app2.mackeeperaff.com/land/226/?rtkcid=63632267d160dd0001f864e6&rtkcmpid=627bbe0b35981a0001d4d8dc&tid=Affiliate%20-%20Hybrid%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
54.80.71.222301 Moved Permanently 134 B URL HTTP/1.1 app2.mackeeperaff.com/land/226/?rtkcid=63632267d160dd0001f864e6&rtkcmpid=627bbe0b35981a0001d4d8dc&tid=Affiliate%20-%20Hybrid%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
IP 54.80.71.222:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
Analyzer Verdict Alert quad9 Sinkholed
GET /land/226/?rtkcid=63632267d160dd0001f864e6&rtkcmpid=627bbe0b35981a0001d4d8dc&tid=Affiliate%20-%20Hybrid%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Thu, 03 Nov 2022 02:07:54 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://app2.mackeeperaff.com:443/land/226/?rtkcid=63632267d160dd0001f864e6&rtkcmpid=627bbe0b35981a0001d4d8dc&tid=Affiliate%20-%20Hybrid%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 59be8dfdd6f4ab82f394d3d5b927e065
dc8e8f1bbae495f84322e5efd0c42a39ef5be56c
7f251408f64b28bebfe96f3db5c3dde3d5ad5febbaf2964b3516c114eaa51f4d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7F251408F64B28BEBFE96F3DB5C3DDE3D5AD5FEBBAF2964B3516C114EAA51F4D"
Last-Modified: Mon, 31 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10202
Expires: Thu, 03 Nov 2022 04:57:56 GMT
Date: Thu, 03 Nov 2022 02:07:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 43ea74d83493710eb8b64a74046ff569
74dee6d9e8b796d34f2788a472b90b3f7fc79ecd
f62eff2ad4d64d785a48e2761d7f2bda9171f1e60b0e9dc525d8f589f9ef7c60
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F62EFF2AD4D64D785A48E2761D7F2BDA9171F1E60B0E9DC525D8F589F9EF7C60"
Last-Modified: Tue, 01 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5017
Expires: Thu, 03 Nov 2022 03:31:31 GMT
Date: Thu, 03 Nov 2022 02:07:54 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 5f57d2cc1ab8bbee50dff2b2be18b9db
2c8acd2018995b9bbed8f4dbfa33c8044b293080
a25e2337dad42018caefae70e0e596a4006aa9c1fe6af7f29c93a21fda1554b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5785
Cache-Control: max-age=118776
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:54 GMT
Etag: "636238d9-1d7"
Expires: Fri, 04 Nov 2022 11:07:30 GMT
Last-Modified: Wed, 02 Nov 2022 09:31:05 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: L5K/6XePBgYkoSjhlhGfLCl1IKnSNdBXkd7bs0U+AG3eXkr78cUPVoL+dx83MJI9qGTM/icbGS4=
x-amz-request-id: HQ5YCPYJQTSYQRH4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 03 Nov 2022 01:08:58 GMT
age: 3536
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 03 Nov 2022 02:07:54 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fd65439b27a0101cd831309f178fbb45
4daa9343dda0f37ba734e2b5500caf2728cf89db
37e6d155f598b5154e3ce96105c39798716b5d35e12a98b9aec172c160de5f6a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3211
Cache-Control: max-age=111144
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:55 GMT
Etag: "63622518-1d7"
Expires: Fri, 04 Nov 2022 09:00:19 GMT
Last-Modified: Wed, 02 Nov 2022 08:06:48 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
18.165.196.18200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 18.165.196.18:0
Hash 0698155db8ce4edbce85f7d8b995f6e0
e4dfe97a279839693b2df56e8e51adc44db0c995
b93dcdff8804724187e75744e6c8788b8f155ddf56367176bfa47c8b0997307c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=145710
Date: Thu, 03 Nov 2022 02:07:55 GMT
Etag: "6362b8a9-1d7"
Expires: Fri, 04 Nov 2022 18:36:25 GMT
Last-Modified: Wed, 02 Nov 2022 18:36:25 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 835f3c9e7c3bc0e7766edf13dac581de.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: 36VK70-UAPyUNUO6GETQwEgrmICgXnUrCe0sGtytnJ8ggSb1qkUWVQ==
push.services.mozilla.com/
52.43.253.52101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.43.253.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vJFZC8nEs+KWSlng0nve/A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: u8RT+HOvYKaxAncNoQaLezEgIls=
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/clean_two.svg
52.84.93.61200 OK 431 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/clean_two.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (431), with no line terminators
Hash f0f6b52bce4737187d5986d65c2b9a11
420adf24b61c4b96d5dc1b30eb4cbd44106ec3c2
b02a16d65bb919592b8b0903e78661c9c6a6b6d39218ce2ca664c5b2fbccad76
GET /mk-land/dist/svg/landings/226_6/clean_two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 431
date: Tue, 01 Nov 2022 14:21:59 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:55 GMT
etag: "f0f6b52bce4737187d5986d65c2b9a11"
cache-control: public, max-age=604800
x-amz-version-id: pwhnB7X_4WGez_7temaOOVBFmwfQ7lz1
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: FSSZBzQuS-beR5ozFWlwScRaphsCGrd3wLdid1ImwqO6QV70ZflPcg==
age: 128758
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/clean_three.svg
52.84.93.61200 OK 583 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/clean_three.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (583), with no line terminators
Hash 64036bea66db20718ae3285e9ca951cd
bd5eed2f6cdfd70698fa356785acb13c21768d41
462a1d5d1feb27660a51f000e54ac924bcca7b6d94337593dd0e741560d7da7f
GET /mk-land/dist/svg/landings/226_6/clean_three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 583
date: Tue, 01 Nov 2022 14:21:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:53 GMT
etag: "64036bea66db20718ae3285e9ca951cd"
cache-control: public, max-age=604800
x-amz-version-id: lrmZs4eSsgPFrB9nH9B.ep7npBST6sLn
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: XKbWiNWJGLx8LzrzlJvuMG-Uv2Hlkm5pPc0XXFhpQ3W43uNLTsx2jg==
age: 128789
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/per_one.svg
52.84.93.61200 OK 539 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/per_one.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (539), with no line terminators
Hash 97ea212e1de4543eabca9fd8ddd404de
007dadc86f73968b1c388e45d8700ecf89d6a50b
0e99a715e4465cdb227652a88f9d4a7a18bb59a56278b447b1ded534bfea4c5c
GET /mk-land/dist/svg/landings/226_6/per_one.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 539
date: Tue, 01 Nov 2022 14:21:59 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:55 GMT
etag: "97ea212e1de4543eabca9fd8ddd404de"
cache-control: public, max-age=604800
x-amz-version-id: GTHRvt.ZAHuYF0OtDGQPKnnMNAS2EieE
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: m2SzVFeKBQIKOyyK0bj6hrYISDMLOkxgV1oJlBeAcpDeTkI-giR2sw==
age: 128758
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/soft_two.svg
52.84.93.61200 OK 416 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/soft_two.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (416), with no line terminators
Hash 9cab428314b3d6d14b27b1c135719c23
e02c5b85b10d649435b5930e710056f30ea2cc50
3a275c72443bceadd78236a8c465a5b9285433efd40cd339836380ae06c25279
GET /mk-land/dist/svg/landings/226_6/soft_two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 416
date: Tue, 01 Nov 2022 14:21:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "9cab428314b3d6d14b27b1c135719c23"
cache-control: public, max-age=604800
x-amz-version-id: 9Nz90cyOwx1KpcUWe9_.hucQaEGthL8K
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: ifvDyWLgaop50w3mMVydnhT-lt3fsJiYdkRxp5bjRoipY4KANpqc0Q==
age: 128789
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/per_two.svg
52.84.93.61200 OK 573 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/per_two.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (573), with no line terminators
Hash f7c01b4f32eceacb4bf0a84f301505c6
e69ac48a9b8f6ce19faf14bd1014c3943b967c04
f26625626a6dd5205a1a10f6c914bdbf6441dd7075b5cff2fdc9d09ecb9f5a67
GET /mk-land/dist/svg/landings/226_6/per_two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 573
date: Tue, 01 Nov 2022 14:21:59 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: "f7c01b4f32eceacb4bf0a84f301505c6"
cache-control: public, max-age=604800
x-amz-version-id: INeeTgMqzakR5LaDcvWPGvpXq9_xSm8Q
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: sE3rqLu1T-d28BD5l9grep7sSFvMP516TxdsvXR3MDNtm1_abLOxKQ==
age: 128758
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/per_three.svg
52.84.93.61200 OK 720 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/per_three.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (720), with no line terminators
Hash 6827d895741abaebbe73a96f65d28344
7b9070dbb0c59f249194f6b182b09507883a627c
e6e9d084a55b47d2b0b35022c13168a915b215f34bc43c62fe7c35f7d78896d4
GET /mk-land/dist/svg/landings/226_6/per_three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 720
date: Tue, 01 Nov 2022 14:21:59 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:53 GMT
etag: "6827d895741abaebbe73a96f65d28344"
cache-control: public, max-age=604800
x-amz-version-id: mvoCbEizAhsFLH5wdS2MZYQ3AAtx74.A
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: FnowUcQwas5RteZnTed-rQAMCiN4v1y5JR8bf0zL7xwmVD9qyBvs1Q==
age: 128757
X-Firefox-Spdy: h2
browser.sentry-cdn.com/5.5.0/bundle.min.js
151.101.130.217200 OK 52 kB URL HTTP/2 browser.sentry-cdn.com/5.5.0/bundle.min.js
IP 151.101.130.217:0
File type ASCII text, with very long lines (51441)
Hash b1dcc6195d84cf50c3e882d3d515f848
06562c193663a31a3cabeaa18cffeb882084fcb6
8c04755395b8f232c57d062a7669c3c414658299d29c6b6f83f1f30185d94ecb
GET /5.5.0/bundle.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 11 Nov 2022 05:27:37 GMT
last-modified: Fri, 05 Jul 2019 11:17:04 GMT
etag: W/"39339cf627bc67e34d4c623bea4c0b4a"
content-type: application/javascript; charset=utf-8
x-guploader-response-body-transformations: gunzipped
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 03 Nov 2022 02:07:56 GMT
age: 30832821
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 51570
X-Firefox-Spdy: h2
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
54.192.137.125200 OK 6.1 kB URL HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP 54.192.137.125:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Wed, 02 Nov 2022 03:16:31 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 a050a32e30453f07ede7fc20c9326306.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C5
x-amz-cf-id: iutTeJpxLAg07eKk2fUPl0vuyv1B9NMSW3f6xRt6tSS6OF0jfvQwTg==
age: 82285
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/security-two.svg
52.84.93.61200 OK 442 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/security-two.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (442), with no line terminators
Hash 1dc4abe3aa5d009df49fbf517f481ccc
c59310139609463fcda8759b2acb5d273cb47b2c
355f6e09902fa7825ed2dcab34dc5b00f874c346397cf1135dd7d04c97e17457
GET /mk-land/dist/svg/landings/226_6/security-two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 442
date: Tue, 01 Nov 2022 14:21:59 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "1dc4abe3aa5d009df49fbf517f481ccc"
cache-control: public, max-age=604800
x-amz-version-id: JYyDmy0JzcCA_htBP3.Yy0AadPOSkqdB
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: UtDEcJ56Y0CSLRzCw8IFmZ8DOQ3ZxXa_hTVDywRKXX7R04BW798_nw==
age: 128758
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/ant_one.svg
52.84.93.61200 OK 432 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/ant_one.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (432), with no line terminators
Hash 48ee3a2cc5a7ac742bd440d7c5497fa3
052e084834e87565be5632d608316d919ef4a6be
eb72a677d24f6679bbdd7ee7c9809a575c294d7e1c458b85d2ad0d3d3f7dc9d5
GET /mk-land/dist/svg/landings/226_6/ant_one.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 432
date: Tue, 01 Nov 2022 14:21:59 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: "48ee3a2cc5a7ac742bd440d7c5497fa3"
cache-control: public, max-age=604800
x-amz-version-id: zITGxENkluD_hWywsBv_mgYkXnAZakoF
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: EFGkhGzqswOKOpLui9ivzvC_tFwyRjwDfUpfmIIUbRLAl6UfeuufMw==
age: 128757
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/soft_four.svg
