Overview

URLhelixsleep.com/
IP 23.227.38.32 (Canada)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-02-05 08:18:29 UTC
StatusLoading report..
IDS alerts1
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (75)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.google.no (1) 25607 2012-06-26 23:22:08 UTC 2023-02-05 03:03:41 UTC 142.250.74.131
jumbe.zaius.com (1) 31700 2014-11-23 10:25:41 UTC 2023-02-05 08:18:23 UTC 34.238.63.85
partner.getmulberry.com (2) 58705 2018-11-20 14:34:22 UTC 2023-02-05 08:18:23 UTC 34.224.172.215
helixsleep.com (2) 283127 2014-12-12 03:31:48 UTC 2023-02-04 08:18:27 UTC 23.227.38.32
monitoring.getelevar.com (6) 85993 2019-12-30 19:04:37 UTC 2023-02-04 12:36:09 UTC 34.102.157.158
static.zdassets.com (8) 2154 2018-06-23 22:11:55 UTC 2023-02-05 04:26:06 UTC 104.18.72.113
helix-sleep.tkjf.net (1) 974893 2019-05-08 22:39:05 UTC 2023-02-05 08:18:19 UTC 52.18.195.183
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-02-04 17:50:33 UTC 34.160.144.191
ocsp.sca1b.amazontrust.com (14) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 54.230.245.100
googleads.g.doubleclick.net (2) 42 2012-05-21 07:15:40 UTC 2023-02-05 00:40:10 UTC 142.250.74.2
us-library.klarnaservices.com (1) 22302 2018-03-06 23:50:32 UTC 2023-02-05 08:18:21 UTC 143.204.55.56
d2jjzw81hqbuqv.cloudfront.net (1) 0 2014-05-22 06:49:45 UTC 2023-02-04 12:07:39 UTC 54.230.111.128 Unknown ranking
ocsp.r2m01.amazontrust.com (1) 0 2022-10-12 20:43:53 UTC 2023-02-05 03:57:32 UTC 54.230.80.227 Domain (amazontrust.com) ranked at: 581
cdn.verifypass.com (1) 37836 2019-05-29 18:34:42 UTC 2023-02-04 17:30:23 UTC 188.114.96.1
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-02-04 17:13:19 UTC 34.117.237.239
ext.chtbl.com (1) 10687 2020-07-04 04:05:11 UTC 2023-02-03 22:55:54 UTC 143.204.55.80
data.adxcel-ec2.com (1) 3678 2014-05-02 19:41:47 UTC 2023-02-05 02:40:20 UTC 34.225.204.170
cdn.usefathom.com (1) 35845 2018-08-31 10:04:23 UTC 2023-02-04 23:05:34 UTC 194.242.11.186
ocsp.pki.goog (24) 175 2017-06-14 07:23:31 UTC 2023-02-04 17:12:07 UTC 142.250.74.131
cdn.equalweb.com (3) 26327 2019-05-28 21:42:28 UTC 2023-02-04 17:06:22 UTC 104.26.12.95
monorail-edge.shopifysvc.com (1) 2944 2019-08-29 18:44:35 UTC 2023-02-05 04:04:58 UTC 185.146.173.20
ottawa.getmulberry.com (1) 94725 2019-09-01 09:33:07 UTC 2023-02-05 08:18:21 UTC 54.175.246.147
analytics.getshogun.com (1) 13278 2018-09-10 05:43:53 UTC 2023-02-04 05:14:58 UTC 151.101.66.133
d174f84q5mcorf.cloudfront.net (1) 0 2016-08-20 17:27:48 UTC 2023-02-04 05:58:31 UTC 143.204.42.228 Unknown ranking
heapanalytics.com (1) 27367 2013-04-10 10:41:59 UTC 2023-02-05 06:06:53 UTC 34.195.230.215
www.affirm.com (2) 6459 2018-03-27 12:23:57 UTC 2023-02-05 08:18:18 UTC 143.204.55.126
staticw2.yotpo.com (3) 6769 2014-05-09 05:00:46 UTC 2023-02-04 05:42:01 UTC 95.101.97.70
www.google.com (2) 7 2012-11-08 00:08:21 UTC 2023-02-05 03:05:25 UTC 142.250.74.164
www.facebook.com (1) 99 No data No data 31.13.72.36
errors.client.optimizely.com (1) 7604 2017-01-30 06:09:04 UTC 2023-02-04 16:08:35 UTC 54.84.16.228
cdn.optimizely.com (1) 694 2012-05-20 19:10:20 UTC 2023-02-04 04:30:58 UTC 2.18.172.152
gtm.helixsleep.com (3) 882644 2021-03-22 16:40:54 UTC 2022-12-21 08:18:29 UTC 216.239.36.21
cdn3.optimizely.com (1) 4377 2012-11-10 21:31:09 UTC 2023-02-04 12:09:58 UTC 104.110.9.127
bat.bing.com (2) 387 2014-04-08 09:23:16 UTC 2023-02-04 17:12:27 UTC 13.107.21.200
a19174160803.cdn.optimizely.com (1) 522683 2021-04-07 22:05:40 UTC 2022-12-21 08:18:30 UTC 104.110.8.48
ob.cheqzone.com (1) 7866 2018-10-23 07:16:58 UTC 2023-02-05 08:18:21 UTC 54.230.111.58
region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2023-02-04 21:01:38 UTC 216.239.32.36 Domain (google-analytics.com) ranked at: 8401
share-helixsleep.com (1) 760511 2015-12-18 02:40:02 UTC 2023-02-05 08:18:22 UTC 3.231.120.12
www.google-analytics.com (2) 40 2012-05-21 09:41:50 UTC 2023-02-05 02:46:28 UTC 142.250.74.46
p.yotpo.com (1) 6355 2014-12-10 10:21:01 UTC 2023-02-04 05:42:03 UTC 3.66.109.71
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-02-04 17:17:03 UTC 35.241.9.150
cdn1.affirm.com (1) 6633 2016-01-14 19:37:52 UTC 2023-02-04 17:49:08 UTC 151.101.66.133
logx.optimizely.com (1) 1233 2016-10-05 13:33:23 UTC 2023-02-04 04:42:10 UTC 3.93.121.218
events.attentivemobile.com (1) 4579 2017-09-14 06:58:51 UTC 2023-02-05 06:06:35 UTC 104.18.43.48
s3.amazonaws.com (1) 0 No data No data 52.217.129.208 Unknown ranking
static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2023-02-04 17:12:15 UTC 54.230.111.8
stats.g.doubleclick.net (1) 96 2012-07-01 17:13:23 UTC 2023-02-05 02:59:57 UTC 64.233.161.157
cdn.pdst.fm (1) 3387 2019-01-23 14:37:22 UTC 2023-02-04 17:34:17 UTC 35.244.142.80
app.getmulberry.com (1) 75298 2023-02-05 06:56:03 UTC 2023-02-05 08:18:23 UTC 54.230.111.42
code.jquery.com (1) 634 2012-05-21 17:28:02 UTC 2023-02-04 17:12:51 UTC 69.16.175.10
use.fontawesome.com (1) 942 2017-01-30 04:43:25 UTC 2023-02-04 17:46:32 UTC 172.64.132.15
widget-mediator.zopim.com (1) 2693 2019-04-23 08:46:17 UTC 2023-02-05 04:57:03 UTC 18.184.40.186
ekr.zdassets.com (1) 2396 2018-06-13 23:52:57 UTC 2023-02-05 04:26:07 UTC 104.18.72.113
vars.hotjar.com (1) 1014 2020-11-05 10:13:14 UTC 2023-02-05 02:14:03 UTC 143.204.55.118
us-central1-adaptive-growth.cloudfunctions.net (2) 3390 2017-06-26 09:18:55 UTC 2023-02-04 19:26:54 UTC 216.239.36.54
currency.grizzlyapps.com (1) 73317 2017-05-16 11:10:02 UTC 2023-02-05 08:18:22 UTC 54.230.111.73
r3.o.lencr.org (16) 344 2020-12-02 08:52:13 UTC 2023-02-04 17:12:07 UTC 23.36.77.32
img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2023-02-04 17:49:21 UTC 34.120.237.76
live.rezync.com (1) 2569 2017-10-10 13:34:40 UTC 2023-02-04 18:09:51 UTC 143.204.55.106
web.chtbl.com (2) 10377 2018-12-20 07:17:21 UTC 2023-02-03 22:55:57 UTC 143.204.55.125
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-02-04 17:24:41 UTC 52.39.176.227
www.googletagmanager.com (1) 75 2012-10-04 01:07:32 UTC 2023-02-05 02:26:09 UTC 172.217.21.168
ocsp.sectigo.com (2) 487 2018-12-17 11:31:55 UTC 2023-02-05 00:28:52 UTC 104.18.32.68
connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2023-02-04 17:12:03 UTC 31.13.72.12
app.launchdarkly.com (4) 1861 2015-06-15 05:36:08 UTC 2023-02-04 06:12:49 UTC 151.101.194.217
in.hotjar.com (1) 1746 2018-07-03 09:33:18 UTC 2023-02-04 17:12:31 UTC 63.32.143.51
cdn.attn.tv (3) 4920 2018-06-13 10:37:11 UTC 2023-02-05 06:06:34 UTC 143.204.55.4
helixsleep.attn.tv (2) 954815 2020-04-30 12:08:01 UTC 2023-02-05 08:18:20 UTC 104.18.37.231
obs.cheqzone.com (5) 4814 2018-10-23 07:16:59 UTC 2023-02-04 16:08:33 UTC 34.199.234.25
events.launchdarkly.com (4) 1653 2016-02-06 07:13:26 UTC 2023-02-04 12:32:15 UTC 44.209.144.86
init.grizzlyapps.com (1) 41308 2018-01-31 22:30:52 UTC 2023-02-05 08:18:21 UTC 52.29.72.26
cdn.shopify.com (14) 2327 2012-06-22 18:37:14 UTC 2023-02-05 04:04:57 UTC 23.227.60.200
ocsp.digicert.com (8) 86 2012-05-21 07:02:23 UTC 2023-02-05 02:04:49 UTC 93.184.220.29
ocsp.r2m02.amazontrust.com (1) 0 2022-10-12 14:01:39 UTC 2023-02-05 04:06:40 UTC 54.230.80.227 Domain (amazontrust.com) ranked at: 581
d.impactradius-event.com (1) 2612 2016-11-05 16:00:49 UTC 2023-02-04 17:10:32 UTC 35.186.249.72

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-02-05 08:19:01 UTC 3  34.199.234.25 Client IP ET INFO Observed ZeroSSL SSL/TLS Certificate 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 23.227.38.32
Date UQ / IDS / BL URL IP
2023-03-31 19:53:15 +0000 0 - 5 - 0 mirasafety.com 23.227.38.32
2023-03-30 21:10:10 +0000 0 - 0 - 2 farmhouseismystyle.com/21341695/orders/76510f (...) 23.227.38.32
2023-03-30 02:11:15 +0000 0 - 2 - 0 lojaszenes.com/ 23.227.38.32
2023-03-29 23:37:25 +0000 0 - 2 - 0 wilmax.com/collections/fine-tea-and-coffee-se (...) 23.227.38.32
2023-03-29 23:07:57 +0000 0 - 2 - 0 dantelabs.com/ 23.227.38.32


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-31 21:36:26 +0000 0 - 0 - 1 www.topoffersus.com/offer/sfs-25-sso-u-no-ph- (...) 172.67.164.89
2023-03-31 21:35:31 +0000 0 - 0 - 1 underminecivic.cn/ 172.67.201.195
2023-03-31 21:35:18 +0000 0 - 0 - 2 ud.webmarketing.is.it/ 104.21.66.217
2023-03-31 21:35:08 +0000 0 - 0 - 2 www.actionforms.io/e/r/commerce 188.114.96.1
2023-03-31 21:34:47 +0000 0 - 0 - 1 skinnyedible.cyou/ 104.21.68.31


Last 5 reports on domain: helixsleep.com
Date UQ / IDS / BL URL IP
2023-03-09 14:54:17 +0000 0 - 1 - 0 helixsleep.com/?utm_campaign=2023__GetEmails_ (...) 167.172.14.23
2023-02-09 20:19:18 +0000 0 - 1 - 0 helixsleep.com/?utm_campaign=Helix_Kids_PostP (...) 23.227.38.32
2023-02-08 22:57:20 +0000 0 - 1 - 0 helixsleep.com/pages/partner-helixpartner 23.227.38.32
2023-02-05 08:18:29 +0000 0 - 1 - 0 helixsleep.com/ 23.227.38.32
2022-12-21 08:18:41 +0000 0 - 1 - 0 helixsleep.com/ 23.227.38.32


Last 1 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-09 20:19:18 +0000 0 - 1 - 0 helixsleep.com/?utm_campaign=Helix_Kids_PostP (...) 23.227.38.32

JavaScript

Executed Scripts (123)

