http://www.awin1.com/awclick.php?mid=7678&id=45628

GET /awclick.php?mid=7678&id=45628 HTTP/1.1
Host: www.awin1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 302 Found
Date: Wed, 05 Jul 2017 15:03:33 GMT
Server: Apache
Set-Cookie: bId=tr14_595cffc5905e40.53342290; domain=.awin1.com; path=/; expires=Thu, 05-Jul-2018 15:03:33 GMT
Set-Cookie: aw7678=45628|0||1499267013||aw|0; domain=.awin1.com; path=/; expires=Tuesday, 03-Oct-2017 16:03:33
Expires: Wed, 11 Nov 1998 11:11:11 GMT
Cache-Control: must-revalidate
Location: https://www.bullguard.com/tracking.aspx?url=https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw&affiliate=affiliatewindow&awc=7678_1499267013_7287c984ccd37a5580ea384470f64a00
Node: tr14
P3P: policyref="http://www.awin1.com/w3c/p3p.xml", CP="NOI NID CURa ADMa PSAa HISa OUR IND UNI PUR COM NAV"
Content-Length: 0
Content-Type: text/html
----------------------------------------------------------
https://www.bullguard.com/tracking.aspx?url=https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw&affiliate=affiliatewindow&awc=7678_1499267013_7287c984ccd37a5580ea384470f64a00

GET /tracking.aspx?url=https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw&affiliate=affiliatewindow&awc=7678_1499267013_7287c984ccd37a5580ea384470f64a00 HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive

HTTP/2.0 301 Moved Permanently
Date: Wed, 05 Jul 2017 15:03:33 GMT
Location: /bg/tracking.aspx?url=https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw&affiliate=affiliatewindow&awc=7678_1499267013_7287c984ccd37a5580ea384470f64a00
Server: Microsoft-IIS/8.5
x-powered-by: ASP.NET
Content-Length: 314
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/bg/tracking.aspx?url=https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw&affiliate=affiliatewindow&awc=7678_1499267013_7287c984ccd37a5580ea384470f64a00

GET /bg/tracking.aspx?url=https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw&affiliate=affiliatewindow&awc=7678_1499267013_7287c984ccd37a5580ea384470f64a00 HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive

HTTP/2.0 301 Moved Permanently
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: POST,GET,OPTIONS,PUT
Cache-Control: no-cache, no-store
Content-Type: text/html; charset=utf-8
Date: Wed, 05 Jul 2017 15:03:33 GMT
Expires: -1
Location: https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw
Pragma: no-cache
Server: Super Mega Ultra 99.99
Set-Cookie: subaffiliate=aid=|awc=7678_1499267013_7287c984ccd37a5580ea3844; domain=bullguard.com; expires=Thu, 05-Oct-2017 15:03:34 GMT; path=/
Set-Cookie: affiliate=affiliatewindow; domain=bullguard.com; expires=Thu, 05-Oct-2017 15:03:34 GMT; path=/
x-aspnet-version: 2.0.50727
x-n: pixie1.1
x-ua-compatible: IE=Edge
Content-Length: 774
X-Firefox-Spdy: h2
----------------------------------------------------------
http://ocsp.digicert.com/

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 83
Content-Type: application/ocsp-request
Connection: keep-alive
0Q0O0M0K0I0	+
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Content-Type: application/ocsp-response
Date: Wed, 05 Jul 2017 15:03:34 GMT
Etag: "595cdf5e-1d7"
Expires: Wed, 12 Jul 2017 03:03:34 GMT
Last-Modified: Wed, 05 Jul 2017 12:45:18 GMT
Server: ECS (dca/533D)
X-Cache: HIT
Content-Length: 471
----------------------------------------------------------
https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw

GET /lp/aff/compare_products.aspx?source=aw HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cookie: subaffiliate=aid=|awc=7678_1499267013_7287c984ccd37a5580ea3844; affiliate=affiliatewindow
Connection: keep-alive

HTTP/2.0 200 OK
Cache-Control: private, no-store, must-revalidate
Content-Type: text/html; charset=utf-8
Date: Wed, 05 Jul 2017 15:03:34 GMT
Server: Microsoft-IIS/8.5
Set-Cookie: CMSPreferredCulture=en-IN; expires=Thu, 05-Jul-2018 15:03:34 GMT; path=/; HttpOnly
Set-Cookie: CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; path=/; HttpOnly
Set-Cookie: ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; path=/; HttpOnly
Set-Cookie: Campaign=; expires=Tue, 05-Jul-2016 15:03:34 GMT; path=/; HttpOnly
Set-Cookie: Source=; expires=Tue, 05-Jul-2016 15:03:34 GMT; path=/; HttpOnly
Set-Cookie: CMSCurrentTheme=bg; expires=Thu, 06-Jul-2017 15:03:34 GMT; path=/; HttpOnly
Set-Cookie: Culture=en; expires=Fri, 05-Jul-2019 15:03:34 GMT; path=/
Set-Cookie: CMSReturning=true; expires=Fri, 05-Jul-2019 15:03:34 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
x-ua-compatible: IE=Edge
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/CMSPages/GetResource.ashx?stylesheetname=bg

GET /CMSPages/GetResource.ashx?stylesheetname=bg HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw
Cookie: subaffiliate=aid=|awc=7678_1499267013_7287c984ccd37a5580ea3844; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true
Connection: keep-alive

HTTP/2.0 200 OK
Content-Encoding: deflate
Accept-Ranges: bytes
Cache-Control: public, must-revalidate
Content-Disposition: attachment; filename="bg.css"
Content-Type: text/css
Date: Wed, 05 Jul 2017 15:03:35 GMT
Etag: "cssstylesheet|77a60974-4402-445d-8b21-69305e2873e8"
Expires: Thu, 06 Jul 2017 01:03:36 GMT
Last-Modified: Wed, 05 Jul 2017 12:05:00 GMT
Server: ECS (dca/2454)
Vary: Accept-Encoding
x-aspnet-version: 4.0.30319
X-Cache: HIT
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
Content-Length: 35552
X-Firefox-Spdy: h2
----------------------------------------------------------
https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js

GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript; charset=UTF-8
access-control-allow-origin: *
Timing-Allow-Origin: *
Content-Length: 33951
Date: Thu, 29 Jun 2017 18:18:34 GMT
Expires: Fri, 29 Jun 2018 18:18:34 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
x-content-type-options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 506701
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/favicon.ico

GET /favicon.ico HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cookie: subaffiliate=aid=|awc=7678_1499267013_7287c984ccd37a5580ea3844; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/x-icon
Date: Wed, 05 Jul 2017 15:03:35 GMT
Etag: "0747e15de87cc1:0"
Last-Modified: Tue, 11 Oct 2011 06:22:00 GMT
Server: ECS (dca/24D2)
X-Cache: HIT
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
Content-Length: 824
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/bg/tracking.aspx?url=https://www.bullguard.com/lp/aff/sale.aspx

GET /bg/tracking.aspx?url=https://www.bullguard.com/lp/aff/sale.aspx HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw
Cookie: subaffiliate=aid=|awc=7678_1499267013_7287c984ccd37a5580ea3844; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true
Connection: keep-alive

HTTP/2.0 301 Moved Permanently
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: POST,GET,OPTIONS,PUT
Cache-Control: no-cache, no-store
Content-Type: text/html; charset=utf-8
Date: Wed, 05 Jul 2017 15:03:35 GMT
Expires: -1
Location: https://www.bullguard.com/lp/aff/sale.aspx
Pragma: no-cache
Server: Super Mega Ultra 99.99
Set-Cookie: subaffiliate=nocookie; domain=bullguard.com; expires=Thu, 05-Oct-2017 15:03:35 GMT; path=/
Set-Cookie: Culture=en; domain=bullguard.com; expires=Sat, 05-Aug-2017 15:03:35 GMT; path=/
x-aspnet-version: 2.0.50727
x-n: pixie1.1
x-ua-compatible: IE=Edge
Content-Length: 661
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/lp/aff/sale.aspx

GET /lp/aff/sale.aspx HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Cache-Control: private, no-store, must-revalidate
Content-Type: text/html; charset=utf-8
Date: Wed, 05 Jul 2017 15:03:35 GMT
Server: Microsoft-IIS/8.5
Set-Cookie: Campaign=; expires=Tue, 05-Jul-2016 15:03:36 GMT; path=/; HttpOnly
Set-Cookie: Source=; expires=Tue, 05-Jul-2016 15:03:36 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
x-ua-compatible: IE=Edge
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/css/style.css

GET /KfilesBG/landings/ppc/2017/4july/css/style.css HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Content-Encoding: gzip
Content-Type: text/css
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "d3ffececabf1d21:0+gzip"
Last-Modified: Fri, 30 Jun 2017 14:19:46 GMT
Server: ECS (dca/24A2)
Vary: Accept-Encoding
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 16602
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/js/modernizr.custom.js

GET /KfilesBG/landings/ppc/2017/4july/js/modernizr.custom.js HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: application/javascript
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "df10909011f0d21:0"
Last-Modified: Wed, 28 Jun 2017 13:22:17 GMT
Server: ECS (dca/246F)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 5233
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/WebResource.axd?d=vtAPmIzW05L_HRQ5Q4EY-LAnjGOjTCsbOcH8S70duvT25mcZoqCuOFCzejwdpqcF50UIenuWyS-sqbQlNwPdL1874QOjl3QZsdsEbC053JI1&t=636284154552661246

GET /WebResource.axd?d=vtAPmIzW05L_HRQ5Q4EY-LAnjGOjTCsbOcH8S70duvT25mcZoqCuOFCzejwdpqcF50UIenuWyS-sqbQlNwPdL1874QOjl3QZsdsEbC053JI1&t=636284154552661246 HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Content-Encoding: gzip
Cache-Control: public
Content-Type: application/x-javascript
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: Thu, 05 Jul 2018 01:18:29 GMT
Last-Modified: Fri, 21 Apr 2017 21:50:55 GMT
Server: ECS (dca/5333)
Vary: Accept-Encoding
x-aspnet-version: 4.0.30319
X-Cache: HIT
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
Content-Length: 4627
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/CMSPages/GetResource.ashx?scriptfile=%7e%2fCMSScripts%2fBrowserCapabilities.js

GET /CMSPages/GetResource.ashx?scriptfile=%7e%2fCMSScripts%2fBrowserCapabilities.js HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Content-Encoding: deflate
Accept-Ranges: bytes
Cache-Control: public
Content-Disposition: attachment; filename="BrowserCapabilities.js"
Content-Type: application/x-javascript
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "file|11/16/2015 5:32:00 AM"
Expires: Wed, 12 Jul 2017 15:03:36 GMT
Last-Modified: Mon, 16 Nov 2015 04:32:00 GMT
Server: ECS (dca/246C)
Vary: Accept-Encoding
x-aspnet-version: 4.0.30319
X-Cache: HIT
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
Content-Length: 768
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/CMSPages/GetResource.ashx?scriptfile=%7e%2fCMSScripts%2fWebServiceCall.js