52.84.93.61200 OK 399 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/soft_four.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (399), with no line terminators
Hash bc4849c8d35e6a210935e7b9fdda0196
ffcc50042a4d7862847115f659b0f099c1b469bb
1c216829b95c0b70220cb919b5889fce57c99a687d7be02f06ded33f80527283
GET /mk-land/dist/svg/landings/226_6/soft_four.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 399
date: Tue, 01 Nov 2022 14:21:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:57 GMT
etag: "bc4849c8d35e6a210935e7b9fdda0196"
cache-control: public, max-age=604800
x-amz-version-id: cjT7BZtus9OxhFupiCyx1NXoECdT1Iuy
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: 8oda4hJX6WnU8clO4MrLb23fOwsXYcKVnl3N6Ts60jFGwrkYCozvYQ==
age: 128789
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/privacy-two.svg
52.84.93.61200 OK 987 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/privacy-two.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (987), with no line terminators
Hash 102a03f6293726facccabba18c0e9455
a26d09667f914080c04fd009f03f8d95850bb895
1d974ed4e61fc2a77bcd71ffda37e83e83cf0681d1633d5f42c00c3df2226def
GET /mk-land/dist/svg/landings/226_6/privacy-two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 987
date: Tue, 01 Nov 2022 14:21:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "102a03f6293726facccabba18c0e9455"
cache-control: public, max-age=604800
x-amz-version-id: vd2P4eOW5sVryjV60xLUbORWH7nqhDKo
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: 4Nms52kEWZhn3WYm5eAm4sWGPHn5_SE8L7sQOOih8EX-TcElIuubeg==
age: 128789
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/prive_three.svg
52.84.93.61200 OK 717 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/prive_three.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (717), with no line terminators
Hash a5c782d385dc0cbbd4afa608cdd1d8f3
68087ac49e47e19dba31ef068f54a6c574a8bfc2
6a6809edb7464cf5d45ff57e705bbefcfb37048721518235e12a5fc5b4b801c4
GET /mk-land/dist/svg/landings/226_6/prive_three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 717
date: Tue, 01 Nov 2022 14:21:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:00 GMT
etag: "a5c782d385dc0cbbd4afa608cdd1d8f3"
cache-control: public, max-age=604800
x-amz-version-id: hAo3LTGm1kioSzmqbpisk6sFB6F2ne_I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: PFMORxLMHVngkdz-aUik4CiUlCOJ6qkmcsM7IJqZvJHvVPaRJTXUrA==
age: 128789
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/components/btn-arrow.svg
52.84.93.61200 OK 412 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/components/btn-arrow.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (412), with no line terminators
Hash 2bb20d31732674b19f39721677ee98b0
c009a4436fe0fd3e281dcd9f60ab0f2769f25cb5
b5553f16ea66eab43971c73b4115bbe291b2188dc00d0c5d4f5bb21958e3dda2
GET /mk-land/dist/svg/components/btn-arrow.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 412
date: Tue, 01 Nov 2022 14:21:54 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:38:48 GMT
etag: "2bb20d31732674b19f39721677ee98b0"
cache-control: public, max-age=604800
x-amz-version-id: nukWLapdOnZ6K4hroAQrBv4GKBUk7Zxa
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: G4xpv-VFbiqpB9wBxzs0I9fOZgL5E_bMQJr9l6XgF1GcpEqOsc7prw==
age: 128763
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/clean_one.svg
52.84.93.61200 OK 486 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/clean_one.svg
IP 52.84.93.61:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (486), with no line terminators
Hash 4ef86b2fbcdb943033b3c85e020122da
162e093a49c83d2d01bc48c1c9d398ac57d8b92b
4418d84f10560dd73aef8ddb24712a06de3530a83ec5a2674788a8e3758056da
GET /mk-land/dist/svg/landings/226_6/clean_one.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 486
date: Tue, 01 Nov 2022 14:21:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: "4ef86b2fbcdb943033b3c85e020122da"
cache-control: public, max-age=604800
x-amz-version-id: BK083fsfql.WcGuuNtT06YWzZ5Io0.yQ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: e3dorzG1-VTSN-pSz-CEyWgQJgIJdTZAV5hiPwkVs_TWcsUAnbj1EA==
age: 128789
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash e539fa08ddc0ce1396c84ecc16c2bec7
69414e0693690cc9cc14b48b2f952efe942198d5
b6609b24198f2c6c9eefaa3b1cb2f2db9dd8b81c6a7135a5b46c3a9a165c8266
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash e539fa08ddc0ce1396c84ecc16c2bec7
69414e0693690cc9cc14b48b2f952efe942198d5
b6609b24198f2c6c9eefaa3b1cb2f2db9dd8b81c6a7135a5b46c3a9a165c8266
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash e539fa08ddc0ce1396c84ecc16c2bec7
69414e0693690cc9cc14b48b2f952efe942198d5
b6609b24198f2c6c9eefaa3b1cb2f2db9dd8b81c6a7135a5b46c3a9a165c8266
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash abae2de07c673b4a8f7eb0b8b0e182e5
e17d882cd933b135c27b4d7619d227a5728e00ec
0f5d11356a96362cc0622658e85af39bb3e5b98a4707d4915d23210209138738
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-cdn.mackeeper.com/mk-land/dist/images/landings/226/hero.webp
52.84.93.61200 OK 220 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/226/hero.webp
IP 52.84.93.61:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 220 kB (219648 bytes)
Hash 87dd68aac400d85dfa1db40e1b82d15d
120f848d486af3d5ebabd098ceac1a45c5833ae7
1a60fe135354f064139e85467ab8425ecb667362705658f2f17c1b4b03c5ea83
GET /mk-land/dist/images/landings/226/hero.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 219648
date: Tue, 01 Nov 2022 15:06:58 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:57 GMT
etag: "87dd68aac400d85dfa1db40e1b82d15d"
cache-control: public, max-age=604800
x-amz-version-id: 4L0sXSs7c8B1NC.82r.pHSX7QXp0wcne
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: IfsSo5wMtsgnCo2H4FjwqJM-NM1Nx0dlX4KvqTCIZu-D_L6jxEKybA==
age: 126059
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/226/memory.webp
52.84.93.61200 OK 1.4 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/226/memory.webp
IP 52.84.93.61:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e24e191c026b00c1d7a106572ec478ed
b2929eaa3663327447ebc0a36f971fd5f41ed3bb
dfcbf5db55a5b400ad7e7c0cbf38c1dcb6e48199f4acd751a2eb44d579b078fa
GET /mk-land/dist/images/landings/226/memory.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1420
date: Tue, 01 Nov 2022 15:06:58 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:58 GMT
etag: "e24e191c026b00c1d7a106572ec478ed"
cache-control: public, max-age=604800
x-amz-version-id: 1vAS8O6UcwVIOLifS.J6ICiwtfTXw2jZ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: ogXLhBfyyUSJ8mz4dlueKwKCaYL_7B_EBWgOwxgkOThyMITcMLPvRA==
age: 126059
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/226/back.webp
52.84.93.61200 OK 1.8 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/226/back.webp
IP 52.84.93.61:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 867c21c37d640d99114ca25d1a737ef9
3c02f083a49ccb824379b4d0b9c4a38b6456417b
d6855d6980e680edfe756f5021f6b06e541c033fafa4f0caf78f01ca3424d09f
GET /mk-land/dist/images/landings/226/back.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1824
date: Tue, 01 Nov 2022 15:06:58 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:59 GMT
etag: "867c21c37d640d99114ca25d1a737ef9"
cache-control: public, max-age=604800
x-amz-version-id: Jur.ibLOiEhGsb_TBRGaIQ2gnsF.i6Re
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: kGCjCt2uIKcYDg0GJXSxkk3BTSSKaR0YWd7I2vnvFlh3d5BtB3KIfA==
age: 126059
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/226/virus.webp
52.84.93.61200 OK 1.7 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/226/virus.webp
IP 52.84.93.61:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9b099488f1b2855d4161d0f212c9c4ad
ed56ac97b5e0a671f523aece4ad04cf22dd4a40f
3fbe829b179669affe3b743bb603ff415506fc7d76072980a7900ce6ceb41431
GET /mk-land/dist/images/landings/226/virus.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1718
date: Tue, 01 Nov 2022 15:06:58 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:59 GMT
etag: "9b099488f1b2855d4161d0f212c9c4ad"
cache-control: public, max-age=604800
x-amz-version-id: hC8o5xw8Vbs14GyNB7kKk0ruf_0ADI.y
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: mDSCCMkBkpkVFj4XFaaxuWQtRKv4BCtxxTSuLp4-cBHGm9OUVKxY7A==
age: 126059
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/226/performance.webp
52.84.93.61200 OK 30 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/226/performance.webp
IP 52.84.93.61:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash f8a37f0c75191e262d9e00b2bbe849e0
6f18898837773a58c4481fc4bc08cca2cdd69216
1f3376c88f88a4d8be5f4da476e1a2bd337779b975fb3e240e3a01023a872dba
GET /mk-land/dist/images/landings/226/performance.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 30230
date: Tue, 01 Nov 2022 15:06:58 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:58 GMT
etag: "f8a37f0c75191e262d9e00b2bbe849e0"
cache-control: public, max-age=604800
x-amz-version-id: WtImzHf7J4uGMuRdFTGvv5Gk2dF.H7tm
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: -1TTyI4zs68SkHUXO3AgkZnzJIpYagQoaWP82RRvKjaTG2KAIwIeKA==
age: 126059
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PVNC4DL
142.250.74.168200 OK 100 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PVNC4DL
IP 142.250.74.168:0
File type Unicode text, UTF-8 text, with very long lines (40633)
Size 100 kB (100028 bytes)
Hash 74edd83bdde5045c814f09da4303a2d0
dbbd46e5bb832054bc75c4b3750ca1209d794f0b
8d0e7ff6aeca53b88110f839b2625d299911bccfbaf214a24ef12d35f2cc9021
GET /gtm.js?id=GTM-PVNC4DL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 03 Nov 2022 02:07:56 GMT
expires: Thu, 03 Nov 2022 02:07:56 GMT
cache-control: private, max-age=900
last-modified: Thu, 03 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100028
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash abae2de07c673b4a8f7eb0b8b0e182e5
e17d882cd933b135c27b4d7619d227a5728e00ec
0f5d11356a96362cc0622658e85af39bb3e5b98a4707d4915d23210209138738
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
54.192.137.125200 OK 2.1 kB URL HTTP/2 widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
IP 54.192.137.125:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6784)
Hash bbd26c541b063878dddb6095c1f82221
ad7402097c8a410e880016bf77b037e2def9a09f
d7cc9429d7ddde82e2f3d9390e483ca72489b153a4356a401456411d5b40fa9a
GET /trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 2114
last-modified: Tue, 04 Oct 2022 10:33:49 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Wed, 02 Nov 2022 06:31:00 GMT
cache-control: max-age=86400
etag: "bbd26c541b063878dddb6095c1f82221"
x-cache: Hit from cloudfront
via: 1.1 a050a32e30453f07ede7fc20c9326306.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C5
x-amz-cf-id: zfKfd432IgT8F4Iy_xLd6RoiRal8WtrN98GmLEKZK8o0uqTtjg6ELA==
age: 72062
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
54.192.137.125200 OK 3.7 kB URL HTTP/2 widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
IP 54.192.137.125:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (15336)
Hash 83355578cdf883e1c6aef6f07b55893f
9d029e5c705fcdf74bb145b41dcf6179adff85e2
a4a8345f2801ecb4907f357a51b22176f217c7f445fbb3bccfe645c536d39842
GET /trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 3697
last-modified: Tue, 04 Oct 2022 10:34:05 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Wed, 02 Nov 2022 05:22:28 GMT
cache-control: max-age=86400
etag: "83355578cdf883e1c6aef6f07b55893f"
x-cache: Hit from cloudfront
via: 1.1 a050a32e30453f07ede7fc20c9326306.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C5
x-amz-cf-id: oHcdzaalx_32BSGCaGA3SWeVbXKNI4BjlWlqh3kyUbLZG2jEXU0edw==
age: 74729
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/main.js
54.192.137.125200 OK 17 kB URL HTTP/2 widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/main.js
IP 54.192.137.125:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (55461)
