Sep 2022 03:06:27 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /c.gif?CtsSyncId=91528899BA1F48788E6D99BA077B8D80&RedC=c.clarity.ms&MXFR=19796F12DD576FB900DE7D3AD95761C2 HTTP/1.1 
Host: c.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 302 Found
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=91528899BA1F48788E6D99BA077B8D80&MUID=2C57D5083D656B3C2D8EC7203C326A2A
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=2C57D5083D656B3C2D8EC7203C326A2A; domain=c.bing.com; expires=Wed, 18-Oct-2023 03:06:27 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E139EA4E462E4920B724E13DF2CC5373 Ref B: OSL30EDGE0414 Ref C: 2022-09-23T03:06:27Z
date: Fri, 23 Sep 2022 03:06:27 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /c.gif?CtsSyncId=91528899BA1F48788E6D99BA077B8D80&MUID=2C57D5083D656B3C2D8EC7203C326A2A HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         20.234.93.27
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
last-modified: Tue, 13 Sep 2022 19:54:52 GMT
accept-ranges: bytes
etag: "8d3298b0aac7d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Fri, 23-Sep-2022 03:16:28 GMT; path=/; SameSite=None; Secure;
date: Fri, 23 Sep 2022 03:06:27 GMT
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    32023bb33cfb2a1990a4ef2d85b6ac16
Sha1:   23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
Sha256: 99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
                                        
                                            GET /tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&rl=&if=false&ts=1663902387470&sw=1280&sh=1024&v=2.9.83&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1663902387469.274310104&it=1663902386600&coo=false&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.35
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Fri, 23 Sep 2022 03:06:28 GMT
X-Firefox-Spdy: h2

                                        
                                            POST /collect HTTP/1.1 
Host: b.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 32234
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         20.75.32.255
HTTP/2 204 No Content
                                        
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Fri, 23 Sep 2022 03:06:27 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=1558&scd=21&ssd=1&est=1663902386761&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1663902388318&vi=1663902386759&ri=d5565b0ab19894f53be7c2f59f29ff97&ref=null&cv=20220918-2-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&ler=other HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         141.226.228.48
HTTP/2 204 No Content
                                        
server: nginx
date: Fri, 23 Sep 2022 03:06:29 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=4564&scd=21&ssd=1&est=1663902386761&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1663902391326&vi=1663902386759&ri=d5565b0ab19894f53be7c2f59f29ff97&ref=null&cv=20220918-2-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&ler=other HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         141.226.228.48
HTTP/2 204 No Content
                                        