GET /CMSPages/GetResource.ashx?scriptfile=%7e%2fCMSScripts%2fWebServiceCall.js HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Content-Encoding: deflate
Accept-Ranges: bytes
Cache-Control: public
Content-Disposition: attachment; filename="WebServiceCall.js"
Content-Type: application/x-javascript
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "file|11/16/2015 5:32:00 AM"
Expires: Wed, 12 Jul 2017 15:03:37 GMT
Last-Modified: Mon, 16 Nov 2015 04:32:00 GMT
Server: ECS (dca/5324)
Vary: Accept-Encoding
x-aspnet-version: 4.0.30319
X-Cache: HIT
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
Content-Length: 213
X-Firefox-Spdy: h2
----------------------------------------------------------
https://fonts.googleapis.com/css?family=Open+Sans:300

GET /css?family=Open+Sans:300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Content-Type: text/css; charset=utf-8
access-control-allow-origin: *
Timing-Allow-Origin: *
Link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 05 Jul 2017 15:03:36 GMT
Date: Wed, 05 Jul 2017 15:03:36 GMT
Cache-Control: private, max-age=86400
Content-Encoding: br
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://fonts.googleapis.com/css?family=Montserrat:400,500,600,700

GET /css?family=Montserrat:400,500,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Content-Type: text/css; charset=utf-8
access-control-allow-origin: *
Timing-Allow-Origin: *
Link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 05 Jul 2017 15:03:36 GMT
Date: Wed, 05 Jul 2017 15:03:36 GMT
Cache-Control: private, max-age=86400
Content-Encoding: br
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://cdnjs.cloudflare.com/ajax/libs/animate.css/3.5.2/animate.min.css

GET /ajax/libs/animate.css/3.5.2/animate.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Date: Wed, 05 Jul 2017 15:03:36 GMT
Content-Type: text/css
Last-Modified: Wed, 22 Jun 2016 20:02:02 GMT
Expires: Mon, 25 Jun 2018 15:03:36 GMT
Cache-Control: public, max-age=30672000
access-control-allow-origin: *
Content-Encoding: gzip
cf-cache-status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
cf-ray: 379b36428b6d2438-IAD
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/ScriptResource.axd?d=xWinrfm9QYufYPg3EXw1r4ou2NxUnYquQEepAFrCHIjiALvC39ZzkHcXSHYZcek2SABwyuKvxoTtI5g7WY_V8iMbFRsbiifnhfARIMIFcnOpX7nlClwHPkVFdN4KgGVniO4FUZ5CJvHI74zS7K4LnQ2&t=7c776dc1

GET /ScriptResource.axd?d=xWinrfm9QYufYPg3EXw1r4ou2NxUnYquQEepAFrCHIjiALvC39ZzkHcXSHYZcek2SABwyuKvxoTtI5g7WY_V8iMbFRsbiifnhfARIMIFcnOpX7nlClwHPkVFdN4KgGVniO4FUZ5CJvHI74zS7K4LnQ2&t=7c776dc1 HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: public
Content-Type: application/x-javascript
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: Thu, 05 Jul 2018 13:35:09 GMT
Last-Modified: Tue, 09 May 2017 14:18:15 GMT
Server: ECS (dca/2469)
Vary: Accept-Encoding
x-aspnet-version: 4.0.30319
X-Cache: HIT
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
Content-Length: 27722
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/ScriptResource.axd?d=gg9P0pUVcN6t9KUpkVvLohRWDAKVsIZ7G8Dj24Xa-mDwPEqJSGyNussPW7Xaw6codM6n8psbcXuhC9ZTLVQAnB-sQH79DjuQs-K-HLozFYu_uX7qJ_zN3fA0xqlxkv4d7lf_d9c0X7uoZV2-mooVog2&t=7c776dc1

GET /ScriptResource.axd?d=gg9P0pUVcN6t9KUpkVvLohRWDAKVsIZ7G8Dj24Xa-mDwPEqJSGyNussPW7Xaw6codM6n8psbcXuhC9ZTLVQAnB-sQH79DjuQs-K-HLozFYu_uX7qJ_zN3fA0xqlxkv4d7lf_d9c0X7uoZV2-mooVog2&t=7c776dc1 HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: public
Content-Type: application/x-javascript
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: Thu, 05 Jul 2018 03:50:33 GMT
Last-Modified: Thu, 22 Jun 2017 14:54:06 GMT
Server: ECS (dca/5333)
Vary: Accept-Encoding
x-aspnet-version: 4.0.30319
X-Cache: HIT
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
Content-Length: 9936
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/kfilesbg/landings/ppc/2017/4july/images/logo.png

GET /kfilesbg/landings/ppc/2017/4july/images/logo.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "d6be99e2a3f0d21:0"
Last-Modified: Thu, 29 Jun 2017 06:49:41 GMT
Server: ECS (dca/2498)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 2945
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/marketingfiles/ext/umbracoLanding/easter2017/images/dot.jpg

GET /marketingfiles/ext/umbracoLanding/easter2017/images/dot.jpg HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
access-control-allow-origin: *
Cache-Control: max-age=691200
Content-Type: image/jpeg
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "268eb3b7f2add21:0"
Last-Modified: Wed, 05 Apr 2017 09:55:12 GMT
Server: ECS (dca/24A2)
X-Cache: HIT
x-ua-compatible: IE=Edge
Content-Length: 461
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/summer-promo/images/av_box.png

GET /KfilesBG/landings/ppc/2017/summer-promo/images/av_box.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "f8f486451efd21:0"
Last-Modified: Tue, 27 Jun 2017 14:26:40 GMT
Server: ECS (dca/249C)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 7285
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/kfilesbg/landings/ppc/2017/4july/images/special2.png

GET /kfilesbg/landings/ppc/2017/4july/images/special2.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "efe46cdd16f0d21:0"
Last-Modified: Wed, 28 Jun 2017 14:00:14 GMT
Server: ECS (dca/532E)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 12897
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/summer-promo/images/onedevice_icon.png

GET /KfilesBG/landings/ppc/2017/summer-promo/images/onedevice_icon.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "32db736351efd21:0"
Last-Modified: Tue, 27 Jun 2017 14:26:38 GMT
Server: ECS (dca/533C)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 146
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/summer-promo/images/multidevice_icon.png

GET /KfilesBG/landings/ppc/2017/summer-promo/images/multidevice_icon.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "2de25210ece5d21:0"
Last-Modified: Thu, 15 Jun 2017 15:28:39 GMT
Server: ECS (dca/2498)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 258
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/summer-promo/images/is_box.png

GET /KfilesBG/landings/ppc/2017/summer-promo/images/is_box.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "b3b6ab6351efd21:0"
Last-Modified: Tue, 27 Jun 2017 14:26:39 GMT
Server: ECS (dca/246E)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 9505
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/summer-promo/images/bpp_box.png

GET /KfilesBG/landings/ppc/2017/summer-promo/images/bpp_box.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "af25326451efd21:0"
Last-Modified: Tue, 27 Jun 2017 14:26:39 GMT
Server: ECS (dca/24A0)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 9690
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/marketingfiles/ext/umbracoLanding/easter2017/images/money-back.png

GET /marketingfiles/ext/umbracoLanding/easter2017/images/money-back.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
access-control-allow-origin: *
Cache-Control: max-age=691200
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "9a349db8f2add21:0"
Last-Modified: Wed, 05 Apr 2017 09:55:13 GMT
Server: ECS (dca/2495)
X-Cache: HIT
x-ua-compatible: IE=Edge
Content-Length: 16953
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/2017/summer/images/check_black.png

GET /KfilesBG/landings/2017/summer/images/check_black.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "182fb95ba8e6d21:0"
Last-Modified: Fri, 16 Jun 2017 13:56:31 GMT
Server: ECS (dca/5337)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 176
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/marketingfiles/ext/umbracoLanding/free-sem/images/trophy.png

GET /marketingfiles/ext/umbracoLanding/free-sem/images/trophy.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
access-control-allow-origin: *
Cache-Control: max-age=691200
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "4dde68a84ecad21:0"
Last-Modified: Thu, 11 May 2017 12:03:52 GMT
Server: ECS (dca/5328)
X-Cache: HIT
x-ua-compatible: IE=Edge
Content-Length: 4534
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/marketingfiles/ext/umbracoLanding/free-sem/images/header_devices.png

GET /marketingfiles/ext/umbracoLanding/free-sem/images/header_devices.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
access-control-allow-origin: *
Cache-Control: max-age=691200
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "381386aa4ecad21:0"
Last-Modified: Thu, 11 May 2017 12:03:56 GMT
Server: ECS (dca/532F)
X-Cache: HIT
x-ua-compatible: IE=Edge
Content-Length: 10384
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/2017/summer/images/small_devices.png

GET /KfilesBG/landings/2017/summer/images/small_devices.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "154fc15ca8e6d21:0"
Last-Modified: Fri, 16 Jun 2017 13:56:33 GMT
Server: ECS (dca/24DB)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 711
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/BPP-ransomware/images/av-chip-pc.jpg

GET /KfilesBG/landings/ppc/BPP-ransomware/images/av-chip-pc.jpg HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/jpeg
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "22d87cf50d8d21:0"
Last-Modified: Mon, 29 May 2017 07:54:33 GMT
Server: ECS (dca/532E)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 31406
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/marketingfiles/ext/umbracoLanding/free-sem/images/laptop_v2.png

GET /marketingfiles/ext/umbracoLanding/free-sem/images/laptop_v2.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
access-control-allow-origin: *
Cache-Control: max-age=691200
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "299cbe6bcbc4d21:0"
Last-Modified: Thu, 04 May 2017 11:41:51 GMT
Server: ECS (dca/24D2)
X-Cache: HIT
x-ua-compatible: IE=Edge
Content-Length: 239637
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/App_Themes/bg/favicon/android-icon-192x192.png

GET /App_Themes/bg/favicon/android-icon-192x192.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=604800
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "8ee6e9a9c48d21:0"
Last-Modified: Wed, 07 Sep 2016 04:59:50 GMT
Server: ECS (dca/24A0)
X-Cache: HIT
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
Content-Length: 7584
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/App_Themes/bg/favicon/favicon-32x32.png

GET /App_Themes/bg/favicon/favicon-32x32.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=604800
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "a95eea9c48d21:0"
Last-Modified: Wed, 07 Sep 2016 04:59:50 GMT
Server: ECS (dca/24A2)
X-Cache: HIT
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
Content-Length: 1561
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/App_Themes/bg/favicon/android-icon-96x96.png

GET /App_Themes/bg/favicon/android-icon-96x96.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=604800
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "c034eaa9c48d21:0"
Last-Modified: Wed, 07 Sep 2016 04:59:50 GMT
Server: ECS (dca/24D1)
X-Cache: HIT
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
Content-Length: 4321
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/App_Themes/bg/favicon/favicon-16x16.png