Executed Evals (6)
#1 JavaScript::Eval (size: 257) - SHA256: 2821cfd5b25e78b7da90bc13f983c90b1cd6fd419fe0ba59dacb5621f70cc083
(function() {
    for (var d = [], f = 0, b = window.Shopify.checkout || [], a = b.length - 1; 0 <= a; a--)
        for (var c in b[a]) {
            if ("line_items" == c) {
                f = 1;
                for (var e = 0; e < b[a][c].length; e++) d.push(b[a][c][e].id)
            } else "product_Id" == c && d.push(b[a][c].toString());
            if (1 == f) return d
        }
    return d
})();
#2 JavaScript::Eval (size: 4) - SHA256: b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b
true
#3 JavaScript::Eval (size: 62) - SHA256: 6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8
typeof 1 n === "bigint" && BigInt(1) === 1 n && Number(1 n) === 1
#4 JavaScript::Eval (size: 3580) - SHA256: 3d745775300d011f2696c05a621ffc3bb163121e1c7f051f093045bc791a3ecf
var DoublyCurrency = {
    rates: {
        "USD": "1.0000000000",
        "EUR": "1.0827784094",
        "GBP": "1.2054495965",
        "CAD": "0.7456843518",
        "AUD": "0.6922000818",
        "AFN": "0.0110483624",
        "ALL": "0.0093204510",
        "AZN": "0.5868647922",
        "DZD": "0.0073789280",
        "AOA": "0.0019825219",
        "ARS": "0.0053353719",
        "AMD": "0.0025007506",
        "AWG": "0.5547850208",
        "BSD": "0.9908043449",
        "BHD": "2.6612164953",
        "BDT": "0.0092294907",
        "BBD": "0.4907101213",
        "BYN": "0.3924506621",
        "BZD": "0.4915343047",
        "BMD": "1.0000000000",
        "BTN": "0.0121080821",
        "BTC": "23407.3745261148",
        "BOB": "0.1433839560",
        "BAM": "0.5536525288",
        "BWP": "0.0777764219",
        "BRL": "0.1941067634",
        "BND": "0.7559687513",
        "BGN": "0.5527084927",
        "BIF": "0.0004774302",
        "KHR": "0.0002410673",
        "CVE": "0.0098204326",
        "XAF": "0.0016507942",
        "XOF": "0.0016507942",
        "XPF": "0.0091215605",
        "CZK": "0.0454109839",
        "KYD": "1.1888994833",
        "CLP": "0.0012644836",
        "CNY": "0.1475948533",
        "COP": "0.0002159998",
        "KMF": "0.0022158023",
        "CDF": "0.0004889975",
        "CRC": "0.0017680050",
        "HRK": "0.1420011195",
        "CUC": "1.0000000000",
        "CUP": "0.0377358491",
        "DKK": "0.1450304448",
        "DJF": "0.0055653492",
        "DOP": "0.0174957990",
        "XCD": "0.3700209062",
        "EGP": "0.0331440729",
        "ERN": "0.0666666667",
        "ETB": "0.0184559927",
        "FKP": "1.2050399591",
        "FJD": "0.4599731376",
        "GMD": "0.0163933470",
        "GEL": "0.3801716171",
        "GHS": "0.0808803208",
        "GIP": "1.2050399591",
        "XAU": "1865.6716417910",
        "GTQ": "0.1262151203",
        "GGP": "1.2050399591",
        "GNF": "0.0001150866",
        "GYD": "0.0046955900",
        "HTG": "0.0066067321",
        "HNL": "0.0401889104",
        "HKD": "0.1274234344",
        "HUF": "0.0027804007",
        "ISK": "0.0070321601",
        "XDR": "1.3448216968",
        "INR": "0.0121604936",
        "IDR": "0.0000662467",
        "IRR": "0.0000237501",
        "IQD": "0.0006788517",
        "IMP": "1.2050399591",
        "ILS": "0.2925559147",
        "JMD": "0.0064128606",
        "JPY": "0.0076230909",
        "JEP": "1.2050399591",
        "JOD": "1.4096340026",
        "KZT": "0.0021630611",
        "KES": "0.0079485439",
        "KWD": "3.2781511228",
        "KGS": "0.0115941511",
        "LAK": "0.0000588317",
        "LVL": "1.6531931426",
        "LBP": "0.0000660085",
        "LSL": "0.0585124428",
        "LRD": "0.0063714404",
        "LYD": "0.2094122865",
        "LTL": "0.3386684910",
        "MOP": "0.1226080698",
        "MKD": "0.0175744543",
        "MGA": "0.0002319959",
        "MWK": "0.0009652971",
        "MYR": "0.2348498922",
        "MVR": "0.0651449756",
        "MRO": "0.0028011218",
        "MUR": "0.0220944705",
        "MXN": "0.0527214718",
        "MDL": "0.0527856464",
        "MNT": "0.0002857691",
        "MAD": "0.0974925691",
        "MZN": "0.0156665219",
        "MMK": "0.0004718029",
        "NAD": "0.0585124600",
        "NPR": "0.0075675619",
        "ANG": "0.5497538202",
        "TWD": "0.0333546759",
        "NZD": "0.6332500610",
        "NIO": "0.0271153123",
        "NGN": "0.0021713623",
        "KPW": "0.0011111111",
        "NOK": "0.0985393512",
        "OMR": "2.5976724855",
        "PKR": "0.0035995867",
        "PAB": "0.9908043449",
        "PGK": "0.2811282802",
        "PYG": "0.0001355749",
        "PEN": "0.2591604136",
        "PHP": "0.0186341055",
        "PLN": "0.2288569374",
        "QAR": "0.2746469551",
        "RON": "0.2207162507",
        "RUB": "0.0141542069",
        "RWF": "0.0009151722",
        "SHP": "1.2054495965",
        "WST": "0.3842007434",
        "STD": "0.0000483139",
        "SVC": "0.1132332917",
        "SAR": "0.2665173459",
        "RSD": "0.0092259521",
        "SCR": "0.0751092464",
        "SLL": "0.0000514139",
        "XAG": "22.3453700393",
        "SGD": "0.7556271554",
        "SBD": "0.1219918041",
        "SOS": "0.0017590036",
        "ZAR": "0.0572482921",
        "KRW": "0.0008013781",
        "LKR": "0.0027144819",
        "SDG": "0.0017108532",
        "SRD": "0.0309750596",
        "SZL": "0.0577818918",
        "SEK": "0.0948038934",
        "CHF": "1.0798622960",
        "SYP": "0.0003981225",
        "TJS": "0.0960526861",
        "TZS": "0.0004235939",
        "THB": "0.0299553324",
        "TOP": "0.4325353057",
        "TTD": "0.1459779640",
        "TND": "0.3288928414",
        "TMT": "0.2849002849",
        "TRY": "0.0531247895",
        "UGX": "0.0002689442",
        "UAH": "0.0268257275",
        "AED": "0.2722493020",
        "UYU": "0.0255920307",
        "UZS": "0.0000875480",
        "VUV": "0.0087311662",
        "VEF": "0.0000004412",
        "VND": "0.0000426439",
        "YER": "0.0039935529",
        "ZMW": "0.0518601349"
    },
    convert: function(amount, from, to) {
        return (amount * this.rates[from]) / this.rates[to];
    }
};
#5 JavaScript::Eval (size: 7) - SHA256: 53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148
() => !!1
#6 JavaScript::Eval (size: 25) - SHA256: d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400
3.141592653589793 * * -100

Executed Writes (0)


HTTP Transactions (194)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: helixsleep.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         23.227.38.32
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Date: Sun, 05 Feb 2023 08:18:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Sorting-Hat-PodId: 83
X-Sorting-Hat-ShopId: 30979106
X-Storefront-Renderer-Rendered: 1
Location: https://helixsleep.com/
X-Redirect-Reason: https_required
X-Frame-Options: DENY
Content-Security-Policy: frame-ancestors 'none';
X-ShopId: 30979106
X-ShardId: 83
Vary: Accept
X-Shopify-Stage: production
X-Dc: gcp-europe-north1,gcp-europe-west1,gcp-europe-west1
X-Request-ID: cb729d09-ce07-4ad8-b790-6a0ffa1ca1c0
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yoitNjmUV%2BygpikRXsayLKTFZ%2Fw3A6xiiMeYtqOvQDDL5dsZXLwc42M9dgn%2BBPETm2U97KXzB6jTAg1A0rclP%2F96G9wxaVh78ngpmDY5JKJCpCsPUN%2BXPRvHWxEgRH1v"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Server-Timing: processing;dur=12, db;dur=4, asn;desc="50304", edge;desc="OSL", country;desc="NO", cfRequestDuration;dur=192.000151
Server: cloudflare
CF-RAY: 794a36e4fd52fab4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4002
Expires: Sun, 05 Feb 2023 09:24:58 GMT
Date: Sun, 05 Feb 2023 08:18:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4661
Expires: Sun, 05 Feb 2023 09:35:57 GMT
Date: Sun, 05 Feb 2023 08:18:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12342
Expires: Sun, 05 Feb 2023 11:43:58 GMT
Date: Sun, 05 Feb 2023 08:18:16 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 07:33:54 GMT
age: 2662
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: KLaM0XnXUIG8jYkBHgJAOBfqlctjLNLNV/BNkZ5bXfLdNLhB/GeHk5sWENvmN+f6Jn7BYa756k0=
x-amz-request-id: T99GNY75RGT6RDAP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 07:24:23 GMT
age: 3233
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 05 Feb 2023 08:18:16 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0F81D36EE6201F444F9C6144A6F36BAF4AD67E1E46182149964395CD74E020AA"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21517
Expires: Sun, 05 Feb 2023 14:16:53 GMT
Date: Sun, 05 Feb 2023 08:18:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0F81D36EE6201F444F9C6144A6F36BAF4AD67E1E46182149964395CD74E020AA"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21517
Expires: Sun, 05 Feb 2023 14:16:53 GMT
Date: Sun, 05 Feb 2023 08:18:16 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: helixsleep.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         23.227.38.32
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Sun, 05 Feb 2023 08:18:16 GMT
x-sorting-hat-podid: 83
x-sorting-hat-shopid: 30979106
x-storefront-renderer-rendered: 1
set-cookie: keep_alive=e7a500d4-3338-45f2-9ea5-c0cd74b1f417; path=/; expires=Sun, 05 Feb 2023 08:48:16 GMT; HttpOnly; SameSite=Lax secure_customer_sig=; path=/; expires=Mon, 05 Feb 2024 08:18:16 GMT; secure; HttpOnly; SameSite=Lax localization=US; path=/; expires=Mon, 05 Feb 2024 08:18:16 GMT cart_currency=USD; path=/; expires=Sun, 19 Feb 2023 08:18:16 GMT _orig_referrer=; Expires=Sun, 19-Feb-23 08:18:16 GMT; Domain=helixsleep.com; Path=/; HttpOnly; SameSite=Lax _landing_page=%2F; Expires=Sun, 19-Feb-23 08:18:16 GMT; Domain=helixsleep.com; Path=/; HttpOnly; SameSite=Lax _y=059ab175-7798-4cc2-8a44-ba690786eaca; Expires=Mon, 05-Feb-24 08:18:16 GMT; Domain=helixsleep.com; Path=/; SameSite=Lax _s=447918d3-ac66-490e-a3d6-a6a8925deedc; Expires=Sun, 05-Feb-23 08:48:16 GMT; Domain=helixsleep.com; Path=/; SameSite=Lax _shopify_y=059ab175-7798-4cc2-8a44-ba690786eaca; Expires=Mon, 05-Feb-24 08:18:16 GMT; Domain=helixsleep.com; Path=/; SameSite=Lax _shopify_s=447918d3-ac66-490e-a3d6-a6a8925deedc; Expires=Sun, 05-Feb-23 08:48:16 GMT; Domain=helixsleep.com; Path=/; SameSite=Lax
link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin
x-alternate-cache-key: cacheable:49c8dc9866f132c905d76cec3b7a2be4
x-cache: hit, server
x-frame-options: DENY
content-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
strict-transport-security: max-age=7889238
x-shopid: 30979106
x-shardid: 83
vary: Accept
content-language: en
x-shopify-stage: canary
x-dc: gcp-europe-north1,gcp-europe-west1,gcp-europe-west1
x-request-id: 58f81af6-41d7-4329-9721-6b4cf4d0bcb2
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: none
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T4Xj311RYMFa4ROZm9A1iwFzY%2FatbfMI%2BL9Iv96kDIj4nDwRj2YyEssA2JeQxMDlEbM6BXooegEMFF8GoVR%2Bu4nqLnvYWaL7ROFy8ljcQwvdGyl4enJzku4UYjI9T3fy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a36e73b94b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server-timing: processing;dur=24, db;dur=10, asn;desc="50304", edge;desc="OSL", country;desc="NO", cfRequestDuration;dur=292.999983, earlyhints
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2672)
Size:   113351
Md5:    8f5f438f9cb046d24ddcc193b50a8a52
Sha1:   0406464256eed8c3b6507a49b4bbfff8a8926e95
Sha256: 706268435c0dfc5fa022548d81b6b08869d64f369d0106663edef7a37193d9e5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ECAE862EA87B317A6B402B7CB24B095B026E5C86C24558632B55381B834F759C"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2510
Expires: Sun, 05 Feb 2023 09:00:07 GMT
Date: Sun, 05 Feb 2023 08:18:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ECAE862EA87B317A6B402B7CB24B095B026E5C86C24558632B55381B834F759C"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2510
Expires: Sun, 05 Feb 2023 09:00:07 GMT
Date: Sun, 05 Feb 2023 08:18:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ECAE862EA87B317A6B402B7CB24B095B026E5C86C24558632B55381B834F759C"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2510
Expires: Sun, 05 Feb 2023 09:00:07 GMT
Date: Sun, 05 Feb 2023 08:18:17 GMT
Connection: keep-alive

