Overview

URL www.wownicepop.com/00b40ae7-a33e-43a6-b626-3565e3f6a6d6
IP18.196.84.70
ASNAMAZON-02
Location Germany
Report completed2022-09-25 21:00:07 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-25 2 www.wownicepop.com/00b40ae7-a33e-43a6-b626-3565e3f6a6d6 Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (49)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS tr.lfeeder.com (1) 16332 2020-11-16 14:42:44 UTC 2022-09-25 19:28:49 UTC 143.204.55.27
mnemonic passive DNS cdn.taboola.com (1) 1040 2013-07-19 23:48:03 UTC 2022-09-25 06:26:30 UTC 151.101.85.44
mnemonic passive DNS www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-09-25 16:30:33 UTC 142.250.74.174
mnemonic passive DNS googleads.g.doubleclick.net (5) 42 2021-02-20 15:43:32 UTC 2022-09-25 18:00:33 UTC 142.250.74.2
mnemonic passive DNS c.clarity.ms (2) 803 2021-02-03 23:22:47 UTC 2022-09-25 05:11:13 UTC 20.234.93.27
mnemonic passive DNS sc.lfeeder.com (1) 17815 2020-09-08 06:51:01 UTC 2022-09-25 10:03:37 UTC 143.204.55.27
mnemonic passive DNS static-cdn.mackeeper.com (32) 346539 2021-03-07 15:04:17 UTC 2022-09-25 14:15:39 UTC 54.230.111.78
mnemonic passive DNS app2.mackeeperaff.com (3) 0 2022-06-14 08:53:06 UTC 2022-09-25 05:05:48 UTC 54.80.71.222 Unknown ranking
mnemonic passive DNS amplify.outbrain.com (1) 2255 2017-04-12 07:58:35 UTC 2022-09-25 12:01:52 UTC 23.38.201.81
mnemonic passive DNS bat.bing.com (4) 387 2014-04-08 09:23:16 UTC 2022-09-25 05:03:52 UTC 204.79.197.200
mnemonic passive DNS trc.taboola.com (1) 602 2013-07-11 10:17:31 UTC 2022-09-25 06:26:30 UTC 151.101.85.44
mnemonic passive DNS ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2022-09-25 12:15:08 UTC 93.184.220.29
mnemonic passive DNS connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2022-09-25 05:01:51 UTC 157.240.200.14
mnemonic passive DNS status.thawte.com (2) 5123 2017-11-27 12:33:51 UTC 2022-09-25 06:38:46 UTC 93.184.220.29
mnemonic passive DNS b.clarity.ms (1) 3462 2021-07-27 12:49:08 UTC 2022-09-25 13:35:44 UTC 20.75.32.255
mnemonic passive DNS ocsp.pki.goog (10) 175 2017-06-14 07:23:31 UTC 2022-09-25 04:54:16 UTC 142.250.74.3
mnemonic passive DNS www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-09-25 13:24:16 UTC 142.250.74.164
mnemonic passive DNS region1.analytics.google.com (1) 0 2022-03-17 11:26:33 UTC 2022-09-25 09:10:37 UTC 216.239.32.36 Domain (google.com) ranked at: 1
mnemonic passive DNS px.ads.linkedin.com (2) 522 2017-08-08 16:28:50 UTC 2022-09-25 13:56:32 UTC 13.107.42.14
mnemonic passive DNS static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2022-09-25 04:50:18 UTC 54.230.111.8
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-25 05:07:25 UTC 54.191.251.76
mnemonic passive DNS rdt.mackeeperaff.com (1) 0 2021-12-08 16:20:36 UTC 2022-09-25 04:54:41 UTC 85.17.54.17 Unknown ranking
mnemonic passive DNS ocsp.sca1b.amazontrust.com (2) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 54.230.245.39
mnemonic passive DNS snap.licdn.com (1) 1044 2014-10-06 08:43:45 UTC 2022-09-25 05:31:24 UTC 23.36.76.210
mnemonic passive DNS www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-09-25 07:10:10 UTC 142.250.74.3
mnemonic passive DNS stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-09-25 04:50:19 UTC 64.233.162.155
mnemonic passive DNS www.clarity.ms (2) 1404 2018-08-22 07:41:57 UTC 2022-09-25 05:11:13 UTC 13.107.213.53
mnemonic passive DNS b-code.liadm.com (1) 3597 2016-01-19 10:23:52 UTC 2022-09-25 12:01:02 UTC 143.204.55.112
mnemonic passive DNS ocsp.sectigo.com (1) 487 2018-12-17 11:31:55 UTC 2022-09-25 14:11:09 UTC 104.18.32.68
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-25 04:51:16 UTC 34.117.237.239
mnemonic passive DNS fonts.googleapis.com (2) 8877 2013-06-10 20:14:26 UTC 2022-09-25 17:41:56 UTC 142.250.74.10
mnemonic passive DNS t.adcell.com (1) 43380 2018-11-13 18:43:50 UTC 2022-09-25 18:46:17 UTC 185.5.82.77
mnemonic passive DNS script.hotjar.com (1) 887 2020-11-05 16:23:46 UTC 2022-09-25 08:25:39 UTC 143.204.55.46
mnemonic passive DNS sp.analytics.yahoo.com (1) 816 2014-01-31 20:48:24 UTC 2022-09-25 05:11:23 UTC 212.82.100.181
mnemonic passive DNS www.facebook.com (1) 99 No data No data 157.240.200.35
mnemonic passive DNS trc-events.taboola.com (2) 1779 2020-06-09 13:52:57 UTC 2022-09-25 08:03:53 UTC 141.226.228.48
mnemonic passive DNS r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-25 05:02:41 UTC 23.36.76.226
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-25 05:42:52 UTC 143.204.55.25
mnemonic passive DNS browser.sentry-cdn.com (1) 4393 2018-07-13 11:42:06 UTC 2022-09-25 13:45:56 UTC 151.101.130.217
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-25 04:50:18 UTC 142.250.74.72
mnemonic passive DNS tr.outbrain.com (2) 2017 2017-04-12 07:58:35 UTC 2022-09-25 12:01:53 UTC 64.202.112.159
mnemonic passive DNS www.wownicepop.com (1) 0 2022-05-28 08:52:51 UTC 2022-09-25 04:31:04 UTC 18.196.84.70 Unknown ranking
mnemonic passive DNS affcpatrk.com (1) 468763 2021-01-08 12:44:01 UTC 2022-09-25 05:05:49 UTC 51.255.127.45
mnemonic passive DNS widget.trustpilot.com (10) 6018 2017-09-05 07:45:53 UTC 2022-09-25 09:12:56 UTC 143.204.55.80
mnemonic passive DNS img-getpocket.cdn.mozilla.net (4) 1631 2017-09-01 03:40:57 UTC 2022-09-25 04:26:31 UTC 34.120.237.76
mnemonic passive DNS dvcasha2.ocsp-certum.com (1) 71753 2014-11-27 08:04:42 UTC 2022-09-25 04:36:23 UTC 23.36.79.17
mnemonic passive DNS vars.hotjar.com (1) 1014 2020-11-05 10:13:14 UTC 2022-09-25 16:32:46 UTC 143.204.55.118
mnemonic passive DNS s.yimg.com (2) 375 2012-05-20 22:45:00 UTC 2022-09-25 09:26:24 UTC 188.125.94.206
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-25 11:34:24 UTC 143.204.55.36


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 18.196.84.70

Date UQ / IDS / BL URL IP
2022-12-08 22:28:34 +0000
0 - 0 - 1 www.wownicepop.com/7c9002c3-dc84-4e8f-8306-64 (...) 18.196.84.70
2022-12-08 22:22:15 +0000
0 - 0 - 1 www.wownicepop.com/00333cb2-a498-4cd7-9547-59 (...) 18.196.84.70
2022-12-08 18:27:16 +0000
0 - 0 - 1 www.wownicepop.com/d8f862ed-a99f-4c76-8f78-19 (...) 18.196.84.70
2022-12-08 05:08:04 +0000
0 - 0 - 1 www.wownicepop.com/059f37d0-406e-42db-b1f3-51 (...) 18.196.84.70
2022-12-05 06:33:16 +0000
0 - 0 - 1 www.wownicepop.com/f2500dfc-65b8-45d8-9b81-50 (...) 18.196.84.70

Last 5 reports on ASN: AMAZON-02

Date UQ / IDS / BL URL IP
2022-12-09 06:35:09 +0000
0 - 0 - 20 partivers-acting.icu/8521f184-f36b-49b8-a2a0- (...) 18.193.209.105
2022-12-09 06:32:41 +0000
0 - 0 - 2 subscriber.048b.com/SubscribeClick?fuv5=rb2&d (...) 75.2.18.233
2022-12-09 06:30:07 +0000
0 - 0 - 8 kuucoiineflogdsine.godaddysites.com/ 13.248.243.5
2022-12-09 06:29:15 +0000
0 - 0 - 1 www.iqpoint.site/c/0e280fbaec21cfde?click_id= (...) 52.51.27.131
2022-12-09 06:29:16 +0000
0 - 0 - 1 suscoop-comithers.icu/cca37761-b0f0-4193-a944 (...) 18.192.108.151

Last 5 reports on domain: wownicepop.com

Date UQ / IDS / BL URL IP
2022-12-08 22:28:34 +0000
0 - 0 - 1 www.wownicepop.com/7c9002c3-dc84-4e8f-8306-64 (...) 18.196.84.70
2022-12-08 22:22:15 +0000
0 - 0 - 1 www.wownicepop.com/00333cb2-a498-4cd7-9547-59 (...) 18.196.84.70
2022-12-08 18:27:16 +0000
0 - 0 - 1 www.wownicepop.com/d8f862ed-a99f-4c76-8f78-19 (...) 18.196.84.70
2022-12-08 05:08:04 +0000
0 - 0 - 1 www.wownicepop.com/059f37d0-406e-42db-b1f3-51 (...) 18.196.84.70
2022-12-05 06:33:16 +0000
0 - 0 - 1 www.wownicepop.com/f2500dfc-65b8-45d8-9b81-50 (...) 18.196.84.70

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-09-27 21:02:31 +0000
0 - 0 - 1 www.wownicepop.com/76564c09-72ed-46b9-80ff-a5 (...) 18.196.84.70
2022-09-27 19:05:49 +0000
0 - 0 - 1 www.wownicepop.com/235dfa11-157f-458f-a725-51 (...) 18.196.84.70
2022-09-26 21:04:37 +0000
0 - 0 - 1 www.wownicepop.com/90ed9505-1e59-4fc6-b5c8-fb (...) 18.196.84.70
2022-09-26 15:05:15 +0000
0 - 0 - 1 www.wownicepop.com/90ed9505-1e59-4fc6-b5c8-fb (...) 18.196.84.70
2022-09-24 14:54:29 +0000
0 - 0 - 1 www.wownicepop.com/90ed9505-1e59-4fc6-b5c8-fb (...) 18.196.84.70


JavaScript

Executed Scripts (44)


Executed Evals (10)

#1 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 4ddd51fa56504fe5c4eaf5321c3bfe9c2f58d248208100f0b73fd2479c8be6b0

                                        (function() {
    return document.querySelector("[data-affid]").dataset.affid
})();
                                    

#2 JavaScript::Eval (size: 69, repeated: 1) - SHA256: 63b1c0ecb5b684e67c9fc03d7d624aafa39a6fabd1ffe7108f77e2e9ab11b623

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(3)[0]
})();
                                    

#3 JavaScript::Eval (size: 70, repeated: 1) - SHA256: 5024d23c0216096e391b07dd33d46152f9de7341d425070cb14410a5e5098174

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(20)[2]
})();
                                    

#4 JavaScript::Eval (size: 70, repeated: 1) - SHA256: 27e412e5d5ac610590ad792b5fa21dbc233f79c391dcdf0d02e0801eda3c9ceb