GET /App_Themes/bg/favicon/favicon-16x16.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=604800
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "a95eea9c48d21:0"
Last-Modified: Wed, 07 Sep 2016 04:59:50 GMT
Server: ECS (dca/533D)
X-Cache: HIT
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
Content-Length: 1135
X-Firefox-Spdy: h2
----------------------------------------------------------
http://clients1.google.com/ocsp

POST /ocsp HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 75
Content-Type: application/ocsp-request
Connection: keep-alive
0I0G0E0C0A0	+
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: Sun, 09 Jul 2017 15:03:36 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/images/bg-4july.jpg

GET /KfilesBG/landings/ppc/2017/4july/images/bg-4july.jpg HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/css/style.css
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/jpeg
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "f734636013f0d21:0"
Last-Modified: Wed, 28 Jun 2017 13:35:15 GMT
Server: ECS (dca/246A)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 26293
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/images/check_blue.png

GET /KfilesBG/landings/ppc/2017/4july/images/check_blue.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/css/style.css
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "3277e091a6f0d21:0"
Last-Modified: Thu, 29 Jun 2017 07:08:54 GMT
Server: ECS (dca/532E)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 1138
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/images/blue-disc.png

GET /KfilesBG/landings/ppc/2017/4july/images/blue-disc.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/css/style.css
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "7a326cf8a9f0d21:0"
Last-Modified: Thu, 29 Jun 2017 07:33:15 GMT
Server: ECS (dca/24D2)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 4369
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/images/logo_icon.png

GET /KfilesBG/landings/ppc/2017/4july/images/logo_icon.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/css/style.css
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "a36ad8f11f0d21:0"
Last-Modified: Wed, 28 Jun 2017 13:22:16 GMT
Server: ECS (dca/2493)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 686
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.googletagmanager.com/gtm.js?id=GTM-TS82NQ

GET /gtm.js?id=GTM-TS82NQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Content-Type: application/javascript; charset=UTF-8
access-control-allow-origin: http://www.googletagmanager.com
access-control-allow-headers: Cache-Control
access-control-allow-credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: Wed, 05 Jul 2017 15:03:36 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
Content-Length: 27213
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/2017/summer/images/keepsyousafe_bg3.png

GET /KfilesBG/landings/2017/summer/images/keepsyousafe_bg3.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "1f43c55ca8e6d21:0"
Last-Modified: Fri, 16 Jun 2017 13:56:33 GMT
Server: ECS (dca/24A7)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 67999
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/marketingfiles/ext/umbracoLanding/easter2017/images/tw_icon.png

GET /marketingfiles/ext/umbracoLanding/easter2017/images/tw_icon.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
access-control-allow-origin: *
Cache-Control: max-age=691200
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "8e44eeb8f2add21:0"
Last-Modified: Wed, 05 Apr 2017 09:55:14 GMT
Server: ECS (dca/249F)
X-Cache: HIT
x-ua-compatible: IE=Edge
Content-Length: 348
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/marketingfiles/ext/umbracoLanding/easter2017/images/fb_icon.png

GET /marketingfiles/ext/umbracoLanding/easter2017/images/fb_icon.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
access-control-allow-origin: *
Cache-Control: max-age=691200
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "2016dcb7f2add21:0"
Last-Modified: Wed, 05 Apr 2017 09:55:12 GMT
Server: ECS (dca/2453)
X-Cache: HIT
x-ua-compatible: IE=Edge
Content-Length: 177
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/marketingfiles/ext/umbracoLanding/easter2017/images/gg_icon.png

GET /marketingfiles/ext/umbracoLanding/easter2017/images/gg_icon.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
access-control-allow-origin: *
Cache-Control: max-age=691200
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "2016dcb7f2add21:0"
Last-Modified: Wed, 05 Apr 2017 09:55:12 GMT
Server: ECS (dca/5336)
X-Cache: HIT
x-ua-compatible: IE=Edge
Content-Length: 426
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/marketingfiles/ext/umbracoLanding/easter2017/images/in_icon.png

GET /marketingfiles/ext/umbracoLanding/easter2017/images/in_icon.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
access-control-allow-origin: *
Cache-Control: max-age=691200
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "8ad63db8f2add21:0"
Last-Modified: Wed, 05 Apr 2017 09:55:13 GMT
Server: ECS (dca/24FA)
X-Cache: HIT
x-ua-compatible: IE=Edge
Content-Length: 256
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/marketingfiles/ext/umbracoLanding/offerbuyb/js/functions.js

GET /marketingfiles/ext/umbracoLanding/offerbuyb/js/functions.js HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Content-Encoding: gzip
Accept-Ranges: bytes
access-control-allow-origin: *
Cache-Control: max-age=691200
Content-Type: application/x-javascript
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "66ae8816c870d21:0"
Last-Modified: Tue, 17 Jan 2017 13:46:22 GMT
Server: ECS (dca/24CD)
Vary: Accept-Encoding
X-Cache: HIT
x-ua-compatible: IE=Edge
Content-Length: 8386
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/marketingfiles/ext/umbracoLanding/easter2017/images/logo2.png

GET /marketingfiles/ext/umbracoLanding/easter2017/images/logo2.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
access-control-allow-origin: *
Cache-Control: max-age=691200
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "845e66b8f2add21:0"
Last-Modified: Wed, 05 Apr 2017 09:55:13 GMT
Server: ECS (dca/5334)
X-Cache: HIT
x-ua-compatible: IE=Edge
Content-Length: 1977
X-Firefox-Spdy: h2
----------------------------------------------------------
http://ocsp.starfieldtech.com/

POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 76
Content-Type: application/ocsp-request
Connection: keep-alive
0J0H0F0D0B0	+
HTTP/1.1 307 Temporary Redirect
Connection: close
Pragma: no-cache
Cache-Control: no-cache
Location: /
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/images/check_black.png

GET /KfilesBG/landings/ppc/2017/4july/images/check_black.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/css/style.css
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "bf21288f11f0d21:0"
Last-Modified: Wed, 28 Jun 2017 13:22:15 GMT
Server: ECS (dca/246B)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 176
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/images/creditcard2.jpg

GET /KfilesBG/landings/ppc/2017/4july/images/creditcard2.jpg HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/css/style.css
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/jpeg
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "98af0a7bff0d21:0"
Last-Modified: Thu, 29 Jun 2017 10:08:29 GMT
Server: ECS (dca/249B)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 20262
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/images/red-button.png

GET /KfilesBG/landings/ppc/2017/4july/images/red-button.png HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/KfilesBG/landings/ppc/2017/4july/css/style.css
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "5ab4dd8f11f0d21:0"
Last-Modified: Wed, 28 Jun 2017 13:22:16 GMT
Server: ECS (dca/5330)
X-Cache: HIT
x-powered-by: ASP.NET
Content-Length: 415
X-Firefox-Spdy: h2
----------------------------------------------------------
http://clients1.google.com/ocsp

POST /ocsp HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 75
Content-Type: application/ocsp-request
Connection: keep-alive
0I0G0E0C0A0	+
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: Sun, 09 Jul 2017 15:03:36 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
----------------------------------------------------------
https://fonts.gstatic.com/s/montserrat/v10/IQHow_FEYlDC4Gzy_m8fcoWiMMZ7xLd792ULpGE4W_Y.woff2

GET /s/montserrat/v10/IQHow_FEYlDC4Gzy_m8fcoWiMMZ7xLd792ULpGE4W_Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://fonts.googleapis.com/css?family=Montserrat:400,500,600,700
Origin: https://www.bullguard.com
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: font/woff2
access-control-allow-origin: *
Timing-Allow-Origin: *
Content-Length: 15328
Date: Wed, 17 May 2017 20:25:37 GMT
Expires: Thu, 17 May 2018 20:25:37 GMT
Last-Modified: Thu, 09 Feb 2017 01:14:07 GMT
x-content-type-options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 4214279
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://fonts.gstatic.com/s/montserrat/v10/zhcz-_WihjSQC0oHJ9TCYPk_vArhqVIZ0nv9q090hN8.woff2

GET /s/montserrat/v10/zhcz-_WihjSQC0oHJ9TCYPk_vArhqVIZ0nv9q090hN8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://fonts.googleapis.com/css?family=Montserrat:400,500,600,700
Origin: https://www.bullguard.com
Connection: keep-alive

HTTP/2.0 200 OK
Accept-Ranges: bytes
Content-Type: font/woff2
access-control-allow-origin: *
Timing-Allow-Origin: *
Content-Length: 15148
Date: Wed, 17 May 2017 20:26:18 GMT
Expires: Thu, 17 May 2018 20:26:18 GMT
Last-Modified: Thu, 09 Feb 2017 01:12:56 GMT
x-content-type-options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 4214238
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.google-analytics.com/analytics.js

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Wed, 05 Jul 2017 14:33:07 GMT
Expires: Wed, 05 Jul 2017 16:33:07 GMT
Last-Modified: Tue, 06 Jun 2017 00:25:39 GMT
x-content-type-options: nosniff
Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 12343
Cache-Control: public, max-age=7200
Age: 1829
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
http://ocsp.starfieldtech.com/

POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 76
Content-Type: application/ocsp-request
Connection: keep-alive
0J0H0F0D0B0	+
HTTP/1.1 307 Temporary Redirect
Connection: close
Pragma: no-cache
Cache-Control: no-cache
Location: /
----------------------------------------------------------
https://s.yimg.com/wi/ytc.js

GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Date: Wed, 05 Jul 2017 15:03:36 GMT
Last-Modified: Tue, 28 Feb 2017 16:42:51 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3552
Content-Type: application/javascript
Age: 0
Via: http/1.1 spdc0013.pbp.bf1.yahoo.com (ApacheTrafficServer), https/1.1 e10.ycpi.dca.yahoo.com (ApacheTrafficServer [cMsSf ])
Server: ATS
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.google-analytics.com/collect?v=1&_v=j56&a=785173899&t=pageview&_s=1&dl=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&ul=en-us&de=UTF-8&dt=Special%20Sale&sd=24-bit&sr=1920x1200&vp=1903x1059&je=1&fl=23.0%20r0&_u=YGBAgAAB~&jid=235867042&gjid=361340478&cid=612466313.1499267016&tid=UA-5866913-2&_gid=296161566.1499267016&gtm=GTM-TS82NQ&cd5=affiliatewindow&z=230798079

GET /collect?v=1&_v=j56&a=785173899&t=pageview&_s=1&dl=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&ul=en-us&de=UTF-8&dt=Special%20Sale&sd=24-bit&sr=1920x1200&vp=1903x1059&je=1&fl=23.0%20r0&_u=YGBAgAAB~&jid=235867042&gjid=361340478&cid=612466313.1499267016&tid=UA-5866913-2&_gid=296161566.1499267016&gtm=GTM-TS82NQ&cd5=affiliatewindow&z=230798079 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
access-control-allow-origin: *
Date: Wed, 28 Jun 2017 14:50:20 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
Content-Type: image/gif
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 605596
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
http://ocsp.starfieldtech.com/

POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 76
Content-Type: application/ocsp-request
Connection: keep-alive
0J0H0F0D0B0	+
HTTP/1.1 200 OK
Date: Wed, 05 Jul 2017 15:03:25 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=118750, public, no-transform, must-revalidate
Last-Modified: Wed, 05 Jul 2017 13:46:45 GMT
Expires: Fri, 07 Jul 2017 01:46:45 GMT
Etag: "be29894d805f281425af96e77fcd63e5ad5d96c5"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1847
Connection: close
Content-Type: application/ocsp-response
----------------------------------------------------------
https://dev.visualwebsiteoptimizer.com/j.php?a=297369&u=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&r=0.8296208125760955

GET /j.php?a=297369&u=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&r=0.8296208125760955 HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Date: Wed, 05 Jul 2017 15:02:47 GMT
Content-Type: application/javascript; charset=UTF-8
Server: wdc1
Content-Encoding: gzip
X-Firefox-Spdy: h2
----------------------------------------------------------
http://clients1.google.com/ocsp

POST /ocsp HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 75
Content-Type: application/ocsp-request
Connection: keep-alive
0I0G0E0C0A0	+
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: Sun, 09 Jul 2017 15:03:36 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
----------------------------------------------------------
https://dev.visualwebsiteoptimizer.com/v.gif?a=297369&d=bullguard.com&u=DD607CBA116BD8D03CE365F193ADB68B&h=a4af94d5873e05a8d5940f09934f82c2&t=false&r=0.8612787845696108

GET /v.gif?a=297369&d=bullguard.com&u=DD607CBA116BD8D03CE365F193ADB68B&h=a4af94d5873e05a8d5940f09934f82c2&t=false&r=0.8612787845696108 HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Date: Wed, 05 Jul 2017 15:02:48 GMT
Content-Type: image/gif
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Expires: Mon, 10 Jan 2005 00:00:01 GMT
Pragma: no-cache
x-content-type-options: nosniff
Content-Length: 35
Server: wdc1
X-Firefox-Spdy: h2
----------------------------------------------------------
https://dev.visualwebsiteoptimizer.com/2.0/va-264b47cc0621083c569b75f2300228ff.js

GET /2.0/va-264b47cc0621083c569b75f2300228ff.js HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Date: Wed, 05 Jul 2017 15:02:48 GMT
Content-Type: text/javascript; charset=UTF-8
Content-Length: 40877
Last-Modified: Wed, 05 Jul 2017 09:29:06 GMT
Etag: "595cb162-9fad"
Server: wdc1
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, max-age=604800
Accept-Ranges: bytes
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.googleadservices.com/pagead/conversion_async.js

GET /pagead/conversion_async.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Content-Type: text/javascript; charset=UTF-8
Etag: 8962917905573383505
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: Wed, 05 Jul 2017 15:03:36 GMT
Cache-Control: private, max-age=86400
x-content-type-options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 4711
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,36,35",quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
http://clients1.google.com/ocsp

POST /ocsp HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 75
Content-Type: application/ocsp-request
Connection: keep-alive
0I0G0E0C0A0	+
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: Sun, 09 Jul 2017 15:03:36 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
----------------------------------------------------------
http://ocsp.digicert.com/

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 83
Content-Type: application/ocsp-request
Connection: keep-alive
0Q0O0M0K0I0	+
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Content-Type: application/ocsp-response
Date: Wed, 05 Jul 2017 15:03:36 GMT
Etag: "595cdf56-1d7"
Expires: Wed, 12 Jul 2017 03:03:36 GMT
Last-Modified: Wed, 05 Jul 2017 12:45:10 GMT
Server: ECS (dca/24E0)
X-Cache: HIT
Content-Length: 471
----------------------------------------------------------
https://stats.g.doubleclick.net/r/collect?t=dc&aip=1&_r=3&v=1&_v=j56&tid=UA-5866913-2&cid=612466313.1499267016&jid=235867042&gjid=361340478&_gid=296161566.1499267016&_u=YGBAgAAB~&z=33716679

GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j56&tid=UA-5866913-2&cid=612466313.1499267016&jid=235867042&gjid=361340478&_gid=296161566.1499267016&_u=YGBAgAAB~&z=33716679 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 302 Found
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-5866913-2&cid=612466313.1499267016&jid=235867042&_v=j56&z=33716679
access-control-allow-origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Wed, 05 Jul 2017 15:03:36 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: text/html; charset=UTF-8
Server: Golfe2
Content-Length: 362
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://sp.analytics.yahoo.com/sp.pl?a=10000&jsonp=YAHOO.ywa.I13N.handleJSONResponse&d=Wed%2C%2005%20Jul%202017%2015%3A03%3A36%20GMT&n=4d&b=Special%20Sale&.yp=10021365&f=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&e=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fcompare_products.aspx%3Fsource%3Daw&enc=UTF-8

GET /sp.pl?a=10000&jsonp=YAHOO.ywa.I13N.handleJSONResponse&d=Wed%2C%2005%20Jul%202017%2015%3A03%3A36%20GMT&n=4d&b=Special%20Sale&.yp=10021365&f=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&e=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fcompare_products.aspx%3Fsource%3Daw&enc=UTF-8 HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/1.1 200 OK
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: Wed, 05 Jul 2017 15:03:36 GMT
Pragma: no-cache
Cache-Control: no-cache, private, must-revalidate
Content-Type: application/x-javascript
Accept-Ranges: bytes
Content-Length: 0
Server: ATS
Age: 0
Connection: keep-alive
Via: http/1.1 spdc0017.pbp.bf1.yahoo.com (ApacheTrafficServer)
Set-Cookie: B=bb881plclpvu8&b=3&s=6e; expires=Thu, 05-Jul-2018 15:03:36 GMT; path=/; domain=.yahoo.com
----------------------------------------------------------
http://clients1.google.com/ocsp

POST /ocsp HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 75
Content-Type: application/ocsp-request
Connection: keep-alive
0I0G0E0C0A0	+
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: Sun, 09 Jul 2017 15:03:36 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
----------------------------------------------------------
http://clients1.google.com/ocsp

POST /ocsp HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 75
Content-Type: application/ocsp-request
Connection: keep-alive
0I0G0E0C0A0	+
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: Sun, 09 Jul 2017 15:03:36 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
----------------------------------------------------------
https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-5866913-2&cid=612466313.1499267016&jid=235867042&_v=j56&z=33716679

GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-5866913-2&cid=612466313.1499267016&jid=235867042&_v=j56&z=33716679 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 05 Jul 2017 15:03:36 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Content-Type: image/gif
x-content-type-options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/966688439/?random=1499267016440&cv=8&fst=1499267016440&num=1&fmt=3&guid=ON&u_h=1200&u_w=1920&u_ah=1160&u_aw=1920&u_cd=24&u_his=1&u_tz=-240&u_java=true&u_nplug=9&u_nmime=64&frm=0&url=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&ref=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fcompare_products.aspx%3Fsource%3Daw&tiba=Special%20Sale&async=1

GET /pagead/viewthroughconversion/966688439/?random=1499267016440&cv=8&fst=1499267016440&num=1&fmt=3&guid=ON&u_h=1200&u_w=1920&u_ah=1160&u_aw=1920&u_cd=24&u_his=1&u_tz=-240&u_java=true&u_nplug=9&u_nmime=64&frm=0&url=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&ref=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fcompare_products.aspx%3Fsource%3Daw&tiba=Special%20Sale&async=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 302 Found
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Wed, 05 Jul 2017 15:03:36 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/ads/user-lists/966688439/?random=1499267016440&cv=8&fst=1499267016440&num=1&fmt=3&guid=ON&u_h=1200&u_w=1920&u_ah=1160&u_aw=1920&u_cd=24&u_his=1&u_tz=-240&u_java=true&u_nplug=9&u_nmime=64&frm=0&url=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&ref=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fcompare_products.aspx%3Fsource%3Daw&tiba=Special%20Sale&async=1&cdct=2&is_vtc=1&random=3881601499&fpvtc=/966688439/%3Frandom%3D1582108966%26cv%3D8%26fst%3D1499266800000%26num%3D1%26fmt%3D3%26guid%3DON%26u_h%3D1200%26u_w%3D1920%26u_ah%3D1160%26u_aw%3D1920%26u_cd%3D24%26u_his%3D1%26u_tz%3D-240%26u_java%3Dtrue%26u_nplug%3D9%26u_nmime%3D64%26frm%3D0%26url%3Dhttps%253A%252F%252Fwww.bullguard.com%252Flp%252Faff%252Fsale.aspx%26ref%3Dhttps%253A%252F%252Fwww.bullguard.com%252Flp%252Faff%252Fcompare_products.aspx%253Fsource%253Daw%26tiba%3DSpecial%2520Sale%26async%3D1%26cdct%3D2%26is_vtc%3D1
Content-Type: image/gif
x-content-type-options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 05-Jul-2017 15:18:36 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,36,35",quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.google.com/ads/user-lists/966688439/?random=1499267016440&cv=8&fst=1499267016440&num=1&fmt=3&guid=ON&u_h=1200&u_w=1920&u_ah=1160&u_aw=1920&u_cd=24&u_his=1&u_tz=-240&u_java=true&u_nplug=9&u_nmime=64&frm=0&url=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&ref=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fcompare_products.aspx%3Fsource%3Daw&tiba=Special%20Sale&async=1&cdct=2&is_vtc=1&random=3881601499&fpvtc=/966688439/%3Frandom%3D1582108966%26cv%3D8%26fst%3D1499266800000%26num%3D1%26fmt%3D3%26guid%3DON%26u_h%3D1200%26u_w%3D1920%26u_ah%3D1160%26u_aw%3D1920%26u_cd%3D24%26u_his%3D1%26u_tz%3D-240%26u_java%3Dtrue%26u_nplug%3D9%26u_nmime%3D64%26frm%3D0%26url%3Dhttps%253A%252F%252Fwww.bullguard.com%252Flp%252Faff%252Fsale.aspx%26ref%3Dhttps%253A%252F%252Fwww.bullguard.com%252Flp%252Faff%252Fcompare_products.aspx%253Fsource%253Daw%26tiba%3DSpecial%2520Sale%26async%3D1%26cdct%3D2%26is_vtc%3D1

GET /ads/user-lists/966688439/?random=1499267016440&cv=8&fst=1499267016440&num=1&fmt=3&guid=ON&u_h=1200&u_w=1920&u_ah=1160&u_aw=1920&u_cd=24&u_his=1&u_tz=-240&u_java=true&u_nplug=9&u_nmime=64&frm=0&url=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&ref=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fcompare_products.aspx%3Fsource%3Daw&tiba=Special%20Sale&async=1&cdct=2&is_vtc=1&random=3881601499&fpvtc=/966688439/%3Frandom%3D1582108966%26cv%3D8%26fst%3D1499266800000%26num%3D1%26fmt%3D3%26guid%3DON%26u_h%3D1200%26u_w%3D1920%26u_ah%3D1160%26u_aw%3D1920%26u_cd%3D24%26u_his%3D1%26u_tz%3D-240%26u_java%3Dtrue%26u_nplug%3D9%26u_nmime%3D64%26frm%3D0%26url%3Dhttps%253A%252F%252Fwww.bullguard.com%252Flp%252Faff%252Fsale.aspx%26ref%3Dhttps%253A%252F%252Fwww.bullguard.com%252Flp%252Faff%252Fcompare_products.aspx%253Fsource%253Daw%26tiba%3DSpecial%2520Sale%26async%3D1%26cdct%3D2%26is_vtc%3D1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Content-Type: image/gif
Date: Wed, 05 Jul 2017 15:03:36 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
Server: adclick_server
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/CMSModules/WebAnalytics/Pages/Content/AnalyticsLog.aspx?data=1920;1200;24;1;5;true;23&guid=fc6bd7c4-ea9c-4557-ad32-ce80379fb93c

