sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
54.230.111.122301 Moved Permanently 167 B URL HTTP/1.1 sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
IP 54.230.111.122:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 26 Nov 2022 15:41:09 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
X-Cache: Redirect from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KsMBPKHG0HWpCi3PavtN4LinLBnRbo3Fi8HywoYWCU_LFqrX0VDbig==
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5168
Expires: Sat, 26 Nov 2022 17:07:18 GMT
Date: Sat, 26 Nov 2022 15:41:10 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6369
Cache-Control: max-age=160567
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:10 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 12:17:17 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15165
Expires: Sat, 26 Nov 2022 19:53:55 GMT
Date: Sat, 26 Nov 2022 15:41:10 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 15:19:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1317
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: mWYdozSbUyANcji1XuaGo9VCnRyM4g9N0zBPCjy2lDOvbv9N2eo9tS2p7t7ZflHwAkpvHdvrDR8=
x-amz-request-id: SDTD41J7JGDYC32R
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 14:41:15 GMT
age: 3595
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 15:41:10 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 165f703b129bb821a86c127e6cf5bd9a
c1d8aafa04fd5609de9caaf6a14993fabc70ea7a
e03b5cdd571ce7b304992be3473aea63e177d97a0df090615c8f84f75117025e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=96594
Date: Sat, 26 Nov 2022 15:41:10 GMT
Etag: "638109e8-1d7"
Expires: Sun, 27 Nov 2022 18:31:04 GMT
Last-Modified: Fri, 25 Nov 2022 18:31:04 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PhS9NZcR6-bIYLxEZZQpwxKlbp6BuaTM3NAOCVWO_zcW1fV0bj-vRg==
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 15:11:12 GMT
cache-control: public,max-age=3600
age: 1798
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1577
Cache-Control: max-age=150717
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:11 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 09:33:08 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
100.20.30.105101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 100.20.30.105:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DUBKFjfBcb5yB9LCAzK+uw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YHnWc+V5gWK2NtUrzwbPiC99wI4=
sleep.me/_nuxt/components/content-paragraphs.116613a.js
54.230.111.69200 OK 619 B URL HTTP/2 sleep.me/_nuxt/components/content-paragraphs.116613a.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (619), with no line terminators
Hash b8ad328cb1e0102d233cce8f341f1287
4b243f8ce5f6d06752ad719f3bd312d02fe03ffb
73769ee33dc1835f84ecb34fb8f3558be5de054f652a73796a1c1e9ab5664ba1
GET /_nuxt/components/content-paragraphs.116613a.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 619
date: Thu, 24 Nov 2022 00:28:51 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Wed, 23 Nov 2022 19:53:18 GMT
etag: W/"26b-184a60d43b0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sp8lWJYAGDJflXEKQV987ZkewQxbjZbeigEyGdzLrxJQZcDZoEPIgg==
age: 227541
X-Firefox-Spdy: h2
sleep.me/_nuxt/components/section-buttons.8ce239b.js
54.230.111.69200 OK 810 B URL HTTP/2 sleep.me/_nuxt/components/section-buttons.8ce239b.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (810), with no line terminators
Hash 5cad49b081eb29f2239731c01495b2c1
c41bebc43f2b0dccda6b0fc2fdf98358473c87db
be2aad8ce435c589fd324431655da57c5c56481e4bfca6842aa922720c1e81f4
GET /_nuxt/components/section-buttons.8ce239b.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 810
date: Thu, 24 Nov 2022 00:28:51 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Wed, 23 Nov 2022 19:53:18 GMT
etag: W/"32a-184a60d43b0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uFAu2n9q3dGvaH6PotNAnQ-EXPRe3UcCOXOfacO3RyiMD9aFDCrcQg==
age: 227541
X-Firefox-Spdy: h2
sleep.me/_nuxt/commons/app.3357026.js
54.230.111.69200 OK 88 kB URL HTTP/2 sleep.me/_nuxt/commons/app.3357026.js
IP 54.230.111.69:0
Hash 18b41a7ea5e690b65c0998fa387f15a4
6d43b77c4978260b9c223fbb09b61b16d1a3e477
8ce86269c22f2ce8f9e08202344215f5a155a0d2e3a611aa57d66cd654a0bb91
GET /_nuxt/commons/app.3357026.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:23 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"3fc89-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CvaBdUh5ibDsvqDYwhwiEjSWs-qYdCnSXJB-sMkHk5ZG2MxEmrqCsw==
age: 237649
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7982
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 15:41:12 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 2f185b22bc00f8c2a706c52f0e81beae
f3c8280e3f17280b4240778eb6a3a44f879706f8
7758d76521b07f3be12c1b7072668abe9fd01cdbe8fc894e4c8d14c1f92b4ee9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=132852
Date: Sat, 26 Nov 2022 15:41:12 GMT
Etag: "63817fee-1d7"
Expires: Mon, 28 Nov 2022 04:35:24 GMT
Last-Modified: Sat, 26 Nov 2022 02:54:38 GMT
Server: ECS (dcb/7F82)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9AiWzMh7T7y13KSPgwME9emaYCaj1Fhb_Ikz7mQHtzO-5SmxJd0FYw==
Age: 6046
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
34.120.237.76200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a783df85f30f9c555f9df6b99f61744d
61f9bed607e81606be78285596acdc5e0e4f4994
19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QS3ZKYetcm87GNwSr34eRPF2d4r8ppwf3fT19aV-u84f7ObX4bU8wQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 07:13:26 GMT