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(16)[0]
})();
                                    

#5 JavaScript::Eval (size: 69, repeated: 1) - SHA256: 8da159a87b17690597f668f259e641f30925835c139dc682dbf026f304d898fe

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(5)[1]
})();
                                    

#6 JavaScript::Eval (size: 333, repeated: 1) - SHA256: 2e916e96c5178535ec8422b931f86b24c207c5242e3b9746195797ad20c0c84b

                                        (function() {
    return function(a) {
        a.set("dimension2", a.get("clientId"));
        a.set("dimension3", google_tag_manager["GTM-PVNC4DL"].macro(15));
        a.set("dimension18", google_tag_manager["GTM-PVNC4DL"].macro(17));
        a.set("dimension19", google_tag_manager["GTM-PVNC4DL"].macro(19));
        a.set("dimension20", google_tag_manager["GTM-PVNC4DL"].macro(21))
    }
})();
                                    

#7 JavaScript::Eval (size: 89, repeated: 1) - SHA256: d5df103b3d6158b5ad05c19ce6f61d6a38c1b9c47f0ce213ac39dccf8a215f2f

                                        (function() {
    return document.querySelector("[data-tidstr]").dataset.tidstr.split(";")
})();
                                    

#8 JavaScript::Eval (size: 69, repeated: 1) - SHA256: a12eb7029f1bb54eb1b2d9bad442cb478d95f413e74f7206f5f06f3782debb35

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(7)[2]
})();
                                    

#9 JavaScript::Eval (size: 329, repeated: 1) - SHA256: 660661e9c7f0f890974bbbb23472af1bc93f90cba6c90f0ebb9dbcf9cf8355d4

                                        (function() {
    return function(a) {
        a.set("dimension2", a.get("clientId"));
        a.set("dimension3", google_tag_manager["GTM-PVNC4DL"].macro(2));
        a.set("dimension18", google_tag_manager["GTM-PVNC4DL"].macro(4));
        a.set("dimension19", google_tag_manager["GTM-PVNC4DL"].macro(6));
        a.set("dimension20", google_tag_manager["GTM-PVNC4DL"].macro(8))
    }
})();
                                    

#10 JavaScript::Eval (size: 70, repeated: 1) - SHA256: 417e6fdd6687faa89a10b60a8d97de31b9285a6aa23d79f2ed007536cd83f31d

                                        (function() {
    return google_tag_manager["GTM-PVNC4DL"].macro(18)[1]
})();
                                    

Executed Writes (0)



HTTP Transactions (127)


Request Response
                                        
                                            GET /00b40ae7-a33e-43a6-b626-3565e3f6a6d6 HTTP/1.1 
Host: www.wownicepop.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         18.196.84.70
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 25 Sep 2022 20:59:55 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://affcpatrk.com/track?id=62e25b4f4c25ad1e44d75aaa&aff_sub=wc84u6ag44ccr4aj23i8ue8c
Pragma: no-cache
Set-Cookie: 00b40ae7-a33e-43a6-b626-3565e3f6a6d6-v4=rdlmFZ9WNS9nsbNseMByYODoZEcS6qhuarCTD0X92ho; Max-Age=86400; Expires=Mon, 26-Sep-2022 20:59:55 GMT; Domain=www.wownicepop.com; Path=/; HttpOnly cc-v4=bi7cBf29GPDsMRNfNGmDhrxHz1CmsegZb5GFoKr%2Ba2yzbmZQw2d2%2B1f7PrlFjvjKLJLrdTfSxjzSDlm5QYSKSQZ%2FvOQaGmYVmQpGaVXlWir8f6iSM9a%2FfhAPPF3RUwAvjfP48%2Fhpv4TxM4Cnq0F6ow%3D%3D; Max-Age=31536000; Expires=Mon, 25-Sep-2023 20:59:55 GMT; Domain=www.wownicepop.com; Path=/; HttpOnly


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 25 Sep 2022 20:15:06 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6QueW3DMzvXkiy1w28Hmk_E8zjezfqWYeaDxj2zIZJqc4hzoYle8cQ==
Age: 2690


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6066
Expires: Sun, 25 Sep 2022 22:41:02 GMT
Date: Sun, 25 Sep 2022 20:59:56 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.25
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HWlsMVgoQCUiPtGOWhXg4DEMcegXPromwpeFFF2PVL-x7CN8kgJHAw==
age: 59082
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "801E9A831C4C14C023844D7D910C9A4F94027262C9FB1BD94A7E134DAF88D489"
Last-Modified: Fri, 23 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19062
Expires: Mon, 26 Sep 2022 02:17:38 GMT
Date: Sun, 25 Sep 2022 20:59:56 GMT
Connection: keep-alive

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 25 Sep 2022 20:59:56 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /track?id=62e25b4f4c25ad1e44d75aaa&aff_sub=wc84u6ag44ccr4aj23i8ue8c HTTP/1.1 
Host: affcpatrk.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         51.255.127.45
HTTP/2 302 Found
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Sun, 25 Sep 2022 20:59:56 GMT
content-length: 536
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, x-access-token
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
set-cookie: ToroAdvertising=j%3A%226330c14cd7153b64e4ae3209%22; Max-Age=2592000; Path=/; Expires=Tue, 25 Oct 2022 20:59:56 GMT; HttpOnly; Secure; SameSite=None
location: https://rdt.mackeeperaff.com/629a3e04d84ecc000136838b?affid=61b0a334c1e46db6ffb361cd&pubid=629a3fed4714f70001b234db&ref_id=6330c14cd7153b64e4ae3209&transaction=6330c14cd7153b64e4ae3209&utm_medium=adpartner&utm_source=affiliate
vary: Accept
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (536), with no line terminators
Size:   536
Md5:    27f70511ad6c424c2b6258b35e2e1aac
Sha1:   259920590a08b4d9afa383f34dccbfbd137bfd60
Sha256: 934da42526e9d47841c19e41df717ff34f08a1533843913d9ce770e37f078b96
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 25 Sep 2022 20:04:17 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sun, 25 Sep 2022 20:18:52 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: U2db7GSrKVIfpEJr6YrmlJ562QfcBbimCxkPd-ANvlibsHirpfSCkQ==
Age: 3339


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 20:59:56 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 22 Sep 2022 23:23:20 GMT
Expires: Thu, 29 Sep 2022 23:23:19 GMT
Etag: "2c10cd11ae20dde84e7b6fc4deb7232f8ea51f13"
Cache-Control: max-age=353602,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7506afbe8dbdb523-OSL

                                        
                                            GET /629a3e04d84ecc000136838b?affid=61b0a334c1e46db6ffb361cd&pubid=629a3fed4714f70001b234db&ref_id=6330c14cd7153b64e4ae3209&transaction=6330c14cd7153b64e4ae3209&utm_medium=adpartner&utm_source=affiliate HTTP/1.1 
Host: rdt.mackeeperaff.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         85.17.54.17
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Sun, 25 Sep 2022 20:59:56 GMT
Content-Length: 271
Connection: keep-alive
Location: https://app2.mackeeperaff.com/land/226/?rtkcid=6330c14c5b54710001eda810&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate - CPI campaign (install only) (226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Set-Cookie: redhash=NjMzMGMxNGM1YjU0NzEwMDAxZWRhODEwfDB8NjI5YTNlMDRkODRlY2MwMDAxMzY4MzhifHxkZGEwZTkzYS1kMGMxLTQxNGQtOWQ5Mi1kNzRlM2VlYzAzMzF8MTY2NDEzOTU5Ng==; Path=/; Domain=rdt.mackeeperaff.com; Expires=Mon, 25 Sep 2023 20:59:56 GMT; Secure; SameSite=None
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   271
Md5:    e20f1e0b80fb3fe96ec5179c7631d92e
Sha1:   1bb9590fe2212e28c4c0aa7ef79deb4b4fd837f2
Sha256: a90b5b529b159f638afcce851db5fb315ed2e20778b65c8dd996cfa096d33cb6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3285
Cache-Control: 'max-age=158059'
Date: Sun, 25 Sep 2022 20:59:56 GMT
Last-Modified: Sun, 25 Sep 2022 20:05:11 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 25 Sep 2022 20:59:57 GMT
Last-Modified: Sun, 25 Sep 2022 19:46:23 GMT
Server: ECS (dcb/7F3A)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Sbz9mEeWYDUUEJ6smUAj5C7U-0Nll3cVU4aPMtB1WQ81kROAJP1qkQ==
Age: 4414

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CRHf4H445UaodTKPq1nYrQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         54.191.251.76
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: H0TSODCGbgX+yl/+YuQjFbqzl2M=

                                        
                                            GET /mk-land/dist/svg/components/btn-arrow.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 412
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Feb 2021 12:38:48 GMT
etag: "2bb20d31732674b19f39721677ee98b0"
cache-control: public, max-age=604800
x-amz-version-id: nukWLapdOnZ6K4hroAQrBv4GKBUk7Zxa
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AzXf4pMxaUq3hYeihf_NImoOXGeYJi115PZhjbLo99fvXeY4mZIqYA==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (412), with no line terminators
Size:   412
Md5:    2bb20d31732674b19f39721677ee98b0
Sha1:   c009a4436fe0fd3e281dcd9f60ab0f2769f25cb5
Sha256: b5553f16ea66eab43971c73b4115bbe291b2188dc00d0c5d4f5bb21958e3dda2
                                        
                                            GET /mk-land/dist/svg/landings/226_6/per_two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 573
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: "f7c01b4f32eceacb4bf0a84f301505c6"
cache-control: public, max-age=604800
x-amz-version-id: INeeTgMqzakR5LaDcvWPGvpXq9_xSm8Q
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Bz7CoYVDu7MF84aLI57gnu_sND-UHHYn3KjY_BupuOEbsp3HaJgGkA==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (573), with no line terminators
Size:   573
Md5:    f7c01b4f32eceacb4bf0a84f301505c6
Sha1:   e69ac48a9b8f6ce19faf14bd1014c3943b967c04
Sha256: f26625626a6dd5205a1a10f6c914bdbf6441dd7075b5cff2fdc9d09ecb9f5a67
                                        
                                            GET /mk-land/dist/svg/landings/226_6/per_three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 720
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:53 GMT
etag: "6827d895741abaebbe73a96f65d28344"
cache-control: public, max-age=604800
x-amz-version-id: mvoCbEizAhsFLH5wdS2MZYQ3AAtx74.A
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6mEgMdTOCcAPmkbDl2KyNIxr51it3oqOLypcOWCu3SsDgGdM80wkVQ==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (720), with no line terminators
Size:   720
Md5:    6827d895741abaebbe73a96f65d28344
Sha1:   7b9070dbb0c59f249194f6b182b09507883a627c
Sha256: e6e9d084a55b47d2b0b35022c13168a915b215f34bc43c62fe7c35f7d78896d4
                                        
                                            GET /mk-land/dist/svg/landings/226_6/security-two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 442
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "1dc4abe3aa5d009df49fbf517f481ccc"
cache-control: public, max-age=604800
x-amz-version-id: JYyDmy0JzcCA_htBP3.Yy0AadPOSkqdB
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CCa9mQe1GiuEWCZPajOGnSJpHK9IbbABeiwMcP9FJhr1866biPGU9Q==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (442), with no line terminators
Size:   442
Md5:    1dc4abe3aa5d009df49fbf517f481ccc
Sha1:   c59310139609463fcda8759b2acb5d273cb47b2c
Sha256: 355f6e09902fa7825ed2dcab34dc5b00f874c346397cf1135dd7d04c97e17457
                                        