POST /CMSModules/WebAnalytics/Pages/Content/AnalyticsLog.aspx?data=1920;1200;24;1;5;true;23&guid=fc6bd7c4-ea9c-4557-ad32-ce80379fb93c HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Content-Length: 0
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive

HTTP/2.0 200 OK
Cache-Control: private, no-store
Content-Type: text/html; charset=utf-8
Date: Wed, 05 Jul 2017 15:03:36 GMT
Server: Microsoft-IIS/8.5
x-aspnet-version: 4.0.30319
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
x-ua-compatible: IE=Edge
Content-Length: 3561
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/cmsapi/webanalytics/LogHit

POST /cmsapi/webanalytics/LogHit HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Content-Length: 143
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive
{"NodeAliasPath":"/lp/aff/sale","DocumentCultureCode":"en-IN","UrlReferrer":"https://www.bullguard.com/lp/aff/compare_products.aspx?source=aw"}
HTTP/2.0 200 OK
Cache-Control: no-cache
Date: Wed, 05 Jul 2017 15:03:36 GMT
Expires: -1
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: VisitorStatus=11060581183; expires=Sun, 05-Jul-2037 15:03:36 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
X-Frame-Options: SAMEORIGIN
x-powered-by: ASP.NET
x-robots-tag: none
Content-Length: 0
X-Firefox-Spdy: h2
----------------------------------------------------------
https://cdn.inspectlet.com/inspectlet.js

GET /inspectlet.js HTTP/1.1
Host: cdn.inspectlet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Date: Wed, 05 Jul 2017 15:03:36 GMT
Content-Type: text/javascript
Set-Cookie: __cfduid=dfa687d551365639367e33bf5200d532c1499267016; expires=Thu, 05-Jul-18 15:03:36 GMT; path=/; domain=.inspectlet.com; HttpOnly
Via: 1.1 vegur
cf-cache-status: HIT
Vary: Accept-Encoding
Expires: Thu, 06 Jul 2017 03:03:36 GMT
Cache-Control: public, max-age=43200
Server: cloudflare-nginx
cf-ray: 379b36476ca723ea-IAD
Content-Encoding: gzip
X-Firefox-Spdy: h2
----------------------------------------------------------
http://gp.symcd.com/

POST / HTTP/1.1
Host: gp.symcd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 83
Content-Type: application/ocsp-request
Connection: keep-alive
0Q0O0M0K0I0	+
HTTP/1.1 200 OK
Server: nginx/1.10.2
Content-Type: application/ocsp-response
Content-Length: 1415
Content-Transfer-Encoding: binary
Cache-Control: max-age=346696, public, no-transform, must-revalidate
Last-Modified: Sun, 2 Jul 2017 15:17:54 GMT
Expires: Sun, 9 Jul 2017 15:17:54 GMT
Date: Wed, 05 Jul 2017 15:03:36 GMT
Connection: keep-alive
----------------------------------------------------------
https://hn.inspectlet.com/ginit/733729599

POST /ginit/733729599 HTTP/1.1
Host: hn.inspectlet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Content-Length: 938
Origin: https://www.bullguard.com
Cookie: __cfduid=dfa687d551365639367e33bf5200d532c1499267016
Connection: keep-alive
w=733729599&uid=-1&sid=-1&nv=true&u=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&or=https%3A%2F%2Fwww.bullguard.com&ref=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fcompare_products.aspx%3Fsource%3Daw&title=Special+Sale&pw=1920&ph=1059&ism=false&cloc=undefined&st=3916&dbgk=&jv=4&identity=&targcv%5Blochref%5D=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&targcv%5Bdoctitle%5D=Special+Sale&targcv%5Blptitle%5D=Special+Sale&targcv%5Blpurl%5D=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fsale.aspx&targcv%5B%24browser%5D%5Bmozilla%5D=true&targcv%5B%24browser%5D%5Bversion%5D=46.0&targcv%5BuserAgent%5D=Mozilla%2F5.0+(Windows+NT+10.0%3B+WOW64%3B+rv%3A46.0)+Gecko%2F20100101+Firefox%2F46.0&targcv%5Bmobchua%5D=Mozilla%2F5.0+(Windows+NT+10.0%3B+WOW64%3B+rv%3A46.0)+Gecko%2F20100101+Firefox%2F46.0&targcv%5Bref%5D=https%3A%2F%2Fwww.bullguard.com%2Flp%2Faff%2Fcompare_products.aspx%3Fsource%3Daw&targcv%5Bnv%5D=true&isvp=false
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
x-powered-by: Express
Cache-Control: no-cache
access-control-allow-origin: https://www.bullguard.com
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With, Content-Type
access-control-allow-credentials: true
Content-Type: application/json; charset=utf-8
Content-Length: 26
Date: Wed, 05 Jul 2017 15:03:36 GMT
Via: 1.1 vegur
----------------------------------------------------------
https://www.bullguard.com/bg/item2.ashx?id=VwP4cmQ8C9s%3d&discount=bpp616&pid=iyEacBTUkdQ%3d

POST /bg/item2.ashx?id=VwP4cmQ8C9s%3d&discount=bpp616&pid=iyEacBTUkdQ%3d HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
X-Requested-With: XMLHttpRequest
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Content-Length: 2
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive
{}
HTTP/2.0 200 OK
Content-Encoding: gzip
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: POST,GET,OPTIONS,PUT
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Wed, 05 Jul 2017 15:03:36 GMT
Server: Super Mega Ultra 99.99
Vary: Accept-Encoding
x-aspnet-version: 2.0.50727
x-ua-compatible: IE=Edge
Content-Length: 182
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/bg/item2.ashx?id=twztBmZjWCc%3d&discount=is616&pid=iyEacBTUkdQ%3d

POST /bg/item2.ashx?id=twztBmZjWCc%3d&discount=is616&pid=iyEacBTUkdQ%3d HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
X-Requested-With: XMLHttpRequest
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Content-Length: 2
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive
{}
HTTP/2.0 200 OK
Content-Encoding: gzip
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: POST,GET,OPTIONS,PUT
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Wed, 05 Jul 2017 15:03:36 GMT
Server: Super Mega Ultra 99.99
Vary: Accept-Encoding
x-aspnet-version: 2.0.50727
x-ua-compatible: IE=Edge
Content-Length: 183
X-Firefox-Spdy: h2
----------------------------------------------------------
https://www.bullguard.com/bg/item2.ashx?id=H7rP7d01Ibg%3d&discount=av216&pid=iyEacBTUkdQ%3d

POST /bg/item2.ashx?id=H7rP7d01Ibg%3d&discount=av216&pid=iyEacBTUkdQ%3d HTTP/1.1
Host: www.bullguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
X-Requested-With: XMLHttpRequest
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Content-Length: 2
Cookie: subaffiliate=nocookie; affiliate=affiliatewindow; CMSPreferredCulture=en-IN; CMSCsrfCookie=dGHbH70AYqiVd41t4dnyvYqExH47HV30mE2pcFdp; ASP.NET_SessionId=m3c4vep0hwh2gmusawr0awij; CMSCurrentTheme=bg; Culture=en; CMSReturning=true; Culture=en
Connection: keep-alive
{}
HTTP/2.0 200 OK
Content-Encoding: gzip
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: POST,GET,OPTIONS,PUT
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Wed, 05 Jul 2017 15:03:36 GMT
Server: Super Mega Ultra 99.99
Vary: Accept-Encoding
x-aspnet-version: 2.0.50727
x-ua-compatible: IE=Edge
Content-Length: 183
X-Firefox-Spdy: h2
----------------------------------------------------------
http://ocsp.usertrust.com/

POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 84
Content-Type: application/ocsp-request
Connection: keep-alive
0R0P0N0L0J0	+
HTTP/1.1 200 OK
Date: Wed, 05 Jul 2017 15:03:38 GMT
Server: Apache
Last-Modified: Tue, 04 Jul 2017 01:07:05 GMT
Expires: Tue, 11 Jul 2017 01:07:05 GMT
Etag: 2C0DB364644A52F923E7A6D68A25AAF67ED12EBE
Cache-Control: max-age=467606,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: dwdccaocsp15
Content-Length: 472
Connection: close
Content-Type: application/ocsp-response
----------------------------------------------------------
https://static.hotjar.com/c/hotjar-485424.js?sv=5

GET /c/hotjar-485424.js?sv=5 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Date: Wed, 05 Jul 2017 15:03:38 GMT
Content-Type: application/javascript
access-control-allow-headers: content-type
access-control-allow-origin: *
Cache-Control: max-age=60
Etag: W/c98d3b28202c2c43831781ed12b3b9e5
Vary: Accept-Encoding
x-cache-hit: 1
X-Frame-Options: SAMEORIGIN
Server: NetDNA-cache/2.2
X-Cache: REVALIDATED
Content-Encoding: gzip
X-Firefox-Spdy: h2
----------------------------------------------------------
https://script.hotjar.com/modules-ba79e850be762a76863b033ba13e7f5b.js

GET /modules-ba79e850be762a76863b033ba13e7f5b.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Date: Wed, 05 Jul 2017 15:03:38 GMT
Content-Type: application/javascript
x-amz-id-2: H1oAOPovRplqG3iJ4XQOnUN0il/i0M50G4ElMRolOEPcQ7IgWQHuN4tiv43iubYxDmSluhDG3Qg=
x-amz-request-id: 156DB8881D6A71DB
Last-Modified: Wed, 05 Jul 2017 14:28:05 GMT
Etag: W/"ba79e850be762a76863b033ba13e7f5b"
Cache-Control: max-age=31536000
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Encoding: gzip
X-Firefox-Spdy: h2
----------------------------------------------------------
https://vars.hotjar.com/rcj-99d43ead6bdf30da8ed5ffcb4f17100c.html

GET /rcj-99d43ead6bdf30da8ed5ffcb4f17100c.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Connection: keep-alive

