app2.mackeeperaff.com/land/225/?rtkcid=6372caa69010d6000141d977&rtkcmpid=627bbd1835981a0001d4d8d8&tid=Affiliate%20-%20Hybrid%20(225)&utm_source=&utm_medium=&pubid=
54.208.164.99301 Moved Permanently 134 B URL HTTP/1.1 app2.mackeeperaff.com/land/225/?rtkcid=6372caa69010d6000141d977&rtkcmpid=627bbd1835981a0001d4d8d8&tid=Affiliate%20-%20Hybrid%20(225)&utm_source=&utm_medium=&pubid=
IP 54.208.164.99:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
Analyzer Verdict Alert quad9 Sinkholed
GET /land/225/?rtkcid=6372caa69010d6000141d977&rtkcmpid=627bbd1835981a0001d4d8d8&tid=Affiliate%20-%20Hybrid%20(225)&utm_source=&utm_medium=&pubid= HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Mon, 14 Nov 2022 23:09:40 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://app2.mackeeperaff.com:443/land/225/?rtkcid=6372caa69010d6000141d977&rtkcmpid=627bbd1835981a0001d4d8d8&tid=Affiliate%20-%20Hybrid%20(225)&utm_source=&utm_medium=&pubid=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7786cd9bd97e024b3a1d16215defaad2
786ddbb74b0b6bd9270622dbe0258d6caee407c1
9c297ccfd178eec7e472fb64a6b2e34d4c7a6dec32870f49982353e590196ba0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C297CCFD178EEC7E472FB64A6B2E34D4C7A6DEC32870F49982353E590196BA0"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5563
Expires: Tue, 15 Nov 2022 00:42:23 GMT
Date: Mon, 14 Nov 2022 23:09:40 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 832aecaba9f06ee2d39d4d4bea65f13c
7195d6ffadfdbc6fc8e92c63ae28d4a3038a72dc
a437509314a97065de6c7b9e5e2b4b61f0234b45f5f5bf2649cbdf499577bfd3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3396
Cache-Control: max-age=130693
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 23:09:40 GMT
Etag: "637218f5-1d7"
Expires: Wed, 16 Nov 2022 11:27:53 GMT
Last-Modified: Mon, 14 Nov 2022 10:31:17 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 14 Nov 2022 22:44:35 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1505
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8c15cef160d1514fc977ed4c4e97086c
ffe4ce3199658a1fc7a45d1607df40ef3911621d
db1a82d8a2bacc0257b87efec0c365c1b769700fa27ce928321e082505f1d72a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB1A82D8A2BACC0257B87EFEC0C365C1B769700FA27CE928321E082505F1D72A"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9496
Expires: Tue, 15 Nov 2022 01:47:56 GMT
Date: Mon, 14 Nov 2022 23:09:40 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Rz4LPqmhxZ7K5yH8a+YEBx3fQAocSVoaghQ5MrH4F3mphAHmklss3KID82YiCALsoacfCRmqZhw=
x-amz-request-id: 9P4GW35ZFZA95T2K
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 14 Nov 2022 22:51:17 GMT
age: 1103
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 14 Nov 2022 23:09:40 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Retry-After, ETag, Alert, Expires, Backoff, Content-Type, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 14 Nov 2022 22:44:48 GMT
cache-control: public,max-age=3600
age: 1492
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 36945b9fc1a4fc6badade0da2693337e
ebab273fe86d598d37729e53a034a0315112cad6
87da1603f23d6940259a94503fbeba885616c7a5386353d5f1df478e8f036705
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=160016
Date: Mon, 14 Nov 2022 23:09:40 GMT
Etag: "637298c4-1d7"
Expires: Wed, 16 Nov 2022 19:36:36 GMT
Last-Modified: Mon, 14 Nov 2022 19:36:36 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CZ9mauWUmRJzV6YOA321oOFQ0U27_DWFl-q-eoi845o9Rf_1HRmZaQ==
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3200044057cb585f1a435c0efece61c8
8305d5b5891288aa9996b4b4ca6fce2265413194
df45704534a24928e7659a6d8cd1b5ac9ffa9b224b02b34a2d6aed5ef69fd586
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1479
Cache-Control: max-age=123719
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 23:09:41 GMT
Etag: "63720535-1d7"
Expires: Wed, 16 Nov 2022 09:31:40 GMT
Last-Modified: Mon, 14 Nov 2022 09:07:01 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
44.236.232.139101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.236.232.139:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ayKZ3heNMssIapPq5Bcstw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: X5njpbUfiS301Nj2+JFy7IM5aXY=
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
54.230.111.27200 OK 6.1 kB URL HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP 54.230.111.27:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Mon, 14 Nov 2022 01:02:29 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GrmP_qDeG_YcK5nn1OUFhzKv6amTgY4LrxNv1O09hKtZQr5lGFLcWg==
age: 79633
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/clean_two.svg
54.230.111.32200 OK 431 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/clean_two.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (431), with no line terminators
Hash f0f6b52bce4737187d5986d65c2b9a11
420adf24b61c4b96d5dc1b30eb4cbd44106ec3c2
b02a16d65bb919592b8b0903e78661c9c6a6b6d39218ce2ca664c5b2fbccad76
GET /mk-land/dist/svg/landings/225/clean_two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 431
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:02 GMT
x-amz-version-id: LRgYiVhEK3fItgvPk6mKGbDsgX8pnLBe
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 15:23:04 GMT
cache-control: public, max-age=604800
etag: "f0f6b52bce4737187d5986d65c2b9a11"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KzGrf3n-ZN_0XJAPGJwgox5mxRKiJ1me0srAAPefqek1PWJN1prM1A==
age: 546398
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/per_one.svg
54.230.111.32200 OK 539 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/per_one.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (539), with no line terminators
Hash 97ea212e1de4543eabca9fd8ddd404de
007dadc86f73968b1c388e45d8700ecf89d6a50b
0e99a715e4465cdb227652a88f9d4a7a18bb59a56278b447b1ded534bfea4c5c
GET /mk-land/dist/svg/landings/225/per_one.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 539
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:03 GMT
x-amz-version-id: GWAKBWCSqT_7gPWOz2RGnf88tL37V5HF
accept-ranges: bytes
server: AmazonS3
date: Mon, 14 Nov 2022 08:34:50 GMT
cache-control: public, max-age=604800
etag: "97ea212e1de4543eabca9fd8ddd404de"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eiMLaeWDtZxMaw8VhG1b9jmgM-hlhdmFxJBIhKA1R3GjSmE6RleNrg==
age: 52493
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/soft_two.svg
54.230.111.32200 OK 416 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/soft_two.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (416), with no line terminators
Hash 9cab428314b3d6d14b27b1c135719c23
e02c5b85b10d649435b5930e710056f30ea2cc50
3a275c72443bceadd78236a8c465a5b9285433efd40cd339836380ae06c25279
GET /mk-land/dist/svg/landings/225/soft_two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 416
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:06 GMT
x-amz-version-id: AzD9wwbrIkCKyEsG_bLx1P0QngZ10lMa
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 15:23:05 GMT
cache-control: public, max-age=604800
etag: "9cab428314b3d6d14b27b1c135719c23"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3la_l9PaFuarJrDx_ZcgU99lESW-ktQIv3DJtuCQMmtiOD61PoYbAQ==
age: 546398
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/clean_three.svg
54.230.111.32200 OK 583 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/clean_three.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (583), with no line terminators
Hash 64036bea66db20718ae3285e9ca951cd
bd5eed2f6cdfd70698fa356785acb13c21768d41
462a1d5d1feb27660a51f000e54ac924bcca7b6d94337593dd0e741560d7da7f
GET /mk-land/dist/svg/landings/225/clean_three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 583
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:01 GMT
x-amz-version-id: aO4a9w_YfpO.ZI6ANxHSeJI1.NSl2EjU
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 15:23:04 GMT
cache-control: public, max-age=604800
etag: "64036bea66db20718ae3285e9ca951cd"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ceE41De8KLybc9yw0qOxMsqEHB1EVGqip4-oJu2iAwC8SKr5rl4Uig==
age: 546399
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/per_two.svg
54.230.111.32200 OK 573 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/per_two.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (573), with no line terminators
Hash f7c01b4f32eceacb4bf0a84f301505c6
e69ac48a9b8f6ce19faf14bd1014c3943b967c04
f26625626a6dd5205a1a10f6c914bdbf6441dd7075b5cff2fdc9d09ecb9f5a67
GET /mk-land/dist/svg/landings/225/per_two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 573
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:03 GMT
x-amz-version-id: Hd7XMs0T4oJtO_vQvm6W.PePMJuuAU9e
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 15:23:05 GMT
cache-control: public, max-age=604800
etag: "f7c01b4f32eceacb4bf0a84f301505c6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xlN45xDIYKvn1x2ZTsms4_i9kwMskUloKemVFzrQDl2lDZyXELN-JA==
age: 546397
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/ant_one.svg
54.230.111.32200 OK 432 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/ant_one.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (432), with no line terminators
Hash 48ee3a2cc5a7ac742bd440d7c5497fa3
052e084834e87565be5632d608316d919ef4a6be
eb72a677d24f6679bbdd7ee7c9809a575c294d7e1c458b85d2ad0d3d3f7dc9d5
GET /mk-land/dist/svg/landings/225/ant_one.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 432
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:02 GMT
x-amz-version-id: 6iupm1tUoslfH5kSfuK18ox_5nA1IMD1
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 15:23:06 GMT
cache-control: public, max-age=604800
etag: "48ee3a2cc5a7ac742bd440d7c5497fa3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WrhTWine-Mi4pAaOlOchtTlCbDpacFWjWI9qOU1Laza1wfPGsaI1Bw==
age: 546397
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/per_three.svg
54.230.111.32200 OK 720 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/per_three.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (720), with no line terminators
Hash 6827d895741abaebbe73a96f65d28344
7b9070dbb0c59f249194f6b182b09507883a627c
e6e9d084a55b47d2b0b35022c13168a915b215f34bc43c62fe7c35f7d78896d4
GET /mk-land/dist/svg/landings/225/per_three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 720
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:01 GMT
x-amz-version-id: JgEm4VjBwayEO1JgrCFhxLPUqy7wD_Nx
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 15:23:06 GMT
cache-control: public, max-age=604800
etag: "6827d895741abaebbe73a96f65d28344"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IwpU3gh-iFyq7kOOFJrNvK0cefu6cEXlP4F2ITxsyBp7T7vOVKcfuQ==
age: 546397
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/components/btn-arrow.svg
54.230.111.32200 OK 412 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/components/btn-arrow.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (412), with no line terminators
Hash 2bb20d31732674b19f39721677ee98b0
c009a4436fe0fd3e281dcd9f60ab0f2769f25cb5
b5553f16ea66eab43971c73b4115bbe291b2188dc00d0c5d4f5bb21958e3dda2
GET /mk-land/dist/svg/components/btn-arrow.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 412
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:38:48 GMT
x-amz-version-id: nukWLapdOnZ6K4hroAQrBv4GKBUk7Zxa
accept-ranges: bytes
server: AmazonS3
date: Sun, 13 Nov 2022 00:41:32 GMT
cache-control: public, max-age=604800
etag: "2bb20d31732674b19f39721677ee98b0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wbvfT0wuUxdPtLQZRSgupUCP9Yr8nTkJ6g0RC_KwZBnVbhqoa4W1Bw==
age: 167291
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/security-two.svg
54.230.111.32200 OK 442 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/security-two.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (442), with no line terminators
Hash 1dc4abe3aa5d009df49fbf517f481ccc
c59310139609463fcda8759b2acb5d273cb47b2c
355f6e09902fa7825ed2dcab34dc5b00f874c346397cf1135dd7d04c97e17457
GET /mk-land/dist/svg/landings/225/security-two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 442
date: Wed, 09 Nov 2022 06:37:14 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:05 GMT
etag: "1dc4abe3aa5d009df49fbf517f481ccc"
cache-control: public, max-age=604800
x-amz-version-id: P7COEuM1ReN_35TeAX6nirZtWmDpnezY
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yLNjBOW7fFexys0mcTaBPyok22u-fAltHyeKVqeHfOIgrZG0BiqOMA==
age: 491549
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/prive_three.svg
54.230.111.32200 OK 717 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/prive_three.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (717), with no line terminators