age: 30466
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sleep.me/_nuxt/app.52969aa.js
54.230.111.69200 OK 178 kB URL HTTP/2 sleep.me/_nuxt/app.52969aa.js
IP 54.230.111.69:0
Size 178 kB (177659 bytes)
Hash d301e3339e9ac1072a7af9f7acc91b0f
9cf356c964abdc3c50f67d68d6b00db41224db14
16da591a07b430c63cf6737ffd970183e3b9261b3fba31f960eb243f29916676
GET /_nuxt/app.52969aa.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:54:17 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Wed, 23 Nov 2022 19:53:18 GMT
etag: W/"8e5b1-184a60d43b0"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a05Ctg9Yc7yIaIZMifTgenF4fc_WWx41p_jeQ6eBEliQXOW16VeFEQ==
age: 236815
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ezHvyK3va4SioabOjSittTiLQRs_Q8k4TPxkiGp_svtZ8omDPTUN-A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 05:04:28 GMT
age: 38204
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17ebe470d040a6ea8c57e9b9d4f4e828
1ac7a410cd4f3709f476c776dd5646dd982dcfa8
d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: HgiyaodE2vJx5JL8QfOiTersSAgAwq74gtsPkpHUhnQ3In2vZ-3rbQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:33:09 GMT
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
content-type: image/jpeg
age: 61683
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8dc4b8a7e9f7f4f84f0da568b43392b
3d32bff85cb7ec118c4496d0c3802829fdc9af3b
4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OJZkZ18TlSgdBWsmSroQPIcYIvBFvz5-7hu9_GravTcz6zqxKXHZrg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:43:36 GMT
age: 64656
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sleep.me/_nuxt/pages/_dynamic.cd1b278.js
54.230.111.69200 OK 3.6 kB URL HTTP/2 sleep.me/_nuxt/pages/_dynamic.cd1b278.js
IP 54.230.111.69:0
Hash 5f1232daca508a70c9ddd3273c2b389d
3d481415180dfa5bc21e4dd8c77207896a5bb098
a0bed70e17a2e96c106d8fcc0eb9c370ac4566544f1ff8720de8490c302417b3
GET /_nuxt/pages/_dynamic.cd1b278.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:23 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"a45-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hpH_a-fIP7d_EfBC6DbS672l_oBJLPZqw2t63irDDaI6KRn1gtWg7g==
age: 237649
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b1c6878914466cfece680fa7cb73502
47fac81a2dd809df5c42ca1362f71d553572d2b1
6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7cJmhEGkKqLUQUMqGuYtWBeu_1nlEUAxgTMy4ABekPJYrJP95wE6Jg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:59:05 GMT
age: 63727
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp
34.120.237.76200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash abd79421a3c44a8df11ad2cc50083309
8665e5f3026f2c2b9505eb139c478f4d359851c3
3a66b00498fa1322730705b1c4502614b5a520ac3f884f494d65e27a5bb62c3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4366
x-amzn-requestid: ce25f5ab-0c92-431e-ae4e-618829594a74
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVNZFjHoAMFXLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813588-6a3a8dff70e717011e3a0606;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 75AMMfa7oq0Y51YPEC_FEDOoNVc9cgfjg9bOSOXwikONPdhW7OG3uQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:10 GMT
age: 64382
etag: "8665e5f3026f2c2b9505eb139c478f4d359851c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 2f185b22bc00f8c2a706c52f0e81beae
f3c8280e3f17280b4240778eb6a3a44f879706f8
7758d76521b07f3be12c1b7072668abe9fd01cdbe8fc894e4c8d14c1f92b4ee9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=126806
Date: Sat, 26 Nov 2022 15:41:12 GMT
Etag: "63817fee-1d7"
Expires: Mon, 28 Nov 2022 02:54:38 GMT
Last-Modified: Sat, 26 Nov 2022 02:54:38 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: h8cfenAspAh6h6k9Y-1XO5H4P9qasFA19T7_0WnWri9Vlgc4CutFDw==
sdk.helloextend.com/extend-sdk-client-shopify-addon/v1/extend-sdk-client-shopify-addon.min.js
143.204.55.95200 OK 114 kB URL HTTP/2 sdk.helloextend.com/extend-sdk-client-shopify-addon/v1/extend-sdk-client-shopify-addon.min.js
IP 143.204.55.95:0
Size 114 kB (113684 bytes)
Hash d7e320057f3595cd3f2fd74db34d4649
ff2b3f380390effd407b6832377fb7baa522fb53
3f5b86b5dc4e1384aa1720baa61148b9cd954c972de246dc2bf8cf297fb2b2bb
GET /extend-sdk-client-shopify-addon/v1/extend-sdk-client-shopify-addon.min.js HTTP/1.1
Host: sdk.helloextend.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 10 Nov 2022 20:59:41 GMT
x-amz-meta-max-age: 86400
x-amz-version-id: T_0D6Z1VT1hjZ1XE2SC1PIgRMm3No4wU
server: AmazonS3
content-encoding: gzip
date: Fri, 25 Nov 2022 19:29:58 GMT
cache-control: max-age=86400
etag: W/"c7b934afc214d70c3492c588fb97e900"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pzeW_9U4uP52rgwiF3RsPlrK0ntG0jIl_MbJiljzMap12WvTHttd2Q==
age: 72677
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 9967299e99392d795d0fb6529a58d85f
4d6a1e0016f567c1c17514caf62e9166bf22521b
4982cefd82b8d43d5af1fda88aeeebbe3006eaed671f7c6f67c875a3eafe87d7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 26 Nov 2022 15:41:13 GMT
Last-Modified: Sat, 26 Nov 2022 15:21:11 GMT
Server: ECS (dcb/7F5E)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: M8UxEREZclRFQvx_6PEpfLYjR1SIrt1ZOc5kLVi7g8SYkB_BZ2hmYA==
Age: 1202
sleep.me/_nuxt/components/section-testimonials.95ab490.js
54.230.111.69200 OK 2.8 kB URL HTTP/2 sleep.me/_nuxt/components/section-testimonials.95ab490.js
IP 54.230.111.69:0
Hash 597e0bcc4f828520f41f5ddd0f790da5
2ad2a715d2808e10297b005e8b2ac0f71b688274