                                        
                                            GET /jquery-3.2.1.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
content-encoding: gzip
content-length: 30125
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15283"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1675585097.dop210.sk1.t,1675585097.cds015.sk1.hn,1675585097.cds222.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32058)
Size:   30125
Md5:    148f8d3ffd9cc02048c5f4d1cc83c407
Sha1:   9f2b89cfd151be6a29b4d43ad64d164fb8471046
Sha256: 4dc681da48ba2b417e613e8e027ff5322963c3a3697a8ba97973cfefb48def5e
                                        
                                            GET /s/files/1/3097/9106/t/575/assets/mattress-match-circle.png?v=81835222086680973621654787720 HTTP/1.1 
Host: cdn.shopify.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.227.60.200
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
content-length: 1152
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/3097/9106/t/575/assets/mattress-match-circle.png>; rel="canonical"
source-length: 1130
source-type: image/png
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 71f955db-c378-419a-a8a6-d263f07b0332
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-central1,us-east1
last-modified: Mon, 05 Dec 2022 17:27:44 GMT
cf-cache-status: HIT
age: 109028
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FGIRSCBfAxXbcmn%2FMl0z2R7mOLG5LVnIy0khtfwoefDLhRihAX7NH8f%2BSub4OSxL67NTcYHinBPbL6LmalclwKwf6MbUZJ1qffx%2B98yng8zqUE%2Bp8y4eSfntxbO%2FtGtYYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=98.622, imageryFetch;dur=73.109, imageryProcess;dur=24.455;desc="image", cfRequestDuration;dur=11.999846
server: cloudflare
cf-ray: 794a36e8fa45b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1152
Md5:    f20af8d397e9018d9ee91d2cfe9ca98f
Sha1:   2223981502f1f1200bf8c1421a505e1aa39d5e20
Sha256: 442ef89640530f080e9b5362683c536a63b22a6bb7fda5a65c6e9cf1677775c1
                                        
                                            GET /shopifycloud/shopify/assets/shopify_pay/storefront-c31d2fa4962d2ef90b673e945ee33f4f87302b97d0882cd8e83a629b84b30dab.js?v=20220906 HTTP/1.1 
Host: cdn.shopify.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://helixsleep.com
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.227.60.200
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31556952, immutable
link: <https://cdn.shopify.com/shopifycloud/shopify/assets/shopify_pay/storefront-c31d2fa4962d2ef90b673e945ee33f4f87302b97d0882cd8e83a629b84b30dab.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: d5e2b0e2-1c41-4283-8a17-d3cb4b1c73fe
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-central1,us-central1
last-modified: Tue, 25 Oct 2022 19:45:14 GMT
cf-cache-status: HIT
age: 8856044
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hCVNWbTUwImrDcYJxhVLgEvaco%2Bs6Tv%2BFUiB1jKzlLxDO2GnzxlDTRaNBUwdgRQvzwvMhZ8drUQsSlw4FyAT67El0fHmOcc0hcxfV3zJyM7MVKo4fm50JlGraqUNEORbRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=16.022, imageryFetch;dur=15.824, cfRequestDuration;dur=82.000017
server: cloudflare
cf-ray: 794a36e8dd81b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32761)
Size:   19005
Md5:    c2458b6b3bf85bd5008c4edca2193fdd
Sha1:   39d9206fc3bd05a7670ce6ad7f255b347d8676e8
Sha256: d3689eac7415c1b1a8d60a74676bddfca018ff89d69e6a886a96ec3600b5e137
                                        
                                            GET /shopifycloud/shopify/assets/storefront/load_feature-e154599399e6b8b29dcb1102cc76eb199fa33a09af4fa78d15e8f8544ee64fcd.js HTTP/1.1 
Host: cdn.shopify.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://helixsleep.com
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.227.60.200
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31556952, immutable
link: <https://cdn.shopify.com/shopifycloud/shopify/assets/storefront/load_feature-e154599399e6b8b29dcb1102cc76eb199fa33a09af4fa78d15e8f8544ee64fcd.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 9ffd82a9-750e-46e8-aa96-f309eb5c92bb
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
last-modified: Wed, 04 Jan 2023 20:06:34 GMT
cf-cache-status: HIT
age: 2720416
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UXTJ7y%2BYqSLT13v5jVB%2BqX%2BMAjEJNrSrFXGHoEWcvxRPDjFBdjGv1KIFs8HQgr8c%2BUJGce6MM%2F%2F982CF8qJnozkvOszUo1ceISAr7LxI%2B8%2BFpvmh2hwlDqp8ge%2BtwravGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=17.514, imageryFetch;dur=17.260, cfRequestDuration;dur=12.000084
server: cloudflare
cf-ray: 794a36e8fda7b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10292), with no line terminators
Size:   3466
Md5:    bb5e3d00bb0eada0a4e4823cfa56ea36
Sha1:   8c48bb4c16416070d9bfbe84b3a873573007d980
Sha256: 0821a70cb386e59f5f67e79db34c3db0d103699e2b9611727186657b7dfe66f8
                                        
                                            GET /js/19213322720.js HTTP/1.1 
Host: cdn.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         2.18.172.152
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
x-amz-id-2: CfqTnDRk72lG+80g/6KTCO06OnM7sLsNCoSNKWKnqZI76Q82ggVlEz+L5sNaQ+hBBp1cYL3Z7Nk=
x-amz-request-id: XWYZV8VW8C17WKRK
x-amz-replication-status: COMPLETED
last-modified: Fri, 03 Feb 2023 16:09:22 GMT
etag: "c7cd9079cf616faa393efc7ad5ee955b"
x-amz-server-side-encryption: AES256
x-amz-meta-revision: 6885
x-amz-meta-pci_enabled: False
content-encoding: gzip
x-amz-version-id: 5of_HtCsskrzgjaF_A_jpIOyk_JN4R_G
accept-ranges: bytes
server: AmazonS3
content-length: 127243
vary: Accept-Encoding
cache-control: max-age=120
date: Sun, 05 Feb 2023 08:18:17 GMT
server-timing: cdn-cache; desc=REVALIDATE, edge; dur=16, origin; dur=104, cdn;desc="AkamaiION";dur=0,rtt;desc="5";dur=0,cdnip;desc="2.18.172.152";dur=0,cdnmap;desc="a5048.dsca.akamaiedge.net";dur=0,proto;desc="h2";dur=0
access-control-max-age: 86400
access-control-expose-headers: x-amz-meta-revision
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65468)
Size:   127243
Md5:    c7cd9079cf616faa393efc7ad5ee955b
Sha1:   2b0f46dfa23922070535dd8de9dc4a2a203c49a9
Sha256: 743d1ebcfe33d7e9beb6630bb0b4c66cf91c657f1e33d1b3360110ffb9923824
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Feb 2023 08:07:20 GMT
age: 657
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20127
Expires: Sun, 05 Feb 2023 13:53:44 GMT
Date: Sun, 05 Feb 2023 08:18:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0D87FD1953F7E446379991314BEB1A60518B7BA3CED8B3CF4E76DF54D0028C26"
Last-Modified: Fri, 03 Feb 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2611
Expires: Sun, 05 Feb 2023 09:01:48 GMT
Date: Sun, 05 Feb 2023 08:18:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1797
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 08:18:17 GMT
Last-Modified: Sun, 05 Feb 2023 07:48:20 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eQ/fTDf4eNAViLbJ46+HUg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.39.176.227
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HXcKJlaSy8NkFvGtIXBuR47JTW0=

                                        
                                            POST /s/gts1d4/Udi7jfC2-KY HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:17 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   43625
Md5:    3d5080dd821967bbfc9263ba1c7c55eb
Sha1:   470c6f8062fe7a28769b1ee29cd60703a69e59b3
Sha256: c15bf3d2aa7c937e6d5c321a0523f78e89b01056fc4d2bb4e574883d5aad9aa9
                                        
                                            GET /s/files/1/3097/9106/t/575/assets/js-cookie.js?v=40916327651483059391650382625 HTTP/1.1 
Host: cdn.shopify.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.227.60.200
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/3097/9106/t/575/assets/js-cookie.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 359d7da3-b26c-4084-8895-20e72bc8487f
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
last-modified: Mon, 05 Dec 2022 17:27:45 GMT
cf-cache-status: HIT
age: 109028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MCAOBRL5KH8PpSVnQXN6USaR2X9ceETC1ZaDHp4U28uQS2un8G1f%2BBfxQbnRR4k18jkp%2FmGVqbpEpxcr9T3Q3uzCvdfluGXv8YPs98kA%2FgQL%2B4YkNhjzdT8JckEKewY08Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=847.632, imageryFetch;dur=846.064, cfRequestDuration;dur=12.000084
server: cloudflare
cf-ray: 794a36e8fa3eb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1683)
Size:   54504
Md5:    8f362dc2a4b68111ace9bfc4ef3fcbb9
Sha1:   ee31269086298b72fe506c0b12697c9913dbe40d
Sha256: 8f9f0b4031984bf645c7b61fd117148982edfe2ea0a64b062af99a5f8590dc59
                                        
                                            GET /js/v2/affirm.js HTTP/1.1 
Host: cdn1.affirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.66.133
HTTP/2 200 OK
content-type: application/javascript
                                        
server: istio-envoy
last-modified: Wed, 25 Jan 2023 17:38:50 GMT
etag: W/"dda147dc4d2b5472da912992cdde8d2d"
cache-control: max-age=1800, stale-while-revalidate=259200, public
x-affirm-request-id: 15e3efda-7f80-47db-c71b-a0afad7f2f76
x-affirm-cache-status: STALE
link: <https://cdn1.affirm.com>; rel=preconnect; crossorigin, <https://cdn1.affirm.com>; rel=preconnect, <https://cdn-assets.affirm.com>; rel=preconnect; crossorigin, <https://cdn-assets.affirm.com>; rel=preconnect, <https://cdnjs.cloudflare.com>; rel=preconnect; crossorigin, <https://cdnjs.cloudflare.com>; rel=preconnect
access-control-allow-origin: *
timing-allow-origin: *
content-encoding: br
x-envoy-upstream-service-time: 448
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 05 Feb 2023 08:18:17 GMT
age: 1529
x-served-by: cache-iad-kjyo7100021-IAD, cache-bma1676-BMA
x-cache: HIT, HIT
x-cache-hits: 184, 21
vary: Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 92139
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (59534)
Size:   110970
Md5:    ad92b36734701a0b4ade1989da3c6bf9
Sha1:   bf8449a58fff217dac40718c0a55ed97976aca79
Sha256: bac4f451c2ea2cbb2e16cc000f12f3d73e60a718d315e1ad4e506e2c08155347
                                        
                                            GET /releases/v5.0.9/js/all.js HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://helixsleep.com
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         172.64.132.15
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
x-amz-id-2: FK7OrvHJdqI8vbEMVef3vHQQO98LvliSPkQHi+Qyn9FMt/hzd9BfAb/+DqE1FYlmxeplWM6oGU8=
x-amz-request-id: 0YCSA7DGBQ8Z4WH7
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:28:17 GMT
etag: W/"bffc6023835e717c0348c41583e56eba"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 1896015
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rw9kTJ07s7YDaQpi6pN9NW7LxVc13u9HgeaG7VikNkN0HYPxMQ%2FaIB7VDneTg5eX%2FGOFL6xeo3Ifdiwvzoxjqxj0mXix7oFrrGKRLRBsYXzH6NITneeJwkpDm47u3cmeJS9%2Fkwo3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a36e8fbadd17c-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65356)
Size:   255988
Md5:    bbb73bd53563caad5c59972573dc336a
Sha1:   d9109f3c58945464f2cacd0e7d447670fa336e1c
Sha256: 5fcd15ff9850d3ac33df40fb0ed13aa920c602a2df6f055d1a3253a78b42acc6
                                        
                                            GET /s/files/1/3097/9106/t/575/assets/swiper-bundle.min.css?v=5850897086907936371647873364 HTTP/1.1 
Host: cdn.shopify.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.227.60.200
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/3097/9106/t/575/assets/swiper-bundle.min.css>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: ac6db465-0343-4aa5-a559-bcebc1979a8c
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-central1,us-central1
last-modified: Thu, 25 Aug 2022 23:41:06 GMT
cf-cache-status: HIT
age: 5157303
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FfIQIE7V1ueSe52g%2B4L%2Bmi1KljnCclIJFyYwOd3fQQajoF56r8pVchL4bm0xW%2BlMNLF6oBYXaN0EWDwWoeqe8k1%2BSGc6OjYT0owP%2FvlpRfRdaq4su77H4o3ugpH6ApKCrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=29.303, imageryFetch;dur=29.144, cfRequestDuration;dur=91.000080
server: cloudflare
cf-ray: 794a36e8fa39b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13619)
Size:   9217
Md5:    1f79479b90507a7ad1cf1eaa1312bbd8
Sha1:   67ef055d83aa8a78d470eeb4e746aa139dbdfc9f
Sha256: 774b68eefcf1814731b8dd74582f0a685fc78ebbe008fe1beb5366054d5cad2d
                                        