Hash a5c782d385dc0cbbd4afa608cdd1d8f3
68087ac49e47e19dba31ef068f54a6c574a8bfc2
6a6809edb7464cf5d45ff57e705bbefcfb37048721518235e12a5fc5b4b801c4
GET /mk-land/dist/svg/landings/225/prive_three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 717
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:07 GMT
x-amz-version-id: bZmAWXuf1_16mNzH9W77urKoZ22SJAkL
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 15:23:07 GMT
cache-control: public, max-age=604800
etag: "a5c782d385dc0cbbd4afa608cdd1d8f3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: outPUcxLjnFYsBVMHUU5-mbrV6WAWqmO5qTv75GY5iXk2Dgmb2kb5g==
age: 546396
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/privacy-two.svg
54.230.111.32200 OK 987 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/privacy-two.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (987), with no line terminators
Hash 102a03f6293726facccabba18c0e9455
a26d09667f914080c04fd009f03f8d95850bb895
1d974ed4e61fc2a77bcd71ffda37e83e83cf0681d1633d5f42c00c3df2226def
GET /mk-land/dist/svg/landings/225/privacy-two.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 987
date: Tue, 08 Nov 2022 02:31:16 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:06 GMT
etag: "102a03f6293726facccabba18c0e9455"
cache-control: public, max-age=604800
x-amz-version-id: huCh93vXiRgrU7OH1cjV32VI19B1GuJD
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -iIaVdd30NDU0vXXk6F3HjA1GDoTICc5erLEMwaRPYA-Ojvi53-k1w==
age: 592707
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/soft_four.svg
54.230.111.32200 OK 399 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/soft_four.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (399), with no line terminators
Hash bc4849c8d35e6a210935e7b9fdda0196
ffcc50042a4d7862847115f659b0f099c1b469bb
1c216829b95c0b70220cb919b5889fce57c99a687d7be02f06ded33f80527283
GET /mk-land/dist/svg/landings/225/soft_four.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 399
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:04 GMT
x-amz-version-id: 4zPAwPwwjZUa3v8MqKY9C58_Duocufi7
accept-ranges: bytes
server: AmazonS3
date: Thu, 10 Nov 2022 08:42:24 GMT
cache-control: public, max-age=604800
etag: "bc4849c8d35e6a210935e7b9fdda0196"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k1zT-ENnuf_vhjxmEsIARoqZcJUTGeI-OXWxImgfHsXHm2Hs9yDqsg==
age: 397639
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/clean_one.svg
54.230.111.32200 OK 486 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/clean_one.svg
IP 54.230.111.32:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (486), with no line terminators
Hash 4ef86b2fbcdb943033b3c85e020122da
162e093a49c83d2d01bc48c1c9d398ac57d8b92b
4418d84f10560dd73aef8ddb24712a06de3530a83ec5a2674788a8e3758056da
GET /mk-land/dist/svg/landings/225/clean_one.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 486
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:01 GMT
x-amz-version-id: YH32xEF_5ib9lzid_dJ7i9GT9Dd5L9LT
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 14:44:01 GMT
cache-control: public, max-age=604800
etag: "4ef86b2fbcdb943033b3c85e020122da"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3_U4Q6rMu-XMrV6J67NChdOt94sem6ZNMnUlYUQoQvK7zGcjjd14aA==
age: 548742
X-Firefox-Spdy: h2
browser.sentry-cdn.com/5.5.0/bundle.min.js
151.101.2.217200 OK 52 kB URL HTTP/2 browser.sentry-cdn.com/5.5.0/bundle.min.js
IP 151.101.2.217:0
File type ASCII text, with very long lines (51441)
Hash b1dcc6195d84cf50c3e882d3d515f848
06562c193663a31a3cabeaa18cffeb882084fcb6
8c04755395b8f232c57d062a7669c3c414658299d29c6b6f83f1f30185d94ecb
GET /5.5.0/bundle.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 11 Nov 2022 05:27:37 GMT
last-modified: Fri, 05 Jul 2019 11:17:04 GMT
etag: W/"39339cf627bc67e34d4c623bea4c0b4a"
content-type: application/javascript; charset=utf-8
x-guploader-response-body-transformations: gunzipped
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 14 Nov 2022 23:09:42 GMT
age: 1089222
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 51570
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 964f5a2270f3d9f4d82728789cf34f6d
34e80279be3a5b7421ad3a10aa2a7bd82cd78ab6
c502b84ab0a9f814970dffcbe07032d683487a7bbc5a1ac2d79fcbb96a6ee3a7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=126576
Date: Mon, 14 Nov 2022 23:09:42 GMT
Etag: "637203e8-1d7"
Expires: Wed, 16 Nov 2022 10:19:18 GMT
Last-Modified: Mon, 14 Nov 2022 09:01:28 GMT
Server: ECS (nyb/1DD2)
X-Cache: Miss from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fYPiOp8Uk1749pAtgJXW2Cuq2tsWV2V0-82D3r21XOHM8oMwx5aE0g==
Age: 4670
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 964f5a2270f3d9f4d82728789cf34f6d
34e80279be3a5b7421ad3a10aa2a7bd82cd78ab6
c502b84ab0a9f814970dffcbe07032d683487a7bbc5a1ac2d79fcbb96a6ee3a7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=126735
Date: Mon, 14 Nov 2022 23:09:42 GMT
Etag: "637203e8-1d7"
Expires: Wed, 16 Nov 2022 10:21:57 GMT
Last-Modified: Mon, 14 Nov 2022 09:01:28 GMT
Server: ECS (bsa/EB14)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dQcOx8LBtSCsKEoB-O0fXnAKqIINK_Z6o4tzzNea_dmzfplpmD2DSg==
Age: 4829
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 964f5a2270f3d9f4d82728789cf34f6d
34e80279be3a5b7421ad3a10aa2a7bd82cd78ab6
c502b84ab0a9f814970dffcbe07032d683487a7bbc5a1ac2d79fcbb96a6ee3a7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=122619
Date: Mon, 14 Nov 2022 23:09:42 GMT
Etag: "637203e8-1d7"
Expires: Wed, 16 Nov 2022 09:13:21 GMT
Last-Modified: Mon, 14 Nov 2022 09:01:28 GMT
Server: ECS (dcb/7F14)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: aZwj_d80q791-Vmx2MRpm76C9tsueeJa4WKbqIv_imDaG9Xb7Gbl6A==
Age: 713
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 964f5a2270f3d9f4d82728789cf34f6d
34e80279be3a5b7421ad3a10aa2a7bd82cd78ab6
c502b84ab0a9f814970dffcbe07032d683487a7bbc5a1ac2d79fcbb96a6ee3a7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=121906
Date: Mon, 14 Nov 2022 23:09:42 GMT
Etag: "637203e8-1d7"
Expires: Wed, 16 Nov 2022 09:01:28 GMT
Last-Modified: Mon, 14 Nov 2022 09:01:28 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: v6jRXfaj5lQPLgIUNKLmMxcDKw1R3S84CNcRAtfjEbE6pkIGv4aHLw==
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash b2d6aeeb303eaefc4cc6900e30da3b1b
4c3c027013211aa1b987006d0eb6c72f18c6a657
f542eab7c032d6c5f59710ee8993a01537e0fa2bf3882a6a699de85bba020999
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 23:09:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash b2d6aeeb303eaefc4cc6900e30da3b1b
4c3c027013211aa1b987006d0eb6c72f18c6a657
f542eab7c032d6c5f59710ee8993a01537e0fa2bf3882a6a699de85bba020999
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 23:09:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6282
Expires: Tue, 15 Nov 2022 00:54:24 GMT
Date: Mon, 14 Nov 2022 23:09:42 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07797f-dd0a-4d91-86dd-362bcde1053e.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07797f-dd0a-4d91-86dd-362bcde1053e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14d5eaa5fe940564f077ca611f6e3fbe
032b8bfc63294a55ff49ee7186768bd9728ce103
7bed85f8f78ba7e1fad560d0ea311a65bff33aaf5f3226bef392ddc10f52d620
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07797f-dd0a-4d91-86dd-362bcde1053e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12942
x-amzn-requestid: fd589c13-7784-4e3a-b928-908fd2b8f98a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bd8hgHQvIAMFmfQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f0e09-29db9a7832efa131593951f2;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 03:07:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: f-hb5cPg2rs4xJls_0z3RbITwQlh__E1X7YkHZeISA2jOm3MX0CKrA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 07:49:47 GMT
age: 55195
etag: "032b8bfc63294a55ff49ee7186768bd9728ce103"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b1ce583-5604-4223-b88e-880659fdc0e7.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b1ce583-5604-4223-b88e-880659fdc0e7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 94c82cd0e4204ea23b9bd86a3f576fa8
1651325ad361d1c86a4b81edb6b75af27f490a39
0173a565be87e87b2a8fccb3bfe4f237ddd9fdafa5711e79f0c4381882238886
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b1ce583-5604-4223-b88e-880659fdc0e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8025
x-amzn-requestid: c876c502-bde1-4c03-a946-7af2117240ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bg3EUF0foAMFfyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63703881-0594a8076fb64f570f824ad1;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 00:21:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eWpoQ8Bkfez0fw2HBZVlPIWIrtjeS6i6V-Dn0NthrKeeDYQEYq62kQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 21:49:06 GMT
etag: "1651325ad361d1c86a4b81edb6b75af27f490a39"
content-type: image/jpeg
age: 4836
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lp5eW92D8SbFtcQLk-LRSaSKNMNFYCW7XTALdNdrJxN6ebgdH8_1Dw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 21:52:43 GMT
age: 4619
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ebd0ec1-1a89-43e0-9cc8-b4c4aaba9a26.jpeg
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ebd0ec1-1a89-43e0-9cc8-b4c4aaba9a26.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fccbaa99a6af77d187d488b8ed6c6222
1643214231f459de7e20981676f630bb903d085d
b4991dcb0b29478e88487bf2c3bb91a90d94511048ecba4a20138dd8fd4b7672
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ebd0ec1-1a89-43e0-9cc8-b4c4aaba9a26.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 15691
x-amzn-requestid: bbe43af8-ed97-4181-9872-e94f9386596b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bUNEqG7foAMFosw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636b2884-6f66158464e027a30d50a797;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 04:11:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: iQdP63-UZ0nIQvtJRnpF-szecnotfVbElbxnF6cQ3lo3i6JMz0xqGg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 04:15:25 GMT
age: 68057
etag: "1643214231f459de7e20981676f630bb903d085d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b12e479-a09c-431c-aecf-6e63c60a01f1.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b12e479-a09c-431c-aecf-6e63c60a01f1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fe4f5dc12e097182fed4de0161bc5b8a
746804d683bea55f44d5f6456a7e69d0048e4f58
d8a2095cd57455bab301ae68b7478997f3db056039886d85301eb85d7d196cf4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b12e479-a09c-431c-aecf-6e63c60a01f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5882
x-amzn-requestid: a9d913e4-c9c1-4054-a9ff-c5ff5287c854
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bhQZ2H2loAMFsmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6370610b-63cf663851f2e04b7f2cb70a;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 03:14:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 0DjdK2du8K9O1d0rcWaDO6yqWBuHYSSiEJmscryUraTH73vwcwubNg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 03:32:26 GMT
age: 70636
etag: "746804d683bea55f44d5f6456a7e69d0048e4f58"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F040363e6-40a3-4d68-bf2e-ca83ac195dcc.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F040363e6-40a3-4d68-bf2e-ca83ac195dcc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4af82634a56d0978c9b4689c8b7eb8ae
4b40ef08bd37cabfcb937053dd58012abdd6620f
476a9f850cfbe41adea1d699fdf4f04424674c53b268681fa6fc0e226bed0797
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F040363e6-40a3-4d68-bf2e-ca83ac195dcc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6318
x-amzn-requestid: 6469c84d-fc45-470e-a438-2fb81dae70c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bhPtyHpXoAMFfWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63705ff1-53ab9291301773c048f69696;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 03:09:37 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: w-ycM-G6gAU8xssl0r8gTPLLLimSjv4M5VUONl8bynl_A2EzlmXoaw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 04:17:31 GMT
age: 67931
etag: "4b40ef08bd37cabfcb937053dd58012abdd6620f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash b2d6aeeb303eaefc4cc6900e30da3b1b
4c3c027013211aa1b987006d0eb6c72f18c6a657
f542eab7c032d6c5f59710ee8993a01537e0fa2bf3882a6a699de85bba020999
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 23:09:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Source+Sans+Pro:400,600