301a3cb66ef9d246a20a40a5129d19ee95d3d14becc2bd3ac1c503318d9f4080
GET /_nuxt/components/section-testimonials.95ab490.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:24 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"1a96-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -y7eYMoX4yTjFg6_JXSnzc05WlJ092VVoFOshgV8azDCyVsvyczzQg==
age: 237648
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s3-us-west-2.amazonaws.com/jsstore/a/K97HVG3/ge.js
52.218.237.176200 OK 36 kB URL HTTP/1.1 s3-us-west-2.amazonaws.com/jsstore/a/K97HVG3/ge.js
IP 52.218.237.176:0
File type ASCII text, with very long lines (36062), with no line terminators
Hash 3204b4833f3adc81ecbf462fc9ce4f9a
7ee0b8c102b64877815b65f6cbd09a2fbd96019d
64e149aad18b27264f36e7a75f9689684ef5a7db102b71e0f14e8fd682f43576
GET /jsstore/a/K97HVG3/ge.js HTTP/1.1
Host: s3-us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 3rDI70LglCTtQ7SGarhejcGVg8XlFxeueCJyQeCECkHMObWJhxn8swkbaANfyFRcuNuh+cVSlLE=
x-amz-request-id: 7WJ6EW4WWY5NAP5J
Date: Sat, 26 Nov 2022 15:41:14 GMT
Last-Modified: Tue, 22 Nov 2022 18:47:55 GMT
ETag: "3204b4833f3adc81ecbf462fc9ce4f9a"
Cache-Control: max-age=2592000
Expires: Thu, 22 Dec 2022 18:47:54 GMT
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 36062
cms-upload.app.sleep.me/dockpro_carousel_thumb_9f6350d0c3.png
143.204.55.127200 OK 17 kB URL HTTP/2 cms-upload.app.sleep.me/dockpro_carousel_thumb_9f6350d0c3.png
IP 143.204.55.127:0
File type PNG image data, 400 x 260, 8-bit colormap, non-interlaced\012- data
Hash 3005b63b0be15c3c3fbb1474d1b9ebdf
20abcc968d147343d277eb3b80e5492ada980ee8
02027dd353509e86b0900f192b70d4878b099aff4a8e1c1e503b61d0d3c702d5
GET /dockpro_carousel_thumb_9f6350d0c3.png HTTP/1.1
Host: cms-upload.app.sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Cookie: tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 17164
date: Wed, 23 Nov 2022 21:40:37 GMT
last-modified: Tue, 18 Oct 2022 18:41:52 GMT
etag: "3005b63b0be15c3c3fbb1474d1b9ebdf"
cache-control: public, max-age=31536000
x-amz-version-id: 9iKXljk7KWTgldUy546ivYmweqF6h.JO
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mc36szxkWIRJDdLfYvZGX55GeyDj-SprRgNHe5kPXSPQX6U4HrllUg==
age: 237638
X-Firefox-Spdy: h2
sleep.me/_nuxt/components/slide-over.56a6509.js
54.230.111.69200 OK 34 kB URL HTTP/2 sleep.me/_nuxt/components/slide-over.56a6509.js
IP 54.230.111.69:0
Hash 111ec6f986567ccf2ebb18f66bdf75db
0cd3bdfeb6a5b600441c4341833b43cda17698c1
947bc7a93d6db11a0854f3c5071417177e93927751c617f0a1928b14d5109359
GET /_nuxt/components/slide-over.56a6509.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:35 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"1119-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PBrlTPbogOYBqTNDiGcccsmxn5cCK0COH2KCMmsgqnSRhxJsDj6XMw==
age: 237638
X-Firefox-Spdy: h2
cms-upload.app.sleep.me/cube_carousel_thumb_5d82daf57b.webp
143.204.55.127200 OK 12 kB URL HTTP/2 cms-upload.app.sleep.me/cube_carousel_thumb_5d82daf57b.webp
IP 143.204.55.127:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash a9ea02fc1389ebc764a132e19b15dbd1
924da84a77ede8b87fdeac12d4c2717d89788852
4708e17575532ac2491e88c64d0ccef08251fd466f00b8e720b50b18b62596f9
GET /cube_carousel_thumb_5d82daf57b.webp HTTP/1.1
Host: cms-upload.app.sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Cookie: tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 11626
date: Wed, 23 Nov 2022 21:40:37 GMT
last-modified: Tue, 18 Oct 2022 18:49:15 GMT
etag: "a9ea02fc1389ebc764a132e19b15dbd1"
cache-control: public, max-age=31536000
x-amz-version-id: K4mkgS.7m_PySQKLD6P3k3IaRf9h_hj4
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EmEVgDslDZmCyoNm5t-1axWExmHTNih8yj2AUpHSNAFSEIKnpSBi6g==
age: 237638
X-Firefox-Spdy: h2
sleep.me/_nuxt/components/section-featured-products-carousel.836a246.js
54.230.111.69200 OK 88 kB URL HTTP/2 sleep.me/_nuxt/components/section-featured-products-carousel.836a246.js
IP 54.230.111.69:0
Hash 9b664bbd0c1a6264a6d45a4d35ccddaa
be00a94786af65e68f4f661fa80ef4a185c7e70a
810eefc15b5a082170bb1bcc40ee6577277262bcf0a48fd53fb6a999b3fa95f2
GET /_nuxt/components/section-featured-products-carousel.836a246.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:24 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"3b04-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UGE74neYoxXypSyeiYHzMX_zl3C5G-0J-_ocf-cmZyVQMCv6UZzTEA==
age: 237648
X-Firefox-Spdy: h2
sleep.me/_nuxt/components/nav-panel.09906b8.js
54.230.111.69200 OK 68 kB URL HTTP/2 sleep.me/_nuxt/components/nav-panel.09906b8.js
IP 54.230.111.69:0
Hash eb08a75d98a26fa98cf0fa2acbc66246
8b083bd8f546ee6e63580fe4a59e2b7a1b1ca9ed
597c7feacd76275ea835f71d63585c64938d483782daaf8338fcc45f64b7cad8
GET /_nuxt/components/nav-panel.09906b8.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:23 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"bf5-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GnyZGhtIIJR97kIu2Z0uQ5b3U3BFoc1w2rRmE9bEt5B3FWGjHqEGKg==
age: 237649
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
216.58.207.195200 OK 7.7 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sleep.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 08:32:10 GMT
expires: Thu, 23 Nov 2023 08:32:10 GMT
cache-control: public, max-age=31536000
age: 284944
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 88b6c794582d9ce1e3518da033bc0700
b240a19163c454ff3b318a5f43ddbac3c887cbd9
5a87406f1d0a0557fd458917316a9ac211f9e44a57fa02fafb12f2423f6fafbb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5A87406F1D0A0557FD458917316A9AC211F9E44A57FA02FAFB12F2423F6FAFBB"