Hash 8efe0f2f2944e9baaa88fd0174e1b459
390574f839b7fb636c79834a1a53a0ebc1e2c87b
30b71113e1dbb5d3de637195adf9e5708923a611cb99f5670e7fd1c04c123d32
GET /trustboxes/5419b637fa0340045cd0c936/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 17075
last-modified: Tue, 04 Oct 2022 10:33:51 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Wed, 02 Nov 2022 04:55:27 GMT
cache-control: max-age=86400
etag: "8efe0f2f2944e9baaa88fd0174e1b459"
x-cache: Hit from cloudfront
via: 1.1 a050a32e30453f07ede7fc20c9326306.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C5
x-amz-cf-id: GSVTF366HG9AErg-Nsjh1j56-nOpRtWsP1Iq0bTIHmeKGRw8pltGOg==
age: 77213
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/main.js
54.192.137.125200 OK 30 kB URL HTTP/2 widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/main.js
IP 54.192.137.125:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (64281), with no line terminators
Hash bc5c8622de6c884abb3d021c6468b0dc
dcbd21e6c0dc4311f9446a79a36de21f39e7bf1d
08645a2fa7db0564521436d10d659a1a4b2f43ca2db3e9b923d119c38e4ee208
GET /trustboxes/539ad60defb9600b94d7df2c/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 29606
last-modified: Tue, 04 Oct 2022 10:34:08 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Wed, 02 Nov 2022 17:23:16 GMT
cache-control: max-age=86400
etag: "bc5c8622de6c884abb3d021c6468b0dc"
x-cache: Hit from cloudfront
via: 1.1 a050a32e30453f07ede7fc20c9326306.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C5
x-amz-cf-id: mCSKySAs8dnYlC4zxzle6e3pWBoUHoqwGmEM-djlNuchCxL9tqUuwQ==
age: 31482
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c18aead96956fc8de41d067a99071c73
29b784835d23ec09a11f91dda1f3ac9f9550c129
106617c550459147e0e38e15d84305ed944cbc259b78291ad0c9fc01083c182d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "106617C550459147E0E38E15D84305ED944CBC259B78291AD0C9FC01083C182D"
Last-Modified: Tue, 01 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15024
Expires: Thu, 03 Nov 2022 06:18:21 GMT
Date: Thu, 03 Nov 2022 02:07:57 GMT
Connection: keep-alive
widget.trustpilot.com/trustbox-data/5419b637fa0340045cd0c936?businessUnitId=4dbb14ee00006400050fa293&locale=en-US
54.192.137.125200 OK 431 B URL HTTP/2 widget.trustpilot.com/trustbox-data/5419b637fa0340045cd0c936?businessUnitId=4dbb14ee00006400050fa293&locale=en-US
IP 54.192.137.125:0
File type JSON data\012- , ASCII text, with very long lines (930), with no line terminators
Hash 18f6e09d9657a1782ed423cb9a6c9c60
bdf1fdf2626da7fa06842d698af0c0c59ef363b0
b86abec794e9352adb74fb093a8a021c8c04fd4a311af132b57b8872c7037822
GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=4dbb14ee00006400050fa293&locale=en-US HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 431
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
date: Thu, 03 Nov 2022 02:06:00 GMT
cache-control: public,max-age=1800
etag: "ba6d036e402a40e02fe829a144487669"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a050a32e30453f07ede7fc20c9326306.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C5
x-amz-cf-id: oJLpStM-sx9uoRa9hch_Q-KtBtl0O99GzCIa7-50GhqeJbecOQlWZA==
age: 219
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c18aead96956fc8de41d067a99071c73
29b784835d23ec09a11f91dda1f3ac9f9550c129
106617c550459147e0e38e15d84305ed944cbc259b78291ad0c9fc01083c182d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "106617C550459147E0E38E15D84305ED944CBC259B78291AD0C9FC01083C182D"
Last-Modified: Tue, 01 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15024
Expires: Thu, 03 Nov 2022 06:18:21 GMT
Date: Thu, 03 Nov 2022 02:07:57 GMT
Connection: keep-alive
widget.trustpilot.com/trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20
54.192.137.125200 OK 3.0 kB URL HTTP/2 widget.trustpilot.com/trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20
IP 54.192.137.125:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (7745), with no line terminators
Hash fb8dc1e75cc49bcc951c4bbc94722392
c70b15c3ab7e537d15a7af739929e74028477b3c
fc8d3383c0c1b5e0b2aa4c6590e38876c5fadde24ef3f05d7e79ad4ee6d59051
GET /trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 3047
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
date: Thu, 03 Nov 2022 01:41:50 GMT
cache-control: public,max-age=1800
etag: "b39bc3473296c90b6a291fcb3d5f5e38"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a050a32e30453f07ede7fc20c9326306.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C5
x-amz-cf-id: HKo-9BBAo2nwphjg43KBs6_jKYFEUlR-Kr6gKo6E9LRdxPKZmcCC0w==
age: 1637
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F116416c7-b158-4c98-af55-3027f9bfbd6c.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F116416c7-b158-4c98-af55-3027f9bfbd6c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc615bd01e1ac97fec7bf47b18f0e999
ee2c892adba5d3e12ac8443065c38317752f3e4a
ca41974691496f2629f45cba9bb21b84e7dbb9cefbf7e8e3348c98b101002269
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F116416c7-b158-4c98-af55-3027f9bfbd6c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7044
x-amzn-requestid: 6ed2687f-f478-4206-a9b7-fc63428966bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a5sd1GcvIAMFYew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63608df1-79ada3087098484923a3b64d;Sampled=0
x-amzn-remapped-date: Tue, 01 Nov 2022 03:09:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HsnvvNU6huvFGVXW-AypNd0J5_Hwv-bQbpJ0g6JVrjUt6a_cy3vAUA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Wed, 02 Nov 2022 04:23:25 GMT
age: 78272
etag: "ee2c892adba5d3e12ac8443065c38317752f3e4a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a20b50a-8733-4b26-831f-c0a5c7afc605.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a20b50a-8733-4b26-831f-c0a5c7afc605.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26182d39e6261f137221e7f49dc4bf57
9feb2d147394a8bde9df6184de4e95e2c0e2c67c
55979ae48a023c4dce97ab1ac085ae797a650f82ef5a8cac0ac57e43f0fabb63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a20b50a-8733-4b26-831f-c0a5c7afc605.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9061
x-amzn-requestid: 46da4a81-4629-485e-a1ac-6d1cf7794a1a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: avzazGt0IAMFsSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635c9911-0225b41020c46521683bdf7a;Sampled=0
x-amzn-remapped-date: Sat, 29 Oct 2022 03:08:01 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: du60l8S7Y1FiCa1ZW-Jnk8SDNCVuvmGzlO2d5kRHWmvNOUrFhE_5yg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 02 Nov 2022 08:59:45 GMT
age: 61692
etag: "9feb2d147394a8bde9df6184de4e95e2c0e2c67c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark%20%7D%7D&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936
54.192.137.125204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark%20%7D%7D&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936
IP 54.192.137.125:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark%20%7D%7D&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Thu, 03 Nov 2022 02:07:56 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a050a32e30453f07ede7fc20c9326306.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C5
x-amz-cf-id: YCnOxyKwcCBKmpouTqUouswwdttwBi29bpywIRfNlzYHG2NhLla96Q==
X-Firefox-Spdy: h2
widget.trustpilot.com/stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark%20%7D%7D&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936
54.192.137.125204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark%20%7D%7D&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936
IP 54.192.137.125:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark%20%7D%7D&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Thu, 03 Nov 2022 02:07:56 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a050a32e30453f07ede7fc20c9326306.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C5
x-amz-cf-id: iXtD3_3gwORb1uhfHZsjCE00f5xrfl6b8-bY5msr9eS-vQlQV1EB5g==
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8dd5c36-0f84-4c71-b515-880ebaa20d52.png
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8dd5c36-0f84-4c71-b515-880ebaa20d52.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ff4da3d2c66d6f155fea05b88127873d
eafb1bafaa2feb2b188aeb1bc8caac505337d258
82e62da33562177403fcab7a552a5f5f64c91ab4cee25dd1cd979dedfe066cde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8dd5c36-0f84-4c71-b515-880ebaa20d52.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7972
x-amzn-requestid: fa64bad3-9070-43c8-83d1-803fb3696318
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a8cx_GSlIAMFZqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6361a80c-5806a37c15d428d96366abfa;Sampled=0
x-amzn-remapped-date: Tue, 01 Nov 2022 23:13:16 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dW1wdxKzL1WvezmHwKiqEoPPoEQVoq9oYTKoLMq9sd2nPED6afF63w==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Wed, 02 Nov 2022 04:29:40 GMT
age: 77897
etag: "eafb1bafaa2feb2b188aeb1bc8caac505337d258"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77daf043-dc2c-488f-a016-721add19ba21.jpeg
34.120.237.76200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77daf043-dc2c-488f-a016-721add19ba21.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ecf55d579f9ce828715804df5fea399c
feceee1c1ab1f928774fb24f05f17e12474af516
c2a2a61e07ce5029ede1d6c0cfaf257529adae70e7a9c58e4ebbe6177072b9e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77daf043-dc2c-488f-a016-721add19ba21.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5301
x-amzn-requestid: a80badb8-8525-4f47-88d2-125993751918
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a_iCYH-2IAMFx5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6362e3a8-7aa2d5cf36fb0a2a24f2dccc;Sampled=0
x-amzn-remapped-date: Wed, 02 Nov 2022 21:39:52 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: LoVOeH3IGscaJV88yepkrosmxF7nDaBvuO6O6A34L4LtCKtXBDyMPA==
via: 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 02 Nov 2022 21:40:08 GMT
etag: "feceee1c1ab1f928774fb24f05f17e12474af516"
content-type: image/jpeg
age: 16069
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: z6Lnru_eeTvRGdsz-q37-HGFgFfIT6fLSFcJBvT3oPjAPilszTWkDw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Wed, 02 Nov 2022 11:00:57 GMT
age: 54420
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7a21993-a27e-44d7-9d43-3eb02c27bc81.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7a21993-a27e-44d7-9d43-3eb02c27bc81.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 79bbed8b76cfcaab0aa9769692ab0817
89918478062105c58569f96bf183849c27c78929
56c32d16b6ce5bdef27e0413ff08ceb82b1fcd1b4fb9ad0fc04679bbd9c3df7b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7a21993-a27e-44d7-9d43-3eb02c27bc81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5561
x-amzn-requestid: dc04f974-b8e0-4751-b922-2de7d78a1e37
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a_iCZHrEIAMFqWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6362e3a8-469b22133d751f897c7d67cd;Sampled=0
x-amzn-remapped-date: Wed, 02 Nov 2022 21:39:52 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4nMhVb_bLVjO3AfrUFgEyGQhmiFQxtHHmw3QR3YoH2PwWpJfSs_tAA==
via: 1.1 7f06047c304d80ea094816a27c933914.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Wed, 02 Nov 2022 21:40:08 GMT
etag: "89918478062105c58569f96bf183849c27c78929"
content-type: image/jpeg
age: 16069
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c
54.192.137.125204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c
IP 54.192.137.125:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Thu, 03 Nov 2022 02:07:57 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a050a32e30453f07ede7fc20c9326306.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C5
x-amz-cf-id: yEh4NwG3FBbw1tPjufILQAPFOPZgqHgoccDKuxfpSlbLj1xqjfyOzg==
X-Firefox-Spdy: h2
dvcasha2.ocsp-certum.com/
23.36.79.43200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 23.36.79.43:0
ASN #20940 Akamai International B.V.