server: nginx
date: Fri, 23 Sep 2022 03:06:31 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            GET /mk-land/dist/226/script.min.js?f86ab811e79d4a371d0a HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: PENDING
last-modified: Thu, 22 Sep 2022 08:32:04 GMT
etag: W/"ab2350c2a0b24c9fedb76b696ce64f7b"
cache-control: public, max-age=604800
x-amz-version-id: tN54.SAkiBI0C6u9K8K9JS2cyG6ED5nd
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: liCoMA42cMr8rPSUNTjbyFPJeeUGghVB55hNxVBKk7n_Pznhn8LTtQ==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/svg/landings/226_6/downloads.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:57 GMT
etag: W/"03b2302fb772ce4d148b0099da4362f0"
cache-control: public, max-age=604800
x-amz-version-id: qdj6r2fTLt1__Db.jrwnBLw2hzRzOTH8
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -w3F_idFeNLmQuRNJOBkE4LPOmTtwrakTCk5wCne-KQuCZlJH0cEIQ==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.78
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
cache-control: public,max-age=1800
date: Fri, 23 Sep 2022 03:06:26 GMT
etag: "15c52ac03db236cf983d34de123f433b"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _EJcKpR5DSye478JaRrQUABIk717XuS0NKFhsIu91GVtOyPgT0c2WQ==
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /lftracker_v1_ywVkO4XWPeW7Z6Bj.js HTTP/1.1 
Host: sc.lfeeder.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.84
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 22 Sep 2022 06:33:15 GMT
x-amz-version-id: 4K18CaHcbTAgkQY3.Yjd_IeCmlwLplHx
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Sep 2022 03:06:26 GMT
cache-control: max-age=3600
etag: W/"802feebb6f42efc6708d7100f6dc2b86"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: d2-UqNyrCMWQS1FpqKTEmlvIF4abf26kce1wEVJ1gV6xM0Zu4OJebA==
age: 201
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/svg/landings/226_6/soft_three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: W/"1e8437e5f03b2dcd725fcf19c843ede9"
cache-control: public, max-age=604800
x-amz-version-id: C1G2RqiXpQdLiH1cTB.L_Ya5eHDrJ_3n
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: w6P6ASTXpkDd2yloW1FJ9QDXX7HvccxLNGZ4s1-p556tHsGp8hY0IQ==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/svg/landings/226_6/appesteem.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: W/"11483e7c23b09ca50a06de72c255ce87"
cache-control: public, max-age=604800
x-amz-version-id: lnXVyN4uq0eoJjwYvOqqHWivzHFq_g5q
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: M0MMsGTKPDsArpsanA6D9VupV3UmOvsJmkMyGDXFztezSMNayLVUTg==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/critical/script.min.js?e7cf19f3a210c6c6b206 HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: PENDING
last-modified: Thu, 22 Sep 2022 08:31:47 GMT
etag: W/"4b345b7c24a7ebb374b458ba77f2ebc3"
cache-control: public, max-age=604800
x-amz-version-id: Zb_eOpssY4YuKooiuyx_lIGBxSDfD9O3
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iVtPokJAO-J1aBz1pd2mDMDnMIzdG1NyuZJvKfyLMGEFFj6HtJq_kQ==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /land/api/send-event HTTP/1.1 
Host: app2.mackeeperaff.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: MSMDBGd6KtXrXIFb7kbPInxgFGIwwEnZBbbtjwIf
X-XSRF-TOKEN: eyJpdiI6IlNGTnhcL1wvcGdEaHpGMktSS1kzZnhPdz09IiwidmFsdWUiOiJyeG95ZjcrMlwvS2hReXF0UmNXYWdWMDJNVWg3WklnNElqYVVZR0VUUTAwZStGbW5FT0xLcGxERVFEd3hNYVNPVzBjRTVHQXA1MklMOWFNekEwaDFLT0U5K2RpdkJMZ3FLakZVSWtFYXg4K0U3dmtoMDdnUlJCRVY4eklIckFCR28iLCJtYWMiOiJmNjI5ODAxN2I1MTRlYzM5NDFhZjJiNTA1MzYxNzhkZGY3NmJhYmFiOGJhNTM1Mjk3YTQzZDQ2Yjc1ODQ4ZDA3In0=
Content-Length: 101
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/226/?rtkcid=632d22b079d11800010c4fd3&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate%20-%20CPI%20campaign%20(install%20only)%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Cookie: XSRF-TOKEN=eyJpdiI6IlNGTnhcL1wvcGdEaHpGMktSS1kzZnhPdz09IiwidmFsdWUiOiJyeG95ZjcrMlwvS2hReXF0UmNXYWdWMDJNVWg3WklnNElqYVVZR0VUUTAwZStGbW5FT0xLcGxERVFEd3hNYVNPVzBjRTVHQXA1MklMOWFNekEwaDFLT0U5K2RpdkJMZ3FLakZVSWtFYXg4K0U3dmtoMDdnUlJCRVY4eklIckFCR28iLCJtYWMiOiJmNjI5ODAxN2I1MTRlYzM5NDFhZjJiNTA1MzYxNzhkZGY3NmJhYmFiOGJhNTM1Mjk3YTQzZDQ2Yjc1ODQ4ZDA3In0%3D; mackeeper_session=eyJpdiI6ImxwWnRKWVR1NTlQdFd2VWZMQWIyc2c9PSIsInZhbHVlIjoiaUd4RHMrU2xmSm1zODBHbVZwTHhNQWphRG96djJmVDdXSTVLb1pzelNOWHhlSm42RFJcL2srN0x4RTljMWhwOCtLTXlFZ3dKWVwvdzZubWRFMXJNM1NSbDFrSEkzNk9hYTNlYlwvdzNiYVM4VWFzUnFXUTBUVTFrSEZSWmZhK3prZkEiLCJtYWMiOiJlZGQyNTllZjVjOGJiYWQ1NzcxMzc0NWY0NWFlZjljYTkzZmNkZWM4YWMyMjViMmMyOGY0YTI2N2M4YTNlMzMwIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         18.215.214.239
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 23 Sep 2022 03:06:26 GMT
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 178
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 7c4ce8624a34e08b3263db51ad98cceb
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /eus2/s/0.6.41/clarity.js HTTP/1.1 
Host: www.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.246.53
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
                                        