                                            GET /s/files/1/3097/9106/t/575/assets/chosen.jquery.js?v=82866226665688103111654787596 HTTP/1.1 
Host: cdn.shopify.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.227.60.200
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/3097/9106/t/575/assets/chosen.jquery.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: b1854444-829e-4724-9544-c49f893d1000
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
last-modified: Wed, 21 Sep 2022 15:20:56 GMT
cf-cache-status: HIT
age: 5157303
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OEMBvw5Bm1DPV1Ss%2Fv4yBRMJIIfc%2FURYBcs8S3cwhJ9dmrnDAIUDEoeg1G%2FRVz%2FKdDhIrlIpx2hOhGDMqzkl6dRmLt4o%2BMXavl%2FFrBGYguCoZkFWyF2Jca1sb8BGP9Wsrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=87.564, imageryFetch;dur=81.257, cfRequestDuration;dur=12.000084
server: cloudflare
cf-ray: 794a36e8fa3db521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (28955)
Size:   7036
Md5:    983b3a831d2cc001493640cc221ba2a4
Sha1:   509bd728dc383e0661e094415b9cbd1260ad2140
Sha256: e181859eab4e1114bb70e99b236f0a7b71fae307762f1a5aeb9b8858c9cbddcc
                                        
                                            GET /s/files/1/3097/9106/t/575/assets/slick.js?v=123145542213971836061650382670 HTTP/1.1 
Host: cdn.shopify.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.227.60.200
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/3097/9106/t/575/assets/slick.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 169eebb8-fef3-4d49-aa20-e11eccaaac15
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
last-modified: Wed, 14 Dec 2022 23:28:16 GMT
cf-cache-status: HIT
age: 1463691
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5ZIyc3Kc8XxWEU4%2BxzsfwbC9%2FncUMixEhxJzVVr4YQsiK9A4i7OhfPoCQ46PssGQV4vFYnzbF8TzPArfuQ8v6ub4gI3y4Cj0BEnFgaSIK6zRMBP7OMRrL2hLG1wJFjoxAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=60.175, imageryFetch;dur=53.311, cfRequestDuration;dur=13.000011
server: cloudflare
cf-ray: 794a36e8fa41b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (41316), with no line terminators
Size:   11874
Md5:    82fce6bd5af1d6c6bd5a84aa7d566f81
Sha1:   8a25f38506768d0c4c25189d3c78fcce35d1b98d
Sha256: 369c29daae6a47a255316b3343bcffaca21133d3d4e6cab78c12e7a267547b9b
                                        
                                            GET /s/files/1/3097/9106/t/575/assets/nav.js?v=8025191788632218991647873422 HTTP/1.1 
Host: cdn.shopify.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.227.60.200
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/3097/9106/t/575/assets/nav.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 838140cc-a598-41d8-a9ac-02f71e6af765
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
last-modified: Mon, 05 Dec 2022 03:11:14 GMT
cf-cache-status: HIT
age: 109028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pq2fsmXT3xqb%2BGqIoCbSGVG6vh9vPBpJY3aVrOu7T9knBW8d9hHWLfusaArNbieMbquJ3HVjL2Q9mHTGoGS752JSQZEMIpl56Nr2NR9ypPe923g%2F1NfMqNVO2Ifw92%2BbLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=103.741, imageryFetch;dur=90.052, cfRequestDuration;dur=11.000156
server: cloudflare
cf-ray: 794a36e8fa3bb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (536)
Size:   6491
Md5:    4f6384d011eabd0596270bd964bd5193
Sha1:   e68a06630e228e54a535dc8cd22a26160e0d504d
Sha256: f575764a014223384c889a8e5f17ff9789e53aa946b4ada51c72b9e34615b262
                                        
                                            POST /s/gts1d4/HoKltL_uy7w HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:17 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0D87FD1953F7E446379991314BEB1A60518B7BA3CED8B3CF4E76DF54D0028C26"
Last-Modified: Fri, 03 Feb 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2611
Expires: Sun, 05 Feb 2023 09:01:48 GMT
Date: Sun, 05 Feb 2023 08:18:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E28FF5C12ECADD99BE995F52BD73AF90B478D2B3E040BA5BA301AC0755E0164C"
Last-Modified: Thu, 02 Feb 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6646
Expires: Sun, 05 Feb 2023 10:09:03 GMT
Date: Sun, 05 Feb 2023 08:18:17 GMT
Connection: keep-alive

                                        
                                            POST /s/gts1d4/Udi7jfC2-KY HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:17 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /style/default.css HTTP/1.1 
Host: cdn.equalweb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://helixsleep.com/
Origin: https://helixsleep.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.26.12.95
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
cache-control: public, max-age=2204800
last-modified: Sun, 09 May 2021 14:33:43 GMT
etag: W/"807da04fe044d71:0"
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: deny
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 1185025
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mmnXnEbZatGLBWB6d9kLi%2FGc%2BjkcxpX68cSYNmgyZxYSo%2FJT%2FCEhkr%2BLp62dazoFSUf6r8oFRMN6xvGLwNclHJYdVRjuhlTZpUgBANrw9HepljMtHwka2rohgeCtC%2Fixcqo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-client-country: NO
server: cloudflare
cf-ray: 794a36ed8f6bb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11623), with no line terminators
Size:   3416
Md5:    4e875417acc5ec3307dba49f2e8da65e
Sha1:   2c100fc624814a9735a1fd70be897cb9357c4850
Sha256: ca44004591884ae7ae12427a6cde3bd74f4cd5c93059f2cc60c10ede0d9cdfab
                                        
                                            GET /assets/scripts/locale.js HTTP/1.1 
Host: cdn.equalweb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://helixsleep.com/
Origin: https://helixsleep.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.26.12.95
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
cache-control: public, max-age=2204800
last-modified: Sun, 18 Apr 2021 07:22:31 GMT
etag: W/"80d59982334d71:0"
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: deny
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 951981
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MTYrWRGLqq1EsIoGMZB7%2BhxqHcL57z2ltn0kZuOidyMIXVSZxPTVkSlNaoDFErx9BSfwEjAHn4vjq7yBod2ytuahwgqwREo2paCieN6JVxaBBl3qV6TW0W4KiJkceuEYp2U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-client-country: NO
server: cloudflare
cf-ray: 794a36ed9f7bb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (26970), with no line terminators
Size:   30014
Md5:    bc1644c590f0f297768cc4a0327345f1
Sha1:   05dc285f077981618aece75058688c4bf6a195ed
Sha256: 53427a0cd25a413f7b3f7fee376815a3507b33df35b9a70a17618b8166d6bd01
                                        
                                            POST /unstable/produce_batch HTTP/1.1 
Host: monorail-edge.shopifysvc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 238
Origin: https://helixsleep.com
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.146.173.20
HTTP/2 200 OK
                                        
date: Sun, 05 Feb 2023 08:18:18 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For
access-control-allow-methods: OPTIONS,POST
access-control-allow-origin: https://helixsleep.com
access-control-max-age: 86400
x-request-id: 024ba362-c68f-4785-93e7-d49df63ff8bb
x-robots-tag: noindex
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,gcp-us-east1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4DFEIT3h7BVBkXPT1w1%2FfFkQSf8TgyyHs4dgEp%2FfeoljeiGttDOV5RzzPkGGpVWOBCCR5vhbl6ZUdvBwWCKU1KuLS8scrqXMmlxVm21M5aq4DlFfo5eyHLy4886ff4bPUGO2TpSpWQN0y7ntTUw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server-timing: cfRequestDuration;dur=158.999920
server: cloudflare
cf-ray: 794a36edffa4b523-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E28FF5C12ECADD99BE995F52BD73AF90B478D2B3E040BA5BA301AC0755E0164C"
Last-Modified: Thu, 02 Feb 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6645
Expires: Sun, 05 Feb 2023 10:09:03 GMT
Date: Sun, 05 Feb 2023 08:18:18 GMT
Connection: keep-alive

                                        
                                            POST /shopify-event.gif?source_url=https%253A%252F%252Fhelixsleep.com%252F HTTP/1.1 
Host: gtm.helixsleep.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://helixsleep.com/
Content-Type: text/plain
Origin: https://helixsleep.com
Content-Length: 578
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         216.239.36.21
HTTP/2 200 OK
                                        
date: Sun, 05 Feb 2023 08:18:18 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
via: 1.1 google
X-Firefox-Spdy: h2

                                        
                                            GET /client_storage/a19174160803.html HTTP/1.1 
Host: a19174160803.cdn.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         104.110.8.48
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
x-amz-id-2: XLbltYFq0pwwi9qkwdMVPEImSShIQZ6JUi9IUMeoU/zR642RZD1cYSu1LFZxBU6d6LtwgxWI95w=
x-amz-request-id: 3EERGNRAFFS8CF2B
x-amz-replication-status: COMPLETED
last-modified: Fri, 03 Feb 2023 18:00:06 GMT
etag: "f2ea606696c263c2b3e84b46aaba6f1e"
x-amz-server-side-encryption: AES256
x-amz-meta-pci_enabled: False
x-amz-version-id: qFuK3Zun6nYLqQWDyQuL9mr4a7kqF_vp
accept-ranges: bytes
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=120
x-akamai-transformed: 9 - 0 pmb=mRUM,2
content-encoding: gzip
date: Sun, 05 Feb 2023 08:18:18 GMT
content-length: 906
server-timing: cdn-cache; desc=REVALIDATE, edge; dur=13, origin; dur=102, cdn;desc="AkamaiION";dur=0,rtt;desc="1";dur=0,cdnip;desc="104.110.8.48";dur=0,cdnmap;desc="a4728.x.akamaiedge.net";dur=0,proto;desc="h2";dur=0
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (1371)
Size:   906
Md5:    880d106065c1bae118ef95b5e78d77d3
Sha1:   4ccbd16d2b58e92a4bdac4c0882a2381ccb0bf9c
Sha256: 403b33a15e29e7f8df561ad1078d37f28b37c23c9dbffa33c75d305295c9b967
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88150
Date: Sun, 05 Feb 2023 08:18:18 GMT
Etag: "63de0593-1d7"
Expires: Mon, 06 Feb 2023 08:47:28 GMT
Last-Modified: Sat, 04 Feb 2023 07:13:23 GMT
Server: ECS (nyb/1D0B)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yljWs2NS-KX5gD6fyroeIFYypomWD5ITThLZ7S3gZlK_RL7aVBn7TQ==
Age: 5645

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m02.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=168124
Date: Sun, 05 Feb 2023 08:18:18 GMT
Etag: "63df3ef4-1d7"
Expires: Tue, 07 Feb 2023 07:00:22 GMT
Last-Modified: Sun, 05 Feb 2023 05:30:28 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bV6-JWXcBPpnXNRoGpUf93EQbTayzamze-2DFI5EKMHqM9DpoRLUvw==
Age: 5394

                                        
                                            POST /v1/events HTTP/1.1 
Host: logx.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1609
Origin: https://helixsleep.com
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         3.93.121.218
HTTP/1.1 204 No Content
Content-Type: text/plain
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://helixsleep.com
Access-Control-Expose-Headers: X-Results-Data-Source
Date: Sun, 05 Feb 2023 08:18:19 GMT
Server: nginx/1.21.0
Timing-Allow-Origin: *
X-Request-Id: 51ff772a-21ec-4c49-8796-8d9aa17f5915
Connection: keep-alive

                                        
                                            GET /h?a=2499289854&u=959756839437295&v=8558133978355497&s=2249692222584917&b=web&tv=4.0&z=0&h=%2F&d=helixsleep.com&t=Helix%20%7C%20Mattresses%20Designed%20For%20Every%20Body%20%E2%80%93%20Helix%20Sleep&k=Optimizely%3A%20100%25%20-%20HP%20-%20Comparison%20Chart%20Fix&k=Original&k=Optimizely%3A%20Helix%20-%20Email%20Capture%20-%20Desktop%20-%20ODP%20vs%20Attentive&k=ODP%20(control)&ts=1675585138042&st=1675585138044 HTTP/1.1 
Host: heapanalytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.195.230.215
HTTP/2 200 OK
content-type: image/gif
                                        
date: Sun, 05 Feb 2023 08:18:19 GMT
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-PqzQEyMQ6kTK11azeKO8Bw"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   37
Md5:    3eacd0132310ea44cad756b378a3bc07
Sha1:   e2216a7e9b73f5cb0279351c78ce61c33475cea7
Sha256: bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6701
Expires: Sun, 05 Feb 2023 10:10:00 GMT
Date: Sun, 05 Feb 2023 08:18:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6701
Expires: Sun, 05 Feb 2023 10:10:00 GMT
Date: Sun, 05 Feb 2023 08:18:19 GMT
Connection: keep-alive