Hash f18746709236ab9b1e587f74a334b26d
9fd48bcbaab644627a8ae5e0613eaf78a5310e90
0532d2d27a505cde9c5389c63278053e5f95206e92cb72b7ebab5f0b5f2ea46c
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=90
Date: Thu, 03 Nov 2022 02:07:57 GMT
Connection: keep-alive
tr-rc.lfeeder.com/?sid=ywVkO4XWPeW7Z6Bj&data=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
52.84.93.111200 OK 43 B URL HTTP/2 tr-rc.lfeeder.com/?sid=ywVkO4XWPeW7Z6Bj&data=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
IP 52.84.93.111:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /?sid=ywVkO4XWPeW7Z6Bj&data=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 HTTP/1.1
Host: tr-rc.lfeeder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
server: CloudFront
date: Thu, 03 Nov 2022 02:07:57 GMT
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 db0bd59b83de96d013902d284b46d57e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: LQu3AFTyWS2uECPTJTyJxWrwodtyBtZDRUlV9X-REEa_-bEK25cqqQ==
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-GYTXD89N1W>m=2oeav0&_p=168496490&_gaz=1&cid=1213455660.1667441277&ul=en-us&sr=1280x1024&_s=1&sid=1667441276&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-GYTXD89N1W>m=2oeav0&_p=168496490&_gaz=1&cid=1213455660.1667441277&ul=en-us&sr=1280x1024&_s=1&sid=1667441276&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GYTXD89N1W>m=2oeav0&_p=168496490&_gaz=1&cid=1213455660.1667441277&ul=en-us&sr=1280x1024&_s=1&sid=1667441276&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://app2.mackeeperaff.com
date: Thu, 03 Nov 2022 02:07:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 63a18761b3f077fb645fd368b7087649
832aab6dd0e86700c9adf5e248cd7ec9353533e5
e6d77c53b9b6bd8fc0323041681d636f6a4593f3b404639767637899f83453d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/g/collect?v=2&tid=G-GYTXD89N1W&cid=1213455660.1667441277>m=2oeav0&aip=1
173.194.221.154204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-GYTXD89N1W&cid=1213455660.1667441277>m=2oeav0&aip=1
IP 173.194.221.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GYTXD89N1W&cid=1213455660.1667441277>m=2oeav0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://app2.mackeeperaff.com
date: Thu, 03 Nov 2022 02:07:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/favicon_ua.png
52.84.93.61200 OK 407 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/favicon_ua.png
IP 52.84.93.61:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 471c1c90d41a571f14162d7a8a9c8b9c
b08dfa2783c706945451a8f4890bdb9243936e78
eb625a455a490292aa2a7101dd7b3235bc4c92df0f08349c6663df51b7b66c27
GET /mk-land/dist/images/favicon_ua.png HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 407
date: Tue, 01 Nov 2022 14:21:44 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 04 Apr 2022 09:52:27 GMT
etag: "471c1c90d41a571f14162d7a8a9c8b9c"
cache-control: public, max-age=604800
x-amz-version-id: fOjB1uVWJszrafJRMb0A4UZGtOA62i.I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: XnYxf3tjMZdohO2xJmwekhkqX_Y1BdMrCFCEPIfC60d3xkdMJ4gxPg==
age: 128774
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
23.38.201.81200 OK 3.5 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP 23.38.201.81:0
File type ASCII text, with very long lines (8656), with no line terminators
Hash 6cff2cb49ee772adf066904fd18efd9a
8b876016198b0fc9862d2b6e29a80251c5422e72
85d26923c638ce50f36f7b69f9f50d2a6d6863abed574af143e24a14a343f9d2
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "0d5508c59e34b5d35cde5aea2aa1c2fd:1665301953.026714"
Last-Modified: Sun, 09 Oct 2022 07:50:08 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Thu, 03 Nov 2022 02:27:58 GMT
Date: Thu, 03 Nov 2022 02:07:58 GMT
Content-Length: 3471
Connection: keep-alive
b-code.liadm.com/a-015g.min.js
18.165.227.10200 OK 11 kB URL HTTP/2 b-code.liadm.com/a-015g.min.js
IP 18.165.227.10:0
File type Unicode text, UTF-8 text, with very long lines (28501)
Hash 6f12743feb8224eff12bc1ac6d52db80
2668abcdd656e1007eb16e1564e27d4621cf7138
445270f384c6bf3beca3607b7db83bc8261779eec6c4360a740da936e515c670
GET /a-015g.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 02 Nov 2022 10:42:22 GMT
cache-control: public, max-age=86400
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 248401f935c88d51390fe8dd507217f2.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P5
x-amz-cf-id: 9BqTZE4A-Sqq1PTMNS9FdUIOv_r5o1Vx83ykJ-f1OHrrXfUziwuRLA==
age: 55535
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 32b032454aa9a688fb91a589140ae152
f9c583002e296a75f1746bf181902948dba02542
3d272334a2923d5288765bc1183157fd127bd8f2928003760878feaca83eece2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 32b032454aa9a688fb91a589140ae152
f9c583002e296a75f1746bf181902948dba02542
3d272334a2923d5288765bc1183157fd127bd8f2928003760878feaca83eece2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/gtm/optimize.js?id=OPT-TVNW4WH
142.250.74.174200 OK 44 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=OPT-TVNW4WH
IP 142.250.74.174:0
File type ASCII text, with very long lines (1343)
Hash 6133ee1ddedb14fd12b57e14e0aa55af
e116478f5c9955325f706d73d1b04fb444c4b0a6
b45d7be4c2a473b27ad7321d11ccdec9cdf0096cc85cbe73725dd6027fb0f65f
GET /gtm/optimize.js?id=OPT-TVNW4WH HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 03 Nov 2022 02:07:58 GMT
expires: Thu, 03 Nov 2022 02:07:58 GMT
cache-control: private, max-age=900
last-modified: Thu, 03 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44000
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
188.125.94.206200 OK 5.9 kB IP 188.125.94.206:0
File type ASCII text, with very long lines (16553), with no line terminators
Hash 2f6a1b8a4843f74a5ba54c055fcb3850
919a5f9166f3f9c73803cebd312ad016570a30d8
1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6NcrxNPI2Sp6rdILpFitTTZCWj3AvE7aULOteSFRixLw8tP/o/6F5K7DFavZYJLmSrYFf7MP/AM=
x-amz-request-id: 00QK013PQ38049Q2
date: Thu, 03 Nov 2022 02:00:04 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 475
content-length: 5929
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
bat.bing.com/bat.js
204.79.197.200200 OK 11 kB IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=37F19653D1066EE314438402D0F36F8B; domain=.bing.com; expires=Tue, 28-Nov-2023 02:07:58 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C4E35180CAC2461BBA7DA2F0E1F3E127 Ref B: OSL30EDGE0219 Ref C: 2022-11-03T02:07:58Z
date: Thu, 03 Nov 2022 02:07:58 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 32b032454aa9a688fb91a589140ae152
f9c583002e296a75f1746bf181902948dba02542
3d272334a2923d5288765bc1183157fd127bd8f2928003760878feaca83eece2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 9e22dfe51ab9c940bb579430ed3b78a4
ccae561eb9b63619ffe425b9f869cbbbc3ee7c0b
0a2184c28a4c739add7ff59ff6e4a124d93505fc75b185199f60d0348b881e6e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Source+Sans+Pro:400,600
142.250.74.10200 OK 1.8 kB URL HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro:400,600
IP 142.250.74.10:0
File type ASCII text, with very long lines (2300)
Hash 8952197b5a63fd58a79244a1a8d0e87e
d0c4417d49e4cccd1adeae590e15579894d017a5
7ac3f58b4c2fb8a7f897a09eddcc3f8d450d23075caf2249fcbd449699aee468
GET /css?family=Source+Sans+Pro:400,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 03 Nov 2022 02:07:56 GMT
date: Thu, 03 Nov 2022 02:07:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/957119846/?random=1667441276699&cv=11&fst=1667441276699&bg=ffffff&guid=ON&async=1>m=2wgav0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1438403466.1667441277&rfmt=3&fmt=4
216.58.207.194200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/957119846/?random=1667441276699&cv=11&fst=1667441276699&bg=ffffff&guid=ON&async=1>m=2wgav0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1438403466.1667441277&rfmt=3&fmt=4
IP 216.58.207.194:0
File type ASCII text, with very long lines (2199), with no line terminators
Hash fa465d063706459856b43bf260cf6430
e7b8a6e19ba18aa74d3b7e0ea69dee3e5d05ed8f
1f1005d2bc527b08c10653ad36bb4e29672b312bae189aac52d3f477a9f3d169
GET /pagead/viewthroughconversion/957119846/?random=1667441276699&cv=11&fst=1667441276699&bg=ffffff&guid=ON&async=1>m=2wgav0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1438403466.1667441277&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 03 Nov 2022 02:07:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1066
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 03-Nov-2022 02:22:58 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 32b032454aa9a688fb91a589140ae152
f9c583002e296a75f1746bf181902948dba02542
3d272334a2923d5288765bc1183157fd127bd8f2928003760878feaca83eece2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash da71a34ecbacf17cd3ac89c3ec8ec1d9
8effbb8d6efbaa6c6c64d65dec94695b53b0be4d
25f3a056066c0ff6862550e0428d923a42afe323782a7327bd76205fac1dfd52
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1638
Cache-Control: max-age=120390
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Etag: "63624f5e-1d7"
Expires: Fri, 04 Nov 2022 11:34:28 GMT
Last-Modified: Wed, 02 Nov 2022 11:07:10 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/983482265/?random=1667441276696&cv=11&fst=1667441276696&bg=ffffff&guid=ON&async=1>m=2wgav0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1438403466.1667441277&rfmt=3&fmt=4
216.58.207.194200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/983482265/?random=1667441276696&cv=11&fst=1667441276696&bg=ffffff&guid=ON&async=1>m=2wgav0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1438403466.1667441277&rfmt=3&fmt=4
IP 216.58.207.194:0
File type ASCII text, with very long lines (2201), with no line terminators
Hash 22dbab81f8b68bccf39badfb84c5aecb
4ec4150751d3f30de1577b571da4dffca33b4002
365c87e93d6a9891a70aebbc0fde40e5cf8f8ab826fe94d0190ca71954460fb8
GET /pagead/viewthroughconversion/983482265/?random=1667441276696&cv=11&fst=1667441276696&bg=ffffff&guid=ON&async=1>m=2wgav0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1438403466.1667441277&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 03 Nov 2022 02:07:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1066
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 03-Nov-2022 02:22:58 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 63a18761b3f077fb645fd368b7087649
832aab6dd0e86700c9adf5e248cd7ec9353533e5
e6d77c53b9b6bd8fc0323041681d636f6a4593f3b404639767637899f83453d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash d104b70bf03bbef04277daf71d9e99b0
3fee377f3d3c3b36a50b40e989a55d137c565952
7964cc47620e464da24a4263b3b22832710cc4cd746ea463553e1d634d15b8d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/854379023/?random=1667441276693&cv=11&fst=1667441276693&bg=ffffff&guid=ON&async=1>m=2wgav0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1438403466.1667441277&rfmt=3&fmt=4
216.58.207.194200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/854379023/?random=1667441276693&cv=11&fst=1667441276693&bg=ffffff&guid=ON&async=1>m=2wgav0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1438403466.1667441277&rfmt=3&fmt=4
IP 216.58.207.194:0
File type ASCII text, with very long lines (2201), with no line terminators
Hash 214881ea77f17676b535916c353b790c
984f5cb0560b19474338e3eaf2af7f5c23ef88fa
5a41c6dfe2ba6c40c4da773f11ddf6cc7a4b853ab23f38c7e89a5634fbd1a892
GET /pagead/viewthroughconversion/854379023/?random=1667441276693&cv=11&fst=1667441276693&bg=ffffff&guid=ON&async=1>m=2wgav0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=1438403466.1667441277&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 03 Nov 2022 02:07:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1065
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 03-Nov-2022 02:22:58 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1667441277068&aid=a-015g&se=e30&duid=f810f9c9df2c--01ggxkxdzspwz8w02378zqnr9t&tna=v2.5.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-