HTTP/2.0 200 OK
Date: Wed, 05 Jul 2017 15:03:38 GMT
Content-Type: text/html
x-amz-id-2: 10/H1Yyv9FJ1T3X5Rbf2xKKjL/2mRWm/Zy9th4jY5MUbVQXy/jYuGTqw3bwy/G/onPkjT2NCDzk=
x-amz-request-id: 8FEB2A5BF4C5D54E
Last-Modified: Tue, 07 Mar 2017 10:35:33 GMT
Etag: W/"99d43ead6bdf30da8ed5ffcb4f17100c"
Cache-Control: max-age=31536000
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Encoding: gzip
X-Firefox-Spdy: h2
----------------------------------------------------------
https://insights.hotjar.com/api/v1/client/sites/485424/visit-data?sv=5

OPTIONS /api/v1/client/sites/485424/visit-data?sv=5 HTTP/1.1
Host: insights.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://www.bullguard.com
Connection: keep-alive

HTTP/1.1 200 OK
access-control-allow-headers: content-type,content-type
access-control-allow-origin: *
Content-Type: application/json
Date: Wed, 05 Jul 2017 15:03:39 GMT
Server: openresty
X-Frame-Options: SAMEORIGIN
Content-Length: 2
Connection: keep-alive
----------------------------------------------------------
https://insights.hotjar.com/api/v1/client/sites/485424/visit-data?sv=5

POST /api/v1/client/sites/485424/visit-data?sv=5 HTTP/1.1
Host: insights.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Referer: https://www.bullguard.com/lp/aff/sale.aspx
Content-Length: 226
Origin: https://www.bullguard.com
Connection: keep-alive
{"window_width":1920,"window_height":1059,"included_in_sample":true,"url":"https://www.bullguard.com/lp/aff/sale.aspx","fingerprint":"b015b422c0eff968bc1a78fa178a48ce","insert_page_visit":false,"insert_traffic_log_entry":true}
HTTP/1.1 200 OK
access-control-allow-headers: content-type
access-control-allow-origin: *
Content-Encoding: gzip
Content-Type: application/json
Date: Wed, 05 Jul 2017 15:03:39 GMT
Server: openresty
Vary: Accept-Encoding
x-cache-hit: 0
X-Frame-Options: SAMEORIGIN
Content-Length: 83
Connection: keep-alive
----------------------------------------------------------
http://ocsp.digicert.com/

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 83
Content-Type: application/ocsp-request
Connection: keep-alive
0Q0O0M0K0I0	+
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Content-Type: application/ocsp-response
Date: Wed, 05 Jul 2017 15:04:10 GMT
Etag: "595cc32f-1d7"
Expires: Wed, 12 Jul 2017 03:04:10 GMT
Last-Modified: Wed, 05 Jul 2017 10:45:03 GMT
Server: ECS (dca/246E)
X-Cache: HIT
Content-Length: 471
----------------------------------------------------------
https://incoming.telemetry.mozilla.org/submit/telemetry/069bca10-9c81-439b-9b5d-1053724f523c/main/Firefox/46.0.1/release/20160502172042?v=4

POST /submit/telemetry/069bca10-9c81-439b-9b5d-1053724f523c/main/Firefox/46.0.1/release/20160502172042?v=4 HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Content-Length: 4304
Connection: keep-alive
‹
HTTP/1.1 200 OK
Content-Type: text/plain
Date: Wed, 05 Jul 2017 15:04:10 GMT
Content-Length: 2
Connection: keep-alive
----------------------------------------------------------
http://clients1.google.com/ocsp

POST /ocsp HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 75
Content-Type: application/ocsp-request
Connection: keep-alive
0I0G0E0C0A0	+
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Jul 2017 15:04:43 GMT
Expires: Sun, 09 Jul 2017 15:04:43 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
----------------------------------------------------------
https://safebrowsing.google.com/safebrowsing/downloads?client=navclient-auto-ffox&appver=46.0.1&pver=2.2&key=AIzaSyD_Drzahe4dBzGCZ9ArvowCvrPx_yFrlCM