142.250.74.10200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro:400,600
IP 142.250.74.10:0
Hash 6b942a336a524c1de39359d7b85b664d
0f2805940962377e89371214fe0b2129f977c0ac
68c5c069a653935dc4da43104ffc4cad9b6e1dabd93f82ec5987bdb61288288a
GET /css?family=Source+Sans+Pro:400,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 14 Nov 2022 23:09:42 GMT
date: Mon, 14 Nov 2022 23:09:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/225/header.webp
54.230.111.32200 OK 131 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/225/header.webp
IP 54.230.111.32:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 131 kB (131024 bytes)
Hash 4b4b385f28364f3bd51926ab2bb81541
30c3c0235d1aa35559cc00974583b1d30a7514b1
02144673ab0dd469277694f55ae214157fc0d2738e2fb0eee1621c4f418e6bd7
GET /mk-land/dist/images/landings/225/header.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/225/style.webp.min.css?3a6665f1aefdfa6e7708
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 131024
date: Sun, 13 Nov 2022 03:50:08 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:25 GMT
etag: "4b4b385f28364f3bd51926ab2bb81541"
cache-control: public, max-age=604800
x-amz-version-id: VJAy19mh_ft.NcFkncwio32zsEqiPrFC
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 43mae9vnibcuLQ1UMRwjl86W5Z7dFXRL_41o1eGKqZxGYDCPIOFR9w==
age: 155975
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/225/memory.webp
54.230.111.32200 OK 1.4 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/225/memory.webp
IP 54.230.111.32:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e24e191c026b00c1d7a106572ec478ed
b2929eaa3663327447ebc0a36f971fd5f41ed3bb
dfcbf5db55a5b400ad7e7c0cbf38c1dcb6e48199f4acd751a2eb44d579b078fa
GET /mk-land/dist/images/landings/225/memory.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/225/style.webp.min.css?3a6665f1aefdfa6e7708
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1420
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:26 GMT
x-amz-version-id: bUSSObvLnb7DQVXnLsaj5d1FlWuhJ.L2
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 15:44:52 GMT
cache-control: public, max-age=604800
etag: "e24e191c026b00c1d7a106572ec478ed"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vm7Crp-5z2tLJL_FJ5QsnmyKFdoqfmal7EdKjbKffy9wMvU0JQKklg==
age: 545091
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/225/header-bg.webp
54.230.111.32200 OK 74 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/225/header-bg.webp
IP 54.230.111.32:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x640, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 137aa51469fe2a02e21b1aaae3c6ccaa
87cea366b27a70348a19e753a01496d1d0a75385
3258b3abaef6428600b278f8b4d729b43cebec7b08fe903886c65b6de75736e6
GET /mk-land/dist/images/landings/225/header-bg.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/225/style.webp.min.css?3a6665f1aefdfa6e7708
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 74138
date: Thu, 10 Nov 2022 06:02:39 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:28 GMT
etag: "137aa51469fe2a02e21b1aaae3c6ccaa"
cache-control: public, max-age=604800
x-amz-version-id: 4vvl8O.5lMjAsDg4AwGt3hY9oo1LATBH
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nJLSgbX_FFoPX0V9X325InqiP14zof6mns3qelhzxTq5KSqc2L1kEA==
age: 407224
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/225/back.webp
54.230.111.32200 OK 1.8 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/225/back.webp
IP 54.230.111.32:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 867c21c37d640d99114ca25d1a737ef9
3c02f083a49ccb824379b4d0b9c4a38b6456417b
d6855d6980e680edfe756f5021f6b06e541c033fafa4f0caf78f01ca3424d09f
GET /mk-land/dist/images/landings/225/back.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/225/style.webp.min.css?3a6665f1aefdfa6e7708
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1824
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:27 GMT
x-amz-version-id: okd.aZkUw6z6eHf4C34aILH5nFQVhejy
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 15:44:52 GMT
cache-control: public, max-age=604800
etag: "867c21c37d640d99114ca25d1a737ef9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _xmMCSaiL_w2JKLp6Ra2IGg3VKWSMwu82tesqEqegYKdzFJhtnZbOw==
age: 545091
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/225/virus.webp
54.230.111.32200 OK 1.7 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/225/virus.webp
IP 54.230.111.32:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9b099488f1b2855d4161d0f212c9c4ad
ed56ac97b5e0a671f523aece4ad04cf22dd4a40f
3fbe829b179669affe3b743bb603ff415506fc7d76072980a7900ce6ceb41431
GET /mk-land/dist/images/landings/225/virus.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/225/style.webp.min.css?3a6665f1aefdfa6e7708
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1718
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:26 GMT
x-amz-version-id: Yedqj9J2xmqtnCa1azO_psalXGNlU1FX
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 15:44:52 GMT
cache-control: public, max-age=604800
etag: "9b099488f1b2855d4161d0f212c9c4ad"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hAOwD-xDoIgPAJAMDyaBxj8jVWVK-toFz3S72pnM4dtMMNgYR0lMxw==
age: 545091
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/landings/225/mac.webp
54.230.111.32200 OK 30 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/landings/225/mac.webp
IP 54.230.111.32:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 588156972ffbc510a38822a08c5474cb
062aa69b5766e6d4d38bdf37905c1b73c9241c02
b56fba8b6585f965e16f16ae850b9b3a6e4870455874916597f19c48310959b2
GET /mk-land/dist/images/landings/225/mac.webp HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/225/style.webp.min.css?3a6665f1aefdfa6e7708
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 29518
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:27 GMT
x-amz-version-id: QifUAQLavVRq8JpREIHRD9Oj9m5x59jE
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 15:44:52 GMT
cache-control: public, max-age=604800
etag: "588156972ffbc510a38822a08c5474cb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gEeUezyvBYeTfMCvpJc2fmWPBNPqgV5xbpy4uxJ8YJlTWK4JekB7PA==
age: 545091
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400
142.250.74.10200 OK 101 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400
IP 142.250.74.10:0
Size 101 kB (100822 bytes)
Hash 43696588dad10684415ea7db7cacbdd3
f221e20713432139640bbee192a516d872b49eae
116c5617e55f7573d201b21181a7bc02c98e28175dfc071a09fe6930b52d7684
GET /css?family=Roboto:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 14 Nov 2022 23:09:42 GMT
date: Mon, 14 Nov 2022 23:09:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
54.230.111.27200 OK 2.1 kB URL HTTP/2 widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
IP 54.230.111.27:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6784)
Hash bbd26c541b063878dddb6095c1f82221
ad7402097c8a410e880016bf77b037e2def9a09f
d7cc9429d7ddde82e2f3d9390e483ca72489b153a4356a401456411d5b40fa9a
GET /trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 2114
last-modified: Tue, 04 Oct 2022 10:33:49 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Mon, 14 Nov 2022 03:35:26 GMT
cache-control: max-age=86400
etag: "bbd26c541b063878dddb6095c1f82221"
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9YmpGyrYjANQYSNvQRYPNscfHf3LPmg9_4WaWR9zX4tiLpXaFajkPg==
age: 70457
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
54.230.111.27200 OK 3.7 kB URL HTTP/2 widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
IP 54.230.111.27:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (15336)
Hash 83355578cdf883e1c6aef6f07b55893f
9d029e5c705fcdf74bb145b41dcf6179adff85e2
a4a8345f2801ecb4907f357a51b22176f217c7f445fbb3bccfe645c536d39842
GET /trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 3697
last-modified: Tue, 04 Oct 2022 10:34:05 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Mon, 14 Nov 2022 03:49:40 GMT
cache-control: max-age=86400
etag: "83355578cdf883e1c6aef6f07b55893f"
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iZktNHmQTqrUuU32uwWhO24xXdrWxLAweQRlVVTrpuI6t0-9ZwA7zg==
age: 69603
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash 1af800aa2b326e8af0f2640db68a7a0d
4c617814f5c705737bf4bf111c53bf40bb932af5
594f573b6e73b1d385ae75a518c18a0bb833ac4a3f894fcea377096c756f8cc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 23:09:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/main.js
54.230.111.27200 OK 17 kB URL HTTP/2 widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/main.js
IP 54.230.111.27:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (55461)
Hash 8efe0f2f2944e9baaa88fd0174e1b459
390574f839b7fb636c79834a1a53a0ebc1e2c87b
30b71113e1dbb5d3de637195adf9e5708923a611cb99f5670e7fd1c04c123d32
GET /trustboxes/5419b637fa0340045cd0c936/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 17075
last-modified: Tue, 04 Oct 2022 10:33:51 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Mon, 14 Nov 2022 04:56:45 GMT
cache-control: max-age=86400
etag: "8efe0f2f2944e9baaa88fd0174e1b459"
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: n41pUwmQMXG9PmlARp1tYtus-YByKTWpW-x0u6mdlsMMGMYJJ0RHEw==
age: 65578
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/main.js
54.230.111.27200 OK 30 kB URL HTTP/2 widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/main.js
IP 54.230.111.27:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (64281), with no line terminators
Hash bc5c8622de6c884abb3d021c6468b0dc
dcbd21e6c0dc4311f9446a79a36de21f39e7bf1d
08645a2fa7db0564521436d10d659a1a4b2f43ca2db3e9b923d119c38e4ee208
GET /trustboxes/539ad60defb9600b94d7df2c/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 29606
last-modified: Tue, 04 Oct 2022 10:34:08 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Mon, 14 Nov 2022 04:57:15 GMT
cache-control: max-age=86400
etag: "bc5c8622de6c884abb3d021c6468b0dc"
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TB_bS4bG9uX_mPUfemDiWdujkMe_TFpIaMWfQ18zr3LzWNW52M3rww==
age: 65593
X-Firefox-Spdy: h2
widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=100%25&theme=light&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936
54.230.111.27204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=100%25&theme=light&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936
IP 54.230.111.27:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=100%25&theme=light&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Mon, 14 Nov 2022 23:09:42 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8LiKO1k2f5S4R9HTIO9KA1-0q6rBuzDbmBW-39dnbT9bvKPCJlWJtA==
X-Firefox-Spdy: h2
widget.trustpilot.com/stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=100%25&theme=light&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936
54.230.111.27204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=100%25&theme=light&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936
IP 54.230.111.27:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=100%25&theme=light&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Mon, 14 Nov 2022 23:09:42 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ll815d-4-b5oBopj_AHmPQ0Ab9VzY-_BbjFK6ZpydhoJfTGO0ZIFZA==
X-Firefox-Spdy: h2
widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c
54.230.111.27204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c
IP 54.230.111.27:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Mon, 14 Nov 2022 23:09:42 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lZ3kW2QXTdx6PMxZKbTeJhm0tmBBAKo0_UOwopSxuO7UDlLj_aA1lA==
X-Firefox-Spdy: h2
widget.trustpilot.com/trustbox-data/5419b637fa0340045cd0c936?businessUnitId=4dbb14ee00006400050fa293&locale=en-US
54.230.111.27200 OK 432 B URL HTTP/2 widget.trustpilot.com/trustbox-data/5419b637fa0340045cd0c936?businessUnitId=4dbb14ee00006400050fa293&locale=en-US
IP 54.230.111.27:0
File type JSON data\012- , ASCII text, with very long lines (930), with no line terminators
Hash 78a2570011ef82f1937949baa6661f99
0dab055edefeca18893777c068c8e10b63adca80
b74a429255e0d85c4608720d203703bf281a04ab05180152047ca9204434766f
GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=4dbb14ee00006400050fa293&locale=en-US HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 432
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
cache-control: public,max-age=1800
date: Mon, 14 Nov 2022 22:52:42 GMT
etag: "ac22036bdbe2e7df1554926e7ea55c9b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ayySaHj76fGxQpYhd8L7vAXwLS7ogUBV-dQL0_chj-MNx3D5R3bWwA==
age: 1020
X-Firefox-Spdy: h2
dvcasha2.ocsp-certum.com/