Last-Modified: Thu, 24 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12210
Expires: Sat, 26 Nov 2022 19:04:44 GMT
Date: Sat, 26 Nov 2022 15:41:14 GMT
Connection: keep-alive
sleep.me/_nuxt/components/section-split-promo-card.521a008.js
54.230.111.69200 OK 2.2 kB URL HTTP/2 sleep.me/_nuxt/components/section-split-promo-card.521a008.js
IP 54.230.111.69:0
Hash ec68124db1ab6fdf1565dd21959bb81c
ee0b495d1fce1b8c103de3678e409542ad130eb8
9103bf81e5042f5f1779553198e40b1dc39c270a8367f509984adb1d7dcfa62a
GET /_nuxt/components/section-split-promo-card.521a008.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:24 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"1136-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DEm9982p2qi9ifwEX17cHb2vhEuW5IDQXItlZgVXYbw0_Ny7h8ahZw==
age: 237648
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/inter/v12/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZ9hiA.woff2
216.58.207.195200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/inter/v12/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZ9hiA.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 16708, version 1.0\012- data
Hash 68c477c4c76baab3a8d1ef6a55aa986f
4af50379e13514558dd53d123db8ea101ec5e24c
0364d368abf457d4e70dbc7a7a360f3486eaea2837b194915b23d4398bee91ac
GET /s/inter/v12/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZ9hiA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sleep.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16708
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 06:18:14 GMT
expires: Fri, 24 Nov 2023 06:18:14 GMT
cache-control: public, max-age=31536000
age: 206580
last-modified: Mon, 11 Jul 2022 21:02:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sleep.me/_nuxt/img/4e4d297.svg
54.230.111.69200 OK 10 kB URL HTTP/2 sleep.me/_nuxt/img/4e4d297.svg
IP 54.230.111.69:0
Hash 83ae42e91a1538f4c1da8604f09e2464
fc22ca1e8043b3afbdb8177ad2177d50af2100f4
3ec07f4031c92645cbac2c1ef1fd7d067607c2892d70515881a0534167234b7d
GET /_nuxt/img/4e4d297.svg HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 23 Nov 2022 21:40:25 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"12d2-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DebtiXA2JW4Ia69KLWa9eyFaxAavEWQS_naH8gP0AjhX0wsEvvPR7Q==
age: 237649
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
216.58.207.195200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sleep.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 21:48:50 GMT
expires: Thu, 23 Nov 2023 21:48:50 GMT
cache-control: public, max-age=31536000
age: 237144
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sdk.helloextend.com/extend-sdk-client/v1/extend-sdk-client.min.js
143.204.55.95200 OK 82 kB URL HTTP/2 sdk.helloextend.com/extend-sdk-client/v1/extend-sdk-client.min.js
IP 143.204.55.95:0
Hash 0b1e356e34e8fa3d67e4fa618c5462fa
5dfbf916b6f84ab3bd92f909f567e05da40a7944
ec8720476624298b0e401e4978f0c0d1b7b98cb8918077a44106ba6877f58e92
GET /extend-sdk-client/v1/extend-sdk-client.min.js HTTP/1.1
Host: sdk.helloextend.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 16 Nov 2022 22:04:59 GMT
x-amz-meta-max-age: 86400
x-amz-version-id: EbxzKl3vyhBDpZhNs94rkZKBCgHZE_eU
server: AmazonS3
content-encoding: gzip
date: Fri, 25 Nov 2022 22:05:36 GMT
cache-control: max-age=86400
etag: W/"e9a89b5809bc92356b22ff2f1151e211"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hYaarZwlK8Z384jLVh6wvxYBp6Fr_bwZMIITFi10ME38hMiJkZCnRg==
age: 63337
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 88b6c794582d9ce1e3518da033bc0700
b240a19163c454ff3b318a5f43ddbac3c887cbd9
5a87406f1d0a0557fd458917316a9ac211f9e44a57fa02fafb12f2423f6fafbb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5A87406F1D0A0557FD458917316A9AC211F9E44A57FA02FAFB12F2423F6FAFBB"
Last-Modified: Thu, 24 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12210
Expires: Sat, 26 Nov 2022 19:04:44 GMT
Date: Sat, 26 Nov 2022 15:41:14 GMT
Connection: keep-alive
fonts.googleapis.com/css?family=Poppins:400,500,600%7CInter:400&display=swap
142.250.74.10200 OK 2.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Poppins:400,500,600%7CInter:400&display=swap
IP 142.250.74.10:0
Hash 0d6a22d408f0f3ae132f63bcc7a0a5c4
fc6d04b256d750028a80e9f5ea20b48908a49075
222c31f7a87ecc31fd65bc198db491cdacbc1ccfa380b7610e134372bfccb419
GET /css?family=Poppins:400,500,600%7CInter:400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 15:41:13 GMT
date: Sat, 26 Nov 2022 15:41:13 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sleep.me/js/retention.js
54.230.111.69200 OK 6.9 kB IP 54.230.111.69:0
Hash 1dfd3415c8f10023abf6c7a7bdc74260
806ba9e46b0e9503e1f4aa6a68a38d650c8d1086
6135d8a0dfb2eb59306f9c89f83e652e4f1ecdeea235d24f0530c1f47a1260e8
GET /js/retention.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
accept-ranges: bytes
last-modified: Wed, 23 Nov 2022 19:47:41 GMT
content-encoding: gzip
date: Sat, 26 Nov 2022 15:41:12 GMT
cache-control: public, max-age=0
etag: W/"4e4-184a6081f48"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KgCVvluI2ukWKZ7RekgdWQuQECQCHdtYwwC-4oedf8qL6RwWNxXwyQ==
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 4c68738619a804148d1c723255009198
aa5b458f6fce0c4f4aef0623f3bf5d8c6f6cfafd
9707f3ee6320844cad2474031ec9651e771581031ca5b9d2fb21f899847b2892
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 664
Cache-Control: max-age=170691