34.233.14.107302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1667441277068&aid=a-015g&se=e30&duid=f810f9c9df2c--01ggxkxdzspwz8w02378zqnr9t&tna=v2.5.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-
IP 34.233.14.107:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1667441277068&aid=a-015g&se=e30&duid=f810f9c9df2c--01ggxkxdzspwz8w02378zqnr9t&tna=v2.5.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU- HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 03 Nov 2022 02:07:58 GMT
content-length: 0
trace-id: df26f82a9e028f80
vary: Origin
location: /j?dtstmp=1667441277068&aid=a-015g&se=e30&duid=f810f9c9df2c--01ggxkxdzspwz8w02378zqnr9t&tna=v2.5.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true
set-cookie: lidid=cb9c5734-595f-4baf-a367-7728eedf79a1; Max-Age=63072000; Expires=Sat, 02 Nov 2024 02:07:58 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1212352/tfa.js
151.101.85.44200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1212352/tfa.js
IP 151.101.85.44:0
File type ASCII text, with very long lines (58481)
Hash c645ac44abefb0edca77c19717c459a7
f05416ba3ac09fa65023295f15af024dc43deec4
d6ae12162f0f0ba970c157322a5bfedb654a898f7cc600b3fa1b96243146606f
GET /libtrc/unip/1212352/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: w/H4iQGFnTxsl6EU6Wm/nF9Q2zyHeN5hALXKeqeCJ3GZfISh2IjKrwpHk8w+cBKWXPEsya11wN8=
x-amz-request-id: 0YS62BATJ6H7W6M3
x-amz-replication-status: COMPLETED
last-modified: Sun, 30 Oct 2022 11:30:51 GMT
etag: "086e2f6123fdeb72f131ebe2919e1e07"
x-amz-version-id: eSN5T8wZg_6Rq6uiGYPrOnxURu5xhFod
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 03 Nov 2022 02:07:58 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1656-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1667441278.065122,VS0,VE100
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 80
content-length: 17944
X-Firefox-Spdy: h2
app2.mackeeperaff.com/land/api/send-event
18.215.214.239200 OK 163 B URL HTTP/2 app2.mackeeperaff.com/land/api/send-event
IP 18.215.214.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash b6e6811ce50aa2f9ef6191bd5bdd1f3e
720f8d94ccb79ae4f523f052fd6841096a639ae8
3c769bd53ac1238870325b003abf382a1e7bec11eda7b32758b68e442eae6ce1
Analyzer Verdict Alert quad9 Sinkholed
POST /land/api/send-event HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: 5B3zG4B2ZLdiGGfa813SfnSyBjFudJi0qi28D6by
X-XSRF-TOKEN: eyJpdiI6IlJLdnZEeGNxUGRteEFVXC9Ld1IrWG5RPT0iLCJ2YWx1ZSI6Ink4OTA3cUxTSkhHejBFMlRGQmZUVDg2cHBQTmh2ZlJnaE5KOEE0Mnp0eVljdUU0Z2VGT2VZOThyV3lKRFZSUm1pbzkyMHlYejNXTWlEQ2NQU00zMCtSWUdhczd3RHFuU2xmUTRHRVpualF2ZnRKN1IwVVBEN3ppU0EzTUpCZHc0IiwibWFjIjoiYWVlOTBmYmYxY2RlZTQ4YzcxODhkYWQ4MTkyNTNmNjhkNjNlNjA5OGY3OGNlMmQ4OTJhZTU0OTY1YWM0NDJiZSJ9
Content-Length: 100
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/226/?rtkcid=63632267d160dd0001f864e6&rtkcmpid=627bbe0b35981a0001d4d8dc&tid=Affiliate%20-%20Hybrid%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Cookie: XSRF-TOKEN=eyJpdiI6IlJLdnZEeGNxUGRteEFVXC9Ld1IrWG5RPT0iLCJ2YWx1ZSI6Ink4OTA3cUxTSkhHejBFMlRGQmZUVDg2cHBQTmh2ZlJnaE5KOEE0Mnp0eVljdUU0Z2VGT2VZOThyV3lKRFZSUm1pbzkyMHlYejNXTWlEQ2NQU00zMCtSWUdhczd3RHFuU2xmUTRHRVpualF2ZnRKN1IwVVBEN3ppU0EzTUpCZHc0IiwibWFjIjoiYWVlOTBmYmYxY2RlZTQ4YzcxODhkYWQ4MTkyNTNmNjhkNjNlNjA5OGY3OGNlMmQ4OTJhZTU0OTY1YWM0NDJiZSJ9; mackeeper_session=eyJpdiI6InRCNEp3VHhUa0M5cTJxbGd0WFNaeEE9PSIsInZhbHVlIjoidjdyakhSZ2d3cW16c29rVVEreldaUUFcL2hPYXhhN3VrYXAwMGZQMjhLWEVhUlZ1T011V3QrQ3d2T3pKcGVTUnFCV2dPWEdGNVhvYnU4MFV0OUV0dEQxVmhmcXZPQzBGZVFWMHdQRGROXC9NSVI2bFRuNHlxalJLU3RjNGQ0ajFOKyIsIm1hYyI6IjhlY2QwNWQ4Zjk0ZmYwODI2ZWMyN2E1ZjdkZWU3ZGI1OWIwY2YxMDlmMzEwYjExOWJlOGEwM2EzMmQyMTQxNWMifQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 03 Nov 2022 02:07:57 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 179
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: d48fbb0905a4bcc086373cab05f0d9e5
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1667441276702&cv=11&fst=1667441276702&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgav0&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&value=0&bttype=purchase&auid=1438403466.1667441277&gcp=1&ct_cookie_present=1
216.58.207.194200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1667441276702&cv=11&fst=1667441276702&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgav0&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&value=0&bttype=purchase&auid=1438403466.1667441277&gcp=1&ct_cookie_present=1
IP 216.58.207.194:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1010020041/?random=1667441276702&cv=11&fst=1667441276702&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgav0&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&value=0&bttype=purchase&auid=1438403466.1667441277&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 03 Nov 2022 02:07:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 03-Nov-2022 02:22:58 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1213455660.1667441277>m=2oeav0&aip=1&z=938308323
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1213455660.1667441277>m=2oeav0&aip=1&z=938308323
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=1213455660.1667441277>m=2oeav0&aip=1&z=938308323 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 03 Nov 2022 02:07:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
157.240.240.1200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 157.240.240.1:0
File type ASCII text, with very long lines (64348)
Hash 0ac10debd3a9ea8147a26d045bb93e6e
ff45f3442508e8695f2303701682ebdb6e016464
5dee7b453b2c72c07ff1d62432493a044507835a8031ea62edf2fa7cc26219b9
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: JKDGRBSrpqfERlO+JHEw5qFctGEWY3KOHolroCN+8ADTfYsl43ysQNld3M1XtCLaG3BbcGyeB6bTS4rxEN45zg==
priority: u=3,i
content-length: 27337
x-fb-trip-id: 1679558926
date: Thu, 03 Nov 2022 02:07:58 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 32b032454aa9a688fb91a589140ae152
f9c583002e296a75f1746bf181902948dba02542
3d272334a2923d5288765bc1183157fd127bd8f2928003760878feaca83eece2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash da71a34ecbacf17cd3ac89c3ec8ec1d9
8effbb8d6efbaa6c6c64d65dec94695b53b0be4d
25f3a056066c0ff6862550e0428d923a42afe323782a7327bd76205fac1dfd52
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1638
Cache-Control: max-age=120390
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Etag: "63624f5e-1d7"
Expires: Fri, 04 Nov 2022 11:34:28 GMT
Last-Modified: Wed, 02 Nov 2022 11:07:10 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 741bd3f1ae63760ab46ae978e338cd68
fb7076b807574a5228038c0125031ac90714bbb3
539c6d94af9de8dc4d472e7df8f6c0fce915a9f741de985776f127852d20fbbd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash d104b70bf03bbef04277daf71d9e99b0
3fee377f3d3c3b36a50b40e989a55d137c565952
7964cc47620e464da24a4263b3b22832710cc4cd746ea463553e1d634d15b8d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rp.liadm.com/j?dtstmp=1667441277068&aid=a-015g&se=e30&duid=f810f9c9df2c--01ggxkxdzspwz8w02378zqnr9t&tna=v2.5.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true
34.233.14.107200 OK 13 B URL HTTP/2 rp.liadm.com/j?dtstmp=1667441277068&aid=a-015g&se=e30&duid=f810f9c9df2c--01ggxkxdzspwz8w02378zqnr9t&tna=v2.5.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true
IP 34.233.14.107:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?dtstmp=1667441277068&aid=a-015g&se=e30&duid=f810f9c9df2c--01ggxkxdzspwz8w02378zqnr9t&tna=v2.5.0&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 03 Nov 2022 02:07:58 GMT
content-type: application/json
content-length: 13
trace-id: c7ae7e3cd4b88e3c
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: 39e2fa47-d3fd-4d1e-aa1b-749b47060de8
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
vars.hotjar.com/box-0feefa1930c964ac6aa4db4e99e8f25f.html
143.204.68.43200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-0feefa1930c964ac6aa4db4e99e8f25f.html
IP 143.204.68.43:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash 7860f2201e5523a8914b582db81455db
91f1e5e06e953b9d35a106d2bb6a6739a2cd1479
bf41dd20ba00ece42aa39b78fa602b8f7e4f0059e5ff6820057f19cc835573de
GET /box-0feefa1930c964ac6aa4db4e99e8f25f.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Wed, 02 Nov 2022 16:01:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "7860f2201e5523a8914b582db81455db"
last-modified: Wed, 02 Nov 2022 16:00:49 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 688a9b5db284546ed87785b84177fb70.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P1
x-amz-cf-id: kqRnOaeZWY5AVOsz2M3sQd4A8UL6qQRhCE_pilFh4QjOI2RFnC1lPQ==
age: 36412
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10013499.json
188.125.94.206200 OK 22 B URL HTTP/2 s.yimg.com/wi/config/10013499.json
IP 188.125.94.206:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 14293ad9ad0ffaf9f7a3acf1b0793b66
718dea6b65b9516e5e33fac53451056397deb255
73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
GET /wi/config/10013499.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: YM6RCVEJGCBXSQF1
x-amz-id-2: SJuUheLowyoPVCstWhQHTRH1R6nmc8DJpn52y+GwqbGADBeDSkf/8On+QogceodnzQk92/VfD0k=
content-type: application/json
date: Thu, 03 Nov 2022 02:07:57 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-encoding: gzip
content-length: 22
age: 1
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.beta.min.js
23.36.76.112200 OK 4.6 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.beta.min.js
IP 23.36.76.112:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13090)
Hash 970ec378fde635998dc5ca108801d9c4
3f56277cccd6657c046ede27f21b33edff730f3c
d92e325d85abaaf777975aed50db3e6e72b7b835d7a4cc3ab351aaeb70a80656
GET /li.lms-analytics/insight.beta.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Oct 2022 23:52:18 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=9402
date: Thu, 03 Nov 2022 02:07:58 GMT
content-length: 4642
x-cdn: AKAM
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=36002432&Ver=2&mid=530e1ecb-8029-45ce-8284-cc05d0d60416&sid=55fa66705b1c11edbe8ba1d2a8707c57&vid=55fa89105b1c11ed8277f1b2c0d82811&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&r=<=2170&evt=pageLoad&sv=1&rn=825930
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=36002432&Ver=2&mid=530e1ecb-8029-45ce-8284-cc05d0d60416&sid=55fa66705b1c11edbe8ba1d2a8707c57&vid=55fa89105b1c11ed8277f1b2c0d82811&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&r=<=2170&evt=pageLoad&sv=1&rn=825930
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=36002432&Ver=2&mid=530e1ecb-8029-45ce-8284-cc05d0d60416&sid=55fa66705b1c11edbe8ba1d2a8707c57&vid=55fa89105b1c11ed8277f1b2c0d82811&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&r=<=2170&evt=pageLoad&sv=1&rn=825930 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=32E5945E64AA62DD027F860F655F63A7; domain=.bing.com; expires=Tue, 28-Nov-2023 02:07:58 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 677A0DAD22744F22B0F25113C881F47A Ref B: OSL30EDGE0219 Ref C: 2022-11-03T02:07:58Z
date: Thu, 03 Nov 2022 02:07:58 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=36002432&Ver=2&mid=530e1ecb-8029-45ce-8284-cc05d0d60416&sid=55fa66705b1c11edbe8ba1d2a8707c57&vid=55fa89105b1c11ed8277f1b2c0d82811&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=808469
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=36002432&Ver=2&mid=530e1ecb-8029-45ce-8284-cc05d0d60416&sid=55fa66705b1c11edbe8ba1d2a8707c57&vid=55fa89105b1c11ed8277f1b2c0d82811&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=808469
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=36002432&Ver=2&mid=530e1ecb-8029-45ce-8284-cc05d0d60416&sid=55fa66705b1c11edbe8ba1d2a8707c57&vid=55fa89105b1c11ed8277f1b2c0d82811&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=808469 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2F4A1B5F15886BE937C4090E147D6A0D; domain=.bing.com; expires=Tue, 28-Nov-2023 02:07:58 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 24794486898F467095339EA4804E878A Ref B: OSL30EDGE0219 Ref C: 2022-11-03T02:07:58Z
date: Thu, 03 Nov 2022 02:07:58 GMT
X-Firefox-Spdy: h2