                                            GET /mk-land/dist/svg/landings/226_6/ant_one.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 432
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: "48ee3a2cc5a7ac742bd440d7c5497fa3"
cache-control: public, max-age=604800
x-amz-version-id: zITGxENkluD_hWywsBv_mgYkXnAZakoF
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JA0OI-sd8hu5NozbvY9HdVaQhPUT057EWVhKQ1OyNGnWn45pRWujkg==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (432), with no line terminators
Size:   432
Md5:    48ee3a2cc5a7ac742bd440d7c5497fa3
Sha1:   052e084834e87565be5632d608316d919ef4a6be
Sha256: eb72a677d24f6679bbdd7ee7c9809a575c294d7e1c458b85d2ad0d3d3f7dc9d5
                                        
                                            GET /mk-land/dist/svg/landings/226_6/privacy-two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 987
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "102a03f6293726facccabba18c0e9455"
cache-control: public, max-age=604800
x-amz-version-id: vd2P4eOW5sVryjV60xLUbORWH7nqhDKo
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EpI3W0d3b1yWU6R-7GwpheEYOwBvppLHIGbJVf8gYmSJgHbFijmJag==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (987), with no line terminators
Size:   987
Md5:    102a03f6293726facccabba18c0e9455
Sha1:   a26d09667f914080c04fd009f03f8d95850bb895
Sha256: 1d974ed4e61fc2a77bcd71ffda37e83e83cf0681d1633d5f42c00c3df2226def
                                        
                                            GET /mk-land/dist/svg/landings/226_6/prive_three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 717
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:00 GMT
etag: "a5c782d385dc0cbbd4afa608cdd1d8f3"
cache-control: public, max-age=604800
x-amz-version-id: hAo3LTGm1kioSzmqbpisk6sFB6F2ne_I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rtgjEdTOuq9QCKlJhhOAz7MDaCFHBNhat8h6WfZeYPTzul45Z6Sqgw==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (717), with no line terminators
Size:   717
Md5:    a5c782d385dc0cbbd4afa608cdd1d8f3
Sha1:   68087ac49e47e19dba31ef068f54a6c574a8bfc2
Sha256: 6a6809edb7464cf5d45ff57e705bbefcfb37048721518235e12a5fc5b4b801c4
                                        
                                            GET /mk-land/dist/svg/landings/226_6/soft_four.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 399
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:57 GMT
etag: "bc4849c8d35e6a210935e7b9fdda0196"
cache-control: public, max-age=604800
x-amz-version-id: cjT7BZtus9OxhFupiCyx1NXoECdT1Iuy
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _gS7wVf8O1IUzX4aiq1zfXB5hshgbLv1luo9YCz2plRNGR4hm1rOtw==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (399), with no line terminators
Size:   399
Md5:    bc4849c8d35e6a210935e7b9fdda0196
Sha1:   ffcc50042a4d7862847115f659b0f099c1b469bb
Sha256: 1c216829b95c0b70220cb919b5889fce57c99a687d7be02f06ded33f80527283
                                        
                                            GET /mk-land/dist/svg/landings/226_6/clean_one.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 486
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: "4ef86b2fbcdb943033b3c85e020122da"
cache-control: public, max-age=604800
x-amz-version-id: BK083fsfql.WcGuuNtT06YWzZ5Io0.yQ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9Ul8csfvY85hN9jkzKXcHio6bt7Qcu261IUP9cQYQwd-J4mf8I_oXg==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (486), with no line terminators
Size:   486
Md5:    4ef86b2fbcdb943033b3c85e020122da
Sha1:   162e093a49c83d2d01bc48c1c9d398ac57d8b92b
Sha256: 4418d84f10560dd73aef8ddb24712a06de3530a83ec5a2674788a8e3758056da
                                        
                                            GET /mk-land/dist/svg/landings/226_6/clean_three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 583
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:53 GMT
etag: "64036bea66db20718ae3285e9ca951cd"
cache-control: public, max-age=604800
x-amz-version-id: lrmZs4eSsgPFrB9nH9B.ep7npBST6sLn
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5S4X1Z0k7oX1q2fZ6QrSZVfw-l6ijI8-D5BIBSFtK4NkOPMbRAHRZA==
age: 304007
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (583), with no line terminators
Size:   583
Md5:    64036bea66db20718ae3285e9ca951cd
Sha1:   bd5eed2f6cdfd70698fa356785acb13c21768d41
Sha256: 462a1d5d1feb27660a51f000e54ac924bcca7b6d94337593dd0e741560d7da7f
                                        
                                            GET /mk-land/dist/svg/landings/226_6/clean_two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 431
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:55 GMT
etag: "f0f6b52bce4737187d5986d65c2b9a11"
cache-control: public, max-age=604800
x-amz-version-id: pwhnB7X_4WGez_7temaOOVBFmwfQ7lz1
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VGbKOB-8VszMU9Gw-RXRJ1wM1qWpS9aroPb7Zy3fgFYuRVUDnBkkYQ==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (431), with no line terminators
Size:   431
Md5:    f0f6b52bce4737187d5986d65c2b9a11
Sha1:   420adf24b61c4b96d5dc1b30eb4cbd44106ec3c2
Sha256: b02a16d65bb919592b8b0903e78661c9c6a6b6d39218ce2ca664c5b2fbccad76
                                        
                                            GET /mk-land/dist/svg/landings/226_6/per_one.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 539
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:55 GMT
etag: "97ea212e1de4543eabca9fd8ddd404de"
cache-control: public, max-age=604800
x-amz-version-id: GTHRvt.ZAHuYF0OtDGQPKnnMNAS2EieE
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FG9B1-VrAnGliIwMsWfljOKxvfLwLVoXkONmZVfIIizmM3PwYxZMUA==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (539), with no line terminators
Size:   539
Md5:    97ea212e1de4543eabca9fd8ddd404de
Sha1:   007dadc86f73968b1c388e45d8700ecf89d6a50b
Sha256: 0e99a715e4465cdb227652a88f9d4a7a18bb59a56278b447b1ded534bfea4c5c
                                        
                                            GET /mk-land/dist/svg/landings/226_6/soft_two.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 416
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:59 GMT
etag: "9cab428314b3d6d14b27b1c135719c23"
cache-control: public, max-age=604800
x-amz-version-id: 9Nz90cyOwx1KpcUWe9_.hucQaEGthL8K
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ruBLI1ggEoaEWGil9ZLOdKhTGPJzf_GC6DcFLxJK0nINbYgegzyR_w==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (416), with no line terminators
Size:   416
Md5:    9cab428314b3d6d14b27b1c135719c23
Sha1:   e02c5b85b10d649435b5930e710056f30ea2cc50
Sha256: 3a275c72443bceadd78236a8c465a5b9285433efd40cd339836380ae06c25279
                                        
                                            GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.80
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sat, 24 Sep 2022 21:03:08 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xr9OeHRwBYXPXwYAnN-f9H7P5AmPnMEbIqUxH1YhKkOJ11XrMha5pA==
age: 86211
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Size:   6124
Md5:    5add60196e5f96a414fb4b9586764e5d
Sha1:   633f471b3c2fcedeef9cad90cb5bf56f5fe55588
Sha256: 5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 25 Sep 2022 20:59:58 GMT
Last-Modified: Sun, 25 Sep 2022 20:33:44 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ndAB7EhD8cyMrq0ofuAujLQAfYkFFBsn261Ru5bnqlzSUKCV69D-yw==
Age: 1574

                                        
                                            GET /5.5.0/bundle.min.js HTTP/1.1 
Host: browser.sentry-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.130.217
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
expires: Fri, 11 Nov 2022 05:27:37 GMT
last-modified: Fri, 05 Jul 2019 11:17:04 GMT
etag: W/"39339cf627bc67e34d4c623bea4c0b4a"
x-guploader-response-body-transformations: gunzipped
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 25 Sep 2022 20:59:58 GMT
age: 27531142
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 51570
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (51441)
Size:   51570
Md5:    b1dcc6195d84cf50c3e882d3d515f848
Sha1:   06562c193663a31a3cabeaa18cffeb882084fcb6
Sha256: 8c04755395b8f232c57d062a7669c3c414658299d29c6b6f83f1f30185d94ecb
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17531
Expires: Mon, 26 Sep 2022 01:52:09 GMT
Date: Sun, 25 Sep 2022 20:59:58 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17531
Expires: Mon, 26 Sep 2022 01:52:09 GMT
Date: Sun, 25 Sep 2022 20:59:58 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17531
Expires: Mon, 26 Sep 2022 01:52:09 GMT
Date: Sun, 25 Sep 2022 20:59:58 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17531
Expires: Mon, 26 Sep 2022 01:52:09 GMT
Date: Sun, 25 Sep 2022 20:59:58 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: W6ZD1652Yn1xqZG7ehDcirlYoG8Hcsrdj11Fzfgj7zb-OiU8xHj1gw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:32 GMT
age: 84146
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Size:   12826
Md5:    b3a72e81317074689a71dac7059e4b6a
Sha1:   b6d56333d7f1ea7ddc8838d84de498ff913c5464
Sha256: e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1
                                        
                                            GET /mk-land/dist/default/script.min.js?e875e378f0512d5c05e3 HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 22 Sep 2022 08:31:08 GMT
etag: W/"20e5b8c89709de493a44a681c3b8bbac"
cache-control: public, max-age=604800
x-amz-version-id: ZlvrSdb10XSa8Zgb2bZxd.rVfMRkud_D
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CBxHr98MD3chQqIq4snkVnqH2PPU_NZtCLZlvkO9phBG-rJgOXgLog==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   35984
Md5:    145818d0cbd8bc6fb947277689fdbb49
Sha1:   510fcdec65bed478374178f3bc779d4b8d4bc5f7
Sha256: 505574de366944e74d1cc4ae1d90c1a2c07137f5b0a8bb46c6ff70fb0f23cd3c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9dee94ac-dbe6-4b7f-9dd3-c44ea2324676.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11045
x-amzn-requestid: 9684f1b7-959f-4a8e-8685-d2744493fc43
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sQvHzFIAMF-WQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2737-08b2bef617bdcb2e332774a2;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4kYYEo9zW8XnhrXNfIyjAk-OI98-PRdf7OP4GqZyH_u1vSf7NxzG_Q==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 22:02:33 GMT
age: 82645
etag: "388d4896026347ee0beccd8fa658877a1b6ebc9b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11045
Md5:    406b4c0acf367858e80b4b81b1c7c0e9
Sha1:   388d4896026347ee0beccd8fa658877a1b6ebc9b
Sha256: 80256190ac2b3b322f9fe6226820df47d680a161e56d3ec2f0f597a86afdd738
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10032
x-amzn-requestid: 521c4012-9834-4100-a7ed-30093502f1a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sPBHGYoAMFh-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e272c-77b03c321240d76a572d603a;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lAQOV9_fZ2RFvhRKMtDOeRTWJc-Jo1u-DrtJshcQuCSOUXVbNMjhaw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:57:02 GMT
age: 82976
etag: "ed04f74fbb4c77b21e2babc51a82857f5e23d169"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10032
Md5:    aa150280eb113504d61a25935c0f0127
Sha1:   ed04f74fbb4c77b21e2babc51a82857f5e23d169
Sha256: 07df17fffb391aa82efb09e30d97e88fa4dbe6df00e37bb90304f69179f4848e
                                        