POST /safebrowsing/downloads?client=navclient-auto-ffox&appver=46.0.1&pver=2.2&key=AIzaSyD_Drzahe4dBzGCZ9ArvowCvrPx_yFrlCM HTTP/1.1
Host: safebrowsing.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 20226
Content-Type: text/plain
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
goog-badbinurl-shavar;a:129999-131730:s:133139-133478,133481-134204,134206-135033
goog-downloadwhite-digest256;a:5-84:s:2-7,10-59
goog-malware-shavar;a:252470-269379:s:247721-247761,247763-248082,248084-248437,248439-248592,248594-248955,248957-248971,248973-249034,249036,249038-249050,249052-249465,249467-249736,249738-249875,249877-249926,249928-249958,249960-249961,249963-250037,250039-250054,250056-250331,250333-250351,250353-250405,250407-250413,250415-250420,250422-250467,250469-250479,250481-250629,250631-250655,250657-250718,250720-250800,250802-250818,250820-250882,250884-250895,250897-250906,250908-250910,250912-250941,250943-250950,250952-250959,250961-250965,250967,250969-250977,250979-251019,251021-251046,251048-251052,251054-251058,251060-251070,251072-251130,251132-251136,251138-251154,251157-251204,251206-251210,251212-251232,251234-251298,251300-251450,251452-251484,251486-251517,251519-251537,251539-251627,251629-251630,251632-251644,251646-251790,251792-251955,251957-252123,252125-252195,252197-252198,252200-252234,252236-252382,252384-253174,253176-265159
goog-phish-shavar;a:471099-482743:s:306010-306017,306021-306024,306026,306028,306030-306032,306035-306042,306045-306055,306057-306059,306061-306066,306068-306072,306075,306077-306090,306092-306094,306097-306100,306103-306118,306121-306139,306141-306144,306146-306147,306149-306152,306154-306170,306172-306174,306177,306179-306183,306185-306188,306190-306192,306194-306198,306201-306205,306207-306212,306214-306219,306221-306229,306231,306233-306235,306237-306240,306242-306265,306267,306269-306275,306277-306278,306280-306282,306284-306285,306287-306288,306290,306292-306293,306295-306301,306303,306305,306307-306310,306312-306314,306317,306319-306320,306322-306337,306339-306340,306342-306361,306363-306367,306369-306377,306379-306388,306390-306393,306396-306400,306402-306405,306407-306412,306415-306416,306418,306420-306421,306423-306426,306428-306431,306433-306435,306437-306439,306441-306442,306444-306445,306448-306451,306453,306455-306457,306459-306469,306471-306472,306475-306481,306484-306492,306494-306502,306504-306508,306510-306515,306517-306523,306525-306529,306532-306535,306537-306542,306544-306551,306553-306555,306557-306560,306562,306565-306567,306570-306572,306574-306579,306581-306582,306584,306586-306597,306599-306600,306602-306608,306610-306613,306615-306622,306624-306632,306634-306645,306647-306650,306653,306655-306663,306665,306667-306672,306674-306676,306678-306683,306685-306692,306694-306704,306706-306707,306709-306714,306716-306719,306722-306731,306733-306740,306742-306761,306763-306783,306785-306798,306802-306827,306829-306839,306841-306845,306847-306856,306858-306861,306863-306875,306877-306883,306885,306888-306890,306893-306896,306899-306913,306915,306917-306929,306931,306934-306969,306971-306989,306992-306995,306997-307003,307005-307017,307019-307024,307026,307028-307032,307035-307064,307066-307073,307075,307077,307081-307083,307086-307089,307091-307094,307096-307104,307106-307113,307115-307121,307123-307133,307135-307137,307139-307140,307142-307168,307171-307172,307175-307176,307178-307203,307205-307239,307242-307301,307303-307308,307311-307322,307324-307338,307340-307382,307384-307396,307398-307415,307417-307425,307427-307436,307439-307454,307456-307479,307481-307486,307488-307495,307497-307498,307500-307576,307578-307582,307584-307591,307593-307595,307597-307599,307602-307627,307629-307651,307653-307655,307658-307685,307687-307693,307696-307700,307702-307744,307746-307786,307788,307790-307798,307800-307806,307808-307817,307819-307857,307860-307864,307866-307875,307877-307888,307890-307902,307904-307922,307925-307930,307933-307953,307956,307958-307965,307967-307980,307982-308022,308024-308058,308060-308066,308068-308077,308079-308101,308103-308109,308111-308126,308128-308184,308187-308204,308206-308210,308212-308215,308217-308219,308221-308255,308257-308258,308261-308263,308266-308285,308287-308288,308290-308300,308302-308307,308309-308315,308317-308326,308328-308335,308337-308344,308346-308367,308369-308370,308372,308374-308376,308379-308392,308394-308417,308419-308425,308427-308429,308431-308459,308461-308506,308508,308510-308524,308526,308528-308529,308531-308536,308538-308542,308544-308575,308577-308593,308595-308603,308605-308608,308610-308617,308619-308631,308633-308644,308646-308682,308684-308685,308687-308722,308724-308729,308731-308761,308763-308815,308818-308828,308830-308865,308867,308869-308871,308873-308884,308886-308899,308901-308907,308909-308924,308927-308944,308946-308958,308960-308974,308976-308995,308997-309030,309032-309044,309046-309079,309081-309095,309097-309121,309123-309154,309156-309191,309193,309195-309202,309204-309216,309218-309250,309252-309337,309339-309349,309351-309366,309368-309390,309392-309428,309430-309451,309453-309463,309465-309473,309475-309480,309482-309483,309485-309503,309505-309511,309513,309515-309516,309518-309523,309525-309583,309585-309593,309595-309604,309606,309608-309618,309620-309805,309807-309817,309819-309833,309835-309860,309862-309900,309902-309906,309908-309927,309929-309947,309949-309964,309966-309968,309970-310055,310057-310063,310065-310069,310072-310077,310079-310106,310108-310117,310119-310142,310144-310180,310182-310220,310222-310227,310229-310235,310237-310257,310259-310288,310290-310339,310341-310367,310369-310403,310405-310419,310421-310444,310446-310447,310449-310505,310507-310525,310527-310567,310569-310579,310581-310585,310587-310597,310599,310601-310603,310605-310637,310639-310653,310655-310669,310671-310703,310705-310740,310742-310749,310751-310769,310771-310775,310777-310792,310794-310826,310828-310847,310849-310860,310862-310878,310880-310882,310884-310893,310895-310905,310907-311014,311016-311031,311033-311039,311041-311059,311061-311098,311100-311109,311111-311119,311121-311124,311126-311141,311143-311172,311174,311176-311186,311188-311189,311191-311198,311200-311269,311271-311290,311292-311296,311298-311331,311333-311367,311370-311391,311393-311410,311412-311420,311422-311447,311449-311535,311537-311545,311547-311574,311576-311577,311579-311587,311589-311607,311609-311654,311656-311676,311678-311793,311795-311822,311824-311836,311838-311859,311861-311868,311870-311874,311876-311878,311880,311882-311884,311886-311889,311891-311902,311905-311909,311911-311920,311922,311924-311931,311933,311935-311956,311958-311960,311962-311966,311968-311971,311973-311977,311979,311981-311991,311993,311995,311997,311999-312010,312012-312025,312027-312032,312034,312036-312040,312043-312055,312057-312095,312097,312099-312116,312118-312128,312130-312156,312158-312161,312163-312165,312167-312172,312174-312186,312188,312190-312206,312208-312238,312240,312242-312286,312288-312324,312326-312338,312340-312343,312345-312401,312403-312430,312432-312435,312437-312463,312465-312476,312478-312506,312508-312520,312522-312525,312527-312577,312579-312581,312583-312622,312624-312733,312735-312798,312800-312872,312874-312879,312881-312888,312890-312927,312929-312950,312952-312994,312996-313029,313031-313064,313066-313159,313161-313177,313179-313182,313184-313289,313291-313328,313330-313336,313338-313355,313357-313378,313380-313437,313439-313456,313458-313504,313506-313636,313638-313647,313649-313674,313676-313680,313682-313688,313690-313735,313737-313742,313744-313756,313758-313760,313762-313811,313813-313839,313841-313848,313850-313856,313858-313880,313882-313889,313891-313899,313901,313903-313906,313908-313923,313925-313937,313939-313943,313945-313954,313956-313983,313985-313987,313989-313991,313993-314001,314004-314013,314015-314032,314034,314036-314048,314050-314058,314060-314068,314070,314072-314073,314075-314076,314078-314097,314099-314102,314104-314134,314136-314137,314139-314144,314146-314162,314164-314200,314202-314208,314210-314229,314231-314240,314242-314253,314255-314296,314298-314335,314337-314339,314341-314344,314346-314370,314372-314384,314386-314393,314395-314424,314426-314446,314448-314477,314479-314501,314503-314534,314536-314544,314546-314551,314553-314554,314556-314589,314591-314593,314595-314606,314608-314618,314620-314633,314635-314640,314642-314643,314645-314655,314657-314658,314660-314666,314668-314692,314694-314706,314709-314727,314730-314742,314744-314747,314749-314764,314766,314768-314780,314782-314788,314790-314801,314803-314819,314821-314823,314825-314843,314846-314858,314860-314865,314867-314887,314889-314894,314896-314971,314973-314987,314989-315016,315018-315021,315023-315025,315027-315035,315037-315039,315041-315045,315047-315078,315080-315081,315083-315111,315113-315128,315131-315149,315152,315154-315174,315176,315178-315221,315223-315237,315240-315245,315247-315251,315253-315272,315274-315276,315278-315285,315287-315289,315291-315307,315309-315314,315316-315319,315321-315324,315326-315340,315342,315344-315364,315366-315372,315374-315377,315380-315384,315386-315397,315399-315403,315405-315416,315418,315420-315431,315433-315440,315443,315445-315447,315449-315451,315453-315468,315470-315484,315486-315522,315524-315531,315533-315541,315543-315545,315547-315552,315554-315563,315565-315576,315578-315584,315586-315592,315594-315610,315612,315614,315616-315623,315625-315636,315638,315640-315642,315644-315649,315651-315655,315657-315668,315670,315672-315676,315678-315681,315683-315685,315687-315689,315691-315694,315696-315710,315712-315729,315731-315733,315735-315742,315744-315746,315748-315753,315755-315759,315761-315762,315764-315778,315780,315782-315788,315790-315800,315802-315811,315813-315814,315816-315819,315821-315836,315838-315858,315860-315894,315896-315932,315934-315937,315939-315942,315944-315965,315967-315973,315975-315989,315991-316010,316012-316020,316022-316027,316029-316059,316061-316075,316077-316082,316084-316085,316087,316089-316484,316486-316502,316504-316916,316918-316990,316992-317395,317397-326398
goog-unwanted-shavar;a:75709-97480:s:70896,70898,70905,70908,70911,70913-70915,70921-70922,70925-70928,70931,70933-70936,70939-70943,70948,70951,70953-70954,70958-70961,70968-70969,70971-70972,70977-70978,70980-70985,70987,70989-70991,70993-70996,71000-71006,71008-71012,71017-71019,71021,71024,71026,71028,71032-71033,71040,71042-71043,71045-71049,71052-71053,71055,71058,71060,71062,71064-71065,71067-71068,71070,71072,71074-71079,71081,71085,71087,71090-71091,71095,71100-71104,71106-71108,71110,71117,71119-71121,71125-71128,71130-71131,71134-71135,71138-71139,71144,71151,71158,71161,71166,71176,71178-71187,71189,71192-71193,71195-71196,71198-71200,71202-71203,71205-71207,71209,71211,71214-71216,71221,71223,71227-71230,71236-71237,71244,71246,71248-71249,71256,71261,71265,71267,71270-71271,71273,71275,71278-71279,71281-71282,71284,71288-71290,71293-71294,71299,71301,71316-71317,71319-71322,71324-71325,71327-71333,71335,71337-71338,71340,71342,71345-71348,71351-71354,71358-71361,71363-71364,71366,71369-71373,71376,71385,71389-71390,71394,71397-71398,71400,71402,71405,71408,71410-71411,71416,71419-71420,71422,71426-71427,71431-71438,71440-71443,71445-71451,71453-71454,71457-71459,71461-71469,71473,71477-71478,71483-71485,71487,71489-71494,71500-71501,71503-71505,71507-71508,71510,71512-71517,71519-71521,71523-71526,71528,71530-71536,71538-71539,71541-71543,71545-71548,71552-71560,71562,71564-71572,71574-71585,71588-71590,71593-71596,71598-71604,71606-71608,71610-71615,71617-71627,71629-71634,71637,71640-71644,71648-71650,71652-71655,71657-71666,71668-71680,71682-71685,71689-71691,71693-71700,71702,71704-71712,71714-71717,71721,71723-71727,71730-71739,71741,71744-71745,71747-71750,71753,71755-71769,71771-71777,71779,71781-71788,71791-71794,71796-71804,71806-71811,71813-71817,71819-71821,71823-71826,71828-71831,71833,71835,71837-71846,71848-71853,71856-71859,71861-71864,71866-71867,71870-71871,71873-71880,71882-71883,71888-71890,71893-71902,71906,71908,71910-71911,71914-71915,71918-71926,71928-71932,71934-71936,71938-71960,71962-71963,71965-71970,71972-71973,71975-71979,71981-71986,71988,71990-71993,71995-71997,71999-72007,72009-72012,72014-72015,72017-72029,72031-72033,72035,72041,72049-72052,72054-72057,72059,72061,72063-72068,72070-72076,72078-72087,72090,72094-72095,72097,72099,72102-72105,72107-72114,72116,72118-72120,72122-72124,72126-72127,72129-72134,72136-72139,72141-72143,72145,72150,72152,72156-72160,72162-72163,72166-72171,72173,72175,72179,72182,72186-72192,72197-72198,72201,72203-72215,72218,72220-72221,72224-72225,72227-72229,72231-72232,72234,72236-72241,72243-72245,72247,72249-72251,72254-72257,72260,72262,72265-72290,72296,72298-72299,72301-72306,72308,72310,72314-72315,72318-72320,72322-72326,72328-72331,72333-72335,72337,72339-72340,72344-72345,72347-72353,72355-72365,72367,72369-72379,72382-72384,72387-72394,72397-72398,72400-72402,72404-72405,72407,72409-72421,72423-72432,72434-72437,72439-72442,72445-72450,72452-72454,72457-72459,72461-72474,72476,72478-72491,72493-72494,72497-72500,72503-72506,72508-72510,72512,72514,72516-72517,72519,72522-72528,72530-72533,72535-72537,72539-72543,72545-72550,72552,72554-72555,72557,72559-72562,72564-72570,72572,72575,72577-72584,72586-72598,72601-72604,72606-72607,72610,72612-72617,72619-72621,72623-72631,72633-72661,72663-72667,72670-72671,72674-72676,72678-72680,72683,72685-72688,72690-72695,72697-72700,72702-72716,72719-72725,72727,72729-72736,72738-72755,72757-72772,72774-72776,72778-72782,72784,72786-72788,72790-72791,72793-72797,72799-72800,72802,72804-72808,72812-72814,72816-72817,72821-72823,72825-72828,72831-72844,72846-72854,72856-72859,72861-72868,72870,72872-72874,72876,72881,72883,72885-72896,72898-72905,72907-72908,72910-72916,72918-72919,72921-72936,72938-72939,72941-72942,72945-72947,72949-72957,72961-72963,72965-72973,72975-72978,72980,72982-72984,72987-72992,72994-72995,72998-73006,73008-73019,73022,73024-73030,73032-73047,73049-73060,73063-73064,73066-73067,73069,73071-73079,73081-73082,73084-73088,73091-73102,73104-73106,73108-73110,73112,73114,73117,73119-73123,73125-73126,73133-73135,73137-73138,73140,73142-73143,73146-73147,73149,73151,73155-73156,73159,73161,73168-73172,73179-73180,73182-73184,73188-73191,73194,73197-73199,73201-73202,73204,73206,73208-73220,73222-73226,73228-73235,73237-73238,73240-73245,73247,73251,73253,73255,73259,73261,73263-73284,73286,73288,73290-73292,73295-73297,73299,73302-73303,73305-73311,73313-73314,73316,73318-73342,73344-73365,73367-73369,73372-73379,73381-73391,73393-73397,73400,73402-73409,73411-73414,73416-73438,73440-73455,73457-73464,73466-73467,73471-73472,73476,73478-73489,73491-73504,73506-73518,73520-73525,73527-73530,73532-73541,73543-73555,73557-73565,73567-73574,73578-73594,73596-73608,73610-73616,73618-73651,73653-73663,73665-73670,73675-73680,73683-73714,73716-73717,73719-73720,73722-73766,73768-73771,73773-73785,73787-73792,73795-73796,73798,73800-73807,73809-73826,73828-73855,73857-73865,73867-73878,73880-73887,73890-73893,73895-73899,73901-73902,73904,73906-73907,73909,73911-73916,73918,73921-73933,73935-73942,73944-73954,73956-73965,73967-73974,73976-73977,73979-73982,73985-73997,73999-74005,74007-74008,74010-74015,74017-74022,74024-74027,74029-74050,74052-74067,74069-74070,74073,74075-74079,74082-74099,74101-74109,74113-74114,74116-74120,74122,74124,74126,74128-74139,74141-74144,74146-74155,74158-74159,74161-74164,74166-74186,74188-74213,74215,74217-74219,74221-74225,74227-74257,74259-74267,74269-74292,74294-74308,74310-74336,74339-74340,74348,74351,74353-74373,74375-74382,74384-74405,74408-74431,74433-74465,74467-74469,74471-74476,74478-74480,74483-74484,74486-74521,74523,74525-74564,74566-74568,74570-74585,74587-74592,74594-74633,74635,74637-74643,74645-74672,74674-74738,74740-74750,74752-74778,74780-74786,74788-74792,74794-74803,74806,74809-74814,74816,74818-74847,74849-74853,74855-74869,74872-74896,74898-74924,74926-74928,74930-74935,74939,74941,74943-74963,74965-74995,74997-75001,75003-75015,75017-75026,75028,75030-75049,75051-75074,75076-75079,75081-75103,75105-75106,75109-75122,75124-75161,75165,75167-75191,75193-75203,75205-75210,75214-75227,75229,75232-75240,75242-75255,75257-75262,75266,75268-75273,75276-75278,75281-75363,75365-75372,75374-75380,75382,75384-75389,75391-75401,75403-75415,75417-75418,75420-75430,75432-75449,75451-75467,75469-75490,75492-75498,75500-75503,75505-75522,75525-75534,75536-75547,75549-75562,75565-75582,75584-75587,75589-75596,75598-75606,75608-75609,75611-75646,75649,75651-75652,75656-75682,75684-75721,75723,75725-75730,75732-75765,75768-75776,75779,75781-75796,75798-75830,75832,75834-75851,75853-75856,75859-75870,75872-75884,75887-75888,75890-75961,75963-75969,75971-75973,75975-76002,76006-76018,76021-76026,76028,76030-76036,76038-76045,76047-76053,76055-76056,76058-76071,76073-76083,76085-76086,76088,76090-76097,76099-76142,76144-76163,76165,76169-76176,76178-76181,76184-76188,76191,76193-76200,76202-76207,76209-76214,76216-76217,76219-76243,76245-76247,76249-76258,76261-76289,76291-76297,76299-76308,76310-76313,76316-76324,76326-76370,76372,76374-76390,76392-76406,76408-76413,76417-76421,76423-76450,76452-76467,76470-76494,76497-76509,76511-76577,76580-76589,76592-76610,76613-76631,76633-76661,76663,76665-76745,76747-76755,76757-76764,76766-76781,76783-76795,76797-76820,76822-76837,76839-76898,76901-76942,76945-76953,76956-77002,77004-77010,77012-77016,77018-77036,77038-77048,77050-77088,77090-77125,77127-77324,77326-77344,77346-77376,77378-77383,77386-77454,77456-77460,77462-77475,77477-77493,77497-77546,77548-77587,77589-77596,77598-77612,77614-77629,77631-77656,77658-77727,77729-77762,77764,77766-77830,77832-77836,77838-77843,77845-77865,77867-77876,77878-77899,77901-77949,77951-77983,77985-77987,77989-77996,77998-78047,78049-78068,78070-78100,78102-78111,78113-78119,78121-78128,78130-78186,78188-78238,78240-78248,78250-78265,78267-78300,78302-78320,78322-78339,78341-78373,78375-78417,78419-78441,78444-78458,78460-78480,78482-78496,78498-78502,78504-78535,78537-78544,78548-78634,78636-78677,78679-78702,78704-78718,78720-78744,78746-78783,78785-78786,78789-78794,78796-78827,78829,78831-78911,78913-78942,78944-78959,78961-79000,79002-79076,79078-79083,79085-79088,79090-79123,79125-79201,79203-79218,79220-79222,79224-79225,79227-79250,79252-79258,79260-79268,79270-79274,79276-79308,79311-79312,79314-79321,79323-79329,79331-79368,79370-79394,79396-79462,79464-79474,79476-79517,79519-79547,79549-79561,79563-79600,79603-79616,79618-79683,79685-79688,79690-79733,79735-79742,79744-79757,79759-79793,79796-79845,79847-79863,79865-79992,79994-80004,80006-80014,80016-80056,80058-80077,80079-80082,80084-80088,80090-80105,80107-80110,80112-80114,80116-80118,80120-80142,80144-80146,80148-80155,80157-80211,80213-80224,80226-80269,80271-80289,80291-80301,80303-80304,80306-80328,80330-80333,80335-80342,80344-80362,80365-80366,80368-80398,80400-80441,80443-80447,80449-80513,80515-80584,80586-80633,80635-80640,80642-80645,80647-80648,80650-80656,80658-80718,80720-80728,80730-80863,80865-80941,80943-80944,80946-80960,80963-80966,80968-80975,80977-80980,80982-80988,80991-80992,80994-81002,81005-81017,81020-81037,81039-81098,81100-81134,81136-81256,81258-81351,81353-81367,81370-81542,81544-81566,81568-81656,81658-81753,81756-81763,81766,81768-81804,81806-82028,82030-82126,82128,82130-82234,82236-82352,82355-82379,82381-82390,82392-82412,82414-82456,82458-82560,82562-82755,82757,82759-82776,82778-82814,82816-82947,82949-83090,83092-83179,83181-83369,83371-83446,83448-83485,83487-83542,83544-83674,83677-83745,83747-83796,83798-84009,84011-84205,84207-84722,84724-84780,84782-84905,84907-84939,84941-85022,85024-85193,85195-85227,85229-85231,85233-85247,85249-85595,85597-85888,85890-85939,85941-86333,86335-86640,86642-86741,86743-87028,87030-87083,87085-87092,87094-87147,87149-87154,87156-87235,87237-87294,87296-87385,87387-87443,87445-87651,87653-87715,87717-88123,88125-88419,88421-88486,88489-88661,88663-88697,88699-88868,88870-88948,88950-89119,89121-89175,89177-89187,89189-89239,89241-89265,89267-89274,89276-89307,89309-89365,89367-89419,89421-89511,89513-89653,89655-89870,89872-90237,90239-90518,90520-90742,90745-90819,90821-91071,91073-91240,91242-91312,91314-91517,91519-91680,91682-91711,91713-91944,91946-92049,92051-93043