script.hotjar.com/modules.681bd93469b1fa9acc61.js
18.165.227.104200 OK 66 kB URL HTTP/2 script.hotjar.com/modules.681bd93469b1fa9acc61.js
IP 18.165.227.104:0
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 424c144768844c7a72bd7eec43025c4c
d21fbc3e73119cbf6641d5520aba5b2338fca99b
0bcbd8fdf7ef2d3d1c2e8ad811494987b434a4356efd1ece6fa2be84e7ce0ec6
GET /modules.681bd93469b1fa9acc61.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 66240
date: Wed, 02 Nov 2022 16:01:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "424c144768844c7a72bd7eec43025c4c"
last-modified: Wed, 02 Nov 2022 16:00:49 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a809eb913b44f745b5cb54bc22765f8e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P5
x-amz-cf-id: Tu5rnBLCP2GL9RtrGb_xxIwxsnzI_gTxVsmGA4Em-oTthEXr3yIwEQ==
age: 36412
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
108.156.28.58200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
IP 108.156.28.58:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/3865705/domain/app2.mackeeperaff.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://app2.mackeeperaff.com/
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Wed, 02 Nov 2022 06:37:30 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 24639548230786af4bba1a9e26c6080e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: 0eZsXyiwxoTJmD-rvkrZKj_JAO00ksYGecpyM1WWOYV46989JXTdNQ==
age: 70228
X-Firefox-Spdy: h2
bat.bing.com/p/action/36002432.js
204.79.197.200200 OK 1.4 kB URL HTTP/2 bat.bing.com/p/action/36002432.js
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash af03844de699f6e7e0ed552f725a22df
10eae56beeacb28641d52a664eccaf4818bad5fe
472f9e0968b39c41aa022478f9d20e01e5131d6bd50451676cefad81427420ac
GET /p/action/36002432.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 1423
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=260B5A82492E6AE925D948D348DB6BEF; domain=.bing.com; expires=Tue, 28-Nov-2023 02:07:58 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A73DF15BB10F46158094A1FB8375F32F Ref B: OSL30EDGE0219 Ref C: 2022-11-03T02:07:58Z
date: Thu, 03 Nov 2022 02:07:58 GMT
X-Firefox-Spdy: h2
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ad0035008a960853a76f80b51c498931
b276441d302b43005e9eb5b148f64cfc54246d96
acf253f72705687c7b3ff0efa59a9e5fd591c20da0debe744f51558fc19e3b9c
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6532
Cache-Control: max-age=124551
Content-Type: application/ocsp-response
Date: Thu, 03 Nov 2022 02:07:58 GMT
Etag: "63624c81-1d7"
Expires: Fri, 04 Nov 2022 12:43:49 GMT
Last-Modified: Wed, 02 Nov 2022 10:54:57 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
www.facebook.com/tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&rl=&if=false&ts=1667441278196&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1667441278194.1184507137&it=1667441277916&coo=false&exp=c0&rqm=GET
157.240.240.35200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&rl=&if=false&ts=1667441278196&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1667441278194.1184507137&it=1667441277916&coo=false&exp=c0&rqm=GET
IP 157.240.240.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&rl=&if=false&ts=1667441278196&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1667441278194.1184507137&it=1667441277916&coo=false&exp=c0&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 03 Nov 2022 02:07:58 GMT
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
108.156.28.58200 OK 62 B URL HTTP/2 cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
IP 108.156.28.58:0
File type JSON data\012- , ASCII text, with no line terminators
Hash d39abb34da93ec5faa48669ac4788977
cc2627a86b99e91540251b6fb7e17a9b1faa1ee7
b329d16bd7e06de93beac4a9e4d67b8be6d1c944b7b8e398b929460f73b7c4ce
GET /partner/3865705/domain/app2.mackeeperaff.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Thu, 03 Nov 2022 02:00:21 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 24639548230786af4bba1a9e26c6080e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: RIzKU70hYLlPyhJopza1jc4Izwr6UMJ1tvMKTUTaO5Ji6hrVhrwjQA==
age: 457
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949
70.42.32.63200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949
IP 70.42.32.63:0
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 03 Nov 2022 02:07:58 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 254c686cc1b6159d2d6a8bb2b577c0f5
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.10.0&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&optOut=false&bust=01640499720132078&referrer=
70.42.32.63200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.10.0&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&optOut=false&bust=01640499720132078&referrer=
IP 70.42.32.63:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.10.0&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&optOut=false&bust=01640499720132078&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 03 Nov 2022 02:07:58 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: e2f91e1f1bc9fed2ad666d712d14537e
content-encoding: gzip
sp.analytics.yahoo.com/sp.pl?a=10000&d=Thu%2C%2003%20Nov%202022%2002%3A07%3A58%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&enc=UTF-8&yv=1.13.0&tagmgr=gtm
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Thu%2C%2003%20Nov%202022%2002%3A07%3A58%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Thu%2C%2003%20Nov%202022%2002%3A07%3A58%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 03 Nov 2022 02:07:58 GMT
expires: Thu, 03 Nov 2022 02:07:58 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBH4iY2MCEC5fBN-lWCYlhYa9GuRfd5UFEgEBAQFzZGNtYwAAAAAA_eMAAA&S=AQAAAqDcnbtvUuKoC3zUGNrG4WE; Expires=Fri, 3 Nov 2023 08:07:58 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
18.165.196.18200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 18.165.196.18:0
Hash 3f10a57c1de5e40b45b14d495a24fb99
71bff86a798e1eb5a76ec1c7f90c16037cbfe45c
8346898169063e1dca8eeceac56edf359b3fe62acf17d308218fe0fb4bd466f7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=132802
Date: Thu, 03 Nov 2022 02:07:58 GMT
Etag: "63627dce-1d7"
Expires: Fri, 04 Nov 2022 15:01:20 GMT
Last-Modified: Wed, 02 Nov 2022 14:25:18 GMT
Server: ECS (nyb/1D0B)
X-Cache: Miss from cloudfront
Via: 1.1 835f3c9e7c3bc0e7766edf13dac581de.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: DbVKK6hhU7g2Mzv_UENl_iQDJ8FaPG-4KJwaLWAHOZeVCzZsDYYUMQ==
Age: 2163
www.clarity.ms/eus2/s/0.6.43/clarity.js
13.107.213.53200 OK 55 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.43/clarity.js
IP 13.107.213.53:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (55029)
Hash 441723b72633b1ac9757ad7c63168005
806166ca9ebb5839dd90a5e5c9335e3e0b18c169
cc8a16ce849d72f106bd67187e4b60c20da3093375202bf0b53f23e8f40a8b11
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 55116
content-type: application/javascript;charset=utf-8
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8ec7677589f4c"
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 0fiJjYwAAAADrdrUWAqhrQrhXsbeE+Os+U1ZHMjBFREdFMDUyMQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Thu, 03 Nov 2022 02:07:58 GMT
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1667441278010%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F226%252F%253Frtkcid%253D63632267d160dd0001f864e6%2526rtkcmpid%253D627bbe0b35981a0001d4d8dc%2526tid%253DAffiliate%252520-%252520Hybrid%252520%2528226%2529%2526utm_source%253Daffiliate%2526utm_medium%253Dadpartner%2526pubid%253D629a3fed4714f70001b234db%26liSync%3Dtrue
13.107.42.14302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1667441278010%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F226%252F%253Frtkcid%253D63632267d160dd0001f864e6%2526rtkcmpid%253D627bbe0b35981a0001d4d8dc%2526tid%253DAffiliate%252520-%252520Hybrid%252520%2528226%2529%2526utm_source%253Daffiliate%2526utm_medium%253Dadpartner%2526pubid%253D629a3fed4714f70001b234db%26liSync%3Dtrue
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1667441278010%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F226%252F%253Frtkcid%253D63632267d160dd0001f864e6%2526rtkcmpid%253D627bbe0b35981a0001d4d8dc%2526tid%253DAffiliate%252520-%252520Hybrid%252520%2528226%2529%2526utm_source%253Daffiliate%2526utm_medium%253Dadpartner%2526pubid%253D629a3fed4714f70001b234db%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1667441278010&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&0ff166dc-0156-47d6-83ea-76b0b82baeb6"; Domain=.linkedin.com; Expires=Fri, 03-Nov-2023 02:07:58 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20221103020758dc7cd4f2-691e-43da-88ab-37798af0217bAQErHWB93DpygtmwNYVzsjp81Gg3CHsb"; Domain=.www.linkedin.com; Expires=Fri, 03-Nov-2023 02:07:58 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2Njc0NDEyNzg7MjswMjGCFgNKL0NG6ffAA0IwywUqq6+2cYFbANq6R7nKd1ZDRA==; Domain=.linkedin.com; Expires=Tue, 02 May 2023 02:07:58 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2368:u=1:x=1:i=1667441278:t=1667527678:v=2:sig=AQHrgOKaTvRaKdZ1UrVWgpJ4-fX-8tOK"; Expires=Fri, 04 Nov 2022 02:07:58 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com *.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXsh20cMYGKt9pX20Vkjg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 9F750929A1394CD08624B4E03391F911 Ref B: OSL30EDGE0209 Ref C: 2022-11-03T02:07:58Z
date: Thu, 03 Nov 2022 02:07:58 GMT
content-length: 0
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1667441278010&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&liSync=true
13.107.42.14200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1667441278010&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&liSync=true
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3865705&time=1667441278010&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&358699d9-96d0-4c84-8765-9fcac9d7dd0a"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 03-Nov-2023 02:07:59 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2421:u=1:x=1:i=1667441279:t=1667527679:v=2:sig=AQFRmOWUsRrBvK-uk9H8C1nJ4sJiAP3J"; Expires=Fri, 04 Nov 2022 02:07:59 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXsh20fCoMvFHtNIphZ1Q==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: AF64421EB09846BCB1EC3662A69844DB Ref B: OSL30EDGE0209 Ref C: 2022-11-03T02:07:58Z
date: Thu, 03 Nov 2022 02:07:58 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
20.234.93.27302 Found 0 B IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=DFA8DE3C87CF46B88CB666C2E8057B73&RedC=c.clarity.ms&MXFR=28F985D4E62665D628339785E2266BD6
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=28F985D4E62665D628339785E2266BD6; domain=.clarity.ms; expires=Tue, 28-Nov-2023 02:07:59 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Thu, 03 Nov 2022 02:07:59 GMT
content-length: 0
X-Firefox-Spdy: h2
b.clarity.ms/collect
20.75.32.255204 No Content 0 B IP 20.75.32.255:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 31402
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
date: Thu, 03 Nov 2022 02:07:58 GMT
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=DFA8DE3C87CF46B88CB666C2E8057B73&RedC=c.clarity.ms&MXFR=28F985D4E62665D628339785E2266BD6
204.79.197.200302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=DFA8DE3C87CF46B88CB666C2E8057B73&RedC=c.clarity.ms&MXFR=28F985D4E62665D628339785E2266BD6
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=DFA8DE3C87CF46B88CB666C2E8057B73&RedC=c.clarity.ms&MXFR=28F985D4E62665D628339785E2266BD6 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=DFA8DE3C87CF46B88CB666C2E8057B73&MUID=152B26117DAC64FD095434407C59650B
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=152B26117DAC64FD095434407C59650B; domain=c.bing.com; expires=Tue, 28-Nov-2023 02:07:59 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6186F2E4F00F4062A8CE4F4A64C0C022 Ref B: OSL30EDGE0219 Ref C: 2022-11-03T02:07:59Z
date: Thu, 03 Nov 2022 02:07:59 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=DFA8DE3C87CF46B88CB666C2E8057B73&MUID=152B26117DAC64FD095434407C59650B