                                            GET /mk-land/dist/svg/components/logo/mk-logo-ua.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Apr 2022 14:50:37 GMT
etag: W/"0443bcb5ae8253499f7df7f80c45fc8c"
cache-control: public, max-age=604800
x-amz-version-id: sx6d65Ik.60EPUJCncti20jd8v0DNMRK
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e9Hobf53Y27pj2Uep6L75Sa1TEKK2tCLvg_17CQ7ws8xBC07qRQVrA==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5569
Md5:    55afedbf6a3f1ed3fc829c080611ab2b
Sha1:   1484f5b8e93bb9b062df6c0c3eedc5d914a3567e
Sha256: 4e3ba6649c3fbdca315ee1103211967027977971326c87e6039eb625dd51de8d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1730b63d-9494-4330-acb8-7cb387a0cf08.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5305
x-amzn-requestid: df7ba218-d20c-4389-8895-affd870ad15f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y5JqKGtHoAMFcJw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632d230d-1854a5420f7091316aa4f211;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 03:07:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: JgS9UxuYxMmnN6Op-LDeWN7tpeQYRosQp5Jo4-2jf8uEMUIHa6j-SQ==
via: 1.1 44cd593d82a2d200a94217033c614c6a.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 05:04:13 GMT
age: 57345
etag: "db601663fa6ee5564eddaf8d3d84c7b04bf3871c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5305
Md5:    9773faaac4deac40b96cd0802e974f36
Sha1:   db601663fa6ee5564eddaf8d3d84c7b04bf3871c
Sha256: 40e7a573f510ff29db04b3fbfacde2ad6ecd67b4c0be30034e057654c86408a4
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 20:59:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683 HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: text/css
                                        
date: Thu, 22 Sep 2022 08:34:49 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Aug 2022 13:14:40 GMT
etag: W/"a669635cf48725953f46197678261ba4"
cache-control: public, max-age=604800
x-amz-version-id: q9vHpEkF.fC8IKJyFmJ8_ZfmwjRowPdI
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DfaR28fDdIS8pipTde9rnnm_RkHaOGyYoWVn2g_CTdPlg6JsZOpdgw==
age: 303910
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   7209
Md5:    f08ce5813e48d33b0545d9992baf1e54
Sha1:   192ee88fe7932ee018e70b83181fd0581023e546
Sha256: d87ecbcd7abae766d2451553a5f6c9c09bb851d4438c277197521fbdcad61978
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 20:59:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 20:59:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Roboto:400 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 25 Sep 2022 20:59:58 GMT
date: Sun, 25 Sep 2022 20:59:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   220159
Md5:    af8c1e2425e33fa7e5693d00bcc999e8
Sha1:   bc799e77cbd5ff00cf01d3fc6fcdd07eae63f5a4
Sha256: 04668b2e28dccfc521d7ad727a6b616eefe97392f01d0c68cf5ff0b963479a97
                                        
                                            GET /mk-land/dist/images/landings/226/memory.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 1420
date: Thu, 22 Sep 2022 08:34:51 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:58 GMT
etag: "e24e191c026b00c1d7a106572ec478ed"
cache-control: public, max-age=604800
x-amz-version-id: 1vAS8O6UcwVIOLifS.J6ICiwtfTXw2jZ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7S89mnjsyK_8BuWWl0hKJrr3-u9_ycVJg3GZnLbX8tQZRUkjM4yqTw==
age: 303908
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1420
Md5:    e24e191c026b00c1d7a106572ec478ed
Sha1:   b2929eaa3663327447ebc0a36f971fd5f41ed3bb
Sha256: dfcbf5db55a5b400ad7e7c0cbf38c1dcb6e48199f4acd751a2eb44d579b078fa
                                        
                                            GET /mk-land/dist/images/landings/226/back.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 1824
date: Thu, 22 Sep 2022 08:34:51 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:59 GMT
etag: "867c21c37d640d99114ca25d1a737ef9"
cache-control: public, max-age=604800
x-amz-version-id: Jur.ibLOiEhGsb_TBRGaIQ2gnsF.i6Re
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: euxq1UitDJu52eVDDTR_0PEdt_1wPKvxxTUvxuaxhX4m7qdnVhu7Nw==
age: 303908
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1824
Md5:    867c21c37d640d99114ca25d1a737ef9
Sha1:   3c02f083a49ccb824379b4d0b9c4a38b6456417b
Sha256: d6855d6980e680edfe756f5021f6b06e541c033fafa4f0caf78f01ca3424d09f
                                        
                                            GET /mk-land/dist/images/landings/226/virus.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 1718
date: Thu, 22 Sep 2022 08:34:51 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:59 GMT
etag: "9b099488f1b2855d4161d0f212c9c4ad"
cache-control: public, max-age=604800
x-amz-version-id: hC8o5xw8Vbs14GyNB7kKk0ruf_0ADI.y
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6XeATZ4js8DgdJA_7wTE7oDR8_D720PgysUj6mU3jT2BhWnWDn0CWg==
age: 303908
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1718
Md5:    9b099488f1b2855d4161d0f212c9c4ad
Sha1:   ed56ac97b5e0a671f523aece4ad04cf22dd4a40f
Sha256: 3fbe829b179669affe3b743bb603ff415506fc7d76072980a7900ce6ceb41431
                                        
                                            GET /mk-land/dist/images/landings/226/performance.webp HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/mk-land/dist/226/style.webp.min.css?2227295ac3c3b4aa8683
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 30230
date: Thu, 22 Sep 2022 08:34:51 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Feb 2022 13:14:58 GMT
etag: "f8a37f0c75191e262d9e00b2bbe849e0"
cache-control: public, max-age=604800
x-amz-version-id: WtImzHf7J4uGMuRdFTGvv5Gk2dF.H7tm
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZPHq0klBcMVE4B9XklsHewJj9b7aF-nbWKXVDF1VbU8jM45G6Y2aoA==
age: 303908
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   30230
Md5:    f8a37f0c75191e262d9e00b2bbe849e0
Sha1:   6f18898837773a58c4481fc4bc08cca2cdd69216
Sha256: 1f3376c88f88a4d8be5f4da476e1a2bd337779b975fb3e240e3a01023a872dba
                                        
                                            GET /gtm.js?id=GTM-PVNC4DL HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 25 Sep 2022 20:59:58 GMT
expires: Sun, 25 Sep 2022 20:59:58 GMT
cache-control: private, max-age=900
last-modified: Sun, 25 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93932
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (40316)
Size:   93932
Md5:    22df4ceb055b74914f6ec55f09d6667f
Sha1:   4bd0079f8d2334fc50c5e4951edb8cc6b541e550
Sha256: dfa5c61eaddf6cc81bbdbbd9a3149f6d5ecd3a3c1b67b2d8d118736a64201cc1
                                        
                                            GET /trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         143.204.55.80
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 2010
last-modified: Tue, 14 Jun 2022 14:06:41 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 25 Sep 2022 05:34:26 GMT
cache-control: max-age=86400
etag: "e3161b08e37f522a5cb0a89b90895f92"
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: legPsJhhdgH5DUHnh5ws5fYDxYFRySh9lbR9pMyHeilUwtnZpJU0gQ==
age: 60399
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6175)
Size:   2010
Md5:    e3161b08e37f522a5cb0a89b90895f92
Sha1:   d0e55b89a9c6de460ce9d79c419d39335c2cf260
Sha256: dc725683baecb55bd922489c910ee393b200025afdd745f5e926be78d31058d6
                                        
                                            GET /trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         143.204.55.80
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 3664
last-modified: Tue, 20 Sep 2022 08:08:24 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 25 Sep 2022 05:34:26 GMT
cache-control: max-age=86400
etag: "29e5bc4875511d91002c3fcf0bf5464d"
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: F_dwEuJTkfj_RP6_HA7UPQBGt4D3rGBCydCPY0WeLL6bFwU33wfoJg==
age: 59123
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (15081)
Size:   3664
Md5:    29e5bc4875511d91002c3fcf0bf5464d
Sha1:   6c3530ff7b521251d2b19fb03662e33b9b893f34
Sha256: 8760bfc59fd072c16fae232ec667a7fb2972e0870454f5b282806b7c60363cc3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 20:59:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /trustboxes/5419b637fa0340045cd0c936/main.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.80
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-length: 16721
last-modified: Tue, 14 Jun 2022 14:06:45 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 25 Sep 2022 03:37:14 GMT
cache-control: max-age=86400
etag: "b8ae7b77bf4e5eced7f75298e44c8e5c"
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HrmY3Qv3UvxyyJD5TNTgOgaTZnBMx_m3uMomDdoymfTCFwwkK8zwEQ==
age: 62565
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (54787)
Size:   16721
Md5:    b8ae7b77bf4e5eced7f75298e44c8e5c
Sha1:   39fbc5ebea334649054ba56d2b806fe6dfd85933
Sha256: 89144288ad9340d732c663d4eed103b9eeb3505133922cfcddf9b37616f7105a
                                        
                                            GET /trustboxes/539ad60defb9600b94d7df2c/main.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.80
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-length: 27798
last-modified: Tue, 20 Sep 2022 08:08:26 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 25 Sep 2022 03:16:08 GMT
cache-control: max-age=86400
etag: "2e323a9f3281c48f359bf3034b2b968b"
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -RJ4unujjd3jZOe-w230UKakGR8yRmIdOehBo2kkkTi88OJPCGpcXA==
age: 63866
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (64281), with no line terminators
Size:   27798
Md5:    2e323a9f3281c48f359bf3034b2b968b
Sha1:   83e1c0eba2c41c14e50cde815a85f4a9d1ca6668
Sha256: a0cb8cc6b3c4ba3a698d941fe4c5ad5bf5cea364ed4543f29691468751fcb7e4
                                        
                                            GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=4dbb14ee00006400050fa293&locale=en-US HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.80
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-length: 432
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
date: Sun, 25 Sep 2022 20:59:05 GMT
cache-control: public,max-age=1800
etag: "31eb510084c5c1525a3d2cd6151c6a90"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6u6GgIDKsPb_5kW2sWq2Av4s3fCjysm8Yklpf9WnzKWkvnC-PbBAZg==
age: 217
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (930), with no line terminators
Size:   432
Md5:    d2d286b5013e20c7a59c450574d6e624
Sha1:   6aae69f06ef88f8f4addb3a9816607be60839a5a
Sha256: 93d1a71104713eeb619007584440998a27bc91a0c414fe2036c079119362ca91
                                        
                                            GET /trustbox-data/539ad60defb9600b94d7df2c?businessUnitId=4dbb14ee00006400050fa293&locale=en-US&reviewTagValue=SelectedReview&reviewsPerPage=20 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.80
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-length: 3047
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
date: Sun, 25 Sep 2022 20:59:05 GMT
cache-control: public,max-age=1800
etag: "474f129c1d424ba72caa3b177c35eea1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tZ0MTkaumB_x71LPJU2dC9tjFE-nvRs99DW_FqcJxSc_v_kbCAQhOg==
age: 1157
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (7745), with no line terminators
Size:   3047
Md5:    d29c7883b847e2108499305b74b05757
Sha1:   f63c563616d702786d4cd24ef7e03d87d9721e8f
Sha256: baa7e59f19a8e098f2f6ed7923fa53cef8c87bd5a4d7dd211b344f574d3f3a23
                                        
                                            GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark%20%7D%7D&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.80
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Sun, 25 Sep 2022 20:59:58 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nLzZn_LI_JGNUGELF5k-BL5T9ILh5bB45H-1IhJrBmS1Itmw52kVlw==
X-Firefox-Spdy: h2

                                        
                                            GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=240px&theme=dark%20%7D%7D&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.80
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Sun, 25 Sep 2022 20:59:58 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rqDwyAtLFkQgiB2g17LmT3yE1mXpQ0PTxQRU4cZXdLNxpsEeTe2X2A==
X-Firefox-Spdy: h2

                                        
                                            GET /stats/TrustboxImpression?locale=en-US&styleHeight=500px&styleWidth=100%25&theme=light&tags=SelectedReview&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4dbb14ee00006400050fa293&widgetId=539ad60defb9600b94d7df2c HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?templateId=539ad60defb9600b94d7df2c&businessunitId=4dbb14ee00006400050fa293
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.80
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Sun, 25 Sep 2022 20:59:58 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8xUWp8joO-5SQZMPX1lqDgRU_tSjTQEoxt0KLRrVIbC4_0k3gVgdGg==
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: dvcasha2.ocsp-certum.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.79.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=508
Date: Sun, 25 Sep 2022 20:59:58 GMT
Connection: keep-alive
X-N: S