                                        
                                            GET /style/btncolor.css HTTP/1.1 
Host: cdn.equalweb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://helixsleep.com/
Origin: https://helixsleep.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.26.12.95
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
cache-control: public, max-age=2204800
last-modified: Mon, 11 Feb 2019 11:16:31 GMT
etag: W/"3f26cd3dfbc1d41:0"
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: deny
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 951981
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ozwY9kRzWoTEis5EFEvqUp2rtTy3tc0A7D50Z51bGtRSqjet0cBfZ2sFR0x8ecQANF6ze%2BSXrJfCoE9yGctkMzwAxZ5RL7Hss4YFhiJhAkJfsS7CRw%2B6PJtPva%2BZ%2Bm03X8o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-client-country: NO
server: cloudflare
cf-ray: 794a36ed8f6cb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   831
Md5:    707b9f19dc5eae16b019cfbcfeee620f
Sha1:   816e65d097aacd97b377878e58b8a44346d8ab83
Sha256: bca045550530c8f5c8e0d7376c168f46cc52bc2daaa9ff328be51ec2ed95832a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9D2B458ABA8EC55C85ADACAE2C287462A148A3A0EFB39A5D7052206993287154"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4725
Expires: Sun, 05 Feb 2023 09:37:04 GMT
Date: Sun, 05 Feb 2023 08:18:19 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b593b5-5093-4504-8ab7-492c62b14ca7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5801
x-amzn-requestid: 441284a8-923a-4b22-b39f-95dec713c292
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fjj9jHu_IAMFZ-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d7b389-788174a773fcd695540cc95e;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 12:09:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DgvqiQwdytO2caPNzg2OhGcv8ly9N_YeQTzpuf6iwAVt8AQZEXRLqw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:44:03 GMT
age: 38056
etag: "48c408d37a7bd7f96653174359178eed46ddf298"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5801
Md5:    c1f3df5bbad5048923e29c0767d703d3
Sha1:   48c408d37a7bd7f96653174359178eed46ddf298
Sha256: c8bae041c3d64334964b2aa771a07bc2709ced4c497e1795f864d9416fed728f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10905
x-amzn-requestid: 093778fc-231c-452f-a6fc-15f4eb41ade0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmNJCEDzIAMFmxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8c239-7f56d6e56392f373541db219;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:24:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WVfpilnwhnRXBhJkHBWjxxoP09f7SqlRk8CdWRWOubIIwe0CX89bUA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:09:58 GMT
age: 36501
etag: "f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10905
Md5:    1a4eed23b240d04a3cd6b085cfa93375
Sha1:   f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00
Sha256: 93e8371f80c12d3753842e36001dbb8d3dc2223b10a594639752cd816c492d4e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5014
x-amzn-requestid: a434aae4-fe4b-4fc7-9b7e-eeb552484e8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIE0aoAMF6YQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-5556d14757190c842bbc6b06;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k6YqagXr3Wr-u1uDKojEnIGW0CxU5yvWPtlzNpzoIvmg9F-rJb9uFQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 11:30:27 GMT
age: 74872
etag: "e630bd132b52b965a5ade646ea8a165d1abf6d7b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5014
Md5:    5b6c30ad03669b66bf2f63b3edd69882
Sha1:   e630bd132b52b965a5ade646ea8a165d1abf6d7b
Sha256: f8233d879ec17fd91909655ff8881f2ebfad84272fde3ed5e5be37580378a989
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3474
x-amzn-requestid: 5846c080-9f25-4590-863c-8af2126cdbe1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WXEEbnoAMFRdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded0f9-1bd490125feadc14366e7ca0;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:41:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: d8aQmkW-aqLFpb79RynlJG2vY1GTDbjLNY0Qukgg_WIjdI6cmbVKFw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:51:26 GMT
age: 37613
etag: "c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3474
Md5:    d7a466d89c75ff3459b7328591db52cf
Sha1:   c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb
Sha256: e73243be3d01d12a224c4e9826c4f52610cf7722eee69f62755278d7550705f1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c8da623-73ab-4c2d-afaa-03d28de3a280.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11056
x-amzn-requestid: 4acc3364-4a33-4934-bdcb-41284d952113
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPFrwEW4IAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf8317-33872f461a2faab552322837;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:04:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4xmWa9XVzQ3xzjzIZyrdv3GpFSaTcoacse6b0lgGch2IMvV69AZ57w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:45:28 GMT
age: 37971
etag: "1367bebb73fa652695242100b26c394f1bfe4457"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11056
Md5:    3e0c38abfcd86f8074d4182d49fc354f
Sha1:   1367bebb73fa652695242100b26c394f1bfe4457
Sha256: e42d110060133ac05e6cdfafa6473c55473220fdc7eaf03e3a89f58aa3603670
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6202
x-amzn-requestid: 01b85fcd-69a0-49da-8640-32a3ef19378a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bUFEJoAMFapg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c48-14817e717361e09170714e9d;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1_1mEN4j5cciWEiimz4PRjx3PNGnrSRib9oEJAdYLrrtyjqnz_zvcQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 11:30:27 GMT
age: 74872
etag: "335425603d9eec146a3c03422dbca91134272e53"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6202
Md5:    251f1a5d671fb797fb98e9a71754c341
Sha1:   335425603d9eec146a3c03422dbca91134272e53
Sha256: 74932f07561287e33302aabcf9c639e9df7ae0fbc4bf71f5467310aabafea208
                                        
                                            GET /trackable.js HTTP/1.1 
Host: ext.chtbl.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.80
HTTP/2 200 OK
content-type: application/javascript;charset=UTF-8
                                        
content-length: 4092
last-modified: Fri, 12 Feb 2021 20:28:32 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 05 Feb 2023 07:41:02 GMT
cache-control: max-age=3600
etag: "4a494dbb82444463b6fd8bff0e5593d6"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JbCDeU_ElPOEongXypt2fIQRpb2mGnqOWrt4FQCPfG256crHmwV--w==
age: 2256
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4092), with no line terminators
Size:   4092
Md5:    4a494dbb82444463b6fd8bff0e5593d6
Sha1:   16bc1f3f18d87fa93ab1c49a99eb50097ed892f5
Sha256: 27dc4f62298834987d3d8e5608c1af94c82ee3d18ee31858d39e0202697b5308
                                        
                                            GET /gtag/js?id=G-SC9E0N92N7&l=dataLayer&cx=c&sign=4bf4df9bc362fd487e4f1f41ff9fee94ab7386dbba124c6df52b56ff1fa93762_20230205 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.217.21.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Feb 2023 08:18:19 GMT
expires: Sun, 05 Feb 2023 08:18:19 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77023
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (19467)
Size:   77023
Md5:    f5e988745a75d1b28db92ff11ba852ff
Sha1:   b5954b4165259ac5c1419c13bda93223fb0694ed
Sha256: 406f1a42f51e00118d44f5945ee011fc516c38ef3e07e4235ed50b30aad03668
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /sync?c=16b6410431b6374e780104abb0443ca8&p=af34f6a57048a523d0a9a7a99beea918&k=helixsleep-pixel-3038&zmpID=helixsleep HTTP/1.1 
Host: live.rezync.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.106
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 30
date: Sun, 05 Feb 2023 08:18:19 GMT
set-cookie: zync-uuid=0236d62c-0a3d-45b8-b588-d3420808be5e:1675585099.235937; Domain=rezync.com; Expires=Fri, 04 Aug 2023 00:18:19 GMT; Path=/; SameSite=None; Secure sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMDIzNmQ2MmMtMGEzZC00NWI4LWI1ODgtZDM0MjA4MDhiZTVlOjE2NzU1ODUwOTkuMjM1OTM3In0.Y99mSw.95KfVE4cK8wPJg_5Zj9vnDoLJjw; Expires=Fri, 04 Aug 2023 08:18:19 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tsHpt8fbf4g-IfA02iEvsFdvBf4wHR3oRZ2qgV_xHZWBIQ4ELFqc-A==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   30
Md5:    9f9b1bfd38e929115eb3346ab761c6fa
Sha1:   46d049efae28063e7038cf5dce1f077932e80be4
Sha256: 50f9c399c7a8a6926cd8cbb06abdb2e835c0190af02276150550860f3a26a655
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:19 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 06:44:40 GMT
Expires: Sun, 12 Feb 2023 06:44:39 GMT
Etag: "bbfb87f945b11e68712545b5cd2415750458f2e7"
Cache-Control: max-age=598579,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794a36f51f58b523-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 08:18:19 GMT
Last-Modified: Sun, 05 Feb 2023 06:35:45 GMT
Server: ECS (bsa/EB22)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dMDkQyMcZgtYMdKM6RqqAHiv7hXfOVNnRk9jU0T-R6ThgxnJgFvGTw==
Age: 6154

                                        
                                            GET /A1422860-a2dc-4b8c-affa-9174acdb4c091.js HTTP/1.1 
Host: d.impactradius-event.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         35.186.249.72
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
x-guploader-uploadid: ADPycdsD8vp40N75aSIrudeHM9Y7ZUYRx433ICua4wEfNcQUBMPNm_Evu0WIygUuZ2UQ1D3gE_k_ZbuKrsXr5S8IMf3v6w
vary: X-Goog-Allowed-Resources,Accept-Encoding
x-goog-generation: 1669049984608601
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 14083
content-encoding: gzip
x-goog-hash: crc32c=H4+Y8Q==, md5=ThllnnIRXsRDQeGQTk9Wlg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 14083
access-control-allow-origin: *
server: UploadServer
date: Sun, 05 Feb 2023 08:18:19 GMT
expires: Sun, 05 Feb 2023 08:23:19 GMT
cache-control: public,max-age=900,s-maxage=300
last-modified: Mon, 21 Nov 2022 16:59:44 GMT
etag: "4e19659e72115ec44341e1904e4f5696"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (47269), with no line terminators
Size:   14083
Md5:    4e19659e72115ec44341e1904e4f5696
Sha1:   f324d913c6ea6e19cdbfb55d6a9f5a23e8007602
Sha256: cf3c1b7f7ba939c2c5c8f17e13fd450f9016356c3e9ec81c5807d2d625767fc3
                                        
                                            GET /pixel/?ad_log=referer&action=lead&pixid=ab07a0e4-7ddd-4049-b4bd-f4a64f55a4dd HTTP/1.1 
Host: data.adxcel-ec2.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.225.204.170
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    a5098c60b3b0c879a2c7af6c68b7b53f
Sha1:   939f40be7f1aaf623f62886de4aaba3886df9b65
Sha256: 693d949d8c3fdc7fd4ace7c340b5f177a9f0c5be7bafee8bc93a7d88b7523d75
                                        
                                            OPTIONS /track HTTP/1.1 
Host: web.chtbl.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://helixsleep.com/
Origin: https://helixsleep.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.125
HTTP/2 200 OK
content-type: application/json
                                        
content-length: 49
date: Sun, 05 Feb 2023 08:18:19 GMT
server: uvicorn
access-control-allow-methods: OPTIONS,POST
access-control-allow-headers: *
access-control-allow-origin: *
vary: Origin
x-cache: Miss from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sLt7cbX8_bSDGIqJvvDFaXZqNssp7OxZfZgclSfXg10CyB6BNOu2OQ==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   49
Md5:    d082a3018d8d388ba8a05bbfd201e397
Sha1:   5a6271ee38cdebb71cdfcd8e05c4fac26e59389e
Sha256: bb30148d9df7671c14f2cd5be91e6b7a1488932efb740a80b66f39052744c168
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:19 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 06:44:40 GMT
Expires: Sun, 12 Feb 2023 06:44:39 GMT
Etag: "bbfb87f945b11e68712545b5cd2415750458f2e7"
Cache-Control: max-age=598579,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794a36f7fa5bb523-OSL

                                        
                                            POST /track HTTP/1.1 
Host: web.chtbl.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json;charset=UTF-8
Content-Length: 253
Origin: https://helixsleep.com
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.125
HTTP/2 200 OK
content-type: application/json
                                        
content-length: 49
date: Sun, 05 Feb 2023 08:18:19 GMT
server: uvicorn
access-control-allow-methods: OPTIONS,POST
access-control-allow-headers: *
access-control-allow-origin: *
vary: Origin
x-cache: Miss from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: t9kVCMtsZUPsZ7c8Gz1akkXadsz2ubClyYMbybfrXSaxIuhKBQHq9g==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   49
Md5:    d082a3018d8d388ba8a05bbfd201e397
Sha1:   5a6271ee38cdebb71cdfcd8e05c4fac26e59389e
Sha256: bb30148d9df7671c14f2cd5be91e6b7a1488932efb740a80b66f39052744c168
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 08:18:19 GMT
Etag: "63ddca60-118"
Server: ECS (amb/6BC3)
Content-Length: 279

                                        
                                            GET /api/v2/cookie_sent HTTP/1.1 
Host: www.affirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://helixsleep.com/
Origin: https://helixsleep.com
Connection: keep-alive
Cookie: DUMMY_COOKIE=DUMMY_VALUE; tracker_device=96be3061-22c5-4fc4-8a38-f0b394326b68; t_v2_s=eyIgYiI6Ik9UWmlaVE13TmpFdE1qSmpOUzAwWm1NMExUaGhNemd0WmpCaU16azBNekkyWWpZNCJ9.FsD3yg.WKSTTutOa3Ujm4uZL719W0WzPcM; 3060738.3440491=96be3061-22c5-4fc4-8a38-f0b394326b68
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.126
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 05 Feb 2023 08:02:12 GMT
server: istio-envoy
set-cookie: DUMMY_COOKIE=DUMMY_VALUE; Domain=.affirm.com; Secure; Path=/; SameSite=None
cache-control: max-age=3600
access-control-allow-headers: Accept, Content-Type, X-Requested-With
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-origin: https://helixsleep.com
access-control-allow-methods: GET, OPTIONS
x-affirm-request-id: e4040372-f45f-4f4e-cff8-d27f9bf60995
strict-transport-security: max-age=86400
x-affirm-cache-status: MISS
content-encoding: gzip
x-envoy-upstream-service-time: 9
vary: Accept-Encoding,cookie,Origin,Origin
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2Cx2Go_hiYTqq9lcqPrms2N8RqeSfVDagy89G-Mf5eR9G5Dv2FTpiQ==
age: 967
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   41
Md5:    e5988b9059093ba6c22eaa776d2c0913
Sha1:   8b8dafc562f35a825db3d734909309e0f2119055
Sha256: 6bd94c6ff4719e1e33f24245636b27934aef2b04f1ef8e2a976a61aa32b4723d
                                        