20.234.93.27200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=DFA8DE3C87CF46B88CB666C2E8057B73&MUID=152B26117DAC64FD095434407C59650B
IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=DFA8DE3C87CF46B88CB666C2E8057B73&MUID=152B26117DAC64FD095434407C59650B HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Thu, 03-Nov-2022 02:17:59 GMT; path=/; SameSite=None; Secure;
date: Thu, 03 Nov 2022 02:07:59 GMT
content-length: 42
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=1576&scd=21&ssd=1&est=1667441277881&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1667441279459&vi=1667441277880&ri=9d9b0c4a3e2493017a397371f8ce498c&ref=null&cv=20221029-3-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&ler=other
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=1576&scd=21&ssd=1&est=1667441277881&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1667441279459&vi=1667441277880&ri=9d9b0c4a3e2493017a397371f8ce498c&ref=null&cv=20221029-3-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&ler=other
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=1576&scd=21&ssd=1&est=1667441277881&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1667441279459&vi=1667441277880&ri=9d9b0c4a3e2493017a397371f8ce498c&ref=null&cv=20221029-3-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 03 Nov 2022 02:07:59 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=4579&scd=21&ssd=1&est=1667441277881&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1667441282462&vi=1667441277880&ri=9d9b0c4a3e2493017a397371f8ce498c&ref=null&cv=20221029-3-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&ler=other
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=4579&scd=21&ssd=1&est=1667441277881&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1667441282462&vi=1667441277880&ri=9d9b0c4a3e2493017a397371f8ce498c&ref=null&cv=20221029-3-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&ler=other
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=4579&scd=21&ssd=1&est=1667441277881&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1667441282462&vi=1667441277880&ri=9d9b0c4a3e2493017a397371f8ce498c&ref=null&cv=20221029-3-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 03 Nov 2022 02:08:02 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/190484/visit-data?sv=7
108.128.255.0200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/190484/visit-data?sv=7
IP 108.128.255.0:0
POST /api/v2/client/sites/190484/visit-data?sv=7 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 148
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 03 Nov 2022 02:07:58 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
app2.mackeeperaff.com/land/api/send-event
18.215.214.239200 OK 0 B URL HTTP/2 app2.mackeeperaff.com/land/api/send-event
IP 18.215.214.239:0
Analyzer Verdict Alert quad9 Sinkholed
POST /land/api/send-event HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: 5B3zG4B2ZLdiGGfa813SfnSyBjFudJi0qi28D6by
X-XSRF-TOKEN: eyJpdiI6IlJLdnZEeGNxUGRteEFVXC9Ld1IrWG5RPT0iLCJ2YWx1ZSI6Ink4OTA3cUxTSkhHejBFMlRGQmZUVDg2cHBQTmh2ZlJnaE5KOEE0Mnp0eVljdUU0Z2VGT2VZOThyV3lKRFZSUm1pbzkyMHlYejNXTWlEQ2NQU00zMCtSWUdhczd3RHFuU2xmUTRHRVpualF2ZnRKN1IwVVBEN3ppU0EzTUpCZHc0IiwibWFjIjoiYWVlOTBmYmYxY2RlZTQ4YzcxODhkYWQ4MTkyNTNmNjhkNjNlNjA5OGY3OGNlMmQ4OTJhZTU0OTY1YWM0NDJiZSJ9
Content-Length: 101
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/226/?rtkcid=63632267d160dd0001f864e6&rtkcmpid=627bbe0b35981a0001d4d8dc&tid=Affiliate%20-%20Hybrid%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Cookie: XSRF-TOKEN=eyJpdiI6IlJLdnZEeGNxUGRteEFVXC9Ld1IrWG5RPT0iLCJ2YWx1ZSI6Ink4OTA3cUxTSkhHejBFMlRGQmZUVDg2cHBQTmh2ZlJnaE5KOEE0Mnp0eVljdUU0Z2VGT2VZOThyV3lKRFZSUm1pbzkyMHlYejNXTWlEQ2NQU00zMCtSWUdhczd3RHFuU2xmUTRHRVpualF2ZnRKN1IwVVBEN3ppU0EzTUpCZHc0IiwibWFjIjoiYWVlOTBmYmYxY2RlZTQ4YzcxODhkYWQ4MTkyNTNmNjhkNjNlNjA5OGY3OGNlMmQ4OTJhZTU0OTY1YWM0NDJiZSJ9; mackeeper_session=eyJpdiI6InRCNEp3VHhUa0M5cTJxbGd0WFNaeEE9PSIsInZhbHVlIjoidjdyakhSZ2d3cW16c29rVVEreldaUUFcL2hPYXhhN3VrYXAwMGZQMjhLWEVhUlZ1T011V3QrQ3d2T3pKcGVTUnFCV2dPWEdGNVhvYnU4MFV0OUV0dEQxVmhmcXZPQzBGZVFWMHdQRGROXC9NSVI2bFRuNHlxalJLU3RjNGQ0ajFOKyIsIm1hYyI6IjhlY2QwNWQ4Zjk0ZmYwODI2ZWMyN2E1ZjdkZWU3ZGI1OWIwY2YxMDlmMzEwYjExOWJlOGEwM2EzMmQyMTQxNWMifQ%3D%3D; _gcl_au=1.1.1438403466.1667441277; _ga_GYTXD89N1W=GS1.1.1667441276.1.0.1667441276.60.0.0; _ga=GA1.2.1213455660.1667441277; _li_dcdm_c=.mackeeperaff.com; _lc2_fpi=f810f9c9df2c--01ggxkxdzspwz8w02378zqnr9t; _lfa=LF1.1.b2d18d617f672d3e.1667441277062; _uetsid=55fa66705b1c11edbe8ba1d2a8707c57; _uetvid=55fa89105b1c11ed8277f1b2c0d82811; _gid=GA1.2.321223166.1667441278; _gat_UA-157596782-1=1; _fbp=fb.1.1667441278194.1184507137; _hjSessionUser_190484=eyJpZCI6IjI0OTExODcwLTk3YTItNTI5ZS04ZDM3LWM0MzgyMjVkM2FiMSIsImNyZWF0ZWQiOjE2Njc0NDEyNzgxNjEsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_190484=eyJpZCI6IjFhYzcwY2IzLWU4YjctNDZmNC1hOTlhLWQ5Yjc5NTYyZjEzOCIsImNyZWF0ZWQiOjE2Njc0NDEyNzgyMjcsImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=0; ln_or=d; outbrain_cid_fetch=true; _clck=1ibrp9p|1|f69|0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 03 Nov 2022 02:08:00 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 178
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 1a4c6e7462a5da8d8b34e7addd793f11
X-Firefox-Spdy: h2
app2.mackeeperaff.com/land/226/?rtkcid=63632267d160dd0001f864e6&rtkcmpid=627bbe0b35981a0001d4d8dc&tid=Affiliate%20-%20Hybrid%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
18.215.214.239200 OK 0 B URL HTTP/2 app2.mackeeperaff.com/land/226/?rtkcid=63632267d160dd0001f864e6&rtkcmpid=627bbe0b35981a0001d4d8dc&tid=Affiliate%20-%20Hybrid%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
IP 18.215.214.239:0
Analyzer Verdict Alert quad9 Sinkholed
GET /land/226/?rtkcid=63632267d160dd0001f864e6&rtkcmpid=627bbe0b35981a0001d4d8dc&tid=Affiliate%20-%20Hybrid%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 03 Nov 2022 02:07:56 GMT
content-type: text/html; charset=UTF-8
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
content-security-policy: default-src 'self' *.hotjar.com *.mackeeper.com;frame-ancestors 'none';frame-src 'self' 'unsafe-inline' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com *.surveygizmo.com *.liadm.com *.typeform.com mc.yandex.ru *.js.ad-score.com *.cdn.onesignal.com *.onesignal.com *.criteo.com static-cdn.mackeeper.com;child-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com blob: *.cdn.onesignal.com *.onesignal.com *.liadm.com static-cdn.mackeeper.com;form-action 'self' *.mackeeper.com *.facebook.com;img-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com data: *.2mdn.net *.pagead2.googlesyndication.com *.glotgrx.com *.lporirxe.com *.exelator.com *.owox.com *.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.yahoo.co.jp *.apimzb-adserver.cloudmccloud.com *.3lift.com *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com mc.yandex.ru cx.atdmt.com *.baidu.com *.gstatstrk.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.zoomsupport.com *.cloudmccloud.com linkconnector.com *.linkconnector.com *.linkedin.com https://p.adsymptotic.com *.clarity.ms *.lfeeder.com static-cdn.mackeeper.com *.imcounting.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com disqus.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com l2.io *.inspectlet.com *.googlesyndication.com *.sagetrc.com *.glotgrx.com *.lporirxe.com b-code.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.cloudfront.net *.yimg.jp *.addtocalendar.com *.yahoo.co.jp blob: *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com *.s.ytimg.com *.typeform.com *.calendly.com *.linkconnector.com mc.yandex.ru *.js.ad-score.com *.baidu.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.engine.4dsply.com *.engine.spotscenered.info *.engine.3dspk.com *.we3red.com *.engine.asadap.com *.engine.nictelroalps.com *.engine.liondigitalserving.com *.engine.addroplet.com *.beritapria.com cdnjs.cloudflare.com *.clickcease.com *.sentry-cdn.com *.criteo.net *.criteo.com https://snpa.licdn.com linkconnector.com *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com *.licdn.com *.liadm.com *.clarity.ms *.adcell.com *.lfeeder.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;style-src 'self' 'unsafe-inline' *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.a.disquscdn.com *.disqus.com *.googleapis.com *.fonts.gstatic.com *.referrer.disqus.com *.google.com *.google.com.ua *.addtocalendar.com *.surveygizmo.com *.cdn.onesignal.com *.onesignal.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com *.googletagmanager.com;font-src 'self' data: *.doubleclick.net *.mackeeper.com *.twimg.com *.twitter.com fonts.googleapis.com fonts.gstatic.com *.surveygizmo.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;object-src *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.pagead2.googlesyndication.com *.liadm.com static-cdn.mackeeper.com;connect-src 'self' *.mackeeper.com *.hotjar.com ws://*.hotjar.com wss://*.hotjar.com *.g.doubleclick.net *.lcidc.liadm.com *.google-analytics.com *.api.ipify.org *.mc.yandex.ru mc.yandex.ru *.data.ad-score.com *.baidu.com *.pushdata.onesignal.com:* *.onesignal.com *.taboola.com *.hotjar.io *.clickcease.com s.yimg.com *.facebook.com *.google.com bat.bing.com sentry.cloudmccloud.com *.liadm.com *.macupdate.com https://api.account.mackeeper.com https://api.account.sz.mackeeper.com https://api-ne.mackeeper.com *.adcell.com *.clarity.ms *.lfeeder.com *.static-cdn.mackeeper.com https://crm.account.mackeeper.com https://chat-crm.account.mackeeper.com static-cdn.mackeeper.com https://cdn.linkedin.oribi.io/
set-cookie: XSRF-TOKEN=eyJpdiI6IlJLdnZEeGNxUGRteEFVXC9Ld1IrWG5RPT0iLCJ2YWx1ZSI6Ink4OTA3cUxTSkhHejBFMlRGQmZUVDg2cHBQTmh2ZlJnaE5KOEE0Mnp0eVljdUU0Z2VGT2VZOThyV3lKRFZSUm1pbzkyMHlYejNXTWlEQ2NQU00zMCtSWUdhczd3RHFuU2xmUTRHRVpualF2ZnRKN1IwVVBEN3ppU0EzTUpCZHc0IiwibWFjIjoiYWVlOTBmYmYxY2RlZTQ4YzcxODhkYWQ4MTkyNTNmNjhkNjNlNjA5OGY3OGNlMmQ4OTJhZTU0OTY1YWM0NDJiZSJ9; expires=Thu, 03-Nov-2022 04:07:56 GMT; Max-Age=7200; path=/; secure; samesite=lax
mackeeper_session=eyJpdiI6InRCNEp3VHhUa0M5cTJxbGd0WFNaeEE9PSIsInZhbHVlIjoidjdyakhSZ2d3cW16c29rVVEreldaUUFcL2hPYXhhN3VrYXAwMGZQMjhLWEVhUlZ1T011V3QrQ3d2T3pKcGVTUnFCV2dPWEdGNVhvYnU4MFV0OUV0dEQxVmhmcXZPQzBGZVFWMHdQRGROXC9NSVI2bFRuNHlxalJLU3RjNGQ0ajFOKyIsIm1hYyI6IjhlY2QwNWQ4Zjk0ZmYwODI2ZWMyN2E1ZjdkZWU3ZGI1OWIwY2YxMDlmMzEwYjExOWJlOGEwM2EzMmQyMTQxNWMifQ%3D%3D; expires=Thu, 03-Nov-2022 04:07:56 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax
get_params_landings=%7B%22rtkcid%22%3A%2263632267d160dd0001f864e6%22%2C%22rtkcmpid%22%3A%22627bbe0b35981a0001d4d8dc%22%2C%22tid%22%3A%22Affiliate%20-%20Hybrid%20%28226%29%22%2C%22utm_source%22%3A%22affiliate%22%2C%22utm_medium%22%3A%22adpartner%22%2C%22pubid%22%3A%22629a3fed4714f70001b234db%22%7D; expires=Fri, 04-Nov-2022 02:07:55 GMT; Max-Age=86399; path=/; domain=.mackeeper.com; secure; samesite=lax
globalAffid=mc-636322688f10e711cc7ec8a7; expires=Tue, 02-May-2023 02:07:56 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax
country=NO; expires=Tue, 02-May-2023 02:07:56 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: a4f5b4e2ee5d1f47f00e0e9256261ac4
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/soft_three.svg
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/soft_three.svg
IP 52.84.93.61:0
GET /mk-land/dist/svg/landings/226_6/soft_three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 01 Nov 2022 14:21:59 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: W/"1e8437e5f03b2dcd725fcf19c843ede9"
cache-control: public, max-age=604800
x-amz-version-id: C1G2RqiXpQdLiH1cTB.L_Ya5eHDrJ_3n
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: HI0uczzWSq9IXfJj0UWaTui_IJBvPnYRJMODxGMiHqf8Uml8a_ZGWQ==
age: 128758
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/components/logo/mk-logo-ua.svg
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/components/logo/mk-logo-ua.svg
IP 52.84.93.61:0