--- Additional Info ---
Magic:  data
Size:   1599
Md5:    397b43db7f0e88c43e26773eecf371b2
Sha1:   67a5f9feee567de25fb9c0ffe12860d7d5780994
Sha256: 903fdbac555b0add6f555e6cbfdbcfae6068c62277f69968875d989ceba76bcf
                                        
                                            GET /?sid=ywVkO4XWPeW7Z6Bj&data=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 HTTP/1.1 
Host: tr.lfeeder.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         143.204.55.27
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
server: CloudFront
date: Sun, 25 Sep 2022 20:59:59 GMT
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JCiHQXscQTSfu0VS7frKqwUHblL6amf_VKtriHY3pzfhW6MvhaMjDA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /js/trad.js HTTP/1.1 
Host: t.adcell.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.5.82.77
HTTP/2 200 OK
content-type: text/javascript
                                        
server: myracloud
date: Sun, 25 Sep 2022 20:59:58 GMT
strict-transport-security: max-age=15768000
content-encoding: gzip
vary: accept-encoding
expires: Sun, 25 Sep 2022 21:02:13 GMT
cache-control: max-age=900
etag: "myra-a6526961"
x-cdn: 1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (33739), with NEL line terminators
Size:   21466
Md5:    203702e78f504e36ea49162300dd7e96
Sha1:   2d347480dfbd9d4c69bcc742e205062f689e5d00
Sha256: 37ee59a07e31b6568a71dbf9a3fdf32d573bb8a43964b0e0859d3bc9a08917dc
                                        
                                            POST /land/api/send-event HTTP/1.1 
Host: app2.mackeeperaff.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: 28WYfhrQwxvImuvjJok3gV1KUqHuqj3Yhihe8Zau
X-XSRF-TOKEN: eyJpdiI6InBNU1JVUTNRQitMZjRsSEozYmR4RXc9PSIsInZhbHVlIjoidzRRNnYrd0xHUDRQME53OVVnTUw3QVAzQ2JjOG4wTTdHa2h1ZlBWbktoOEJMVXBLZnluSUpJMUN1cUZTcHdcL3c4NlduclQ3TWdPUE1FbXFXUHQrZlJ6NnlKYXVkOHptd0Zlb25vRUd6TTBMaVRKSkxQMEpndmlCa2RCSUNoSzFoIiwibWFjIjoiN2Q0YTU2ZGYxZWQwMGFlNWFmN2Y3NjdkOTM0ZjdkZjI5OGQ3NjY1Njc3OTUwMDcxZmNkMTg1MjFmYmNhMmJkMiJ9
Content-Length: 102
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/226/?rtkcid=6330c14c5b54710001eda810&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate%20-%20CPI%20campaign%20(install%20only)%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Cookie: XSRF-TOKEN=eyJpdiI6InBNU1JVUTNRQitMZjRsSEozYmR4RXc9PSIsInZhbHVlIjoidzRRNnYrd0xHUDRQME53OVVnTUw3QVAzQ2JjOG4wTTdHa2h1ZlBWbktoOEJMVXBLZnluSUpJMUN1cUZTcHdcL3c4NlduclQ3TWdPUE1FbXFXUHQrZlJ6NnlKYXVkOHptd0Zlb25vRUd6TTBMaVRKSkxQMEpndmlCa2RCSUNoSzFoIiwibWFjIjoiN2Q0YTU2ZGYxZWQwMGFlNWFmN2Y3NjdkOTM0ZjdkZjI5OGQ3NjY1Njc3OTUwMDcxZmNkMTg1MjFmYmNhMmJkMiJ9; mackeeper_session=eyJpdiI6IkljejQ1cHVoeWZGUFR2K0VPOXpVWmc9PSIsInZhbHVlIjoiRGY0MllTZkh2cDU0alRGVUNFdWpcL3FtVkRxNmhCcUFIWUo1a3VFdkhFRXF6bk81azA0Z3BRUXlKeFVvYzBIN0wzMER3WElqeTZTOUZ0b241d2JOaDFpZ2IrZHRVbGk1dm1PTkR1RTkxa1RUTHJmT2VDd0JsV21IS2ZhOW1cL3pIUyIsIm1hYyI6Ijg4ZGIxNTk1NDIzYzMyZTMzYzZjNTIzZDIyZmZjYTEzMmY3MDQ2NjVkYjI1M2EwODU5MTY3OTFmNzhlYzE0MTkifQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.80.71.222
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 25 Sep 2022 20:59:59 GMT
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 177
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 1434361323d2ff3eab2f28f7b9a55232
X-Firefox-Spdy: h2

                                        
                                            GET /mk-land/dist/images/favicon_ua.png HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 407
date: Thu, 22 Sep 2022 08:33:14 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 04 Apr 2022 09:52:27 GMT
etag: "471c1c90d41a571f14162d7a8a9c8b9c"
cache-control: public, max-age=604800
x-amz-version-id: fOjB1uVWJszrafJRMb0A4UZGtOA62i.I
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jOHKdAx4Cz54kDaY-r8X3uNWltYFJPvRqfrXi2kwiet_-Ukm9-kkNw==
age: 304006
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size:   407
Md5:    471c1c90d41a571f14162d7a8a9c8b9c
Sha1:   b08dfa2783c706945451a8f4890bdb9243936e78
Sha256: eb625a455a490292aa2a7101dd7b3235bc4c92df0f08349c6663df51b7b66c27
                                        
                                            GET /li.lms-analytics/insight.min.js HTTP/1.1 
Host: snap.licdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.210
HTTP/2 200 OK
content-type: application/x-javascript;charset=utf-8
                                        
last-modified: Fri, 12 Aug 2022 20:23:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=54940
date: Sun, 25 Sep 2022 20:59:59 GMT
content-length: 3063
x-cdn: AKAM
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7751)
Size:   3063
Md5:    57efbbeb3e1d23c82b677511c67c8b0e
Sha1:   f927ba115ef4be362694c22850ddbdd1c1b054d1
Sha256: 873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 144
Cache-Control: 'max-age=158059'
Date: Sun, 25 Sep 2022 20:59:59 GMT
Last-Modified: Sun, 25 Sep 2022 20:57:35 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 20:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /libtrc/unip/1212352/tfa.js HTTP/1.1 
Host: cdn.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
x-amz-id-2: i5NrRuUUrFp6/X4y1KM9UIqcBnwWMI+pkHYpAp6l+u9wouCL//RRJo1OP3ZTeFtrA0gEGCBgXV0=
x-amz-request-id: 2AZHWNJ93B6BWFN4
x-amz-replication-status: COMPLETED
last-modified: Sun, 25 Sep 2022 11:01:49 GMT
etag: "2eea6f94fb75859dfd7cf41872fb1acb"
x-amz-version-id: h.NJr3GHZdBj7uJ_iSOTkshL_oW855W3
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Sep 2022 20:59:59 GMT
via: 1.1 varnish
age: 53
x-served-by: cache-bma1677-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664139600.664113,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 70
content-length: 17947
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (58483)
Size:   17947
Md5:    df64218502a24d1912bcbee759560cde
Sha1:   7ce2ace05ba792fac2a66560beb655a9b08fe22a
Sha256: 3c5f554d368f938747d4a70292afa9777f3bc35909a3db5986463b3b79d7d817
                                        
                                            GET /cp/obtp.js HTTP/1.1 
Host: amplify.outbrain.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.38.201.81
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Sun, 25 Sep 2022 21:19:59 GMT
Date: Sun, 25 Sep 2022 20:59:59 GMT
Content-Length: 3249
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (8072), with no line terminators
Size:   3249
Md5:    9b19340ef7db3cbb26aa923adb8dbe6e
Sha1:   082e699bca6e80ca6c72a43f2894f4a32e785e26
Sha256: c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
                                        
                                            POST /land/api/send-event HTTP/1.1 
Host: app2.mackeeperaff.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-CSRF-TOKEN: 28WYfhrQwxvImuvjJok3gV1KUqHuqj3Yhihe8Zau
X-XSRF-TOKEN: eyJpdiI6InBNU1JVUTNRQitMZjRsSEozYmR4RXc9PSIsInZhbHVlIjoidzRRNnYrd0xHUDRQME53OVVnTUw3QVAzQ2JjOG4wTTdHa2h1ZlBWbktoOEJMVXBLZnluSUpJMUN1cUZTcHdcL3c4NlduclQ3TWdPUE1FbXFXUHQrZlJ6NnlKYXVkOHptd0Zlb25vRUd6TTBMaVRKSkxQMEpndmlCa2RCSUNoSzFoIiwibWFjIjoiN2Q0YTU2ZGYxZWQwMGFlNWFmN2Y3NjdkOTM0ZjdkZjI5OGQ3NjY1Njc3OTUwMDcxZmNkMTg1MjFmYmNhMmJkMiJ9
Content-Length: 101
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/land/226/?rtkcid=6330c14c5b54710001eda810&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate%20-%20CPI%20campaign%20(install%20only)%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db
Cookie: XSRF-TOKEN=eyJpdiI6InBNU1JVUTNRQitMZjRsSEozYmR4RXc9PSIsInZhbHVlIjoidzRRNnYrd0xHUDRQME53OVVnTUw3QVAzQ2JjOG4wTTdHa2h1ZlBWbktoOEJMVXBLZnluSUpJMUN1cUZTcHdcL3c4NlduclQ3TWdPUE1FbXFXUHQrZlJ6NnlKYXVkOHptd0Zlb25vRUd6TTBMaVRKSkxQMEpndmlCa2RCSUNoSzFoIiwibWFjIjoiN2Q0YTU2ZGYxZWQwMGFlNWFmN2Y3NjdkOTM0ZjdkZjI5OGQ3NjY1Njc3OTUwMDcxZmNkMTg1MjFmYmNhMmJkMiJ9; mackeeper_session=eyJpdiI6IkljejQ1cHVoeWZGUFR2K0VPOXpVWmc9PSIsInZhbHVlIjoiRGY0MllTZkh2cDU0alRGVUNFdWpcL3FtVkRxNmhCcUFIWUo1a3VFdkhFRXF6bk81azA0Z3BRUXlKeFVvYzBIN0wzMER3WElqeTZTOUZ0b241d2JOaDFpZ2IrZHRVbGk1dm1PTkR1RTkxa1RUTHJmT2VDd0JsV21IS2ZhOW1cL3pIUyIsIm1hYyI6Ijg4ZGIxNTk1NDIzYzMyZTMzYzZjNTIzZDIyZmZjYTEzMmY3MDQ2NjVkYjI1M2EwODU5MTY3OTFmNzhlYzE0MTkifQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.80.71.222
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 25 Sep 2022 20:59:59 GMT
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 180
x-ratelimit-remaining: 176
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 24aa710e30c0a3a760dcff99bb78e4b7
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   41613
Md5:    a808d9ca5a743b6d155de2c7295d0f37
Sha1:   59e1eae54faaccd1c2c6bc3b4a548a57e6ccbb0d
Sha256: 78f851a77e7a726304f30e04dcf3d2c3ea168c9829eabc073289673c3a09f742
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.14
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: wwJPGg0C8nS7yfIkMG2DGzWPOM3KM3cx/48qyMzSIAjYXDnoYPgd/mjPnOOnNBv5AGWifJNkr5JT6WqEZBJAQw==
content-length: 26840
x-fb-trip-id: 1679558926
date: Sun, 25 Sep 2022 20:59:59 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   26840
Md5:    e1327a02d76346c7e23d114e4e508b30
Sha1:   195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
Sha256: 331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 20:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 25 Sep 2022 20:59:59 GMT
expires: Sun, 25 Sep 2022 20:59:59 GMT
cache-control: private, max-age=3600
etag: 3080337328058561381
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15693
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1654)
Size:   15693
Md5:    890f716858b5f72587e47c5eca121cb5
Sha1:   91871a0acd9a0ab644d51036bb5ca0c3bdc5e687
Sha256: 7a3629e375468328b3fb25e1a6cc5749604f09099e8d2109f366e7e0226aee4a
                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         204.79.197.200
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: private,max-age=1800
content-length: 11376
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=17E04369831F69F301205143824868FF; domain=.bing.com; expires=Fri, 20-Oct-2023 20:59:59 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D58291B9F65A44B5BD5B283C7E35B6CD Ref B: OSL30EDGE0412 Ref C: 2022-09-25T20:59:59Z
date: Sun, 25 Sep 2022 20:59:59 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Size:   11376
Md5:    2fe1e0c50cbb86b0c379ed78416df9c5
Sha1:   3e2c958bf438bc1486502253d613527fde7fdb25
Sha256: 57ab58b1840406037c30d4031235b6a715ee6f96f2574ab1eb93c5f4d6894bcd
                                        