23.36.79.17200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash b79639912208da87e78856cd69dad666
53dcb1bd8c2ce5c4ebdd573d131819d3e0d23640
109c9265c389eef65d83b6033c496ffc399b25113b83c1ad06692bb9554f4087
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=876
Date: Mon, 14 Nov 2022 23:09:43 GMT
Connection: keep-alive
X-N: S
tr-rc.lfeeder.com/?sid=ywVkO4XWPeW7Z6Bj&data=eyJnYVRyYWNraW5nSWRzIjpbXSwiZ2FNZWFzdXJlbWVudElkcyI6WyJHLUdZVFhEODlOMVciXSwiZ2FDbGllbnRJZHMiOlsiMzU4Njk5MjUzLjE2Njg0NjczODMiXSwiY29udGV4dCI6eyJsaWJyYXJ5Ijp7Im5hbWUiOiJsZnRyYWNrZXIiLCJ2ZXJzaW9uIjoiMi41Ny4xIn0sInBhZ2VVcmwiOiJodHRwczovL2FwcDIubWFja2VlcGVyYWZmLmNvbS9sYW5kLzIyNS8/cnRrY2lkPTYzNzJjYWE2OTAxMGQ2MDAwMTQxZDk3NyZydGtjbXBpZD02MjdiYmQxODM1OTgxYTAwMDFkNGQ4ZDgmdGlkPUFmZmlsaWF0ZSUyMC0lMjBIeWJyaWQlMjAoMjI1KSZ1dG1fc291cmNlPSZ1dG1fbWVkaXVtPSZwdWJpZD0iLCJwYWdlVGl0bGUiOiJNYWNLZWVwZXIiLCJyZWZlcnJlciI6IiJ9LCJldmVudCI6InRyYWNraW5nLWV2ZW50IiwiY2xpZW50RXZlbnRJZCI6IjU3YzBkZTY4NTUyMjVkYWEiLCJzY3JpcHRJZCI6Inl3VmtPNFhXUGVXN1o2QmoiLCJjb29raWVzRW5hYmxlZCI6dHJ1ZSwiY29uc2VudExldmVsIjoibm9uZSIsImFub255bWl6ZUlwIjpmYWxzZSwibGZDbGllbnRJZCI6IkxGMS4xLjJhOTAzYmI0ZjI5NGY3NWQuMTY2ODQ2NzM4MzE2NCIsImZvcmVpZ25Db29raWVzIjpbXSwicHJvcGVydGllcyI6e30sImF1dG9UcmFja2luZ0VuYWJsZWQiOnRydWUsImF1dG9UcmFja2luZ01vZGUiOiJvbl9zY3JpcHRfbG9hZCJ9
54.230.111.78200 OK 43 B URL HTTP/2 tr-rc.lfeeder.com/?sid=ywVkO4XWPeW7Z6Bj&data=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
IP 54.230.111.78:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /?sid=ywVkO4XWPeW7Z6Bj&data=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 HTTP/1.1
Host: tr-rc.lfeeder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
server: CloudFront
date: Mon, 14 Nov 2022 23:09:43 GMT
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aUIHt1_j4UOBl782J44ESYCGWT4iL-fE9INB40xCOfUQvs9mJr4Thw==
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1668467383067&aid=a-015g&se=e30&duid=f810f9c9df2c--01ghw6fpn2jk0jb8acswvvrgce&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-
52.203.20.79302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1668467383067&aid=a-015g&se=e30&duid=f810f9c9df2c--01ghw6fpn2jk0jb8acswvvrgce&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-
IP 52.203.20.79:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1668467383067&aid=a-015g&se=e30&duid=f810f9c9df2c--01ghw6fpn2jk0jb8acswvvrgce&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU- HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 14 Nov 2022 23:09:43 GMT
content-length: 0
trace-id: 823e2383587fd5bf
vary: Origin
location: /j?dtstmp=1668467383067&aid=a-015g&se=e30&duid=f810f9c9df2c--01ghw6fpn2jk0jb8acswvvrgce&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520%28225%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true
set-cookie: lidid=4d4b9953-2ceb-4b49-97cd-aa61925f5023; Max-Age=63072000; Expires=Wed, 13 Nov 2024 23:09:43 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1668467383067&aid=a-015g&se=e30&duid=f810f9c9df2c--01ghw6fpn2jk0jb8acswvvrgce&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520%28225%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true
52.203.20.79200 OK 13 B URL HTTP/2 rp.liadm.com/j?dtstmp=1668467383067&aid=a-015g&se=e30&duid=f810f9c9df2c--01ghw6fpn2jk0jb8acswvvrgce&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520%28225%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true
IP 52.203.20.79:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?dtstmp=1668467383067&aid=a-015g&se=e30&duid=f810f9c9df2c--01ghw6fpn2jk0jb8acswvvrgce&tna=v2.5.1&pu=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520%28225%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&wpn=lc-bundle&c=PHRpdGxlPk1hY0tlZXBlcjwvdGl0bGU-&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Nov 2022 23:09:43 GMT
content-type: application/json
content-length: 13
trace-id: db83e73a05eacccf
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: 16197b14-7bd5-4686-9cdd-8530599d0726
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-GYTXD89N1W>m=2oeb90&_p=487909459&_gaz=1&cid=358699253.1668467383&ul=en-us&sr=1280x1024&_s=1&sid=1668467383&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-GYTXD89N1W>m=2oeb90&_p=487909459&_gaz=1&cid=358699253.1668467383&ul=en-us&sr=1280x1024&_s=1&sid=1668467383&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GYTXD89N1W>m=2oeb90&_p=487909459&_gaz=1&cid=358699253.1668467383&ul=en-us&sr=1280x1024&_s=1&sid=1668467383&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://app2.mackeeperaff.com
date: Mon, 14 Nov 2022 23:09:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
app2.mackeeperaff.com/land/api/send-event
54.208.164.99200 OK 576 B URL HTTP/2 app2.mackeeperaff.com/land/api/send-event
IP 54.208.164.99:0
Hash 3ed1b0d7000f9d671abdc702eb5e014c
af7c09fa55e392b4da4ea2e8c725b39401e75a93
ed36ae31816369dfda8a4797d377c58252287e509a7fd866b7b62b1dfe30c57e
Analyzer Verdict Alert quad9 Sinkholed
POST /land/api/send-event HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: HopFDPjF0Gi2fLtl6p0bdpCJJrZ9xSGjvyGf3ujE
X-XSRF-TOKEN: eyJpdiI6ImVLZ0ljY3hnSXhTWFRzeW1ieVN0dmc9PSIsInZhbHVlIjoiT0hlRnFYVnRSem1nQ3VxQWhpOWtPM2J6Q3ByeUc3bHBXXC9jRDBhbUpVdThtZ3RWQVVUU2w1YWRrUHo1Y2JuMlZ1aUZpZDZ5S09lTjZmOXhrOXlXUVBMa0x3ZkRUOXNKK0tVeklsbnFSaTZqbllEc0RsZ0FRQlRsS1orZGZHN2c3IiwibWFjIjoiY2M5OTEzNGQzNmFiYmY3MDJlMTE1YjZiMmQ1MDVlYTM2NWQ4YWYxYjQyNDg3ZTkzYjJkMDA2Y2JkOGU2YTY3YyJ9
Content-Length: 102
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/225/?rtkcid=6372caa69010d6000141d977&rtkcmpid=627bbd1835981a0001d4d8d8&tid=Affiliate%20-%20Hybrid%20(225)&utm_source=&utm_medium=&pubid=
Cookie: XSRF-TOKEN=eyJpdiI6ImVLZ0ljY3hnSXhTWFRzeW1ieVN0dmc9PSIsInZhbHVlIjoiT0hlRnFYVnRSem1nQ3VxQWhpOWtPM2J6Q3ByeUc3bHBXXC9jRDBhbUpVdThtZ3RWQVVUU2w1YWRrUHo1Y2JuMlZ1aUZpZDZ5S09lTjZmOXhrOXlXUVBMa0x3ZkRUOXNKK0tVeklsbnFSaTZqbllEc0RsZ0FRQlRsS1orZGZHN2c3IiwibWFjIjoiY2M5OTEzNGQzNmFiYmY3MDJlMTE1YjZiMmQ1MDVlYTM2NWQ4YWYxYjQyNDg3ZTkzYjJkMDA2Y2JkOGU2YTY3YyJ9; mackeeper_session=eyJpdiI6InZiaWFoVTA0cTZ6N2ZZOUdiYnFTQWc9PSIsInZhbHVlIjoiMmQ3bTljbFdVaUZKdHo3ZjRvbElOSUxldmExc0krWEdvMHNoNzF3ZWNPemphYXBiVWloSFlGMGZ6RkNGeUJYOEYzTUZlYkg4VDAyXC9JRFZcL3d0MTZvaFBkZndxdE9Wb0V5TjY2SHhMSmdpZ3dGcEtnYkpPcUhXNXg2RlJsVmdYVCIsIm1hYyI6ImFiOTRlOWFhNzcxZjZkNzk1MTY1YjRhMGFlMWUxYWE0YzM2N2ZkZTdlMjI1M2ZmNzYyZmI2YTUxYjZlYTdhZjYifQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Nov 2022 23:09:43 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 178
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 3ad4994f0967684c7a16ad1b957cb7ab
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/images/favicon_ua.png
54.230.111.32200 OK 407 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/images/favicon_ua.png
IP 54.230.111.32:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 471c1c90d41a571f14162d7a8a9c8b9c
b08dfa2783c706945451a8f4890bdb9243936e78
eb625a455a490292aa2a7101dd7b3235bc4c92df0f08349c6663df51b7b66c27
GET /mk-land/dist/images/favicon_ua.png HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 407
x-amz-replication-status: COMPLETED
last-modified: Mon, 04 Apr 2022 09:52:27 GMT
x-amz-version-id: fOjB1uVWJszrafJRMb0A4UZGtOA62i.I
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 14:21:58 GMT
cache-control: public, max-age=604800
etag: "471c1c90d41a571f14162d7a8a9c8b9c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wimtEhuANBUViZmBwF8jxGeqraeByceVT56CQflelprVUyKUQ0e5qg==
age: 550066
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-GYTXD89N1W&cid=358699253.1668467383>m=2oeb90&aip=1
142.251.1.154204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-GYTXD89N1W&cid=358699253.1668467383>m=2oeb90&aip=1
IP 142.251.1.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GYTXD89N1W&cid=358699253.1668467383>m=2oeb90&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://app2.mackeeperaff.com
date: Mon, 14 Nov 2022 23:09:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
23.36.76.210200 OK 4.5 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP 23.36.76.210:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (12826)
Hash 806d185619a4ef5951ab91810117e4ba
f40031c0ea5718f6d9a0a35e8ca60262daedc440
06489a801966cb9e7b467aed4edb63aa10bc2e588d259054ef696ade54e4b19f
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 09 Nov 2022 19:27:04 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=30274
date: Mon, 14 Nov 2022 23:09:43 GMT
content-length: 4530
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0f51a4efc7b43562164a21fac2f92dc3
ddeb9f8256d698f43e662029986c9032da79db9f
c60ba648b021d2c754eba4a6ace4758bb5a2c2b651586a6952128d0ad78045b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2244
Cache-Control: max-age=108276
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 23:09:43 GMT
Etag: "6371c5e7-1d7"
Expires: Wed, 16 Nov 2022 05:14:19 GMT
Last-Modified: Mon, 14 Nov 2022 04:36:55 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
amplify.outbrain.com/cp/obtp.js
23.38.201.81200 OK 5.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP 23.38.201.81:0
File type ASCII text, with very long lines (16620), with no line terminators
Hash a73a09a868a98d7505575c520aaf6616
ed4e4c3fe9ad7ed18564e5f9aed6a9a68b522c7f
8b22d2e0e3e79c7ea27bf76720b302fd18ba1240fbf8dd99e54ced655d17c8e4
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "c83bb35b39c166b49387a9cb3633d4be:1668418404.864545"
Last-Modified: Mon, 14 Nov 2022 09:17:09 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Mon, 14 Nov 2022 23:29:43 GMT
Date: Mon, 14 Nov 2022 23:09:43 GMT
Content-Length: 5276
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash 8094f6d66cd067b92b99cc3c1ec916c6
cdb6d27ace38846e7a770dafce189f90a30db886
f07248933eddbab19c1153daaece5a2c3bcb421598bfab2c4b0f4c547d75e817
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 23:09:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/bat.js
204.79.197.200200 OK 11 kB IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Hash df169ce602a3bb847c575192cb8b744f
be40c6958e00904f9f50d56a729b87270a48d7c7
e47e8fd99a7313873847ce85655117b5b7ba34ddfed7c2900006f3f2be0ae7ee
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11430
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 09 Nov 2022 21:23:50 GMT
accept-ranges: bytes
etag: "077538f81f4d81:0"
vary: Accept-Encoding
set-cookie: MUID=30A86C73D78A69D929377E2FD67F68AE; domain=.bing.com; expires=Sat, 09-Dec-2023 23:09:43 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 89882034546F493F9F9809413133A9BB Ref B: OSL30EDGE0122 Ref C: 2022-11-14T23:09:43Z
date: Mon, 14 Nov 2022 23:09:43 GMT
X-Firefox-Spdy: h2
www.google-analytics.com/gtm/optimize.js?id=OPT-TVNW4WH
142.250.74.174200 OK 44 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=OPT-TVNW4WH
IP 142.250.74.174:0
File type ASCII text, with very long lines (1921)
Hash 26a56d34967429ddb959f0fd3ac9c513
b0206dc262fabb7fd46966dfc4e5a9706bdec7d3
d15c0dffd51bfe53bd0c3f0efd885af721b0f9d380118b3244d11f5a360ea802
GET /gtm/optimize.js?id=OPT-TVNW4WH HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 14 Nov 2022 23:09:43 GMT
expires: Mon, 14 Nov 2022 23:09:43 GMT
cache-control: private, max-age=900
last-modified: Mon, 14 Nov 2022 22:32:10 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43985
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
app2.mackeeperaff.com/land/225/?rtkcid=6372caa69010d6000141d977&rtkcmpid=627bbd1835981a0001d4d8d8&tid=Affiliate%20-%20Hybrid%20(225)&utm_source=&utm_medium=&pubid=
54.208.164.99200 OK 26 kB URL HTTP/2 app2.mackeeperaff.com/land/225/?rtkcid=6372caa69010d6000141d977&rtkcmpid=627bbd1835981a0001d4d8d8&tid=Affiliate%20-%20Hybrid%20(225)&utm_source=&utm_medium=&pubid=
IP 54.208.164.99:0
Hash 98ee940ae6f7cda0f901fab958bfe75e
2d82034049236e0c6df70164f7270b50ddc12f28
7ca5112b1d140fbc3cdf286c5d9086969620ed68e2e4fde5e38261d4e721b891
Analyzer Verdict Alert quad9 Sinkholed
GET /land/225/?rtkcid=6372caa69010d6000141d977&rtkcmpid=627bbd1835981a0001d4d8d8&tid=Affiliate%20-%20Hybrid%20(225)&utm_source=&utm_medium=&pubid= HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 14 Nov 2022 23:09:41 GMT
content-type: text/html; charset=UTF-8
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