                                            POST /g/collect?v=2&tid=G-SC9E0N92N7&gtm=45je3210&_p=641484867&cid=865826205.1675585139&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675585138&sct=1&seg=0&dl=https%3A%2F%2Fhelixsleep.com%2F&dt=Helix%20%7C%20Mattresses%20Designed%20For%20Every%20Body%20%E2%80%93%20Helix%20Sleep&en=page_view&_fv=1&_nsi=1&_ss=1&up.visitor_type=guest HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://helixsleep.com
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.32.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://helixsleep.com
date: Sun, 05 Feb 2023 08:18:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST /s/gts1d4/mwfftxedWH8 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1d4/mwfftxedWH8 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1d4/mwfftxedWH8 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1d4/mwfftxedWH8 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=G-111111&l=dataLayer&cx=c&sign=4bf4df9bc362fd487e4f1f41ff9fee94ab7386dbba124c6df52b56ff1fa93762_20230205 HTTP/1.1 
Host: gtm.helixsleep.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Cookie: _orig_referrer=; _landing_page=%2F; _y=059ab175-7798-4cc2-8a44-ba690786eaca; _s=447918d3-ac66-490e-a3d6-a6a8925deedc; _shopify_y=059ab175-7798-4cc2-8a44-ba690786eaca; _shopify_s=447918d3-ac66-490e-a3d6-a6a8925deedc; optimizelyEndUserId=oeu1675585136802r0.023536204472440758; _hp2_ses_props.2499289854=%7B%22z%22%3A0%2C%22ts%22%3A1675585138042%2C%22d%22%3A%22helixsleep.com%22%2C%22h%22%3A%22%2F%22%2C%22t%22%3A%22Helix%20%7C%20Mattresses%20Designed%20For%20Every%20Body%20%E2%80%93%20Helix%20Sleep%22%7D; _hp2_id.2499289854=%7B%22userId%22%3A%22959756839437295%22%2C%22pageviewId%22%3A%228558133978355497%22%2C%22sessionId%22%3A%222249692222584917%22%2C%22identity%22%3Anull%2C%22trackerVersion%22%3A%224.0%22%7D; _shopify_sa_t=2023-02-05T08%3A18%3A58.166Z; _shopify_sa_p=; _gcl_au=1.1.76187156.1675585138
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         216.239.36.21
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
date: Sun, 05 Feb 2023 08:18:19 GMT
vary: Accept-Encoding
cache-control: private, max-age=900
expires: Sun, 05 Feb 2023 08:32:31 GMT
last-modified: Sun, 05 Feb 2023 06:00:00 GMT
content-encoding: gzip
via: 1.1 google
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   59692
Md5:    df11fe2fc670e36fdb507bedf062563f
Sha1:   62a4c61a0f75461637965d08651b829184cc640f
Sha256: 0ca798a2e561119f1c7f9c554dee7c2518578ff7310ff7ceea72803922f3080e
                                        
                                            GET /track.gif?vc=1.1&vv=1.1&ctid=GTM-NZKZRXC&idx=1&event_name=gtm.init&variable_name=dlv%20-%20Thank%20You%20Page%20-%20ecommerce.purchase.products&channels=&tag_names=&dlKey=ecommerce.purchase.products&dlValue=undefined&cond=required&condValue=true&url=https%3A%2F%2Fhelixsleep.com%2F HTTP/1.1 
Host: monitoring.getelevar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.102.157.158
HTTP/2 200 OK
content-type: image/gif
                                        
x-guploader-uploadid: ADPycdv4mSvGPsFUj4C3AqkrtqA2MB5FJWcfkUKHJjlmJYXv4Em9rnpnqaUpLwMHmsHx1bPRQBgIk7u-EM5FTDifls4SH8F36NLR
vary: X-Goog-Allowed-Resources
x-goog-generation: 1576156818458330
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 26
x-goog-hash: crc32c=Qn5OAg==, md5=akMJnVyP6ZGnqn66ylMGnQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 26
server: UploadServer
date: Sun, 05 Feb 2023 08:18:20 GMT
expires: Sun, 05 Feb 2023 09:18:20 GMT
cache-control: public, max-age=3600
last-modified: Thu, 12 Dec 2019 13:20:18 GMT
etag: "6a43099d5c8fe991a7aa7ebaca53069d"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   26
Md5:    6a43099d5c8fe991a7aa7ebaca53069d
Sha1:   5bce2f0d57305c58c7b05bfce29ebb39a18f5570
Sha256: 3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
                                        
                                            GET /track.gif?vc=1.1&vv=1.1&ctid=GTM-NZKZRXC&idx=0&event_name=gtm.init_consent&variable_name=dlv%20-%20Thank%20You%20Page%20-%20ecommerce.purchase.products&channels=&tag_names=&dlKey=ecommerce.purchase.products&dlValue=undefined&cond=required&condValue=true&url=https%3A%2F%2Fhelixsleep.com%2F HTTP/1.1 
Host: monitoring.getelevar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.102.157.158
HTTP/2 200 OK
content-type: image/gif
                                        
x-guploader-uploadid: ADPycdsrmOs6HYIOwkZIdJMKWXsAdT5X6dBDpDtFq6EJk4SMhmXcmSaFMcr5eLLYp1F6BE1jcnHWTOLIkuIkFv6XC2PlNbHAgSoY
vary: X-Goog-Allowed-Resources
x-goog-generation: 1576156818458330
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 26
x-goog-hash: crc32c=Qn5OAg==, md5=akMJnVyP6ZGnqn66ylMGnQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 26
server: UploadServer
date: Sun, 05 Feb 2023 08:18:20 GMT
expires: Sun, 05 Feb 2023 09:18:20 GMT
cache-control: public, max-age=3600
last-modified: Thu, 12 Dec 2019 13:20:18 GMT
etag: "6a43099d5c8fe991a7aa7ebaca53069d"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   26
Md5:    6a43099d5c8fe991a7aa7ebaca53069d
Sha1:   5bce2f0d57305c58c7b05bfce29ebb39a18f5570
Sha256: 3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
                                        
                                            GET /track.gif?vc=1.1&vv=1.1&ctid=GTM-NZKZRXC&idx=4&event_name=gtm.dom&variable_name=dlv%20-%20Thank%20You%20Page%20-%20ecommerce.purchase.products&channels=&tag_names=&dlKey=ecommerce.purchase.products&dlValue=undefined&cond=required&condValue=true&url=https%3A%2F%2Fhelixsleep.com%2F HTTP/1.1 
Host: monitoring.getelevar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.102.157.158
HTTP/2 200 OK
content-type: image/gif
                                        
x-guploader-uploadid: ADPycdsoRnYQjmScUtQLHXZQOEZ92fkYEuBnOOBNQgEmp93bbsZYEVVBbEJr-LaYW9Dpfpy4HcbjiyVs9L5HZjjLpRT99z_EvY9M
vary: X-Goog-Allowed-Resources
x-goog-generation: 1576156818458330
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 26
x-goog-hash: crc32c=Qn5OAg==, md5=akMJnVyP6ZGnqn66ylMGnQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 26
server: UploadServer
date: Sun, 05 Feb 2023 08:18:20 GMT
expires: Sun, 05 Feb 2023 09:18:20 GMT
cache-control: public, max-age=3600
last-modified: Thu, 12 Dec 2019 13:20:18 GMT
etag: "6a43099d5c8fe991a7aa7ebaca53069d"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   26
Md5:    6a43099d5c8fe991a7aa7ebaca53069d
Sha1:   5bce2f0d57305c58c7b05bfce29ebb39a18f5570
Sha256: 3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
                                        
                                            GET /track.gif?vc=1.1&vv=1.1&ctid=GTM-NZKZRXC&idx=5&event_name=gtm.timer&variable_name=dlv%20-%20Thank%20You%20Page%20-%20ecommerce.purchase.products&channels=&tag_names=&dlKey=ecommerce.purchase.products&dlValue=undefined&cond=required&condValue=true&url=https%3A%2F%2Fhelixsleep.com%2F HTTP/1.1 
Host: monitoring.getelevar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.102.157.158
HTTP/2 200 OK
content-type: image/gif
                                        
x-guploader-uploadid: ADPycdsNVbYruUilec9go_-n57AV0IOkCxZ3PV3I3bWjcMZPG5mWCyc1zZgY3InHt401hEgV2s492sGDSy3ILHuR3eCTJQtIHwmB
vary: X-Goog-Allowed-Resources
x-goog-generation: 1576156818458330
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 26
x-goog-hash: crc32c=Qn5OAg==, md5=akMJnVyP6ZGnqn66ylMGnQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 26
server: UploadServer
date: Sun, 05 Feb 2023 08:18:20 GMT
expires: Sun, 05 Feb 2023 09:18:20 GMT
cache-control: public, max-age=3600
last-modified: Thu, 12 Dec 2019 13:20:18 GMT
etag: "6a43099d5c8fe991a7aa7ebaca53069d"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   26
Md5:    6a43099d5c8fe991a7aa7ebaca53069d
Sha1:   5bce2f0d57305c58c7b05bfce29ebb39a18f5570
Sha256: 3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
                                        
                                            GET /track.gif?vc=1.1&vv=1.1&ctid=GTM-NZKZRXC&idx=3&event_name=dl_user_data&variable_name=dlv%20-%20Thank%20You%20Page%20-%20ecommerce.purchase.products&channels=&tag_names=&dlKey=ecommerce.purchase.products&dlValue=undefined&cond=required&condValue=true&url=https%3A%2F%2Fhelixsleep.com%2F HTTP/1.1 
Host: monitoring.getelevar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.102.157.158
HTTP/2 200 OK
content-type: image/gif
                                        
x-guploader-uploadid: ADPycdvTrzArs5qpPW0sTLhy9EZAaip3LEoqYRHEoaFF3NqSAqM0Cs_dSRodKcmpius3lY31DYJKdcPDT6v-drFmTjYCoo9n_kGC
vary: X-Goog-Allowed-Resources
x-goog-generation: 1576156818458330
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 26
x-goog-hash: crc32c=Qn5OAg==, md5=akMJnVyP6ZGnqn66ylMGnQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 26
server: UploadServer
date: Sun, 05 Feb 2023 08:18:20 GMT
expires: Sun, 05 Feb 2023 09:18:20 GMT
cache-control: public, max-age=3600
last-modified: Thu, 12 Dec 2019 13:20:18 GMT
etag: "6a43099d5c8fe991a7aa7ebaca53069d"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   26
Md5:    6a43099d5c8fe991a7aa7ebaca53069d
Sha1:   5bce2f0d57305c58c7b05bfce29ebb39a18f5570
Sha256: 3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
                                        
                                            GET /track.gif?vc=1.1&vv=1.1&ctid=GTM-NZKZRXC&idx=2&event_name=gtm.js&variable_name=dlv%20-%20Thank%20You%20Page%20-%20ecommerce.purchase.products&channels=&tag_names=&dlKey=ecommerce.purchase.products&dlValue=undefined&cond=required&condValue=true&url=https%3A%2F%2Fhelixsleep.com%2F HTTP/1.1 
Host: monitoring.getelevar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.102.157.158
HTTP/2 200 OK
content-type: image/gif
                                        
x-guploader-uploadid: ADPycdtu-cabOuX_b69rJDz4M44gbQZOII8eA1zfwTUAbY7r2Eqx227HFWUVm8OcRd4HBO7PdhnJf89w64g04u23eNCg2pLnHpqI
vary: X-Goog-Allowed-Resources
x-goog-generation: 1576156818458330
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 26
x-goog-hash: crc32c=Qn5OAg==, md5=akMJnVyP6ZGnqn66ylMGnQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 26
server: UploadServer
date: Sun, 05 Feb 2023 08:18:20 GMT
expires: Sun, 05 Feb 2023 09:18:20 GMT
cache-control: public, max-age=3600
last-modified: Thu, 12 Dec 2019 13:20:18 GMT
etag: "6a43099d5c8fe991a7aa7ebaca53069d"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   26
Md5:    6a43099d5c8fe991a7aa7ebaca53069d
Sha1:   5bce2f0d57305c58c7b05bfce29ebb39a18f5570
Sha256: 3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
                                        
                                            GET /web_widget/latest/classic/web-widget-8165-34c91d3.js HTTP/1.1 
Host: static.zdassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.72.113
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sun, 05 Feb 2023 08:18:20 GMT
x-amz-id-2: fchTH8ZKP5XzJ9X5tMP8Gb0FrLmWduzX+toUb4CYjGPL2cSNUiJ5dwSXuHr879IrNtt8Or/pLvv3dgxnRitbqg==
x-amz-request-id: 8SCCQPT6TR1YFJ84
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:44 GMT
etag: W/"d519ea27f763cb6ec80aeec5b45213a7"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:43 GMT
x-amz-version-id: tYOSfzpt5WjSOWaRj9efQMLiLa0r_8B0
cf-cache-status: HIT
age: 354927
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RBou1ONwy8mPC3e0lgcaXtnKppSdwOF%2BLESnMCZDEcuRIci1yZY%2Fs%2BVyKLJwglyYdMiSM6wv7Orho2U88%2BhpKbFAoNEzl1tbk4cGHna0UNvZOTqaFMaAXqjTSEd2bf7f3x7JF2k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794a36fc1c7b0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65307)
Size:   194230
Md5:    e8e3939d523bf5d8a8f0fa38a505e3b6
Sha1:   c2aae6ddc2f16113769a8b342ef9d6c6486b798f
Sha256: 5b5c243abf27fca2076e3428503ba2f57f4c2e2ab6bfdc7eb4e38b796748fe5e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3400
Cache-Control: max-age=164686
Date: Sun, 05 Feb 2023 08:18:20 GMT
Etag: "63df3952-116"
Expires: Tue, 07 Feb 2023 06:03:06 GMT
Last-Modified: Sun, 05 Feb 2023 05:06:26 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /script.js HTTP/1.1 
Host: cdn.usefathom.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         194.242.11.186
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 05 Feb 2023 08:18:19 GMT
server: BunnyCDN-NO1-830
cdn-pullzone: 506217
cdn-uid: aa90c48b-f401-4fa1-aac1-c94c8f3ae560
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=0
etag: W/"d41d8cd98f00b204e9800998ecf8427e"
last-modified: Wed, 01 Feb 2023 19:49:01 GMT
x-vapor-base64-encode: True
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/03/2023 19:17:56
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 96403a22c3372b71a346a2ac77202e92
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6019), with no line terminators
Size:   2253
Md5:    0a467e04affa02ba4b6b0c3a7c5c53a6
Sha1:   9b8bdfe9d412ebafe064a3701f59a863a94b2454
Sha256: e0acae0a5cff5e83186b09d11221342ca171e7374fdc4a3c8d16818bab4296bf
                                        