cache-control: public,max-age=86400
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8ccdebe9ad570"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0syItYwAAAABDymGl7kNGTKJP9DbmtrPkTE9OMjFFREdFMTYwNQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 23 Sep 2022 03:06:27 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/default/script.min.js?e875e378f0512d5c05e3 HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 22 Sep 2022 08:31:08 GMT
etag: W/"20e5b8c89709de493a44a681c3b8bbac"
cache-control: public, max-age=604800
x-amz-version-id: ZlvrSdb10XSa8Zgb2bZxd.rVfMRkud_D
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8SQsni_G_Bt1WlEemmPb-mKkqUkHlSp1wggacPd-or2RZc-izaDoAQ==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/svg/landings/226_6/privacy-three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: W/"c8f8481e4694470f0b9d13007ae87187"
cache-control: public, max-age=604800
x-amz-version-id: ztZus3dIf7v8EQhUG0qQzWys_bOlUhvB
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bqHCnO421m8wMnc5BazHA4kxbdwe7rTFikfOirQloBs0rLf3rYMAaA==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/svg/landings/226_6/shopper.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:12 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:01 GMT
etag: W/"316255d136699b84962ae8e7e650fb4a"
cache-control: public, max-age=604800
x-amz-version-id: xkKrHSo_G5.knecPGziG7JnbPUaCTCId
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7FgdHrZschgVA1GU0F53n7MOnOwf3UHtMDqTnO-s-YcBMey4Rd7daQ==
age: 66794
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /1212352/trc/3/json?tim=1663902386768&data=%7B%22id%22%3A347%2C%22ii%22%3A%22%2Fland%2F226%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1663902386759%2C%22cv%22%3A%2220220918-2-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1663902386767%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D632d22b079d11800010c4fd3%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22tos%22%3A4%2C%22ssd%22%3A1%2C%22scd%22%3A21%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1 
Host: trc.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: nginx
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Fri, 23 Sep 2022 03:06:27 GMT
via: 1.1 varnish
x-served-by: cache-bma1641-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1663902388.504460,VS0,VE94
vary: Accept-Encoding
x-vcl-time-ms: 94
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/fonts/MarkOT-Bold.otf HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: font/ttf
                                        
date: Thu, 22 Sep 2022 08:36:02 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
etag: W/"336e38c18c3ac1666fa496c919b08eca"
cache-control: public, max-age=604800
x-amz-version-id: _SyAJ1U0XNp0EgWFZoSm7jR1ZmFIsGhh
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wG0hRKqASGDyX-JSgrsKcHweCa7uD3aqxaJFsBov3P_YWLOQBc4Hxg==
age: 66624
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/fonts/MarkOT-Light.otf HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: font/ttf
                                        