content-security-policy: default-src 'self' *.hotjar.com *.mackeeper.com;frame-ancestors 'none';frame-src 'self' 'unsafe-inline' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com *.surveygizmo.com *.liadm.com *.typeform.com mc.yandex.ru *.js.ad-score.com *.cdn.onesignal.com *.onesignal.com *.criteo.com static-cdn.mackeeper.com;child-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com blob: *.cdn.onesignal.com *.onesignal.com *.liadm.com static-cdn.mackeeper.com;form-action 'self' *.mackeeper.com *.facebook.com;img-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com data: *.2mdn.net *.pagead2.googlesyndication.com *.glotgrx.com *.lporirxe.com *.exelator.com *.owox.com *.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.yahoo.co.jp *.apimzb-adserver.cloudmccloud.com *.3lift.com *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com mc.yandex.ru cx.atdmt.com *.baidu.com *.gstatstrk.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.zoomsupport.com *.cloudmccloud.com linkconnector.com *.linkconnector.com *.linkedin.com https://p.adsymptotic.com *.clarity.ms *.lfeeder.com static-cdn.mackeeper.com *.imcounting.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com disqus.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com l2.io *.inspectlet.com *.googlesyndication.com *.sagetrc.com *.glotgrx.com *.lporirxe.com b-code.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.cloudfront.net *.yimg.jp *.addtocalendar.com *.yahoo.co.jp blob: *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com *.s.ytimg.com *.typeform.com *.calendly.com *.linkconnector.com mc.yandex.ru *.js.ad-score.com *.baidu.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.engine.4dsply.com *.engine.spotscenered.info *.engine.3dspk.com *.we3red.com *.engine.asadap.com *.engine.nictelroalps.com *.engine.liondigitalserving.com *.engine.addroplet.com *.beritapria.com cdnjs.cloudflare.com *.clickcease.com *.sentry-cdn.com *.criteo.net *.criteo.com https://snpa.licdn.com linkconnector.com *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com *.licdn.com *.liadm.com *.clarity.ms *.adcell.com *.lfeeder.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;style-src 'self' 'unsafe-inline' *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.a.disquscdn.com *.disqus.com *.googleapis.com *.fonts.gstatic.com *.referrer.disqus.com *.google.com *.google.com.ua *.addtocalendar.com *.surveygizmo.com *.cdn.onesignal.com *.onesignal.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com *.googletagmanager.com;font-src 'self' data: *.doubleclick.net *.mackeeper.com *.twimg.com *.twitter.com fonts.googleapis.com fonts.gstatic.com *.surveygizmo.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;object-src *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.pagead2.googlesyndication.com *.liadm.com static-cdn.mackeeper.com;connect-src 'self' *.mackeeper.com *.hotjar.com ws://*.hotjar.com wss://*.hotjar.com *.g.doubleclick.net *.lcidc.liadm.com *.google-analytics.com *.api.ipify.org *.mc.yandex.ru mc.yandex.ru *.data.ad-score.com *.baidu.com *.pushdata.onesignal.com:* *.onesignal.com *.taboola.com *.hotjar.io *.clickcease.com s.yimg.com *.facebook.com *.google.com bat.bing.com sentry.cloudmccloud.com *.liadm.com *.macupdate.com https://api.account.mackeeper.com https://api.account.sz.mackeeper.com https://api-ne.mackeeper.com *.adcell.com *.clarity.ms *.lfeeder.com *.static-cdn.mackeeper.com https://crm.account.mackeeper.com https://chat-crm.account.mackeeper.com static-cdn.mackeeper.com https://cdn.linkedin.oribi.io/
set-cookie: XSRF-TOKEN=eyJpdiI6ImVLZ0ljY3hnSXhTWFRzeW1ieVN0dmc9PSIsInZhbHVlIjoiT0hlRnFYVnRSem1nQ3VxQWhpOWtPM2J6Q3ByeUc3bHBXXC9jRDBhbUpVdThtZ3RWQVVUU2w1YWRrUHo1Y2JuMlZ1aUZpZDZ5S09lTjZmOXhrOXlXUVBMa0x3ZkRUOXNKK0tVeklsbnFSaTZqbllEc0RsZ0FRQlRsS1orZGZHN2c3IiwibWFjIjoiY2M5OTEzNGQzNmFiYmY3MDJlMTE1YjZiMmQ1MDVlYTM2NWQ4YWYxYjQyNDg3ZTkzYjJkMDA2Y2JkOGU2YTY3YyJ9; expires=Tue, 15-Nov-2022 01:09:41 GMT; Max-Age=7200; path=/; secure; samesite=lax
mackeeper_session=eyJpdiI6InZiaWFoVTA0cTZ6N2ZZOUdiYnFTQWc9PSIsInZhbHVlIjoiMmQ3bTljbFdVaUZKdHo3ZjRvbElOSUxldmExc0krWEdvMHNoNzF3ZWNPemphYXBiVWloSFlGMGZ6RkNGeUJYOEYzTUZlYkg4VDAyXC9JRFZcL3d0MTZvaFBkZndxdE9Wb0V5TjY2SHhMSmdpZ3dGcEtnYkpPcUhXNXg2RlJsVmdYVCIsIm1hYyI6ImFiOTRlOWFhNzcxZjZkNzk1MTY1YjRhMGFlMWUxYWE0YzM2N2ZkZTdlMjI1M2ZmNzYyZmI2YTUxYjZlYTdhZjYifQ%3D%3D; expires=Tue, 15-Nov-2022 01:09:41 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax
get_params_landings=%7B%22rtkcid%22%3A%226372caa69010d6000141d977%22%2C%22rtkcmpid%22%3A%22627bbd1835981a0001d4d8d8%22%2C%22tid%22%3A%22Affiliate%20-%20Hybrid%20%28225%29%22%2C%22utm_source%22%3A%22%22%2C%22utm_medium%22%3A%22%22%2C%22pubid%22%3A%22%22%7D; expires=Tue, 15-Nov-2022 23:09:41 GMT; Max-Age=86400; path=/; domain=.mackeeper.com; secure; samesite=lax
globalAffid=mc-6372caa67dc5fdeb0ae7d5ef; expires=Sat, 13-May-2023 23:09:41 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax
country=NO; expires=Sat, 13-May-2023 23:09:41 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 5d14237f32a2d2051b7009b4d905ebe2
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1668467382866&cv=11&fst=1668467382866&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=319933180.1668467383&rfmt=3&fmt=4
142.250.74.34200 OK 968 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1668467382866&cv=11&fst=1668467382866&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=319933180.1668467383&rfmt=3&fmt=4
IP 142.250.74.34:0
File type ASCII text, with very long lines (2119), with no line terminators
Hash 0decf10460fbbbb97ee29d341efb9b48
2a9b6ff2b2c759b3767068ec4f605d176255b364
eab7e20d4632718c21531c71f38fdbae02903f082dd4f7e0e28261b8e193c5e7
GET /pagead/viewthroughconversion/1010020041/?random=1668467382866&cv=11&fst=1668467382866&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&auid=319933180.1668467383&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 14 Nov 2022 23:09:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 968
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 14-Nov-2022 23:24:43 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/privacy-three.svg
54.230.111.32200 OK 13 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/privacy-three.svg
IP 54.230.111.32:0
Hash 8700ec4c5bb1cbbbe9d3f24338519c07
e39866a14952375a338164314648b2feb184876a
a90d4037939b66b0069db415a3e5097ae63a1d97f6e07f4a8dd90e3c770ced17
GET /mk-land/dist/svg/landings/225/privacy-three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:03 GMT
x-amz-version-id: PWoPwjhbTptOw5hq_kbiYuHCVesNdiKa
server: AmazonS3
content-encoding: gzip
date: Fri, 11 Nov 2022 00:43:45 GMT
cache-control: public, max-age=604800
etag: W/"c8f8481e4694470f0b9d13007ae87187"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uNXrGrp27hsccInze0mt5HpEZ4VEnk61JyjWt3xCa39WG4BEbTZNQQ==
age: 339958
X-Firefox-Spdy: h2
t.adcell.com/js/trad.js
185.5.82.77200 OK 22 kB IP 185.5.82.77:0
Hash d443aba4cae8677c6d2efc27aeda4ac2
b69737f4dcdd1c51ad3a8bc45213b8a7ed193d9c
dbcb8fd23cf4910d0519d8e232b0f9dadd090b85f26971af15c79d26e11791ac
GET /js/trad.js HTTP/1.1
Host: t.adcell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: myracloud
date: Mon, 14 Nov 2022 23:09:43 GMT
content-type: text/javascript
strict-transport-security: max-age=15768000
content-encoding: gzip
vary: accept-encoding
expires: Mon, 14 Nov 2022 23:22:20 GMT
cache-control: max-age=900
etag: "myra-e1707a02"
x-cdn: 1
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: WvnTXi/65OFFmVOeBd2GrAJtcvymCYG6dtokKEcyf/7Iz50QbH9hRvGmWvVvmm+78l6i3tcYwWccMhbzW90XnQ==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 2074150462
date: Mon, 14 Nov 2022 23:09:43 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1668467382870&cv=11&fst=1668467382870&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=319933180.1668467383&gcp=1&ct_cookie_present=1
142.250.74.34200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1010020041/?random=1668467382870&cv=11&fst=1668467382870&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=319933180.1668467383&gcp=1&ct_cookie_present=1
IP 142.250.74.34:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1010020041/?random=1668467382870&cv=11&fst=1668467382870&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=319933180.1668467383&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 14 Nov 2022 23:09:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 14-Nov-2022 23:24:43 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
script.hotjar.com/modules.b738078c6419b4df4360.js
54.230.111.79200 OK 68 kB URL HTTP/2 script.hotjar.com/modules.b738078c6419b4df4360.js
IP 54.230.111.79:0
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 8f0c4297c2d458710337dddf28967bf3
d08ccfbb3663051f6b4c9cb5e04b545832d77906
4ad2290f9d61995edab85f4a0ac65d3134b6cba364b18b7f3047a939f3a775d3
GET /modules.b738078c6419b4df4360.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68482
date: Fri, 11 Nov 2022 12:14:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "8f0c4297c2d458710337dddf28967bf3"
last-modified: Fri, 11 Nov 2022 12:13:35 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zdKs2vKCLRTJ-qmKPRE9Uoct56F7KBiLvVseTPmShnATINxfzB4vGA==
age: 298537
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 68a04663a52ab4272c25f5afcc09a92d
48b0722227353d06cb1dfd4480b644be6e6fc030
892ba18611f372b6bf390d3628b66efc4a721f0f2bde61ae22546a0948935b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 23:09:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-conversion/1010020041/?random=1668467382870&cv=11&fst=1668467382870&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=319933180.1668467383&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
142.250.74.164302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/1010020041/?random=1668467382870&cv=11&fst=1668467382870&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=319933180.1668467383&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP 142.250.74.164:0
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1010020041/?random=1668467382870&cv=11&fst=1668467382870&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=319933180.1668467383&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 14 Nov 2022 23:09:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1010020041/?random=1668467382870&cv=11&fst=1668467382870&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=9Uq1COfCvoMDEMndzuED&hn=www.google.com&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&value=0&bttype=purchase&auid=319933180.1668467383&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Bold.otf
54.230.111.32200 OK 57 kB URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Bold.otf
IP 54.230.111.32:0
Hash 123db1e85e5045242fb6b7b5a524924a
f19ee7f8efdbca16882e07c42b58104cfa33f273
36ff41e877428073dd6a7d19fa7473c85e102bab8cfe2aa37ba4f359a9099cf6
GET /mk-land/dist/fonts/MarkOT-Bold.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
x-amz-version-id: _SyAJ1U0XNp0EgWFZoSm7jR1ZmFIsGhh
server: AmazonS3
content-encoding: gzip
date: Tue, 08 Nov 2022 14:24:31 GMT
cache-control: public, max-age=604800
etag: W/"336e38c18c3ac1666fa496c919b08eca"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0UzgOcFXbg9givgK8QXHHqJi_HihGwJKYuAmW8WM9mQDvRYrXMJveg==
age: 549912
X-Firefox-Spdy: h2
vars.hotjar.com/box-c6ca1c87e308a39aabb76b56ba54398b.html
54.230.111.85200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-c6ca1c87e308a39aabb76b56ba54398b.html
IP 54.230.111.85:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash b6d25d1350d6a014d80689f389e76f97
a957e3d99790759f71a4d9e2fdaf819f60e8c569
fb2a1528b99d3eb4c9374642b5045efaf6e06666fdd48a55560a375449b01079
GET /box-c6ca1c87e308a39aabb76b56ba54398b.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Fri, 04 Nov 2022 12:22:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "b6d25d1350d6a014d80689f389e76f97"
last-modified: Fri, 04 Nov 2022 12:21:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mLo_v-Z78RXHwvUORuNEO0G34YvN3SJux1-EJKzQMIZg3W8UDRNDsw==
age: 902858
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1212352/tfa.js
151.101.85.44200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1212352/tfa.js
IP 151.101.85.44:0
File type ASCII text, with very long lines (58512)
Hash 09d21a068645deaaa04afdc7dc73f50f
6c34fcc4f20c2fb59fb897a36891496c1f314ee3
6eee5e50d906758205f8a8de201f069a5bdbeca7a40c28b0599d410c83e1f742
GET /libtrc/unip/1212352/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: uEymQKkE9HTUysnfRlmNwssDzTSJv7Jm7kGZY/KIsgeSWogRM21F7+O6HuAd5LkvlRCRGQ73gC0=
x-amz-request-id: AV3ZW9KS3NPNSGQD
x-amz-replication-status: COMPLETED
last-modified: Sun, 13 Nov 2022 11:10:14 GMT
etag: "0db83bc77f1c4426a22bced5e5cd106b"
x-amz-version-id: lYBbwAx1E.JTgOsJ71PcwObRsfjkL7Wa
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Mon, 14 Nov 2022 23:09:44 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1668467384.870048,VS0,VE131