                                            POST /s/gts1d4/mwfftxedWH8 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /web_widget/latest/classic/web-widget-5324-34c91d3.js HTTP/1.1 
Host: static.zdassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.72.113
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sun, 05 Feb 2023 08:18:20 GMT
x-amz-id-2: kNKtAh5j74VCRQUuSSi1H7gGWEBas+ZMho2E/NRakx2x+qN+2EvUVBkNbiaB2bdjibN4Eb3GEbg=
x-amz-request-id: 8SC131HFWH6HSGCE
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:44 GMT
etag: W/"e40ffe6686756f7ae653217693dadaac"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:43 GMT
x-amz-version-id: 6AuBmSIJ32qDXiB1mw4Drv9aAUt8ZDjH
cf-cache-status: HIT
age: 354927
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tl%2BQxS6YLzYQU%2Bh1nZ4BuWAnlnZbjiYchRIqPvr%2BS6LaJqxuTS0hGznPW3ssnJV9%2F%2BLIUJiKe1mSLM%2BiWP7su%2BTSdp30n3iS2remMiiRintSZh92jyH1nhbWcOGuEr2GdfwDlAo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794a36fc1c7c0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   141632
Md5:    88ca38ad84f7dfb67ee74582fa4655ea
Sha1:   422202246e9e19e1d29bf1a4b4a578a0e9ebf6d2
Sha256: 8f81faf90126376ad72e1739f6d6c9710e1eec98eec7c2e4abad7f083412000c
                                        
                                            POST /e?v=4.16.27_3b1f8ef468&pd=https%3A%2F%2Fhelixsleep.com%2F&u=c734a96d581d4a038ff452e70124368c&c=helixsleep&ceid=cFA&lt=1675585139670&tag=modern&cs=3935432064&t=v&r=&m=%7B%22source%22%3A%22a%22%7D&cb=1675585139677 HTTP/1.1 
Host: events.attentivemobile.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://helixsleep.com
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         104.18.43.48
HTTP/2 200 OK
content-type: text/plain;charset=UTF-8
                                        
date: Sun, 05 Feb 2023 08:18:20 GMT
content-length: 0
x-envoy-upstream-service-time: 4
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794a36fd0f1bb51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST /xc/1426335/605589/9928 HTTP/1.1 
Host: helix-sleep.tkjf.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Content-Length: 76
Origin: https://helixsleep.com
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         52.18.195.183
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
                                        
date: Sun, 05 Feb 2023 08:18:20 GMT
set-cookie: AWSALB=++xV9xilRSOCSkI+T8PwZpXeI01FJ22/o9t6wS0jr17bLkA15y8opC3EMTz16A6ru2ea1f8fyA7GIxD1PcExEo5SlXy8n2XUW7BrysjBZia8d5IWFMTBv7fS1tHt; Expires=Sun, 12 Feb 2023 08:18:20 GMT; Path=/ AWSALBCORS=++xV9xilRSOCSkI+T8PwZpXeI01FJ22/o9t6wS0jr17bLkA15y8opC3EMTz16A6ru2ea1f8fyA7GIxD1PcExEo5SlXy8n2XUW7BrysjBZia8d5IWFMTBv7fS1tHt; Expires=Sun, 12 Feb 2023 08:18:20 GMT; Path=/; SameSite=None; Secure brwsr=a661ec49-a52d-11ed-880a-91e23fc3c1fb; Domain=.tkjf.net; Path=/; Secure; Max-Age=62208000; Expires=Sat, 25 Jan 2025 08:18:20 GMT; HttpOnly; SameSite=None irld=Lwv8Q6RQ6uVpsV2aU%3AOUdgzvv2zx01xzhBRvf0l8QPHzF7z1a; Path=/; Secure; Max-Age=15552000; Expires=Fri, 4 Aug 2023 08:18:20 GMT; HttpOnly; SameSite=None
access-control-allow-origin: https://helixsleep.com
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Sun, 05 Feb 2023 08:18:20 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- data
Size:   324
Md5:    a4bcc388c36aa32ca9e33c2d56ed4090
Sha1:   37263a5057e2d67ec736bd379481dfb50011bb9b
Sha256: 61f66e9d0c94da2018becfec536888075d87f7c819c6c1553d8cb9481a7fd37f
                                        
                                            GET /helixsleep/dtag.js HTTP/1.1 
Host: cdn.attn.tv
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.4
HTTP/2 200 OK
content-type: text/javascript
                                        
x-amz-replication-status: COMPLETED
last-modified: Thu, 13 Oct 2022 18:24:15 GMT
x-amz-version-id: D3O0yjcCK6U7ilAQ0mFHYNQ9cG45Xgm5
server: AmazonS3
content-encoding: gzip
date: Sun, 05 Feb 2023 08:18:21 GMT
cache-control: public, max-age=120
etag: W/"6c26757eed663148a801c9aa53dbeb7c"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: U6k8NYsML0fjEpJq_iuzCXzdOxvRW_v6uJoCrNWXeZxeZRC5Pc63pg==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   3095
Md5:    7dff9c9d864bc32b76019b0278bffc04
Sha1:   70186656e8f0b4f5f718a2993412754a56e38834
Sha256: 369a4d54fc658cb1877ccee474610c792f0db47fbb74581d113a74341adaaaa1
                                        
                                            GET /growth-tag-assets/client-configs/helixsleep.attn.tv.js HTTP/1.1 
Host: cdn.attn.tv
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.4
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 301
x-amz-replication-status: COMPLETED
last-modified: Wed, 01 Feb 2023 15:46:42 GMT
x-amz-version-id: hk14CULP7YK_DzYMRF5avIf4atu67cyv
accept-ranges: bytes
server: AmazonS3
date: Sun, 05 Feb 2023 08:18:21 GMT
cache-control: max-age=120
etag: "e310f2966f9466efa201dd19c2c95d6a"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EvnWuNF7E4cHh0jt8JJRZLCVxeSuaLTdAWKuxcc9aN-uz0cx5svkNw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (301), with no line terminators
Size:   301
Md5:    e310f2966f9466efa201dd19c2c95d6a
Sha1:   3d4f0f1da6a25184c4db615fe7ccbdc75ba923ac
Sha256: 6d12c2f09b3bcb7c20788bffd50074b1ff1e1b93df0f76a3cc54677f2a527922
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=124487
Date: Sun, 05 Feb 2023 08:18:20 GMT
Etag: "63de9365-1d7"
Expires: Mon, 06 Feb 2023 18:53:07 GMT
Last-Modified: Sat, 04 Feb 2023 17:18:29 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: daTi4Z1iplBzx--A5XpNt69v5zo-WrWCBnafuB6cKfyYeWLFyiTaVg==
Age: 5678

                                        
                                            GET /g/collect?v=2&tid=G-111111&gtm=45he3210&_p=641484867&cid=865826205.1675585139&ul=en-us&sr=1280x1024&_fplc=0&uaW=1&_s=1&sid=1675585139&sct=1&seg=0&dl=https%3A%2F%2Fhelixsleep.com%2F&dt=Helix%20%7C%20Mattresses%20Designed%20For%20Every%20Body%20%E2%80%93%20Helix%20Sleep&en=page_view&_fv=1&_ss=1&up.visitor_type=guest&up.cookie_domain=auto&richsstsse HTTP/1.1 
Host: gtm.helixsleep.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://helixsleep.com
Connection: keep-alive
Referer: https://helixsleep.com/
Cookie: _orig_referrer=; _landing_page=%2F; _y=059ab175-7798-4cc2-8a44-ba690786eaca; _s=447918d3-ac66-490e-a3d6-a6a8925deedc; _shopify_y=059ab175-7798-4cc2-8a44-ba690786eaca; _shopify_s=447918d3-ac66-490e-a3d6-a6a8925deedc; optimizelyEndUserId=oeu1675585136802r0.023536204472440758; _hp2_ses_props.2499289854=%7B%22ts%22%3A1675585138042%2C%22d%22%3A%22helixsleep.com%22%2C%22h%22%3A%22%2F%22%7D; _hp2_id.2499289854=%7B%22userId%22%3A%22959756839437295%22%2C%22pageviewId%22%3A%228558133978355497%22%2C%22sessionId%22%3A%222249692222584917%22%2C%22identity%22%3Anull%2C%22trackerVersion%22%3A%224.0%22%7D; _shopify_sa_t=2023-02-05T08%3A18%3A58.166Z; _shopify_sa_p=; _gcl_au=1.1.76187156.1675585138; _ga_SC9E0N92N7=GS1.1.1675585138.1.0.1675585138.0.0.0; _ga=GA1.1.865826205.1675585139; IR_gbd=helixsleep.com; IR_9928=1675585138918%7C1426335%7C1675585138918%7C%7C; _ga_111111=GS1.1.1675585139.1.0.1675585139.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         216.239.36.21
HTTP/2 200 OK
content-type: text/plain
                                        
date: Sun, 05 Feb 2023 08:18:20 GMT
vary: Accept-Encoding
set-cookie: FPLC=EcmBJjgbxSggaz%2BaBhubFILZhWYQx%2B28Y%2FrGRbKH64MpYHioIpz0vofhYR%2FFMunulAiv0OZDJQ7%2Bf0yCjACJPNSWQAroAL%2BdFmH%2FBk2Ltp8t58Frcp3o5VFPM4Ghww%3D%3D; Max-Age=72000; Domain=helixsleep.com; Path=/; Secure FPID=FPID2.2.QOywwe1PiML9BH8xrlxFN37L5Vma31U%2FYMcX1QBAkUs%3D.1675585139; Max-Age=63072000; Domain=helixsleep.com; Path=/; Secure; HttpOnly FPAU=1.1.76187156.1675585138; Max-Age=7776038; Domain=helixsleep.com; Path=/; Secure
cache-control: no-cache
x-content-type-options: nosniff
access-control-allow-origin: https://helixsleep.com
access-control-allow-credentials: true
content-encoding: gzip
via: 1.1 google
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   90
Md5:    169015d9a1c4742ef1b19ab13dfac200
Sha1:   5a31df9e8f8d370f893c6f087c5974cb3e4ddd7f
Sha256: 8dfbc19663da6a43557027f2e6d3e94066517ce50334a83f410e0a4853935d40
                                        
                                            GET /js/geo4.js HTTP/1.1 
Host: cdn3.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.110.9.127
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: AmazonS3
Content-Length: 302
x-amz-id-2: +tkr/7Ns7kenSzCK7455ZyE4sN+8K/pZ+M8ci8OpfMRII6vk5qGLnhIQW4kmSFsTbjS5D/kX93I=
Unused62: 8096267
x-amz-version-id: F8W1XaLRNmnJXrMgZ6ZMuxtE6L376GC.
x-amz-server-side-encryption: AES256
ETag: "8777c006589ecabfa3d63a6b5bf24393"
x-amz-replication-status: COMPLETED
x-amz-request-id: M8KPVV219SSHET6W
Cache-Control: max-age=25162
Date: Sun, 05 Feb 2023 08:18:20 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   302
Md5:    56e10233eaa57653e63ee929e1c619cf
Sha1:   864e4dfc0f6b0a2d73680b80eb476003b303eab7
Sha256: 4515bfcea10a9dfd175ba279138db6023e67d536edb9c9b542b4af85d8fc7146
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5033
Cache-Control: max-age=94680
Date: Sun, 05 Feb 2023 08:18:20 GMT
Etag: "63de217b-1d7"
Expires: Mon, 06 Feb 2023 10:36:20 GMT
Last-Modified: Sat, 04 Feb 2023 09:12:27 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.46
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 05 Feb 2023 07:45:20 GMT
expires: Sun, 05 Feb 2023 09:45:20 GMT
cache-control: public, max-age=7200
age: 1980
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1490)
Size:   20085
Md5:    ca7fbbfd120e3e329633044190bbf134
Sha1:   d17f81e03dd827554ddd207ea081fb46b3415445
Sha256: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2701
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 08:18:20 GMT
Etag: "63de36c9-118"
Last-Modified: Sun, 05 Feb 2023 07:33:19 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /b9JtmA58HoC1LCCam59dJvJcReOT1Rv9nMu3rEtc/widget.js HTTP/1.1 
Host: staticw2.yotpo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         95.101.97.70
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
content-encoding: gzip
x-ratelimit-remaining-minute: 4999
x-ratelimit-limit-minute: 5000
ratelimit-remaining: 4999
ratelimit-limit: 5000
ratelimit-reset: 53
correlation-id: 9c05c302-a213-4283-8904-7db74348f57f
x-kong-upstream-latency: 105
x-kong-proxy-latency: 9
content-length: 147310
cache-control: public, max-age=2374
date: Sun, 05 Feb 2023 08:18:20 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=REVALIDATE, edge; dur=1, origin; dur=402
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (51220)
Size:   147310
Md5:    6521bfe0e57c1ecb08941b28acf4b78a
Sha1:   5ba3db751ec7449d8e321bb9a057db7bd6524b7d
Sha256: b6249c5460e30d0a91004acdc62f253ddb6242c19b35b398bbc25e3532ee06c3
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: jgblUxUONteaOxkqDHs5CJDJfv49QYNJcmn4b2ZfbpbFImz2fGw8xYsONQqNj2cBamhQG5XryDJlauEkVAqd2A==
priority: u=3,i
content-length: 27843
x-fb-trip-id: 1904183273
date: Sun, 05 Feb 2023 08:18:20 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   27843
Md5:    dd1f85cc598419df61e254e53f9ec1ef
Sha1:   f86c0ee563f5b7a01e1d40b566f2bc184a32380f
Sha256: c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
                                        