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:14 GMT
Etag: "638228c5-117"
Expires: Mon, 28 Nov 2022 15:06:05 GMT
Last-Modified: Sat, 26 Nov 2022 14:55:01 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279
cdn.jsdelivr.net/npm/workbox-cdn@5.1.4/workbox/workbox-sw.js
151.101.85.229200 OK 707 B URL HTTP/2 cdn.jsdelivr.net/npm/workbox-cdn@5.1.4/workbox/workbox-sw.js
IP 151.101.85.229:0
File type ASCII text, with very long lines (1282)
Hash 60e93c3fdede557c42015ba2efdc16eb
3895b1b9097234d48eb45143c955b5fafc315b95
54fe15d0d1a471b539727d466f1d22f638b2313d622ae9fc73b67cda70122c69
GET /npm/workbox-cdn@5.1.4/workbox/workbox-sw.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.1.4
x-jsd-version-type: version
etag: W/"504-5uqRN7j9gM1wXWMhArkzW65msTI"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:14 GMT
age: 22183569
x-served-by: cache-fra19130-FRA, cache-bma1658-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 707
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.20.226:0
Hash 224dca7ff78b8e3a32ac4946db2c2cd8
be7c355a90dc3ba6477d73cda74e27c8e13aa504
a3646519fa791fa64b74396bd4c2307a9af5215fa1eb753f7896be17818db6c8
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 15:41:14 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "80994F628A9B4B415AC8B76FCE7A2CC6D2202195"
Expires: Sun, 27 Nov 2022 02:00:00 GMT
Last-Modified: Sat, 26 Nov 2022 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2231
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703ba27ca2db50c-OSL
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 21bf92490e42fdd77ee9188b78765478
09dccd64f6a6064018e0dbf673d7f79dc6b200cb
dc1cf50e76621f5f888b789aaab527cc48efab128d1e23905f15c3c2ca5467c4
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 15:41:15 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 21:35:15 GMT
Expires: Sat, 26 Nov 2022 21:35:15 GMT
ETag: "09dccd64f6a6064018e0dbf673d7f79dc6b200cb"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
9434d2988a85.cdn4.forter.com/sn/9434d2988a85/script.js
143.204.55.125200 OK 138 kB URL HTTP/2 9434d2988a85.cdn4.forter.com/sn/9434d2988a85/script.js
IP 143.204.55.125:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 138 kB (137789 bytes)
Hash 7d6e74deb3d0001514f47b02acd077ca
365b3df95b0e1d3b21eba46107db88a09ce02f5f
534be23445d04385900e36c5cb501b971dde52f7a469f2c7d857427b019ac454
GET /sn/9434d2988a85/script.js HTTP/1.1
Host: 9434d2988a85.cdn4.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Mon, 21 Nov 2022 16:50:21 GMT
strict-transport-security: max-age=86400; includeSubDomains
access-control-allow-origin: *
timing-allow-origin: *
last-modified: Mon, 21 Nov 2022 16:50:21 GMT
expires: Mon, 21 Nov 2022 16:55:21 GMT
cache-control: private, max-age=300
x-sourcemap: https://cdn4.forter.com/map/suid/9434d2988a85/61007671567
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hKCQRPevfdL5lnAAkTzjE-TSfp8cJ2eUmHmGH-mdPqeuXZ5vkY_I_A==
age: 427853
X-Firefox-Spdy: h2
cdn.segment.com/v1/projects/EERxo1EDQYe9SWp8wGv73aMhb96LIcAR/integrations
143.204.48.96200 OK 2.5 kB URL HTTP/2 cdn.segment.com/v1/projects/EERxo1EDQYe9SWp8wGv73aMhb96LIcAR/integrations
IP 143.204.48.96:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (3822), with no line terminators
Hash 4cc5d9cefd112928d54db2344bbfc3c5
6a75635d513c560479683152c0cc8bead3926c74
9a153abd4ef9c17505b641ce3462ad635e105ba8e8ae82842e4751e23c498441
GET /v1/projects/EERxo1EDQYe9SWp8wGv73aMhb96LIcAR/integrations HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sleep.me/
Origin: https://sleep.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Oct 2022 16:21:48 GMT
x-amz-version-id: uAUrmMoR3ulMfbFvfQA2sP79ViCLAyU9
server: AmazonS3
content-encoding: br
date: Sat, 26 Nov 2022 15:41:14 GMT
cache-control: public, max-age=10800
etag: W/"8a0f6ca392da0ded8e1fdae83a8af86e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LrrChn6suBavyJzrv_yjR_6se3y9ANza2pCE9-74nEUR33XNr1hd5w==
age: 9249
X-Firefox-Spdy: h2
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 5fe254b3e16423582b651d856525c27d
c6cc62d468348eb4a32d82a1bd9c1fff6e035480
71d76ae730600e1885b44042eb250eff038ce448bb3eaed003ca7efa0c4f4d2a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4522
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:15 GMT
Last-Modified: Sat, 26 Nov 2022 14:25:54 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
dfd12629eac344d6be88c74e6b738642-9434d2988a85.cdn.forter.com/prop.json
3.234.25.89200 OK 2 B URL HTTP/1.1 dfd12629eac344d6be88c74e6b738642-9434d2988a85.cdn.forter.com/prop.json
IP 3.234.25.89:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /prop.json HTTP/1.1
Host: dfd12629eac344d6be88c74e6b738642-9434d2988a85.cdn.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://sleep.me
Connection: keep-alive
Referer: https://sleep.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 15:41:15 GMT
Server: Apache
Last-Modified: Sat, 26 Nov 2022 11:05:11 GMT
ETag: "2-5ee5d9caee4fc"
Accept-Ranges: bytes
Content-Length: 2
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Access-Control-Allow-Origin: https://sleep.me
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Access-Control-Allow-Headers: origin, x-requested-with, content-type, x-csrf-token
Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS
Connection: close
Content-Type: application/json
ocsp.starfieldtech.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash 4f6cf3e8da8da5a56934f60c64b94d0d
043ed33998163ba08360efdbd733323af883f844