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 55
content-length: 17953
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0f51a4efc7b43562164a21fac2f92dc3
ddeb9f8256d698f43e662029986c9032da79db9f
c60ba648b021d2c754eba4a6ace4758bb5a2c2b651586a6952128d0ad78045b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2245
Cache-Control: max-age=108276
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 23:09:44 GMT
Etag: "6371c5e7-1d7"
Expires: Wed, 16 Nov 2022 05:14:20 GMT
Last-Modified: Mon, 14 Nov 2022 04:36:55 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
54.230.111.42200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
IP 54.230.111.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/3865705/domain/app2.mackeeperaff.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://app2.mackeeperaff.com/
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Mon, 14 Nov 2022 04:45:29 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1FKNzJBC3u9LYQ93JR9kiuDWZGrxFiRz36LJKYElIIOfFUUbvjw6qw==
age: 66255
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=358699253.1668467383>m=2oeb90&aip=1&z=1628212227
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=358699253.1668467383>m=2oeb90&aip=1&z=1628212227
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=358699253.1668467383>m=2oeb90&aip=1&z=1628212227 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 14 Nov 2022 23:09:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10013499.json
188.125.94.204200 OK 2 B URL HTTP/2 s.yimg.com/wi/config/10013499.json
IP 188.125.94.204:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10013499.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 91S1B581XQHQBGK4
x-amz-id-2: rWnX9P8ZYmAFcu0seEm9YCUmryfOHnXoU8mEYmauYz3/BDhe4eTQh/gGlmkabzaORIt96zDw+Es=
content-type: application/json
date: Mon, 14 Nov 2022 22:34:32 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 2112
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash 96c9e6a333b1f0fddf32f24e7b965151
647fee1eb0d6839e30115edebe8d0840e6152cdb
a2ac4ddc863a9d641d91d504db389e0116cf1699322d2391f17d5785bf5bc538
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 23:09:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
54.230.111.42200 OK 533 B URL HTTP/2 cdn.linkedin.oribi.io/partner/3865705/domain/app2.mackeeperaff.com/token
IP 54.230.111.42:0
Hash 44f5ed4acb84824fcb40629c4b6d0199
f8394332d39153bda96eafb72ec9cfd960b6777c
d1b5f9b43a58fb6b7e0726b8e6ff73c60e36aac0e40854992c6a0547fec8dacf
GET /partner/3865705/domain/app2.mackeeperaff.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Mon, 14 Nov 2022 22:34:32 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Kl1g_VHBW92o9YQ4sWkvFtm8G2qCTtSsRyvrjl9eOU7DavwxFgedTg==
age: 2112
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1010020041/?random=1668467382866&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=4010101951&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1010020041/?random=1668467382866&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=4010101951&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1010020041/?random=1668467382866&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=4010101951&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 14 Nov 2022 23:09:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/983482265/?random=1668467382864&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2505879170&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/983482265/?random=1668467382864&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2505879170&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/983482265/?random=1668467382864&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2505879170&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 14 Nov 2022 23:09:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/957119846/?random=1668467382867&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2463601414&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/957119846/?random=1668467382867&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2463601414&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/957119846/?random=1668467382867&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2463601414&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 14 Nov 2022 23:09:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
188.125.94.204200 OK 6.0 kB IP 188.125.94.204:0
Hash 85391bfbe0eedab3790684c20d31304d
062865d2a71a4f3fc8257395dceb6d6e086db0e4
ec542fe46c47c27de66b5c63613347222f7dd9cd1b9083b55ac36b7a1df34a6a
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4HIWQIHnQbz0Ruo8UuQFE+Fdnpg/jxsw5eIjKvvrlmIZZJhd7y+UFYK9FE9+DIKBJ2FPwAM+/+8=
x-amz-request-id: EHA0S8WPBV9RCHDW
date: Mon, 14 Nov 2022 23:08:00 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 104
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/1010020041/?random=1668467382866&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=4010101951&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/1010020041/?random=1668467382866&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=4010101951&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1010020041/?random=1668467382866&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=4010101951&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 14 Nov 2022 23:09:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/854379023/?random=1668467382862&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=3273591573&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/854379023/?random=1668467382862&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=3273591573&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/854379023/?random=1668467382862&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=3273591573&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 14 Nov 2022 23:09:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/957119846/?random=1668467382867&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2463601414&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/957119846/?random=1668467382867&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2463601414&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/957119846/?random=1668467382867&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=2463601414&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 14 Nov 2022 23:09:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/854379023/?random=1668467382862&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=3273591573&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/854379023/?random=1668467382862&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=3273591573&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/854379023/?random=1668467382862&cv=11&fst=1668466800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&tiba=MacKeeper&fmt=3&is_vtc=1&random=3273591573&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 14 Nov 2022 23:09:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=36002432&Ver=2&mid=67ca4348-57a2-4aa7-b85c-3769cf2c2d72&sid=6cedeb10647111ed889b0515404154a4&vid=6cee11f0647111ed8dd4bb8490c2aa04&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=878366
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=36002432&Ver=2&mid=67ca4348-57a2-4aa7-b85c-3769cf2c2d72&sid=6cedeb10647111ed889b0515404154a4&vid=6cee11f0647111ed8dd4bb8490c2aa04&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=878366
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=36002432&Ver=2&mid=67ca4348-57a2-4aa7-b85c-3769cf2c2d72&sid=6cedeb10647111ed889b0515404154a4&vid=6cee11f0647111ed8dd4bb8490c2aa04&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=878366 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=155B184D9038661D17D80A1191CD6717; domain=.bing.com; expires=Sat, 09-Dec-2023 23:09:44 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A575C711520641BF82443C7488D3974D Ref B: OSL30EDGE0122 Ref C: 2022-11-14T23:09:44Z
date: Mon, 14 Nov 2022 23:09:44 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=36002432&Ver=2&mid=67ca4348-57a2-4aa7-b85c-3769cf2c2d72&sid=6cedeb10647111ed889b0515404154a4&vid=6cee11f0647111ed8dd4bb8490c2aa04&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&r=<=2666&evt=pageLoad&sv=1&rn=258030
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=36002432&Ver=2&mid=67ca4348-57a2-4aa7-b85c-3769cf2c2d72&sid=6cedeb10647111ed889b0515404154a4&vid=6cee11f0647111ed8dd4bb8490c2aa04&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&r=<=2666&evt=pageLoad&sv=1&rn=258030
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=36002432&Ver=2&mid=67ca4348-57a2-4aa7-b85c-3769cf2c2d72&sid=6cedeb10647111ed889b0515404154a4&vid=6cee11f0647111ed8dd4bb8490c2aa04&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&r=<=2666&evt=pageLoad&sv=1&rn=258030 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=355E9C1D7CDB6E5E1E0C8E417D2E6F0F; domain=.bing.com; expires=Sat, 09-Dec-2023 23:09:44 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 10090FA191324B0CB981CEB71F101879 Ref B: OSL30EDGE0122 Ref C: 2022-11-14T23:09:44Z
date: Mon, 14 Nov 2022 23:09:44 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/36002432.js
204.79.197.200200 OK 1.4 kB URL HTTP/2 bat.bing.com/p/action/36002432.js
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash af03844de699f6e7e0ed552f725a22df
10eae56beeacb28641d52a664eccaf4818bad5fe
472f9e0968b39c41aa022478f9d20e01e5131d6bd50451676cefad81427420ac
GET /p/action/36002432.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 1423
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=0C137D8F651F6ED521EA6FD364EA6FA8; domain=.bing.com; expires=Sat, 09-Dec-2023 23:09:44 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5E92411F54234179BF0C1D8FAE037D7D Ref B: OSL30EDGE0122 Ref C: 2022-11-14T23:09:44Z
date: Mon, 14 Nov 2022 23:09:44 GMT
X-Firefox-Spdy: h2
vc.hotjar.io/sessions/190484?s=0.25&r=0.13129215869093436
54.230.111.8204 No Content 0 B URL HTTP/2 vc.hotjar.io/sessions/190484?s=0.25&r=0.13129215869093436
IP 54.230.111.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sessions/190484?s=0.25&r=0.13129215869093436 HTTP/1.1
Host: vc.hotjar.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-store
date: Mon, 14 Nov 2022 23:09:44 GMT
server: Python/3.7 aiohttp/3.5.4
x-cache: Miss from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xxwbt9F0v82ltl4MWcW9JTwUrJHXySAyNTQv_NFeo67yh8joGs9ThQ==
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2014%20Nov%202022%2023%3A09%3A44%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&enc=UTF-8&yv=1.13.0&tagmgr=gtm
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2014%20Nov%202022%2023%3A09%3A44%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Mon%2C%2014%20Nov%202022%2023%3A09%3A44%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 14 Nov 2022 23:09:44 GMT
expires: Mon, 14 Nov 2022 23:09:44 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBLjKcmMCEM-XiYB3PriXW1eThJjHgAoFEgEBAQEcdGN8YwAAAAAA_eMAAA&S=AQAAAmamua5RMObGdtDks1lQoxw; Expires=Wed, 15 Nov 2023 05:09:44 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1668467383855&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D
13.107.42.14302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1668467383855&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3865705&time=1668467383855&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1668467383855%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F225%252F%253Frtkcid%253D6372caa69010d6000141d977%2526rtkcmpid%253D627bbd1835981a0001d4d8d8%2526tid%253DAffiliate%252520-%252520Hybrid%252520%2528225%2529%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQKUkbKYtPv7egAAAYR4Z9-BQCyEMI7rRXx5awEMG9P7uf8keeq6O1_0PYK4yBylZCUB1sZ_VGA1FA; Max-Age=2592000; Expires=Wed, 14 Dec 2022 23:09:44 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQLRUeRUxa-6lgAAAYR4Z9-BbqbJdX63aZTfIY0aEnivaENKgrq7uaYpuC0XsN6BER_gnbVEFy82ZLLIJp4GBA; Max-Age=2592000; Expires=Wed, 14 Dec 2022 23:09:44 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&40af15e0-0466-4f7f-8456-f1ae9e74c70d"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 14-Nov-2023 23:09:44 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2374:u=1:x=1:i=1668467384:t=1668553784:v=2:sig=AQELZ-RFI4RGnCFePQras8qaDcntELJa"; Expires=Tue, 15 Nov 2022 23:09:44 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXtdlXA8A2Z4E+bDXwVOA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 854A17E6CF5144809A5FEA056A47B298 Ref B: OSL30EDGE0515 Ref C: 2022-11-14T23:09:44Z