HTTP/2.0 200 OK
Content-Type: application/vnd.google.safebrowsing-update
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/answer/151657?hl=en for more info."
x-content-type-options: nosniff
Date: Wed, 05 Jul 2017 15:04:44 GMT
Server: HTTP server (unknown)
Content-Length: 608
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Set-Cookie: NID=107=ErypgYjC3QQFM_URsXm5ZMeL7_Xy9yRnqEHHcj8xqeq7Rs4L0MtJ8Nhmk3zNvAjQw4wqPZod5ss6W92Ij1jau7D_Zi9t0I0wXL0AaZfUD-PgSVhAx8bF9k2b7kzShusw; expires=Thu, 04-Jan-2018 15:04:44 GMT; path=/; domain=.google.com; HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
Expires: Wed, 05 Jul 2017 15:04:44 GMT
Cache-Control: private
X-Firefox-Spdy: h2
----------------------------------------------------------
https://safebrowsing-cache.google.com/safebrowsing/rd/ChVnb29nLWJhZGJpbnVybC1zaGF2YXI4AEACSgwIARD6nggY-p4IIAFKDAgAEJOFCBiThQggAQ

GET /safebrowsing/rd/ChVnb29nLWJhZGJpbnVybC1zaGF2YXI4AEACSgwIARD6nggY-p4IIAFKDAgAEJOFCBiThQggAQ HTTP/1.1
Host: safebrowsing-cache.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NID=107=ErypgYjC3QQFM_URsXm5ZMeL7_Xy9yRnqEHHcj8xqeq7Rs4L0MtJ8Nhmk3zNvAjQw4wqPZod5ss6W92Ij1jau7D_Zi9t0I0wXL0AaZfUD-PgSVhAx8bF9k2b7kzShusw
Pragma: no-cache
Cache-Control: no-cache

HTTP/2.0 200 OK
Content-Type: application/vnd.google.safebrowsing-chunk
x-content-type-options: nosniff
Content-Encoding: gzip
Date: Wed, 05 Jul 2017 14:43:04 GMT
Server: HTTP server (unknown)
Content-Length: 331
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public,max-age=172800
Age: 1300
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://safebrowsing-cache.google.com/safebrowsing/rd/ChNnb29nLW1hbHdhcmUtc2hhdmFyOABAAkoMCAEQyJcQGMiXECABSgwIABDEuBAYxLgQIAE

GET /safebrowsing/rd/ChNnb29nLW1hbHdhcmUtc2hhdmFyOABAAkoMCAEQyJcQGMiXECABSgwIABDEuBAYxLgQIAE HTTP/1.1
Host: safebrowsing-cache.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NID=107=ErypgYjC3QQFM_URsXm5ZMeL7_Xy9yRnqEHHcj8xqeq7Rs4L0MtJ8Nhmk3zNvAjQw4wqPZod5ss6W92Ij1jau7D_Zi9t0I0wXL0AaZfUD-PgSVhAx8bF9k2b7kzShusw
Pragma: no-cache
Cache-Control: no-cache

HTTP/2.0 200 OK
Content-Type: application/vnd.google.safebrowsing-chunk
x-content-type-options: nosniff
Content-Encoding: gzip
Date: Wed, 05 Jul 2017 14:43:58 GMT
Server: HTTP server (unknown)
Content-Length: 847
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public,max-age=172800
Age: 1246
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://safebrowsing-cache.google.com/safebrowsing/rd/ChFnb29nLXBoaXNoLXNoYXZhcjgAQAJKDAgBEP_1Exj_9RMgAUoMCAAQuLsdGLi7HSAB

GET /safebrowsing/rd/ChFnb29nLXBoaXNoLXNoYXZhcjgAQAJKDAgBEP_1Exj_9RMgAUoMCAAQuLsdGLi7HSAB HTTP/1.1
Host: safebrowsing-cache.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NID=107=ErypgYjC3QQFM_URsXm5ZMeL7_Xy9yRnqEHHcj8xqeq7Rs4L0MtJ8Nhmk3zNvAjQw4wqPZod5ss6W92Ij1jau7D_Zi9t0I0wXL0AaZfUD-PgSVhAx8bF9k2b7kzShusw
Pragma: no-cache
Cache-Control: no-cache

HTTP/2.0 200 OK
Content-Type: application/vnd.google.safebrowsing-chunk
x-content-type-options: nosniff
Content-Encoding: gzip
Date: Wed, 05 Jul 2017 14:42:17 GMT
Server: HTTP server (unknown)
Content-Length: 1938
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public,max-age=172800
Age: 1347
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------
https://safebrowsing-cache.google.com/safebrowsing/rd/ChRnb29nLXVud2FudGVkLXNoYXZhcjgAQAJKDAgBEPTWBRj01gUgAUoMCAAQyfkFGMn5BSAB

GET /safebrowsing/rd/ChRnb29nLXVud2FudGVkLXNoYXZhcjgAQAJKDAgBEPTWBRj01gUgAUoMCAAQyfkFGMn5BSAB HTTP/1.1
Host: safebrowsing-cache.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NID=107=ErypgYjC3QQFM_URsXm5ZMeL7_Xy9yRnqEHHcj8xqeq7Rs4L0MtJ8Nhmk3zNvAjQw4wqPZod5ss6W92Ij1jau7D_Zi9t0I0wXL0AaZfUD-PgSVhAx8bF9k2b7kzShusw
Pragma: no-cache
Cache-Control: no-cache

HTTP/2.0 200 OK
Content-Type: application/vnd.google.safebrowsing-chunk
x-content-type-options: nosniff
Content-Encoding: gzip
Date: Wed, 05 Jul 2017 14:43:18 GMT
Server: HTTP server (unknown)
Content-Length: 138
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public,max-age=172800
Age: 1286
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"
X-Firefox-Spdy: h2
----------------------------------------------------------