fbe624282d9adaec9d5cec5a542c11c9bef088c3333faed409f295f9afb9966b
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 15:41:15 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 21:49:36 GMT
Expires: Sat, 26 Nov 2022 21:49:36 GMT
ETag: "043ed33998163ba08360efdbd733323af883f844"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cdn.segment.com/next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz
143.204.48.96200 OK 4.7 kB URL HTTP/2 cdn.segment.com/next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz
IP 143.204.48.96:0
File type HTML document, ASCII text, with very long lines (15894)
Hash 36786f75981fc0efd629c4a89e1c78ec
53eae18749c15231d94fd55cc06d83ad287671e7
f41951564ca665482669a0c4e335b2720a64cd58fc983d64cbb825ef3e8df32e
GET /next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 4743
date: Fri, 18 Nov 2022 23:04:26 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Mon, 24 Oct 2022 18:48:00 GMT
etag: "36786f75981fc0efd629c4a89e1c78ec"
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
x-amz-version-id: 93Sj1E.cRs_JOVEMHMClfQYLj8ysGAbV
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iVe1iaB9lotwCVn9VKiYEz---ELidQvX67PjC5hkyg5liMgJzOy9QA==
age: 664610
X-Firefox-Spdy: h2
cdn.segment.com/next-integrations/integrations/google-tag-manager/2.5.1/google-tag-manager.dynamic.js.gz
143.204.48.96200 OK 1.3 kB URL HTTP/2 cdn.segment.com/next-integrations/integrations/google-tag-manager/2.5.1/google-tag-manager.dynamic.js.gz
IP 143.204.48.96:0
File type HTML document, ASCII text, with very long lines (2963)
Hash a1bed0458702cf863f2d24fb1b9d39ae
d39f92c601bbdb4b23ef82f8f2db000c8aef44da
58741d95ef94921adc6950bd1e59798f4dd43c6f04dfdb58ee425a99a925e279
GET /next-integrations/integrations/google-tag-manager/2.5.1/google-tag-manager.dynamic.js.gz HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 1342
date: Fri, 25 Nov 2022 18:30:42 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Mon, 24 Oct 2022 18:48:00 GMT
etag: "a1bed0458702cf863f2d24fb1b9d39ae"
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
x-amz-version-id: qKZ6.5ZKEE1pA7EqDU_6D5gjnPEealH2
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _ssEMq_PHybC0EpHcDSrxj5r5b6g0RPHCcyCILyBHu1GY6Tpj1vZrg==
age: 76234
X-Firefox-Spdy: h2
sleep.me/_nuxt/vendors/components/content-video/components/section5050-component.f5e5210.js
54.230.111.69200 OK 39 kB URL HTTP/2 sleep.me/_nuxt/vendors/components/content-video/components/section5050-component.f5e5210.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 386f4bf4bc31898c4064c22967325a22
a0cae392e3ffc6592c1b24c48cf4eae02ba6e6cc
c8b1f12380ccb1012bf5bbc484da0f2cf172d92026f00ffa1ba47274217b03f3
GET /_nuxt/vendors/components/content-video/components/section5050-component.f5e5210.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:25 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"1b089-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rdyyf887DPbRKFmYY2mi63_VDRXKYAMHITwMTDpvi4Y4slj49n9yaQ==
age: 237647
X-Firefox-Spdy: h2
cdn.segment.com/next-integrations/integrations/klaviyo/2.2.4/klaviyo.dynamic.js.gz
143.204.48.96200 OK 1.9 kB URL HTTP/2 cdn.segment.com/next-integrations/integrations/klaviyo/2.2.4/klaviyo.dynamic.js.gz
IP 143.204.48.96:0
File type HTML document, ASCII text, with very long lines (4361)
Hash e5b675d2e199628d7da96b99848c6962
db8a3bcc0b275903e3434c18fa9dba185eee8afa
a7fa157cc9a7077cbdda0308a6d15633841c3a4406403025e0746e9429bf841e
GET /next-integrations/integrations/klaviyo/2.2.4/klaviyo.dynamic.js.gz HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 1882
date: Wed, 09 Nov 2022 11:36:18 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Mon, 24 Oct 2022 18:48:00 GMT
etag: "e5b675d2e199628d7da96b99848c6962"
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
x-amz-version-id: Nf9uWMgPi8QkO9UMXclBM0rn_ukYjzLS
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9tGPxo_a334Uxo4B2yN54x8cy6BG7B8qqCJa_mJybRJiIredvLZ9SA==
age: 1483498
X-Firefox-Spdy: h2
sleep.me/_nuxt/components/section-featured-posts.03d5830.js
54.230.111.69200 OK 3.1 kB URL HTTP/2 sleep.me/_nuxt/components/section-featured-posts.03d5830.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (7513)
Hash 09b691fcabb38d9f706fdc4b3fc5fb66
d730824fe88d4748950117aeb731e6ad694131be
e7c32fb5f21ba7034a9dc96cac19f46781dae126f67cef8fc6ef3336fd1c5f6d
GET /_nuxt/components/section-featured-posts.03d5830.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:24 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"d46-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OE6I9UjodDbwNVFTsGx_mkRcqeoTKDPTjHBB66aeFs4KcmMgzVGJPg==
age: 237648
X-Firefox-Spdy: h2
cdn.segment.com/next-integrations/integrations/vendor/commons.c42222c4cb2f8913500f.js.gz
143.204.48.96200 OK 22 kB URL HTTP/2 cdn.segment.com/next-integrations/integrations/vendor/commons.c42222c4cb2f8913500f.js.gz
IP 143.204.48.96:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash befb217271e2e926c7d898f1c85f6cb7
b6ca8f0b9eb7ddebc916cbc77eddab8532216748
21c28b41965eaf22aae5ee670f71227bd2d8fd32a024d62864873f7c8621e8f4
GET /next-integrations/integrations/vendor/commons.c42222c4cb2f8913500f.js.gz HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 22177
date: Thu, 24 Nov 2022 21:51:28 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Mon, 24 Oct 2022 18:47:58 GMT
etag: "befb217271e2e926c7d898f1c85f6cb7"
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
x-amz-version-id: t.HHEvUZUgxzLKa1tzzXBbRzWu6jUMd.