date: Thu, 22 Sep 2022 08:36:02 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"48dd0f49a4207634e9062def9074a038"
cache-control: public, max-age=604800
x-amz-version-id: 0k6awkdioEQDqMMUsMLLZL0d1S0LNdte
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dKC5lf8YpXp_rGcyAZkOi1RA2G4MPOQ8tVGf513Y5UUVgqUMJhoF2Q==
age: 66624
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /land/226/?rtkcid=632d22b079d11800010c4fd3&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate%20-%20CPI%20campaign%20(install%20only)%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db HTTP/1.1 
Host: app2.mackeeperaff.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         18.215.214.239
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Fri, 23 Sep 2022 03:06:25 GMT
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
content-security-policy: default-src 'self' *.hotjar.com *.mackeeper.com;frame-ancestors 'none';frame-src 'self' 'unsafe-inline' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com *.surveygizmo.com *.liadm.com *.typeform.com mc.yandex.ru *.js.ad-score.com *.cdn.onesignal.com *.onesignal.com *.criteo.com static-cdn.mackeeper.com;child-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com blob: *.cdn.onesignal.com *.onesignal.com *.liadm.com static-cdn.mackeeper.com;form-action 'self' *.mackeeper.com *.facebook.com;img-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com data: *.2mdn.net *.pagead2.googlesyndication.com *.glotgrx.com *.lporirxe.com *.exelator.com *.owox.com *.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.yahoo.co.jp *.apimzb-adserver.cloudmccloud.com *.3lift.com *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com mc.yandex.ru cx.atdmt.com *.baidu.com *.gstatstrk.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.zoomsupport.com *.cloudmccloud.com linkconnector.com *.linkconnector.com *.linkedin.com https://p.adsymptotic.com *.clarity.ms *.lfeeder.com static-cdn.mackeeper.com *.imcounting.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com disqus.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com l2.io *.inspectlet.com *.googlesyndication.com *.sagetrc.com *.glotgrx.com *.lporirxe.com b-code.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.cloudfront.net *.yimg.jp *.addtocalendar.com *.yahoo.co.jp blob: *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com *.s.ytimg.com *.typeform.com *.calendly.com *.linkconnector.com mc.yandex.ru *.js.ad-score.com *.baidu.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.engine.4dsply.com *.engine.spotscenered.info *.engine.3dspk.com *.we3red.com *.engine.asadap.com *.engine.nictelroalps.com *.engine.liondigitalserving.com *.engine.addroplet.com *.beritapria.com cdnjs.cloudflare.com *.clickcease.com *.sentry-cdn.com *.criteo.net *.criteo.com https://snpa.licdn.com linkconnector.com *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com *.licdn.com *.liadm.com *.clarity.ms *.adcell.com *.lfeeder.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;style-src 'self' 'unsafe-inline' *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.a.disquscdn.com *.disqus.com *.googleapis.com *.fonts.gstatic.com *.referrer.disqus.com *.google.com *.google.com.ua *.addtocalendar.com *.surveygizmo.com *.cdn.onesignal.com *.onesignal.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com *.googletagmanager.com;font-src 'self' data: *.doubleclick.net *.mackeeper.com *.twimg.com *.twitter.com fonts.googleapis.com fonts.gstatic.com *.surveygizmo.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;object-src *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.pagead2.googlesyndication.com *.liadm.com static-cdn.mackeeper.com;connect-src 'self' *.mackeeper.com *.hotjar.com ws://*.hotjar.com wss://*.hotjar.com *.g.doubleclick.net *.lcidc.liadm.com *.google-analytics.com *.api.ipify.org *.mc.yandex.ru mc.yandex.ru *.data.ad-score.com *.baidu.com *.pushdata.onesignal.com:* *.onesignal.com *.taboola.com *.hotjar.io *.clickcease.com s.yimg.com *.facebook.com *.google.com bat.bing.com sentry.cloudmccloud.com *.liadm.com *.macupdate.com https://api.account.mackeeper.com https://api.account.sz.mackeeper.com https://api-ne.mackeeper.com *.adcell.com *.clarity.ms *.lfeeder.com *.static-cdn.mackeeper.com https://crm.account.mackeeper.com https://chat-crm.account.mackeeper.com static-cdn.mackeeper.com
set-cookie: XSRF-TOKEN=eyJpdiI6IlNGTnhcL1wvcGdEaHpGMktSS1kzZnhPdz09IiwidmFsdWUiOiJyeG95ZjcrMlwvS2hReXF0UmNXYWdWMDJNVWg3WklnNElqYVVZR0VUUTAwZStGbW5FT0xLcGxERVFEd3hNYVNPVzBjRTVHQXA1MklMOWFNekEwaDFLT0U5K2RpdkJMZ3FLakZVSWtFYXg4K0U3dmtoMDdnUlJCRVY4eklIckFCR28iLCJtYWMiOiJmNjI5ODAxN2I1MTRlYzM5NDFhZjJiNTA1MzYxNzhkZGY3NmJhYmFiOGJhNTM1Mjk3YTQzZDQ2Yjc1ODQ4ZDA3In0%3D; expires=Fri, 23-Sep-2022 05:06:25 GMT; Max-Age=7200; path=/; secure; samesite=lax mackeeper_session=eyJpdiI6ImxwWnRKWVR1NTlQdFd2VWZMQWIyc2c9PSIsInZhbHVlIjoiaUd4RHMrU2xmSm1zODBHbVZwTHhNQWphRG96djJmVDdXSTVLb1pzelNOWHhlSm42RFJcL2srN0x4RTljMWhwOCtLTXlFZ3dKWVwvdzZubWRFMXJNM1NSbDFrSEkzNk9hYTNlYlwvdzNiYVM4VWFzUnFXUTBUVTFrSEZSWmZhK3prZkEiLCJtYWMiOiJlZGQyNTllZjVjOGJiYWQ1NzcxMzc0NWY0NWFlZjljYTkzZmNkZWM4YWMyMjViMmMyOGY0YTI2N2M4YTNlMzMwIn0%3D; expires=Fri, 23-Sep-2022 05:06:25 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax get_params_landings=%7B%22rtkcid%22%3A%22632d22b079d11800010c4fd3%22%2C%22rtkcmpid%22%3A%22629a3e04d84ecc000136838b%22%2C%22tid%22%3A%22Affiliate%20-%20CPI%20campaign%20%28install%20only%29%20%28226%29%22%2C%22utm_source%22%3A%22affiliate%22%2C%22utm_medium%22%3A%22adpartner%22%2C%22pubid%22%3A%22629a3fed4714f70001b234db%22%7D; expires=Sat, 24-Sep-2022 03:06:24 GMT; Max-Age=86399; path=/; domain=.mackeeper.com; secure; samesite=lax globalAffid=mc-632d22b19ad1b98db41f8364; expires=Wed, 22-Mar-2023 03:06:25 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax country=NO; expires=Wed, 22-Mar-2023 03:06:25 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 07f217119c88333972a199f195630eea
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /api/v2/client/sites/190484/visit-data?sv=7 HTTP/1.1 
Host: in.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 146
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.73.164.173
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 23 Sep 2022 03:06:27 GMT
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/svg/landings/226_6/soft_one.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:01 GMT
etag: W/"bf6ed3f56235d31918a17604a3131f52"
cache-control: public, max-age=604800
x-amz-version-id: 8xX6ank4Rs.JT95crMgq3uJJbhi1lzJF
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -M66Zx-fFdJ3HQgBWB_A0nOzbX6JjUSB_2rUAyqGzdQygODWhA_8dg==
age: 66795
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683 HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: text/css
                                        