                                            POST /g/collect?v=2&tid=G-GYTXD89N1W&gtm=2oe9l0&_p=1311627508&_gaz=1&cid=516797146.1664139597&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664139597&sct=1&seg=0&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&dt=MacKeeper&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.analytics.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         216.239.32.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://app2.mackeeperaff.com
date: Sun, 25 Sep 2022 20:59:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /modules.01a02f6e8b126e8c8358.js HTTP/1.1 
Host: script.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.46
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 65760
date: Fri, 23 Sep 2022 10:32:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "88b47d3464ed75957aaec1d6b297a6e8"
last-modified: Fri, 23 Sep 2022 10:32:03 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VHbNNrqNtGTjPuou4Cvu1SF0HwPFzjCWJkfY4tUoMcXrzTJmH3FW8Q==
age: 210473
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (48714)
Size:   65760
Md5:    88b47d3464ed75957aaec1d6b297a6e8
Sha1:   760b0f75cc7a47bfd293e211fc950218675cdf41
Sha256: 84812290eadd6391e8c8083c3016bbb7de5a43346f873080b74052eda996392b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 144
Cache-Control: 'max-age=158059'
Date: Sun, 25 Sep 2022 20:59:59 GMT
Last-Modified: Sun, 25 Sep 2022 20:57:35 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 20:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GYTXD89N1W&cid=516797146.1664139597&gtm=2oe9l0&aip=1&z=497076605 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 20:59:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Sun, 25 Sep 2022 20:41:09 GMT
expires: Sun, 25 Sep 2022 22:41:09 GMT
cache-control: public, max-age=7200
age: 1130
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   19826
Md5:    cae538dcce82598fbe43c0bf443e62dd
Sha1:   cc68ac6be9c5e0087a0000e5735b83270ace30f5
Sha256: 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
                                        
                                            GET /box-69edcc3187336f9b0a3fbb4c73be9fe6.html HTTP/1.1 
Host: vars.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.118
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1044
date: Wed, 07 Sep 2022 09:17:07 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "f6a9ca04b0687ea3c0d98e8430c8c77b"
last-modified: Wed, 07 Sep 2022 09:16:57 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dILT0N5wmfmMfuHmF-8Ptd0YAOSE0foXNj_ZB_mWgGGjQlCDf-Lxjw==
age: 1597372
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Size:   1044
Md5:    f6a9ca04b0687ea3c0d98e8430c8c77b
Sha1:   35503b2deb23091a9a9c6c68d4020dbdf879588e
Sha256: 8e4328ecb6b395499567369e3c227231dbdaf361f43ce315934d7a2a3abbed41
                                        
                                            POST /g/collect?v=2&tid=G-GYTXD89N1W&cid=516797146.1664139597&gtm=2oe9l0&aip=1 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         64.233.162.155
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://app2.mackeeperaff.com
date: Sun, 25 Sep 2022 20:59:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 20:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 20:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wi/config/10013499.json HTTP/1.1 
Host: s.yimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         188.125.94.206
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: R3HV95N4K76XXFFE
x-amz-id-2: 2qGWk8Zs9mQ4YLrgk5bUJqxDAUTKA10K9v0fbnEcgZHRlanaAahOAkl+bh4YefvjD2TDdXk3Cic=
date: Sun, 25 Sep 2022 20:08:47 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-encoding: gzip
content-length: 22
age: 3072
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   22
Md5:    14293ad9ad0ffaf9f7a3acf1b0793b66
Sha1:   718dea6b65b9516e5e33fac53451056397deb255
Sha256: 73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
                                        
                                            GET /collect?v=2&fmt=js&pid=3865705&time=1664139598090&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.107.42.14
HTTP/2 302 Found
                                        
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3865705%26time%3D1664139598090%26url%3Dhttps%253A%252F%252Fapp2.mackeeperaff.com%252Fland%252F226%252F%253Frtkcid%253D6330c14c5b54710001eda810%2526rtkcmpid%253D629a3e04d84ecc000136838b%2526tid%253DAffiliate%252520-%252520CPI%252520campaign%252520%2528install%252520only%2529%252520%2528226%2529%2526utm_source%253Daffiliate%2526utm_medium%253Dadpartner%2526pubid%253D629a3fed4714f70001b234db%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQKqAsZKe4cZggAAAYN2cx_tB2nphaAbwkOxPHryXAYx9_7VXFwOJePm8iRN0n1-qaTg5XWw3dAxQA; Max-Age=2592000; Expires=Tue, 25 Oct 2022 20:59:59 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure AnalyticsSyncHistory=AQLnVbdTINXB9AAAAYN2cx_tku2_4GAn6FUnLc_oHubWxtSvsr_VUVbzZUEuew92XsDXmi77uYU-Lj0KmE6x_g; Max-Age=2592000; Expires=Tue, 25 Oct 2022 20:59:59 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&99863098-219e-484e-8002-ffb0e7a8ec9d"; domain=.linkedin.com; Path=/; Secure; Expires=Mon, 25-Sep-2023 20:59:59 GMT; SameSite=None lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2395:u=1:x=1:i=1664139599:t=1664225999:v=2:sig=AQEOre65fKnC4SQHvZOhm8IdDpI3woTA"; Expires=Mon, 26 Sep 2022 20:59:59 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXphrG0k3ldSnfmlFOkJw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 8464A3809ED34D199A77409D99334B03 Ref B: OSL30EDGE0320 Ref C: 2022-09-25T20:59:59Z
date: Sun, 25 Sep 2022 20:59:58 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 20:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5093
Cache-Control: 'max-age=158059'
Date: Sun, 25 Sep 2022 20:59:59 GMT
Last-Modified: Sun, 25 Sep 2022 19:35:07 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4493
Cache-Control: 'max-age=158059'
Date: Sun, 25 Sep 2022 20:59:59 GMT
Last-Modified: Sun, 25 Sep 2022 19:45:06 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /action/0?ti=36002432&Ver=2&mid=d64acd64-7e8a-423b-9819-1da6a201ba1f&sid=039eff903d1511ed92c4e7e56a507d32&vid=039ef9603d1511eda9023157b084222e&vids=0&msclkid=N&ec=pageview&gc=USD&tpp=1&ea=all_except_22019_cleaning&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=257381 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         204.79.197.200
HTTP/2 204 No Content
                                        
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0D4FB4F5F8596CDD1BD1A6DFF90E6D35; domain=.bing.com; expires=Fri, 20-Oct-2023 20:59:59 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D66490BB097C4CA6B1C197CF07A85D1E Ref B: OSL30EDGE0412 Ref C: 2022-09-25T20:59:59Z
date: Sun, 25 Sep 2022 20:59:59 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /action/0?ti=36002432&Ver=2&mid=d64acd64-7e8a-423b-9819-1da6a201ba1f&sid=039eff903d1511ed92c4e7e56a507d32&vid=039ef9603d1511eda9023157b084222e&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=MacKeeper&p=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&r=&lt=2864&evt=pageLoad&sv=1&rn=189266 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         204.79.197.200
HTTP/2 204 No Content
                                        
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1F8E552009216D5F280A470A08766C37; domain=.bing.com; expires=Fri, 20-Oct-2023 20:59:59 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D52FC52845F14C608446E51E71D9BA0C Ref B: OSL30EDGE0412 Ref C: 2022-09-25T20:59:59Z
date: Sun, 25 Sep 2022 20:59:59 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /p/action/36002432.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         204.79.197.200
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
cache-control: private,max-age=60
content-length: 667
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=1B2FDAEEC05C6A941C04C8C4C10B6B67; domain=.bing.com; expires=Fri, 20-Oct-2023 20:59:59 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 53D06FA2E7C24AA6ADADF949E48B1B98 Ref B: OSL30EDGE0412 Ref C: 2022-09-25T20:59:59Z
date: Sun, 25 Sep 2022 20:59:59 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   667
Md5:    672ebac5af26e4ba97a8f75d9de57cd7
Sha1:   0490e9d3ff05737ecd9c4c76e94b3188042d07a3
Sha256: f5bcd97cb6febd75a8b1301d55fcb555df4ee6432a559c6aca91afc325ae4b26
                                        
                                            GET /pagead/viewthroughconversion/854379023/?random=1664139598229&cv=9&fst=1664139598229&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=377285500.1664139597&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.2
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 20:59:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1155
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Sep-2022 21:14:59 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2664), with no line terminators
Size:   1155
Md5:    a408767a4da8a2e04fed95b09d8ad690
Sha1:   a6dc57fadbeed97610998c775835352b19ac2fa2
Sha256: 81268dbcf23432bbc97465b449dd1c45945839c9fc63024d9549b11b347f72e7
                                        
                                            GET /pagead/viewthroughconversion/983482265/?random=1664139598231&cv=9&fst=1664139598231&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=377285500.1664139597&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.2
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 21:00:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1155
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Sep-2022 21:15:00 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2664), with no line terminators
Size:   1155
Md5:    6a9c050a150a0a4b38acf6c56ea084df
Sha1:   21c1b651cf6353f45038d09aad6c0ef9c0aacf68
Sha256: 1ccaa3b3758c5ec640815b6ae4391fc6e77c3dadb333586756a111e9f0ec47d7
                                        
                                            GET /pagead/viewthroughconversion/957119846/?random=1664139598234&cv=9&fst=1664139598234&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=377285500.1664139597&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.2
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 21:00:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1154
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Sep-2022 21:15:00 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2660), with no line terminators
Size:   1154
Md5:    bcbbdb851a75f63b84cdf3f751e4fb15
Sha1:   94d62361e821daae572b6d81e788f037a114d22f
Sha256: 18694beb2d834b7f38ba9d11d27f114493c3272b9dabd0498d1c1aae1a6f8e36
                                        
                                            GET /pagead/viewthroughconversion/1010020041/?random=1664139598233&cv=9&fst=1664139598233&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=377285500.1664139597&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.2
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 21:00:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1156
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Sep-2022 21:15:00 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2666), with no line terminators
Size:   1156
Md5:    a410a1f98e04d87341991ba45f298209
Sha1:   3a9bab5968afeffe75151623a5e04602e09fbbe2
Sha256: 051e5ccdde71cda8a9b35c3958d6a21468d7fbc4e659f99ea5e9011209771873
                                        