GET /mk-land/dist/svg/components/logo/mk-logo-ua.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 01 Nov 2022 14:20:30 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Apr 2022 14:50:37 GMT
etag: W/"0443bcb5ae8253499f7df7f80c45fc8c"
cache-control: public, max-age=604800
x-amz-version-id: sx6d65Ik.60EPUJCncti20jd8v0DNMRK
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: IO1mwzNpoZYIN4XWCJElJS5vuv-FB3puFkFuXeC3RSkN3128caXIQQ==
age: 128847
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400
IP 142.250.74.10:0
GET /css?family=Roboto:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 03 Nov 2022 02:07:56 GMT
date: Thu, 03 Nov 2022 02:07:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT.otf
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT.otf
IP 52.84.93.61:0
GET /mk-land/dist/fonts/MarkOT.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Tue, 01 Nov 2022 14:24:26 GMT
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"106ae5fa4d0e51fa73ed42c3beecda5e"
cache-control: public, max-age=604800
x-amz-version-id: Eju.irxG68JYjYuEi7BGXEsqN0F4MTaA
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: psnuq7gQNiCUsC-OhLW210kVTY19wjHnVgNrOiHW3jAv8bJ3cdLNbQ==
age: 128611
X-Firefox-Spdy: h2
sc.lfeeder.com/lftracker_v1_ywVkO4XWPeW7Z6Bj.js
18.244.140.49200 OK 0 B URL HTTP/2 sc.lfeeder.com/lftracker_v1_ywVkO4XWPeW7Z6Bj.js
IP 18.244.140.49:0
GET /lftracker_v1_ywVkO4XWPeW7Z6Bj.js HTTP/1.1
Host: sc.lfeeder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 20 Oct 2022 09:29:36 GMT
x-amz-version-id: ITqgO9ELHxvwt2xHFpWEbQUcw8uIiuvx
server: AmazonS3
content-encoding: gzip
date: Thu, 03 Nov 2022 02:00:26 GMT
cache-control: max-age=3600
etag: W/"6fa0006a6525677a49c8de289a869036"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04fe04d0bfd79ff9f6c08102e28077b0.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P7
x-amz-cf-id: D9hbJPPGN9ZRJ90W7ejd7B0KcXHo7Cb8fGxIN6mN3Py4dEdPOSr4sQ==
age: 452
X-Firefox-Spdy: h2
t.adcell.com/js/trad.js
185.5.82.77200 OK 0 B IP 185.5.82.77:0
GET /js/trad.js HTTP/1.1
Host: t.adcell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: myracloud
date: Thu, 03 Nov 2022 02:07:57 GMT
content-type: text/javascript
strict-transport-security: max-age=15768000
content-encoding: gzip
vary: accept-encoding
expires: Thu, 03 Nov 2022 02:18:21 GMT
cache-control: max-age=900
etag: "myra-944eb8f4"
x-cdn: 1
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/privacy-three.svg
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/privacy-three.svg
IP 52.84.93.61:0
GET /mk-land/dist/svg/landings/226_6/privacy-three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 01 Nov 2022 14:21:59 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: W/"c8f8481e4694470f0b9d13007ae87187"
cache-control: public, max-age=604800
x-amz-version-id: ztZus3dIf7v8EQhUG0qQzWys_bOlUhvB
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: bq7WozruUDwbOvrOF4LzeF0ed2HmvFmtxRiZDbzzocarzW6kJjrAvQ==
age: 128758
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/downloads.svg
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/downloads.svg
IP 52.84.93.61:0
GET /mk-land/dist/svg/landings/226_6/downloads.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 01 Nov 2022 14:21:59 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:57 GMT
etag: W/"03b2302fb772ce4d148b0099da4362f0"
cache-control: public, max-age=604800
x-amz-version-id: qdj6r2fTLt1__Db.jrwnBLw2hzRzOTH8
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: a-eM6lHoN_GGU8x3Z2QprJbEtsxL_wZQcmleu-ptzS4SZVtdiOCmgQ==
age: 128758
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/appesteem.svg
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/appesteem.svg
IP 52.84.93.61:0
GET /mk-land/dist/svg/landings/226_6/appesteem.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 01 Nov 2022 14:21:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: W/"11483e7c23b09ca50a06de72c255ce87"
cache-control: public, max-age=604800
x-amz-version-id: lnXVyN4uq0eoJjwYvOqqHWivzHFq_g5q
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: a9B3MNISK9_KeWh634xisFAsk3cxPXt75JxIUopwAblpyjhktACrXA==
age: 128789
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Medium.otf
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Medium.otf
IP 52.84.93.61:0
GET /mk-land/dist/fonts/MarkOT-Medium.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Tue, 01 Nov 2022 14:24:27 GMT
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
etag: W/"44a8a536b53be74bb2ebfc4fa3403364"
cache-control: public, max-age=604800
x-amz-version-id: adnRDSe0awZldw3c8I6M4tTQa_wDyvz_
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: p4jmzLkMh5sXZI7z2eGUCMq3fnMSAJI57JMtSyqkuoL5gqYr8uVqZw==
age: 128610
X-Firefox-Spdy: h2
www.dwin1.com/23738.js
108.138.233.123200 OK 0 B IP 108.138.233.123:0
GET /23738.js HTTP/1.1
Host: www.dwin1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
x-amz-replication-status: COMPLETED
last-modified: Wed, 02 Nov 2022 15:14:22 GMT
x-amz-version-id: rkjRKWtZp.tcXOYezTLW4qD5QCVMpdPR
server: AmazonS3
content-encoding: gzip
date: Thu, 03 Nov 2022 02:05:46 GMT
cache-control: max-age=600, s-maxage=600
etag: W/"04a63f0a2836817ce6045d6b4bea866b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 96ab17c2ab646ff2170604cb358474ba.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P4
x-amz-cf-id: qY-N_0WiqI3ah0Lk_PybOpRjcdsbQqRcyda-nRCIm-KF00zjek-vkQ==
age: 133
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/default/script.min.js?17ab72af24a83de6eb4b
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/default/script.min.js?17ab72af24a83de6eb4b
IP 52.84.93.61:0
GET /mk-land/dist/default/script.min.js?17ab72af24a83de6eb4b HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 01 Nov 2022 14:20:22 GMT
x-amz-replication-status: PENDING
last-modified: Tue, 01 Nov 2022 14:18:44 GMT
etag: W/"f39243185bab35a6e62fc592e4ee5976"
cache-control: public, max-age=604800
x-amz-version-id: MqlWLhbTvSNRNbExGkOtw0bKSdtMf3rQ
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: L-XJlzQfMVsSWfyUbSaULGIPafAKuzVWLYyxTsP0xm5bohxVPnotkQ==
age: 128855
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/shopper.svg
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/shopper.svg
IP 52.84.93.61:0
GET /mk-land/dist/svg/landings/226_6/shopper.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 01 Nov 2022 14:21:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:01 GMT
etag: W/"316255d136699b84962ae8e7e650fb4a"
cache-control: public, max-age=604800
x-amz-version-id: xkKrHSo_G5.knecPGziG7JnbPUaCTCId
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: tXtDC5cgvVqWmTlV5nL7QDBa28eNglKvAgL8GL42F8nw9ovL91dtcw==
age: 128788
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/226/script.min.js?c53e04da6adea4b42972
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/226/script.min.js?c53e04da6adea4b42972
IP 52.84.93.61:0
GET /mk-land/dist/226/script.min.js?c53e04da6adea4b42972 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 01 Nov 2022 14:21:59 GMT
x-amz-replication-status: PENDING
last-modified: Tue, 01 Nov 2022 14:19:40 GMT
etag: W/"f4e2c05efa298bb5a58ca09d6050ab0d"
cache-control: public, max-age=604800
x-amz-version-id: MtDA62lAH1jf4JRh1ZmNBC7MlP1Qy8bt
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: J9B9Uru9y2hw0KOkoVte6VkGKoWhJgzraxR4gohb4Y_8Kwtw-61zww==
age: 128758
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Light.otf
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Light.otf
IP 52.84.93.61:0
GET /mk-land/dist/fonts/MarkOT-Light.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Tue, 01 Nov 2022 14:24:26 GMT
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"48dd0f49a4207634e9062def9074a038"
cache-control: public, max-age=604800
x-amz-version-id: 0k6awkdioEQDqMMUsMLLZL0d1S0LNdte
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: pCQ7qwRQ7fOs_sRpA7BVtiI9PgTVl_Nm0yTK6mYIFnU3qQbOV7ePXg==
age: 128611
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/36002432
13.107.213.53200 OK 0 B URL HTTP/2 www.clarity.ms/tag/uet/36002432
IP 13.107.213.53:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/uet/36002432 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=bfec48fba6e544a1be4472bce957a77d.20221103.20231103; expires=Fri, 03 Nov 2023 02:07:58 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 0fiJjYwAAAAB0zjsHSqglRLu72gBsPw8+U1ZHMjBFREdFMDUyMQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Thu, 03 Nov 2022 02:07:57 GMT
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
IP 52.84.93.61:0
GET /mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Tue, 01 Nov 2022 14:24:26 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Aug 2022 13:14:40 GMT
etag: W/"a669635cf48725953f46197678261ba4"
cache-control: public, max-age=604800
x-amz-version-id: q9vHpEkF.fC8IKJyFmJ8_ZfmwjRowPdI
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: pyQkTnyUTpW_B39Tga3txCqAuBHs9aLCRtbes4S-c6qGyOxbKvLSFQ==
age: 128611
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/critical/script.min.js?713042b92e8e26034ff5
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/critical/script.min.js?713042b92e8e26034ff5
IP 52.84.93.61:0
GET /mk-land/dist/critical/script.min.js?713042b92e8e26034ff5 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 01 Nov 2022 14:20:22 GMT
x-amz-replication-status: PENDING
last-modified: Tue, 01 Nov 2022 14:19:26 GMT
etag: W/"ae9c9df33a1c1fcfb8e94b7c77f9ad66"
cache-control: public, max-age=604800
x-amz-version-id: mBt3HOpoZzV_BXxKf5m06Uut_dgFAc_H
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: W2ecltTe6Sm3HtWXNmjpNnZq5gYINyseLQcZvfZ1drxru3xLXsy8hA==
age: 128855
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/soft_one.svg
52.84.93.61200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/226_6/soft_one.svg
IP 52.84.93.61:0
GET /mk-land/dist/svg/landings/226_6/soft_one.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 01 Nov 2022 14:21:59 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:01 GMT
etag: W/"bf6ed3f56235d31918a17604a3131f52"
cache-control: public, max-age=604800
x-amz-version-id: 8xX6ank4Rs.JT95crMgq3uJJbhi1lzJF
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 087a2c4367cc671a52278d4d8f4a3520.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: We_tocrKYzxc468Pe9L3ajcc40YiUkWzHyp7i9JEauw-eyzIrbuH6A==
age: 128758
X-Firefox-Spdy: h2
trc.taboola.com/1212352/trc/3/json?tim=1667441277891&data=%7B%22id%22%3A835%2C%22ii%22%3A%22%2Fland%2F226%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1667441277880%2C%22cv%22%3A%2220221029-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1667441277890%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22tos%22%3A7%2C%22ssd%22%3A1%2C%22scd%22%3A21%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
151.101.85.44200 OK 0 B URL HTTP/2 trc.taboola.com/1212352/trc/3/json?tim=1667441277891&data=%7B%22id%22%3A835%2C%22ii%22%3A%22%2Fland%2F226%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1667441277880%2C%22cv%22%3A%2220221029-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1667441277890%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22tos%22%3A7%2C%22ssd%22%3A1%2C%22scd%22%3A21%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP 151.101.85.44:0
GET /1212352/trc/3/json?tim=1667441277891&data=%7B%22id%22%3A835%2C%22ii%22%3A%22%2Fland%2F226%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1667441277880%2C%22cv%22%3A%2220221029-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1667441277890%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D63632267d160dd0001f864e6%26rtkcmpid%3D627bbe0b35981a0001d4d8dc%26tid%3DAffiliate%2520-%2520Hybrid%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22tos%22%3A7%2C%22ssd%22%3A1%2C%22scd%22%3A21%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 03 Nov 2022 02:07:58 GMT
via: 1.1 varnish
x-served-by: cache-bma1656-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667441278.336519,VS0,VE98
vary: Accept-Encoding
x-vcl-time-ms: 98
X-Firefox-Spdy: h2