date: Thu, 22 Sep 2022 08:34:49 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Aug 2022 13:14:40 GMT
etag: W/"a669635cf48725953f46197678261ba4"
cache-control: public, max-age=604800
x-amz-version-id: q9vHpEkF.fC8IKJyFmJ8_ZfmwjRowPdI
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6-gv_KbkF9yzdphm_HQpWDUCy1lEIsp9Y80ETTDKUjtAV1Ob-pDcgg==
age: 66697
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/fonts/MarkOT-Medium.otf HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: font/ttf
                                        
date: Thu, 22 Sep 2022 08:36:02 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
etag: W/"44a8a536b53be74bb2ebfc4fa3403364"
cache-control: public, max-age=604800
x-amz-version-id: adnRDSe0awZldw3c8I6M4tTQa_wDyvz_
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6pW_ql2kvAlXmVYNNSHL5vqvZtJ6jkUsLDWOVSnFuZ4BhEFoplLgoA==
age: 66624
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /a-015g.min.js HTTP/1.1 
Host: b-code.liadm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.54
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Thu, 22 Sep 2022 04:28:18 GMT
cache-control: public, max-age=86400
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8HkQycfk1WPENULq2c5vjaK6gYJ4Ypt42hVXecN7r8eEVWPFKCs8dA==
age: 81488
X-Firefox-Spdy: h2


--- Additional Info ---