                                            GET /pagead/viewthroughconversion/1010020041/?random=1664139598234&cv=9&fst=1664139598234&num=1&fmt=3&value=0&label=9Uq1COfCvoMDEMndzuED&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&tiba=MacKeeper&auid=377285500.1664139597&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.2
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 21:00:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Sep-2022 21:15:00 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /sp.pl?a=10000&d=Sun%2C%2025%20Sep%202022%2020%3A59%3A58%20GMT&n=0&b=MacKeeper&.yp=10013499&f=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1 
Host: sp.analytics.yahoo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         212.82.100.181
HTTP/2 200 OK
content-type: image/gif
                                        
date: Sun, 25 Sep 2022 21:00:00 GMT
expires: Sun, 25 Sep 2022 21:00:00 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBFDBMGMCEGucLaX-BwCTY7Xiox6nEmEFEgEBAQESMmM6YwAAAAAA_eMAAA&S=AQAAAvKVs2ZP7PBBT99P7kB_OK0; Expires=Tue, 26 Sep 2023 03:00:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    bff56ce49dd485d195fdfa0a02342568
Sha1:   74fb4071deab7d3ab083562067b735df32c43397
Sha256: 0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
                                        
                                            GET /cachedClickId?marketerId=005ba92794eafc10da81bd91da6dc1a949 HTTP/1.1 
Host: tr.outbrain.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         64.202.112.159
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 25 Sep 2022 21:00:00 GMT
Content-Length: 56
X-TraceId: f929bfe19f7ba19fa5927af41ad8774b
content-encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   56
Md5:    77fbe8ab311fa20557d95906363035ed
Sha1:   5806df80f09a37e070d5f37c49f19797c2763fd0
Sha256: 4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
                                        
                                            GET /wi/ytc.js HTTP/1.1 
Host: s.yimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         188.125.94.206
HTTP/2 200 OK
content-type: application/javascript
                                        
x-amz-id-2: NOyMyD6x/WNiHvZMlAM1sr5ExvGhdpr/3D9L8PiXUWOExOBXUkWGn3RGbKY/lAYjOF5qGAwTKx8=
x-amz-request-id: TVA4MF2C42WZWC14
date: Sun, 25 Sep 2022 20:46:28 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 812
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (16553), with no line terminators
Size:   5929
Md5:    2f6a1b8a4843f74a5ba54c055fcb3850
Sha1:   919a5f9166f3f9c73803cebd312ad016570a30d8
Sha256: 1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
                                        
                                            GET /unifiedPixel?marketerId=005ba92794eafc10da81bd91da6dc1a949&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&optOut=false&bust=02489306470790389&referrer= HTTP/1.1 
Host: tr.outbrain.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         64.202.112.159
HTTP/1.1 200 OK
Content-Type: image/gif;
                                        
Date: Sun, 25 Sep 2022 21:00:00 GMT
Content-Length: 60
Cache-Control: no-cache
X-TraceId: f3246a490c47e776ea003fda0f2c5e9e
content-encoding: gzip


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   60
Md5:    fb0fc5c090282e372b8bf8ff13ae3ee2
Sha1:   2de3834253ece606ce4d2a6f10a59654b6fa378b
Sha256: 90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
                                        
                                            GET /tr/?id=1593188040964422&ev=PageView&dl=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&rl=&if=false&ts=1664139598512&sw=1280&sh=1024&v=2.9.84&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1664139598511.2087016943&it=1664139598243&coo=false&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.35
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Sun, 25 Sep 2022 21:00:00 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /tag/uet/36002432 HTTP/1.1 
Host: www.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.107.213.53
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: no-cache, no-store
content-length: 1901
expires: -1
set-cookie: CLID=d2b5b234234740bc8ea190335c5a28f0.20220925.20230925; expires=Mon, 25 Sep 2023 21:00:00 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:9c7c879b-c51a-427e-9701-218438da5f81
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0UMEwYwAAAADbQ7aGSwLXQJTL5LaHd4USQU1TMDRFREdFMTgxNQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Sun, 25 Sep 2022 20:59:59 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1901), with no line terminators
Size:   1901
Md5:    aadf473239656ee932f239210a6617fc
Sha1:   cc0b104bc40e52ab5d31fdcd703c45e7a1928760
Sha256: 4ab0ddbef9fd966c425e01ae747539b72a675fc077525236cc792e4e375c8824
                                        
                                            GET /collect?v=2&fmt=js&pid=3865705&time=1664139598090&url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520%28install%2520only%29%2520%28226%29%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&liSync=true HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.42.14
HTTP/2 200 OK
content-type: application/javascript
                                        
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&3b2dcaec-8031-4489-8cac-208b6f529611"; domain=.linkedin.com; Path=/; Secure; Expires=Mon, 25-Sep-2023 21:00:00 GMT; SameSite=None lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2392:u=1:x=1:i=1664139600:t=1664226000:v=2:sig=AQHMS0-zzhIvxO6gyWemRXqgfeqFYA4L"; Expires=Mon, 26 Sep 2022 21:00:00 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXphrG6DZF9sSFEo24P5Q==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 2E7D45F1BBB34F34BDF71CA086768C82 Ref B: OSL30EDGE0320 Ref C: 2022-09-25T21:00:00Z
date: Sun, 25 Sep 2022 20:59:59 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /c.gif HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         20.234.93.27
HTTP/2 302 Found
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=1ACA8E96413D43DB8030511175BE8C17&RedC=c.clarity.ms&MXFR=08C54107CE3F60B1032B532DCA3F6ECB
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure; MUID=08C54107CE3F60B1032B532DCA3F6ECB; domain=.clarity.ms; expires=Fri, 20-Oct-2023 21:00:00 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Sun, 25 Sep 2022 20:59:59 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /eus2/s/0.6.41/clarity.js HTTP/1.1 
Host: www.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.213.53
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
                                        
cache-control: public,max-age=86400
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8ccdebe9ad570"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0UMEwYwAAAACXQsGkg0ZLT4YbFvq8Npk/QU1TMDRFREdFMTgxNQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Sun, 25 Sep 2022 20:59:59 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (54809)
Size:   23509
Md5:    1a7d206cf77e52160f7d49ab1c167fe5
Sha1:   08d824c483c1a2428bdc4e583d61a5ca8d1afb74
Sha256: 5404eb1ed3f4542d873f4e0610572ad480353446ea8e6f7e2bb76034cf051652
                                        
                                            GET /c.gif?CtsSyncId=1ACA8E96413D43DB8030511175BE8C17&MUID=350BB416E3066F672E4FA63CE2516EDA HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app2.mackeeperaff.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         20.234.93.27
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
last-modified: Tue, 13 Sep 2022 19:54:52 GMT
accept-ranges: bytes
etag: "8d3298b0aac7d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Sun, 25-Sep-2022 21:10:00 GMT; path=/; SameSite=None; Secure;
date: Sun, 25 Sep 2022 20:59:59 GMT
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    32023bb33cfb2a1990a4ef2d85b6ac16
Sha1:   23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
Sha256: 99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
                                        
                                            POST /collect HTTP/1.1 
Host: b.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 32235
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         20.75.32.255
HTTP/2 204 No Content
                                        
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Sun, 25 Sep 2022 21:00:00 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=1577&scd=21&ssd=1&est=1664139598135&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1664139599716&vi=1664139598133&ri=2cd9bd9e18ad25a412fd8d6871084818&ref=null&cv=20220922-16-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&ler=other HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         141.226.228.48
HTTP/2 204 No Content
                                        
server: nginx
date: Sun, 25 Sep 2022 21:00:01 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            GET /1212352/log/3/unip?en=pre_d_eng_tb&tos=4582&scd=21&ssd=1&est=1664139598135&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1664139602721&vi=1664139598133&ri=2cd9bd9e18ad25a412fd8d6871084818&ref=null&cv=20220922-16-RELEASE&item-url=https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db&ler=other HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         141.226.228.48
HTTP/2 204 No Content
                                        
server: nginx
date: Sun, 25 Sep 2022 21:00:04 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://app2.mackeeperaff.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            GET /mk-land/dist/svg/landings/226_6/appesteem.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:54 GMT
etag: W/"11483e7c23b09ca50a06de72c255ce87"
cache-control: public, max-age=604800
x-amz-version-id: lnXVyN4uq0eoJjwYvOqqHWivzHFq_g5q
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XaS9vh-xZEMvrynn-vJY38m1r_uCLyG8EP1dT4yqIxA1jJrZRfdMsw==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/svg/landings/226_6/shopper.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:12 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:01 GMT
etag: W/"316255d136699b84962ae8e7e650fb4a"
cache-control: public, max-age=604800
x-amz-version-id: xkKrHSo_G5.knecPGziG7JnbPUaCTCId
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nxgwHANAb1tBX3HvseeTP7KFEXwTT-5OqhGtCRndsFFTbaRm6i45Xg==
age: 304007
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /c/hotjar-190484.js?sv=7 HTTP/1.1 
Host: static.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.8
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Sun, 25 Sep 2022 20:59:05 GMT
cache-control: max-age=60
etag: W/3468166e8841d615a75afe1e52a783e3
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -loNxXmbO-pRmuRuk6MV1neiI477o3ah5N7weX5Q_KilKXn0NCoGcA==
age: 54
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Source+Sans+Pro:400,600 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 25 Sep 2022 20:59:58 GMT
date: Sun, 25 Sep 2022 20:59:58 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/fonts/MarkOT-Medium.otf HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: font/ttf
                                        
date: Thu, 22 Sep 2022 08:36:02 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
etag: W/"44a8a536b53be74bb2ebfc4fa3403364"
cache-control: public, max-age=604800
x-amz-version-id: adnRDSe0awZldw3c8I6M4tTQa_wDyvz_
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3k_xGu3zRGAls6Dks013wzt2Vc1LKLjg_qalgXOvzRYOnrK_PedjNg==
age: 303837
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /lftracker_v1_ywVkO4XWPeW7Z6Bj.js HTTP/1.1 
Host: sc.lfeeder.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.27
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 22 Sep 2022 06:33:15 GMT
x-amz-version-id: 4K18CaHcbTAgkQY3.Yjd_IeCmlwLplHx
server: AmazonS3
content-encoding: gzip
date: Sun, 25 Sep 2022 20:59:05 GMT
cache-control: max-age=3600
etag: W/"802feebb6f42efc6708d7100f6dc2b86"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: l5XSal800zqrTYVrc6oHnJhLFGIRTIB1x046zxGCeDvQE5C48C86Lw==
age: 1032
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /1212352/trc/3/json?tim=1664139598141&data=%7B%22id%22%3A782%2C%22ii%22%3A%22%2Fland%2F226%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1664139598133%2C%22cv%22%3A%2220220922-16-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkrometch-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1664139598141%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fapp2.mackeeperaff.com%2Fland%2F226%2F%3Frtkcid%3D6330c14c5b54710001eda810%26rtkcmpid%3D629a3e04d84ecc000136838b%26tid%3DAffiliate%2520-%2520CPI%2520campaign%2520(install%2520only)%2520(226)%26utm_source%3Daffiliate%26utm_medium%3Dadpartner%26pubid%3D629a3fed4714f70001b234db%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A21%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1 
Host: trc.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: nginx
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Sep 2022 20:59:59 GMT
via: 1.1 varnish
x-served-by: cache-bma1677-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664139600.800428,VS0,VE92
vary: Accept-Encoding
x-vcl-time-ms: 92
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/226/script.min.js?f86ab811e79d4a371d0a HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: PENDING
last-modified: Thu, 22 Sep 2022 08:32:04 GMT
etag: W/"ab2350c2a0b24c9fedb76b696ce64f7b"
cache-control: public, max-age=604800
x-amz-version-id: tN54.SAkiBI0C6u9K8K9JS2cyG6ED5nd
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jLVz_sYL_fK-r0jkVsHQdLH39GP7AqJpTmXzsRmAgLKWgBBwsErrmg==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/svg/landings/226_6/soft_three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: W/"1e8437e5f03b2dcd725fcf19c843ede9"
cache-control: public, max-age=604800
x-amz-version-id: C1G2RqiXpQdLiH1cTB.L_Ya5eHDrJ_3n
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tiyDDV8k_wSU7_CZxaCRxclUFPgVD8x3QCs6yHJntn9Mm4sjCiFBbQ==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/fonts/MarkOT.otf HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: font/ttf
                                        