                                            GET /pagead/viewthroughconversion/810216059/?random=1675585138390&cv=11&fst=1675585138390&bg=ffffff&guid=ON&async=1&gtm=45Fe3210&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fhelixsleep.com%2F&tiba=Helix%20%7C%20Mattresses%20Designed%20For%20Every%20Body%20%E2%80%93%20Helix%20Sleep&auid=76187156.1675585138&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.2
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 05 Feb 2023 08:18:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 903
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 05-Feb-2023 08:33:20 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1907), with no line terminators
Size:   903
Md5:    16c7d25ba14f20179a3ba0ee45199f1b
Sha1:   ae52f97ac32ebf8cf85e81a86384ae008a051bc2
Sha256: 2ae91b412fef360831fb248275c06766771292099b4ab25398d0ff1c3b9837a5
                                        
                                            GET /pagead/viewthroughconversion/954616282/?random=1675585138385&cv=11&fst=1675585138385&bg=ffffff&guid=ON&async=1&gtm=45Fe3210&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fhelixsleep.com%2F&tiba=Helix%20%7C%20Mattresses%20Designed%20For%20Every%20Body%20%E2%80%93%20Helix%20Sleep&auid=76187156.1675585138&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.2
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 05 Feb 2023 08:18:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 902
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 05-Feb-2023 08:33:20 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1907), with no line terminators
Size:   902
Md5:    a151623d594ff9af54c5a0a20a15b3c6
Sha1:   f5deb9e9a31d2e3f874a0b87ea2f1baaca6dc87a
Sha256: eb77ed4352b40d477c3ff3f6ee350f1fea21f29602a655c78af081b76c29568a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5033
Cache-Control: max-age=94680
Date: Sun, 05 Feb 2023 08:18:20 GMT
Etag: "63de217b-1d7"
Expires: Mon, 06 Feb 2023 10:36:20 GMT
Last-Modified: Sat, 04 Feb 2023 09:12:27 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /j/collect?v=1&_v=j99&a=641484867&t=pageview&_s=1&dl=https%3A%2F%2Fhelixsleep.com%2F&ul=en-us&de=UTF-8&dt=Helix%20%7C%20Mattresses%20Designed%20For%20Every%20Body%20%E2%80%93%20Helix%20Sleep&sd=24-bit&sr=1280x1024&vp=1268x927&je=0&_u=YADAAEABAAAAACAAI~&jid=2054658581&gjid=138372120&cid=865826205.1675585139&tid=UA-65322123-1&_gid=1000869733.1675585140&_r=1&_slc=1&gtm=45Fe3210n81NZKZRXC&z=1401334949 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://helixsleep.com
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.46
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://helixsleep.com
date: Sun, 05 Feb 2023 08:18:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    9e92e190700c1af4539b40c2171320a9
Sha1:   209bcdb79e6067b51091ce8586d4b977f25b67d8
Sha256: aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
                                        
                                            GET /integration/clients/helix-sleep.min.js HTTP/1.1 
Host: d2jjzw81hqbuqv.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.128
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 26 Jan 2023 18:21:39 GMT
server: AmazonS3
content-encoding: gzip
date: Sun, 05 Feb 2023 08:18:20 GMT
cache-control: max-age=600, public
expires: Thu, 26 Jan 2023 18:31:38 GMT
etag: W/"be414f823bcb2126190742ddcaa759e0"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qkopVmpKTEjh9N13ygCOqvwM6FzWbIWa7zeMSvL1wBewjS5Fo4lmpw==
age: 317
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   10722
Md5:    5ded595bf2a84ecfc1c4264c5c70fbfe
Sha1:   1f22c953deb6ed10aabf215747c5283244045cd5
Sha256: 9f819138598e706b0821d7621ad41208e9253431e7ba8e18c57de0faa110b3b5
                                        
                                            GET /s/W/ws/uD+kmetsd7Xr2OnR/c/1675585139989 HTTP/1.1 
Host: widget-mediator.zopim.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://helixsleep.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BBNh24tf/UhnZ7kaiK4snA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         18.184.40.186
HTTP/1.1 101 Switching Protocols
                                        
Date: Sun, 05 Feb 2023 08:18:20 GMT
Connection: upgrade
Set-Cookie: AWSALB=KyWpSDFypIt/Vx+fIsyTzNfSRVaFHmlidMRcz5foQ3KwjA3ENf28XNmGbR5QEoSepR6vj45mUhCPgOVm0jALHPqQB4A23ZwINInSMeBSt1dXzFRL91p/Ufmd1JuL; Expires=Sun, 12 Feb 2023 08:18:20 GMT; Path=/ AWSALBCORS=KyWpSDFypIt/Vx+fIsyTzNfSRVaFHmlidMRcz5foQ3KwjA3ENf28XNmGbR5QEoSepR6vj45mUhCPgOVm0jALHPqQB4A23ZwINInSMeBSt1dXzFRL91p/Ufmd1JuL; Expires=Sun, 12 Feb 2023 08:18:20 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: Y4z6ZhsShX/xhQuJIBPTcCS4ZBk=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /b9JtmA58HoC1LCCam59dJvJcReOT1Rv9nMu3rEtc/widget.css?widget_version=2023-01-30_12-16-16 HTTP/1.1 
Host: staticw2.yotpo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         95.101.97.70
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
etag: W/"9ed942614a4506cfb983fe1020773d28"
x-request-id: 10282d4234bedd78de362be57cf683b4
x-runtime: 0.109902
access-control-allow-headers: *
content-length: 39290
cache-control: public, max-age=3950
date: Sun, 05 Feb 2023 08:18:20 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65436)
Size:   39290
Md5:    9ed942614a4506cfb983fe1020773d28
Sha1:   481633e6a7ccc0f1372e794a5a34ba17a1c3068f
Sha256: e368dc833edfdc2fe59da3de54d7426cafe144a4ddb9f675007af232ada22a39
                                        
                                            GET /assets/open_sans.css HTTP/1.1 
Host: staticw2.yotpo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://staticw2.yotpo.com/b9JtmA58HoC1LCCam59dJvJcReOT1Rv9nMu3rEtc/widget.css?widget_version=2023-01-30_12-16-16
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.97.70
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 216
last-modified: Mon, 30 Jan 2023 13:35:33 GMT
etag: "63d7c7a5-d8"
content-encoding: gzip
cache-control: max-age=604800
expires: Sun, 12 Feb 2023 08:18:21 GMT
date: Sun, 05 Feb 2023 08:18:21 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   216
Md5:    68f9ac87323a6148e8118f58f8336428
Sha1:   b6216cacb0d40441393ed11883bd0a3edbce2ab8
Sha256: c9bb6ff6e0678f1114737fc6739cf88cdc006002a378a291d9f2793f588a2cfd
                                        
                                            GET /box-e031119f9e9e307a08fa610f85dbfb52.html HTTP/1.1 
Host: vars.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         143.204.55.118
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1034
date: Fri, 03 Feb 2023 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "112fdf47cdb80b9ce3d033ed09717460"
last-modified: Fri, 03 Feb 2023 13:09:45 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: w9NkW9lpP0Axwp48gWLGqHtC13D2yAaR6trpqfPpPBxX0anLuuSoeg==
age: 155295
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Size:   1034
Md5:    112fdf47cdb80b9ce3d033ed09717460
Sha1:   3898efa86cbf1b64dc41a90a110ed5afd6f2ae13
Sha256: 3bfb2e882091d872eece2eee40084183a5fcb0a7ed98c1b004850751260a4cbb
                                        
                                            GET /action/0?ti=5522707&Ver=2&mid=b7cb2366-1554-4b02-a2d1-3529fcc54557&sid=be44f4b0a52d11edaa480166ece77c0b&vid=be4519a0a52d11ed99b6a5a5cbd8a4fc&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Helix%20%7C%20Mattresses%20Designed%20For%20Every%20Body%20%E2%80%93%20Helix%20Sleep&p=https%3A%2F%2Fhelixsleep.com%2F&r=&lt=2048&evt=pageLoad&sv=1&rn=509412 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         13.107.21.200
HTTP/2 204 No Content
                                        
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=05AB87629B446CD70DBD95CD9A136D24; domain=.bing.com; expires=Fri, 01-Mar-2024 08:18:21 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A1C01DD053AC4BBA962E5C87D29C7BDD Ref B: OSL30EDGE0312 Ref C: 2023-02-05T08:18:21Z
date: Sun, 05 Feb 2023 08:18:20 GMT
X-Firefox-Spdy: h2

                                        
                                            POST /unrenderedCreative?v=4.16.27&r=&id=c734a96d581d4a038ff452e70124368c&pv=1&l=https%3A%2F%2Fhelixsleep.com%2F&w=1280&h=939&ss_ref=ORGANIC&m=marketing&m=live-sms HTTP/1.1 
Host: helixsleep.attn.tv
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://helixsleep.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://helixsleep.com
Content-Length: 29
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.37.231
HTTP/2 204 No Content
                                        
date: Sun, 05 Feb 2023 08:18:21 GMT
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
x-envoy-upstream-service-time: 12
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794a36ffac32b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            GET /s/files/1/3097/9106/t/575/assets/Helpers.js?v=44619210334217976801650382536 HTTP/1.1 
Host: cdn.shopify.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.227.60.200
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Sun, 05 Feb 2023 08:18:17 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/3097/9106/t/575/assets/Helpers.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 0977de2d-10aa-4ba9-8702-626359b571fe
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
last-modified: Thu, 03 Nov 2022 16:26:36 GMT
cf-cache-status: HIT
age: 5157303
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ysk18SYAikBTAgBRG8Mz4KgtL1QgPb5veJ%2Bpp4f5zi1MqkCpPr2Hl7iATRRWFgPEOIBUbq6A73gTliS6HsJ9Ng7sBA8VET%2FklexVpDMbfdCFAgt4EdbgmF3q%2BDamqx0pHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=79.061, imageryFetch;dur=77.885, cfRequestDuration;dur=12.000084
server: cloudflare
cf-ray: 794a36e92aa7b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (49086)
Size:   67924
Md5:    e923aa360dc485b9df86355bd040c998
Sha1:   03c46dbd41e9d4bdf8a9e4bfbaba3f7f2e9280ec
Sha256: 9c7575553c5b81f9b905dbb27c8116b175b69e7472aa6597f8cace1c6434d676
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 05 Feb 2023 08:18:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /c/hotjar-677767.js?sv=7 HTTP/1.1 
Host: static.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.8
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Sun, 05 Feb 2023 08:18:20 GMT
cache-control: max-age=60
etag: W/14d5164f73484285424b41b4935f140e
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cI9oSDtVjQMY2lWNABsjXEobWhE1XunDijvwFP_CNp1jRTiBBfW_Rw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7459)
Size:   4435
Md5:    3dc09c99adf672cdbbfe0d9d5d8baa03
Sha1:   01ffe93fd1c55509b77e45599b5cedfe5e562b72
Sha256: f256dd56ed0a2363329c6c63fa2d7996606aaaa044e4b53790c3ad526aaa0dab
                                        
                                            GET /pagead/1p-user-list/954616282/?random=1675585138385&cv=11&fst=1675584000000&bg=ffffff&guid=ON&async=1&gtm=45Fe3210&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fhelixsleep.com%2F&tiba=Helix%20%7C%20Mattresses%20Designed%20For%20Every%20Body%20%E2%80%93%20Helix%20Sleep&fmt=3&is_vtc=1&random=2616987274&rmt_tld=0&ipr=y HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 05 Feb 2023 08:18:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/810216059/?random=1675585138390&cv=11&fst=1675584000000&bg=ffffff&guid=ON&async=1&gtm=45Fe3210&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fhelixsleep.com%2F&tiba=Helix%20%7C%20Mattresses%20Designed%20For%20Every%20Body%20%E2%80%93%20Helix%20Sleep&fmt=3&is_vtc=1&random=3756618450&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.131
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 05 Feb 2023 08:18:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/810216059/?random=1675585138390&cv=11&fst=1675584000000&bg=ffffff&guid=ON&async=1&gtm=45Fe3210&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fhelixsleep.com%2F&tiba=Helix%20%7C%20Mattresses%20Designed%20For%20Every%20Body%20%E2%80%93%20Helix%20Sleep&fmt=3&is_vtc=1&random=3756618450&rmt_tld=0&ipr=y HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helixsleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 05 Feb 2023 08:18:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629