date: Mon, 14 Nov 2022 23:09:43 GMT
content-length: 0
X-Firefox-Spdy: h2
trc.taboola.com/1212352/trc/3/json?tim=1668467384047&data=%7B%22id%22%3A333%2C%22ii%22%3A%22%2Fland%2F225%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668467384038%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668467384047%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A6%2C%22ssd%22%3A1%2C%22scd%22%3A21%2C%22supv%22%3Atrue%7D%7D&pubit=i
151.101.85.44200 OK 1.8 kB URL HTTP/2 trc.taboola.com/1212352/trc/3/json?tim=1668467384047&data=%7B%22id%22%3A333%2C%22ii%22%3A%22%2Fland%2F225%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668467384038%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668467384047%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A6%2C%22ssd%22%3A1%2C%22scd%22%3A21%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP 151.101.85.44:0
Hash c5d6fe16f6cbb77e2be8538e52603d0d
e22934c5077b517b42cf1c7c4ab73e88948f0d98
54698e78ce795cc15a36f00911803829440385636dd930357f30f13c816d4cf9
GET /1212352/trc/3/json?tim=1668467384047&data=%7B%22id%22%3A333%2C%22ii%22%3A%22%2Fland%2F225%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668467384038%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668467384047%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D%22%2C%22tos%22%3A6%2C%22ssd%22%3A1%2C%22scd%22%3A21%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Mon, 14 Nov 2022 23:09:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1620-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668467384.102906,VS0,VE93
vary: Accept-Encoding
x-vcl-time-ms: 93
X-Firefox-Spdy: h2
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d636f930cb447d1c244e7f4e2355dca2
a6ab1c666cdf0bbb4da50232f4b432442a231ee2
5f76a123263377828f00756bcf42652fd92d322467b2e666f7c391dd49182be8
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6577
Cache-Control: max-age=85988
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 23:09:44 GMT
Etag: "63715deb-1d7"
Expires: Tue, 15 Nov 2022 23:02:52 GMT
Last-Modified: Sun, 13 Nov 2022 21:13:15 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 272019b89f9418c4f139c074307c0ab4
a668aeeaf0f6fd356a61bbbcd0b1b18a640141ab
82ae35823298497d997c3df4a298c7e5be87c875788fc0599cd62d6da037f3f4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=151233
Date: Mon, 14 Nov 2022 23:09:44 GMT
Etag: "63725ddf-1d7"
Expires: Wed, 16 Nov 2022 17:10:17 GMT
Last-Modified: Mon, 14 Nov 2022 15:25:19 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: T4NZBKdFN9qAmD941hVi6_Fjtw_UqnJNbQ0lPnvFO5y2IopuTK5JhQ==
Age: 6298
www.dwin1.com/23738.js
54.230.111.103200 OK 9.4 kB IP 54.230.111.103:0
Hash 35b2129511ebc6a99fa0a9cda47a9f87
7ad86f6ea4681ce1b311ce66a71e628920fe7f0c
8e402f684bb57d7dffa9cf5706164344a7b76f0b6b65f3fa9b1b54eb79131dc9
GET /23738.js HTTP/1.1
Host: www.dwin1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
x-amz-replication-status: COMPLETED
last-modified: Wed, 09 Nov 2022 12:14:41 GMT
x-amz-version-id: FmQhLzqv1vUklzqskz17E8PIuhgFghPF
server: AmazonS3
content-encoding: gzip
date: Mon, 14 Nov 2022 23:09:43 GMT
cache-control: max-age=600, s-maxage=600
etag: W/"d985cf684ae6811b1869871de65abe59"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nXAZZIVWSMuOqyKngWmbcklQZH6XoLLskA8LZWk9K4nVt4icidjOHg==
age: 514
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949
64.202.112.95200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949
IP 64.202.112.95:0
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 23:09:44 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 89cf35212de1bfde3abf32424b6a083e
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&apiObjVersion=1.1&obtpVersion=2.0.4&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&optOut=false&bust=02901328777425245&referrer=
64.202.112.95200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&apiObjVersion=1.1&obtpVersion=2.0.4&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&optOut=false&bust=02901328777425245&referrer=
IP 64.202.112.95:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&apiObjVersion=1.1&obtpVersion=2.0.4&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&optOut=false&bust=02901328777425245&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 23:09:44 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: e4370b6c0bc1af9b0a5d2213b8bd7799
content-encoding: gzip
www.facebook.com/tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1668467384432&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1668467384431.577722045&it=1668467383982&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1668467384432&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1668467384431.577722045&it=1668467383982&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D&rl=&if=false&ts=1668467384432&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1668467384431.577722045&it=1668467383982&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 14 Nov 2022 23:09:44 GMT
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1668467383855%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F225%252F%253Frtkcid%253D6372caa69010d6000141d977%2526rtkcmpid%253D627bbd1835981a0001d4d8d8%2526tid%253DAffiliate%252520-%252520Hybrid%252520%2528225%2529%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
13.107.42.14302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1668467383855%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F225%252F%253Frtkcid%253D6372caa69010d6000141d977%2526rtkcmpid%253D627bbd1835981a0001d4d8d8%2526tid%253DAffiliate%252520-%252520Hybrid%252520%2528225%2529%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1668467383855%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F225%252F%253Frtkcid%253D6372caa69010d6000141d977%2526rtkcmpid%253D627bbd1835981a0001d4d8d8%2526tid%253DAffiliate%252520-%252520Hybrid%252520%2528225%2529%2526utm_source%253D%2526utm_medium%253D%2526pubid%253D%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1668467383855&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520%28225%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&2e0cf34d-c78d-4f18-8a39-6053a0da0df5"; Domain=.linkedin.com; Expires=Tue, 14-Nov-2023 23:09:44 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20221114230944ec45dae0-2ec2-4bb5-8682-f2760a7fd4e6AQFg-pK3FCRIq5VCzhYcvcolDi7Zyd2n"; Domain=.www.linkedin.com; Expires=Tue, 14-Nov-2023 23:09:44 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2Njg0NjczODQ7MjswMjGFaCeMbYcs8zBi/8/FqI1rhio76aG5strBI94PZJT7Bg==; Domain=.linkedin.com; Expires=Sat, 13 May 2023 23:09:44 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2374:u=1:x=1:i=1668467384:t=1668553784:v=2:sig=AQELZ-RFI4RGnCFePQras8qaDcntELJa"; Expires=Tue, 15 Nov 2022 23:09:44 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXtdlXEUN/tjvbkVs1O7A==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 812F267922694FBC9354B170AC1F54CB Ref B: OSL30EDGE0515 Ref C: 2022-11-14T23:09:44Z
date: Mon, 14 Nov 2022 23:09:43 GMT
content-length: 0
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.43/clarity.js
13.107.213.53200 OK 55 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.43/clarity.js
IP 13.107.213.53:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (55029)
Hash 441723b72633b1ac9757ad7c63168005
806166ca9ebb5839dd90a5e5c9335e3e0b18c169
cc8a16ce849d72f106bd67187e4b60c20da3093375202bf0b53f23e8f40a8b11
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 55116
content-type: application/javascript;charset=utf-8
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8eec314a76b4c"
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 0uMpyYwAAAAAXD5nMt6RuSpzZsFbXwawNU1ZHMjBFREdFMDYxMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Mon, 14 Nov 2022 23:09:44 GMT
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
20.234.93.27302 Found 0 B IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=687BD7B1DF2C4F37BB744A4D6C1DE638&RedC=c.clarity.ms&MXFR=3F4AEECDF6636470024FFC91F2636A43
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=3F4AEECDF6636470024FFC91F2636A43; domain=.clarity.ms; expires=Sat, 09-Dec-2023 23:09:44 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Mon, 14 Nov 2022 23:09:44 GMT
content-length: 0
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=687BD7B1DF2C4F37BB744A4D6C1DE638&RedC=c.clarity.ms&MXFR=3F4AEECDF6636470024FFC91F2636A43
204.79.197.200302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=687BD7B1DF2C4F37BB744A4D6C1DE638&RedC=c.clarity.ms&MXFR=3F4AEECDF6636470024FFC91F2636A43
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=687BD7B1DF2C4F37BB744A4D6C1DE638&RedC=c.clarity.ms&MXFR=3F4AEECDF6636470024FFC91F2636A43 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=687BD7B1DF2C4F37BB744A4D6C1DE638&MUID=05B0F1BA314A6A301195E3E630BF6B23
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=05B0F1BA314A6A301195E3E630BF6B23; domain=c.bing.com; expires=Sat, 09-Dec-2023 23:09:44 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3B4B8A99D58147A294A941287AE8E451 Ref B: OSL30EDGE0122 Ref C: 2022-11-14T23:09:44Z
date: Mon, 14 Nov 2022 23:09:44 GMT
content-length: 0
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1668467383855&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520%28225%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
13.107.42.14200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3865705&time=1668467383855&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520%28225%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3865705&time=1668467383855&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520%28225%29%26utm_source%3D%26utm_medium%3D%26pubid%3D&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&3048dda7-cc83-4bff-8adb-03d4c43fbfd9"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 14-Nov-2023 23:09:44 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2374:u=1:x=1:i=1668467384:t=1668553784:v=2:sig=AQELZ-RFI4RGnCFePQras8qaDcntELJa"; Expires=Tue, 15 Nov 2022 23:09:44 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXtdlXHfhSX6AjpB7dpqw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 16950A5359A540339F525290DC380DE6 Ref B: OSL30EDGE0515 Ref C: 2022-11-14T23:09:44Z
date: Mon, 14 Nov 2022 23:09:44 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=687BD7B1DF2C4F37BB744A4D6C1DE638&MUID=05B0F1BA314A6A301195E3E630BF6B23
20.234.93.27200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=687BD7B1DF2C4F37BB744A4D6C1DE638&MUID=05B0F1BA314A6A301195E3E630BF6B23
IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=687BD7B1DF2C4F37BB744A4D6C1DE638&MUID=05B0F1BA314A6A301195E3E630BF6B23 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Mon, 14-Nov-2022 23:19:44 GMT; path=/; SameSite=None; Secure;
date: Mon, 14 Nov 2022 23:09:44 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
20.75.32.255204 No Content 0 B IP 20.75.32.255:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 31924
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
date: Mon, 14 Nov 2022 23:09:44 GMT
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=1561&scd=21&ssd=1&est=1668467384039&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668467385602&vi=1668467384038&ri=7f9f4520e09368da22c027c0945c0e52&ref=null&cv=20221113-4-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=1561&scd=21&ssd=1&est=1668467384039&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668467385602&vi=1668467384038&ri=7f9f4520e09368da22c027c0945c0e52&ref=null&cv=20221113-4-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=1561&scd=21&ssd=1&est=1668467384039&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668467385602&vi=1668467384038&ri=7f9f4520e09368da22c027c0945c0e52&ref=null&cv=20221113-4-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Mon, 14 Nov 2022 23:09:45 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=4564&scd=21&ssd=1&est=1668467384039&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668467388605&vi=1668467384038&ri=7f9f4520e09368da22c027c0945c0e52&ref=null&cv=20221113-4-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1212352/log/3/unip?en=pre_d_eng_tb&tos=4564&scd=21&ssd=1&est=1668467384039&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668467388605&vi=1668467384038&ri=7f9f4520e09368da22c027c0945c0e52&ref=null&cv=20221113-4-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=4564&scd=21&ssd=1&est=1668467384039&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668467388605&vi=1668467384038&ri=7f9f4520e09368da22c027c0945c0e52&ref=null&cv=20221113-4-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F225%2F%3Frtkcid%3D6372caa69010d6000141d977%26rtkcmpid%3D627bbd1835981a0001d4d8d8%26tid%3DAffiliate%2520-%2520Hybrid%2520(225)%26utm_source%3D%26utm_medium%3D%26pubid%3D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Mon, 14 Nov 2022 23:09:48 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefdb26c1-8eff-4c41-9245-7fc53604cb29.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefdb26c1-8eff-4c41-9245-7fc53604cb29.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 08bd66bbd19e46a42ef8acb8bce6388d