date: Thu, 22 Sep 2022 08:36:02 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:11 GMT
etag: W/"106ae5fa4d0e51fa73ed42c3beecda5e"
cache-control: public, max-age=604800
x-amz-version-id: Eju.irxG68JYjYuEi7BGXEsqN0F4MTaA
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KVRkdiFwVJ6DUXPTY83U6qudIRWCTN3gRsH_a8aF4qvtaYRdmY78vg==
age: 303837
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/svg/landings/226_6/downloads.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:57 GMT
etag: W/"03b2302fb772ce4d148b0099da4362f0"
cache-control: public, max-age=604800
x-amz-version-id: qdj6r2fTLt1__Db.jrwnBLw2hzRzOTH8
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YNvY81UXvtcAqQ6QzHf0KTsSO3tsiK7CqKRIreBbxRCnoGmeyztTCg==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /land/226/?rtkcid=6330c14c5b54710001eda810&rtkcmpid=629a3e04d84ecc000136838b&tid=Affiliate%20-%20CPI%20campaign%20(install%20only)%20(226)&utm_source=affiliate&utm_medium=adpartner&pubid=629a3fed4714f70001b234db HTTP/1.1 
Host: app2.mackeeperaff.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         54.80.71.222
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Sun, 25 Sep 2022 20:59:58 GMT
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
content-security-policy: default-src 'self' *.hotjar.com *.mackeeper.com;frame-ancestors 'none';frame-src 'self' 'unsafe-inline' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com *.surveygizmo.com *.liadm.com *.typeform.com mc.yandex.ru *.js.ad-score.com *.cdn.onesignal.com *.onesignal.com *.criteo.com static-cdn.mackeeper.com;child-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com *.lporirxe.com blob: *.cdn.onesignal.com *.onesignal.com *.liadm.com static-cdn.mackeeper.com;form-action 'self' *.mackeeper.com *.facebook.com;img-src 'self' 'unsafe-inline' *.a.disquscdn.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com *.s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com data: *.2mdn.net *.pagead2.googlesyndication.com *.glotgrx.com *.lporirxe.com *.exelator.com *.owox.com *.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.yahoo.co.jp *.apimzb-adserver.cloudmccloud.com *.3lift.com *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com mc.yandex.ru cx.atdmt.com *.baidu.com *.gstatstrk.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.zoomsupport.com *.cloudmccloud.com linkconnector.com *.linkconnector.com *.linkedin.com https://p.adsymptotic.com *.clarity.ms *.lfeeder.com static-cdn.mackeeper.com *.imcounting.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.a.disquscdn.com widget.trustpilot.com *.adsage.com *.adsitrx.com *.analytics.yahoo.com *.b2c.com *.bing.com disqus.com *.disqus.com *.doubleclick.net *.facebook.com *.facebook.net *.flowplayer.org *.fqtag.com *.google.com *.google.com.ua *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.hotjar.com *.i.ytimg.com *.images.dmca.com *.intljs.rmtag.com *.linksynergy.com *.mackeeper.com *.mpnrs.com *.msn.com *.optimizely.com *.yabidos.com s.yimg.com *.secure.ace-tag.advertising.com *.secure.leadback.advertising.com *.shopperapproved.com *.tagmanager.google.com *.tribalfusion.com *.twimg.com *.twitter.com ws://*.hotjar.com wss://*.hotjar.com *.www1.mpnrs.com *.youtube.com l2.io *.inspectlet.com *.googlesyndication.com *.sagetrc.com *.glotgrx.com *.lporirxe.com b-code.liadm.com *.outbrain.com *.visualwebsiteoptimizer.com *.cloudfront.net *.yimg.jp *.addtocalendar.com *.yahoo.co.jp blob: *.surveygizmo.com *.surveygizmolibrary.s3.amazonaws.com *.s.ytimg.com *.typeform.com *.calendly.com *.linkconnector.com mc.yandex.ru *.js.ad-score.com *.baidu.com *.cdn.onesignal.com *.onesignal.com *.rtmark.net *.taboola.com *.engine.4dsply.com *.engine.spotscenered.info *.engine.3dspk.com *.we3red.com *.engine.asadap.com *.engine.nictelroalps.com *.engine.liondigitalserving.com *.engine.addroplet.com *.beritapria.com cdnjs.cloudflare.com *.clickcease.com *.sentry-cdn.com *.criteo.net *.criteo.com https://snpa.licdn.com linkconnector.com *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com *.licdn.com *.liadm.com *.clarity.ms *.adcell.com *.lfeeder.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;style-src 'self' 'unsafe-inline' *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.a.disquscdn.com *.disqus.com *.googleapis.com *.fonts.gstatic.com *.referrer.disqus.com *.google.com *.google.com.ua *.addtocalendar.com *.surveygizmo.com *.cdn.onesignal.com *.onesignal.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com *.googletagmanager.com;font-src 'self' data: *.doubleclick.net *.mackeeper.com *.twimg.com *.twitter.com fonts.googleapis.com fonts.gstatic.com *.surveygizmo.com https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com static-cdn.mackeeper.com;object-src *.doubleclick.net *.flowplayer.org *.mackeeper.com *.twimg.com *.twitter.com *.pagead2.googlesyndication.com *.liadm.com static-cdn.mackeeper.com;connect-src 'self' *.mackeeper.com *.hotjar.com ws://*.hotjar.com wss://*.hotjar.com *.g.doubleclick.net *.lcidc.liadm.com *.google-analytics.com *.api.ipify.org *.mc.yandex.ru mc.yandex.ru *.data.ad-score.com *.baidu.com *.pushdata.onesignal.com:* *.onesignal.com *.taboola.com *.hotjar.io *.clickcease.com s.yimg.com *.facebook.com *.google.com bat.bing.com sentry.cloudmccloud.com *.liadm.com *.macupdate.com https://api.account.mackeeper.com https://api.account.sz.mackeeper.com https://api-ne.mackeeper.com *.adcell.com *.clarity.ms *.lfeeder.com *.static-cdn.mackeeper.com https://crm.account.mackeeper.com https://chat-crm.account.mackeeper.com static-cdn.mackeeper.com
set-cookie: XSRF-TOKEN=eyJpdiI6InBNU1JVUTNRQitMZjRsSEozYmR4RXc9PSIsInZhbHVlIjoidzRRNnYrd0xHUDRQME53OVVnTUw3QVAzQ2JjOG4wTTdHa2h1ZlBWbktoOEJMVXBLZnluSUpJMUN1cUZTcHdcL3c4NlduclQ3TWdPUE1FbXFXUHQrZlJ6NnlKYXVkOHptd0Zlb25vRUd6TTBMaVRKSkxQMEpndmlCa2RCSUNoSzFoIiwibWFjIjoiN2Q0YTU2ZGYxZWQwMGFlNWFmN2Y3NjdkOTM0ZjdkZjI5OGQ3NjY1Njc3OTUwMDcxZmNkMTg1MjFmYmNhMmJkMiJ9; expires=Sun, 25-Sep-2022 22:59:57 GMT; Max-Age=7200; path=/; secure; samesite=lax mackeeper_session=eyJpdiI6IkljejQ1cHVoeWZGUFR2K0VPOXpVWmc9PSIsInZhbHVlIjoiRGY0MllTZkh2cDU0alRGVUNFdWpcL3FtVkRxNmhCcUFIWUo1a3VFdkhFRXF6bk81azA0Z3BRUXlKeFVvYzBIN0wzMER3WElqeTZTOUZ0b241d2JOaDFpZ2IrZHRVbGk1dm1PTkR1RTkxa1RUTHJmT2VDd0JsV21IS2ZhOW1cL3pIUyIsIm1hYyI6Ijg4ZGIxNTk1NDIzYzMyZTMzYzZjNTIzZDIyZmZjYTEzMmY3MDQ2NjVkYjI1M2EwODU5MTY3OTFmNzhlYzE0MTkifQ%3D%3D; expires=Sun, 25-Sep-2022 22:59:57 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax get_params_landings=%7B%22rtkcid%22%3A%226330c14c5b54710001eda810%22%2C%22rtkcmpid%22%3A%22629a3e04d84ecc000136838b%22%2C%22tid%22%3A%22Affiliate%20-%20CPI%20campaign%20%28install%20only%29%20%28226%29%22%2C%22utm_source%22%3A%22affiliate%22%2C%22utm_medium%22%3A%22adpartner%22%2C%22pubid%22%3A%22629a3fed4714f70001b234db%22%7D; expires=Mon, 26-Sep-2022 20:59:57 GMT; Max-Age=86400; path=/; domain=.mackeeper.com; secure; samesite=lax globalAffid=mc-6330c14d05abc63d1f266c3f; expires=Fri, 24-Mar-2023 20:59:57 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax country=NO; expires=Fri, 24-Mar-2023 20:59:57 GMT; Max-Age=15552000; path=/; domain=.mackeeper.com; secure; samesite=lax
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: : allow-from https://www.youtube.com https://giphy.com https://vimeo.com https://mackeeper.com https://www.slideshare.net
expect-ct: max-age=60
content-encoding: gzip
request-id: 87243d4d34ba953cf068f497d88c35a2
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/fonts/MarkOT-Bold.otf HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app2.mackeeperaff.com
Connection: keep-alive
Referer: https://static-cdn.mackeeper.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: font/ttf
                                        
date: Thu, 22 Sep 2022 08:36:02 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 11 Sep 2020 13:01:12 GMT
etag: W/"336e38c18c3ac1666fa496c919b08eca"
cache-control: public, max-age=604800
x-amz-version-id: _SyAJ1U0XNp0EgWFZoSm7jR1ZmFIsGhh
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qNEtlwpUOSDTnZvY-hDXcFddO6sSI1VRzc0sDOhiXIJIfQ3jJCUFSg==
age: 303837
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/svg/landings/226_6/soft_one.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:05:01 GMT
etag: W/"bf6ed3f56235d31918a17604a3131f52"
cache-control: public, max-age=604800
x-amz-version-id: 8xX6ank4Rs.JT95crMgq3uJJbhi1lzJF
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7PNEsOuPmgdaU62GVq6n88J9NLeRG6-5yU6FkYMKfZ9l5D2fnJApyw==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/critical/script.min.js?e7cf19f3a210c6c6b206 HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: PENDING
last-modified: Thu, 22 Sep 2022 08:31:47 GMT
etag: W/"4b345b7c24a7ebb374b458ba77f2ebc3"
cache-control: public, max-age=604800
x-amz-version-id: Zb_eOpssY4YuKooiuyx_lIGBxSDfD9O3
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZYnrYqL2D-zURwQiy59gBl9F2HjUkTgg99uU5xWLMndRkgOaouHl4Q==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mk-land/dist/svg/landings/226_6/privacy-three.svg HTTP/1.1 
Host: static-cdn.mackeeper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 22 Sep 2022 08:33:11 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 03 Nov 2021 14:04:56 GMT
etag: W/"c8f8481e4694470f0b9d13007ae87187"
cache-control: public, max-age=604800
x-amz-version-id: ztZus3dIf7v8EQhUG0qQzWys_bOlUhvB
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: z5KybQooSf5s594YvwtZFEJo3ykllqmacB6qdGqybOIvs9rwU6ollg==
age: 304008
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /a-015g.min.js HTTP/1.1 
Host: b-code.liadm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app2.mackeeperaff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.112
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 04:28:38 GMT
cache-control: public, max-age=86400
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: f-hVFnQV_Q3RRnGzVMwYoyW1ILAjINUszD0T8gFbUBHoCBMCoNgJ9w==
age: 59480
X-Firefox-Spdy: h2


--- Additional Info ---