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lFAngqGJjsm3A9IniXA93FZyTOV9pXTBmnz719ArChzjlWAykOQOvw==
age: 150588
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash 4f6cf3e8da8da5a56934f60c64b94d0d
043ed33998163ba08360efdbd733323af883f844
fbe624282d9adaec9d5cec5a542c11c9bef088c3333faed409f295f9afb9966b
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 15:41:16 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 21:49:36 GMT
Expires: Sat, 26 Nov 2022 21:49:36 GMT
ETag: "043ed33998163ba08360efdbd733323af883f844"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
static.klaviyo.com/onsite/js/klaviyo.js
151.101.86.133200 OK 553 B URL HTTP/2 static.klaviyo.com/onsite/js/klaviyo.js
IP 151.101.86.133:0
File type ASCII text, with very long lines (881)
Hash 6383008d7a18a54de747a655509ac9a3
196e0d5fb6abfdd55e0384ce641bf341c3810b15
9892d4c7af6fbc39aeb904989c7d8026a3c6dddc3bb80d0aea7e50b4259f81ee
GET /onsite/js/klaviyo.js HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: OPTIONS, GET
cache-control: max-age=1, stale-while-revalidate=10800
content-type: application/javascript
etag: "252b8be63043e5fd780ba548e8f958d6"
server: nginx
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:15 GMT
age: 239906
x-served-by: cache-lga21974-LGA, cache-bma1644-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 42283
x-timer: S1669477276.839226,VS0,VE0
vary: Accept-Encoding
content-length: 553
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p.alocdn.com/c/vn3d8u2u/a/etarget/p.gif?label=K97HVG3-collect-%257B%2522script%2522%253A%2522https%253A%252F%252Fs3-us-west-2.amazonaws.com%252Fjsstore%252Fa%252Fk97hvg3%252Fge.js%2522%252C%2522ver%2522%253A%25221.6.1%2522%252C%2522guid%2522%253A%2522900d56ed-ef51-4ff4-8eca-ad9dcaf2f11c%2522%257D&title=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate
100.20.56.190302 Found 1.0 kB URL HTTP/2 p.alocdn.com/c/vn3d8u2u/a/etarget/p.gif?label=K97HVG3-collect-%257B%2522script%2522%253A%2522https%253A%252F%252Fs3-us-west-2.amazonaws.com%252Fjsstore%252Fa%252Fk97hvg3%252Fge.js%2522%252C%2522ver%2522%253A%25221.6.1%2522%252C%2522guid%2522%253A%2522900d56ed-ef51-4ff4-8eca-ad9dcaf2f11c%2522%257D&title=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate
IP 100.20.56.190:0
File type gzip compressed data, from Unix\012- data
Hash 37c8ebcac2e922815e5b18e0f8a327b4
16dd27a3a3318c847edd6a86d7350da2acae664e
8d3be87eb57ade7a67982b24de571693b053708cbc007388ccddaadb4c8f00cd
GET /c/vn3d8u2u/a/etarget/p.gif?label=K97HVG3-collect-%257B%2522script%2522%253A%2522https%253A%252F%252Fs3-us-west-2.amazonaws.com%252Fjsstore%252Fa%252Fk97hvg3%252Fge.js%2522%252C%2522ver%2522%253A%25221.6.1%2522%252C%2522guid%2522%253A%2522900d56ed-ef51-4ff4-8eca-ad9dcaf2f11c%2522%257D&title=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate HTTP/1.1
Host: p.alocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 26 Nov 2022 15:41:15 GMT
content-type: image/GIF
server: nginx/1.18.0
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
set-cookie: uuid=db2eb107-dc35-4acf-9dd6-8dfa19fde72b; domain=.alocdn.com; path=/; expires=Sun, 26 Nov 2023 15:41:15 GMT; secure; SameSite=None
location: /c/vn3d8u2u/a/etarget/p.gif?label=K97HVG3-collect-%257B%2522script%2522%253A%2522https%253A%252F%252Fs3-us-west-2.amazonaws.com%252Fjsstore%252Fa%252Fk97hvg3%252Fge.js%2522%252C%2522ver%2522%253A%25221.6.1%2522%252C%2522guid%2522%253A%2522900d56ed-ef51-4ff4-8eca-ad9dcaf2f11c%2522%257D&title=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&tdc=1
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NHM43NR&l=dataLayer
142.250.74.168200 OK 83 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NHM43NR&l=dataLayer
IP 142.250.74.168:0
File type ASCII text, with very long lines (23268)
Hash bd2266ef1c867751991a8f55db3fd142
0e9b3513839961e4ca8532a0594633d26876b6f4
4278828ad762abda92150bde0f15dbb027d176d26554dab6e9eee06461d421d3
GET /gtm.js?id=GTM-NHM43NR&l=dataLayer HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 26 Nov 2022 15:41:15 GMT
expires: Sat, 26 Nov 2022 15:41:15 GMT
cache-control: private, max-age=900
last-modified: Sat, 26 Nov 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82993
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn9.forter.com/vchk2
143.204.55.38301 Moved Permanently 11 kB IP 143.204.55.38:0
File type gzip compressed data, from Unix\012- data
Hash 44b37e89099d15ff09f850b35df1f528
af09bbff1f662cc95e0dc73eaeb62b8969734893
1c39c4266c786ce8591187602ef3ef769c2877dd88eba7d4d3ede5418ff537ff
GET /vchk2 HTTP/1.1