b4b7e3421eb3f1c434c65cb468ec46ba1ff54afa
b7dc233e1415accc4e2eab0784255f250bb188e381721f76d4ced3eaf86d0184
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefdb26c1-8eff-4c41-9245-7fc53604cb29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6118
x-amzn-requestid: af3049d8-11b3-42d4-816f-bcdf7af4bb24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bnEi5GwVoAMFYQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6372b478-37caf4ec59319ee72aa531af;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UV3QdB_Va1exUDMMzwJGDyOKDrlMadPQLnOk1rtCjhTp1USncQFRCw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 21:50:45 GMT
age: 4744
etag: "b4b7e3421eb3f1c434c65cb468ec46ba1ff54afa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/soft_three.svg
54.230.111.32200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/soft_three.svg
IP 54.230.111.32:0
GET /mk-land/dist/svg/landings/225/soft_three.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:03 GMT
x-amz-version-id: OC8eg5jWgGpeP7bzVxClAk4oit18TnEB
server: AmazonS3
content-encoding: gzip
date: Wed, 09 Nov 2022 06:02:00 GMT
cache-control: public, max-age=604800
etag: W/"1e8437e5f03b2dcd725fcf19c843ede9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f8ElKic9hiM86zI7lFIoqKApNAzWwfNCFKF8gndjQTkt9f52eqH8rQ==
age: 493663
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Light.otf
54.230.111.32200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT-Light.otf
IP 54.230.111.32:0
GET /mk-land/dist/fonts/MarkOT-Light.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
x-amz-version-id: 0k6awkdioEQDqMMUsMLLZL0d1S0LNdte
server: AmazonS3
content-encoding: gzip
date: Wed, 09 Nov 2022 04:40:08 GMT
cache-control: public, max-age=604800
etag: W/"48dd0f49a4207634e9062def9074a038"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uf1-c-OmVntEmQDaa5MM7WEy5cmehN5rH5wnJzaNq6VIUslVACcDqg==
age: 498575
X-Firefox-Spdy: h2
app2.mackeeperaff.com/land/api/send-event
54.208.164.99200 OK 0 B URL HTTP/2 app2.mackeeperaff.com/land/api/send-event
IP 54.208.164.99:0
Analyzer Verdict Alert quad9 Sinkholed
POST /land/api/send-event HTTP/1.1
Host: app2.mackeeperaff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: HopFDPjF0Gi2fLtl6p0bdpCJJrZ9xSGjvyGf3ujE
X-XSRF-TOKEN: eyJpdiI6ImVLZ0ljY3hnSXhTWFRzeW1ieVN0dmc9PSIsInZhbHVlIjoiT0hlRnFYVnRSem1nQ3VxQWhpOWtPM2J6Q3ByeUc3bHBXXC9jRDBhbUpVdThtZ3RWQVVUU2w1YWRrUHo1Y2JuMlZ1aUZpZDZ5S09lTjZmOXhrOXlXUVBMa0x3ZkRUOXNKK0tVeklsbnFSaTZqbllEc0RsZ0FRQlRsS1orZGZHN2c3IiwibWFjIjoiY2M5OTEzNGQzNmFiYmY3MDJlMTE1YjZiMmQ1MDVlYTM2NWQ4YWYxYjQyNDg3ZTkzYjJkMDA2Y2JkOGU2YTY3YyJ9
Content-Length: 101
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/225/?rtkcid=6372caa69010d6000141d977&rtkcmpid=627bbd1835981a0001d4d8d8&tid=Affiliate%20-%20Hybrid%20(225)&utm_source=&utm_medium=&pubid=
Cookie: XSRF-TOKEN=eyJpdiI6ImVLZ0ljY3hnSXhTWFRzeW1ieVN0dmc9PSIsInZhbHVlIjoiT0hlRnFYVnRSem1nQ3VxQWhpOWtPM2J6Q3ByeUc3bHBXXC9jRDBhbUpVdThtZ3RWQVVUU2w1YWRrUHo1Y2JuMlZ1aUZpZDZ5S09lTjZmOXhrOXlXUVBMa0x3ZkRUOXNKK0tVeklsbnFSaTZqbllEc0RsZ0FRQlRsS1orZGZHN2c3IiwibWFjIjoiY2M5OTEzNGQzNmFiYmY3MDJlMTE1YjZiMmQ1MDVlYTM2NWQ4YWYxYjQyNDg3ZTkzYjJkMDA2Y2JkOGU2YTY3YyJ9; mackeeper_session=eyJpdiI6InZiaWFoVTA0cTZ6N2ZZOUdiYnFTQWc9PSIsInZhbHVlIjoiMmQ3bTljbFdVaUZKdHo3ZjRvbElOSUxldmExc0krWEdvMHNoNzF3ZWNPemphYXBiVWloSFlGMGZ6RkNGeUJYOEYzTUZlYkg4VDAyXC9JRFZcL3d0MTZvaFBkZndxdE9Wb0V5TjY2SHhMSmdpZ3dGcEtnYkpPcUhXNXg2RlJsVmdYVCIsIm1hYyI6ImFiOTRlOWFhNzcxZjZkNzk1MTY1YjRhMGFlMWUxYWE0YzM2N2ZkZTdlMjI1M2ZmNzYyZmI2YTUxYjZlYTdhZjYifQ%3D%3D; _gcl_au=1.1.319933180.1668467383
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Nov 2022 23:09:43 GMT
content-type: application/json
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 178
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 3f3f16fae6ec53f76abfbd59aa28b873
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/shopper.svg
54.230.111.32200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/shopper.svg
IP 54.230.111.32:0
GET /mk-land/dist/svg/landings/225/shopper.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:07 GMT
x-amz-version-id: fKOEyyccH3jv1UtvKiv9xzpyRS0Q0D43
server: AmazonS3
content-encoding: gzip
date: Mon, 14 Nov 2022 08:34:50 GMT
cache-control: public, max-age=604800
etag: W/"316255d136699b84962ae8e7e650fb4a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pkFNMyrRLW_QEviUzrxXdfHCeQXkUXcOoyTFKj2hSO1bRl_m4zflVw==
age: 52493
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/225/style.webp.min.css?3a6665f1aefdfa6e7708
54.230.111.32200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/225/style.webp.min.css?3a6665f1aefdfa6e7708
IP 54.230.111.32:0
GET /mk-land/dist/225/style.webp.min.css?3a6665f1aefdfa6e7708 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Aug 2022 13:12:49 GMT
x-amz-version-id: AN8xanEF4YT_30ZnWEN6rFUop6tBr4SX
server: AmazonS3
content-encoding: gzip
date: Tue, 08 Nov 2022 14:59:49 GMT
cache-control: public, max-age=604800
etag: W/"4457db8fd1db6eab9c5f3d3d1c9974f7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Kmks3ABt3dJVvK2hCeFEepUgycf-5wzDRDGr4y9ZA5eCwG0u0_IZ9Q==
age: 547794
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/190484/visit-data?sv=7
52.48.139.15200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/190484/visit-data?sv=7
IP 52.48.139.15:0
POST /api/v2/client/sites/190484/visit-data?sv=7 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 149
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 14 Nov 2022 23:09:44 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/36002432
13.107.213.53200 OK 0 B URL HTTP/2 www.clarity.ms/tag/uet/36002432
IP 13.107.213.53:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/uet/36002432 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=4ac099a84a3f4206a0ed50fa9a43dd4d.20221114.20231114; expires=Tue, 14 Nov 2023 23:09:44 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:e55edbbe-e22b-46b4-8313-9ee2a4e71d12
x-cache: CONFIG_NOCACHE
x-azure-ref: 0uMpyYwAAAABvWfSxUwkIRqmP/OApe+oAU1ZHMjBFREdFMDYxMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Mon, 14 Nov 2022 23:09:43 GMT
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/225/script.min.js?a3ba37dd5194b5466fc9
54.230.111.32200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/225/script.min.js?a3ba37dd5194b5466fc9
IP 54.230.111.32:0
GET /mk-land/dist/225/script.min.js?a3ba37dd5194b5466fc9 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 09 Nov 2022 00:31:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 01 Nov 2022 14:18:44 GMT
etag: W/"2bc0d649b6a180e0d0a6e350438b23f8"
cache-control: public, max-age=604800
x-amz-version-id: ceo3Ao.cmXdmbLKOCczfrjeba.CwsoMG
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pi2bnlpDJpAk-s_jMXq2JH1J9LqE2zw-SrD8ZQuV7DzHl-ztPkTjgQ==
age: 513495
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/soft_one.svg
54.230.111.32200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/soft_one.svg
IP 54.230.111.32:0
GET /mk-land/dist/svg/landings/225/soft_one.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 09 Nov 2022 06:37:14 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:07 GMT
etag: W/"bf6ed3f56235d31918a17604a3131f52"
cache-control: public, max-age=604800
x-amz-version-id: o6Ym8udUKvbAiqjYfNJ3_cK41O7hKn6Y
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KCLabpIp8TKdp0kOoo25FchfC_w7CibVqwm9mriRd6AxROFm6KFXbQ==
age: 491549
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/downloads.svg
54.230.111.32200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/landings/225/downloads.svg
IP 54.230.111.32:0
GET /mk-land/dist/svg/landings/225/downloads.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-amz-replication-status: COMPLETED
last-modified: Thu, 14 Apr 2022 08:45:04 GMT
x-amz-version-id: .qbW5DOthVWv1c0JYt1poeeBkSkCnGfS
server: AmazonS3
content-encoding: gzip
date: Tue, 08 Nov 2022 15:23:08 GMT
cache-control: public, max-age=604800
etag: W/"03b2302fb772ce4d148b0099da4362f0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VlQTiugzcm5aGyaIiGsLLU1GbWVjXDwbblhREquIfhnIDOot3ZNSbw==
age: 546395
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/critical/script.min.js?713042b92e8e26034ff5
54.230.111.32200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/critical/script.min.js?713042b92e8e26034ff5
IP 54.230.111.32:0
GET /mk-land/dist/critical/script.min.js?713042b92e8e26034ff5 HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: PENDING
last-modified: Tue, 01 Nov 2022 14:19:26 GMT
x-amz-version-id: mBt3HOpoZzV_BXxKf5m06Uut_dgFAc_H
server: AmazonS3
content-encoding: gzip
date: Tue, 08 Nov 2022 14:21:56 GMT
cache-control: public, max-age=604800
etag: W/"ae9c9df33a1c1fcfb8e94b7c77f9ad66"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eDHCi9TRFol89zcT6xeltNjw_Mixru5itVQase0S7FOx6SM2bLha_w==
age: 550067
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/default/script.min.js?17ab72af24a83de6eb4b
54.230.111.32200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/default/script.min.js?17ab72af24a83de6eb4b
IP 54.230.111.32:0
GET /mk-land/dist/default/script.min.js?17ab72af24a83de6eb4b HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: PENDING
last-modified: Tue, 01 Nov 2022 14:18:44 GMT
x-amz-version-id: MqlWLhbTvSNRNbExGkOtw0bKSdtMf3rQ
server: AmazonS3
content-encoding: gzip
date: Tue, 08 Nov 2022 14:21:56 GMT
cache-control: public, max-age=604800
etag: W/"f39243185bab35a6e62fc592e4ee5976"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: P02uFuPCEP1czv0qdgyhI07vdlkSrNguqSRCHC6H4em6p-CeaW1M0w==
age: 550067
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT.otf
54.230.111.32200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/fonts/MarkOT.otf
IP 54.230.111.32:0
GET /mk-land/dist/fonts/MarkOT.otf HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/ttf
date: Sun, 13 Nov 2022 04:25:06 GMT
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-methods: GET
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"106ae5fa4d0e51fa73ed42c3beecda5e"
cache-control: public, max-age=604800
x-amz-version-id: Eju.irxG68JYjYuEi7BGXEsqN0F4MTaA
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tniR3s43dvmP9jIvrOl_-mPcqba-koJBB-Go4KxAE_JSZ151BvYGNA==
age: 153877
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-190484.js?sv=7
54.230.111.113200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-190484.js?sv=7
IP 54.230.111.113:0
GET /c/hotjar-190484.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Mon, 14 Nov 2022 23:09:32 GMT
cache-control: max-age=60
etag: W/a76c945c9080565c10eb12252d0e02c7
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vr_aubjU4-LHYsvWQ-1PSkobwKayZaVnkZVDISganiP_PmK_QGyJEw==
age: 11
X-Firefox-Spdy: h2
static-cdn.mackeeper.com/mk-land/dist/svg/components/logo/mk-logo-ua.svg
54.230.111.32200 OK 0 B URL HTTP/2 static-cdn.mackeeper.com/mk-land/dist/svg/components/logo/mk-logo-ua.svg
IP 54.230.111.32:0
GET /mk-land/dist/svg/components/logo/mk-logo-ua.svg HTTP/1.1
Host: static-cdn.mackeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Apr 2022 14:50:37 GMT
x-amz-version-id: sx6d65Ik.60EPUJCncti20jd8v0DNMRK
server: AmazonS3
content-encoding: gzip
date: Tue, 08 Nov 2022 14:21:56 GMT
cache-control: public, max-age=604800
etag: W/"0443bcb5ae8253499f7df7f80c45fc8c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I2mpj11y-djUj-IErnZbrDN-ga2ERYnBlTGEsSTK6nkbkuS5NmvT7w==
age: 550067
X-Firefox-Spdy: h2
widget.trustpilot.com/trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20
54.230.111.27200 OK 0 B URL HTTP/2 widget.trustpilot.com/trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20
IP 54.230.111.27:0
GET /trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
cache-control: public,max-age=1800
date: Mon, 14 Nov 2022 22:59:25 GMT
etag: "7a15f265b269adcfa1a4c42b9a650c5b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b-TtAukxpBWLxMFMZNrkFCGMEC3lxGzX0Asw58SgYMma0qblCReqiQ==
age: 617
X-Firefox-Spdy: h2