Host: cdn9.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: eyJyIjowLjEyOTAzNzM2MzEzMDQ3NTQyLCJ1IjoiZGZkMTI2MjllYWMzNDRkNmJlODhjNzRlNmI3Mzg2NDIiLCJzIjoiOTQzNGQyOTg4YTg1In0=
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Connection: keep-alive
Referer: https://sleep.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
location: https://cdn9.forter.com/vchk2/v1/2ae90e9a3e4c2e726875e11918aa52b9a2e696037d8f4230beb4665cb7c2c616ac7f4bc86a1350e0dbf74cd5a271
date: Sat, 26 Nov 2022 15:41:15 GMT
access-control-allow-origin: *
timing-allow-origin: *
cache-control: private, s-maxage=0, proxy-revalidate
strict-transport-security: max-age=86400; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WlF5yC1BTXWNOblwT5B6jtKNQnOQIOzNewIPmQOSIbxpzSSeo8t5IA==
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/runtime.a8ef631c8b8460d3e957.js?cb=1
151.101.86.133200 OK 8.1 kB URL HTTP/2 static.klaviyo.com/onsite/js/runtime.a8ef631c8b8460d3e957.js?cb=1
IP 151.101.86.133:0
File type ASCII text, with very long lines (19473), with no line terminators
Hash 39e64f56954c42b43cc384cf1e0c3731
bbdf03fbc36e64426dc43bfd1f27d60489d6cddc
a34478f63b3b1bf8961e77fb9f38a154379574973a945fa6690aa1e2162c5fb0
GET /onsite/js/runtime.a8ef631c8b8460d3e957.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
x-amz-id-2: LcnloDViSGmngOe1XAQL7J26gE18h4WQdO0khCUtmwOPKeUBg7GZShE/rJMNj97D2SkJ4KVlae8=
x-amz-request-id: GZRPWVEJJ044SSAH
last-modified: Fri, 18 Nov 2022 15:32:15 GMT
etag: "79c90fd1d1397b500594e00805a2ea59"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: R6MP9_b0BhtLI5ZwP6FFsPjCkadN.MZX
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:15 GMT
age: 239905
x-served-by: cache-lga21968-LGA, cache-bma1644-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 171245
vary: Accept-Encoding
content-length: 8052
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/vendors~signup_forms.00b04f3c478766c4bc48.js?cb=1
151.101.86.133200 OK 12 kB URL HTTP/2 static.klaviyo.com/onsite/js/vendors~signup_forms.00b04f3c478766c4bc48.js?cb=1
IP 151.101.86.133:0
File type ASCII text, with very long lines (36947)
Hash c1a35bfad6391bac94503262ab897048
a12b2c0d2804b380a3e2715a5bf82f3a63b6aa09
d3678802f64260cf335b6ee33f98012a740ca9fa6c2184c77baf73b6d0768b4f
GET /onsite/js/vendors~signup_forms.00b04f3c478766c4bc48.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Uo2F8wtaQa8IU+tseW7McR0beMAnzx9hMUGY8dL2o3bpj2mmkuhvyutyXz1hT/Npd6RbUHBo+aY=
x-amz-request-id: AD8F17TVQ3WDCPDA
last-modified: Tue, 25 Oct 2022 15:47:54 GMT
etag: "c1f477932c21f86d37733e422c41d864"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: .u._MKX7WAALs7vW9_tgaPqDl1x5LQP7
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:15 GMT
age: 239905
x-served-by: cache-lga21942-LGA, cache-bma1644-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 106986
vary: Accept-Encoding
content-length: 12430
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/signup_forms.d612f536549ef65da525.js?cb=1
151.101.86.133200 OK 12 kB URL HTTP/2 static.klaviyo.com/onsite/js/signup_forms.d612f536549ef65da525.js?cb=1
IP 151.101.86.133:0
File type Unicode text, UTF-8 text, with very long lines (35268), with no line terminators
Hash ac5ca63d2e0df780515fd4a6d4262a3c
95d6cccf7bb100954b6caec5882976c459a8c707
6cff14eec02f38f1d3a7a3b333895da805bfa6e9ce0e7fa89a0e43b33b705cee
GET /onsite/js/signup_forms.d612f536549ef65da525.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
x-amz-id-2: JLlJahMb93rOAV7xwMQEMf76k7upS3BO13ojtrM6TK98xImuJ6XgpIU4eiTbkDwguXDWAcLu9I4=
x-amz-request-id: R1ZVK7HJQNM2KBM0
last-modified: Mon, 31 Oct 2022 14:55:05 GMT
etag: "d5714319f99b25e20a02cfb3f47dd218"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 3QWJW.wDL4PGEpgdSSYg2_NLTv5Z1ohs
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:15 GMT
age: 239905
x-served-by: cache-lga13621-LGA, cache-bma1644-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 106803
vary: Accept-Encoding
content-length: 11685
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/sharedUtils.b9e0df35334cc1e651b6.js?cb=1
151.101.86.133200 OK 14 kB URL HTTP/2 static.klaviyo.com/onsite/js/sharedUtils.b9e0df35334cc1e651b6.js?cb=1
IP 151.101.86.133:0
File type Unicode text, UTF-8 text, with very long lines (35750), with no line terminators
Hash 1896346c72197b43859e4bfb57e2d85d
93873b55c021a9ef1ad9ef23438ecd45ce966c4e
f9feb00888ace100ce22f082c9817d1023692a04cc07e6b91e6fac6cf15b8d92
GET /onsite/js/sharedUtils.b9e0df35334cc1e651b6.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
x-amz-id-2: UjdIdiHtl2D/aiNrgKDEOoJSfB0lTAHDB1dnDJUv3a454ad/xltT5fkAtEvJZtVBdM8AH0pvqUA=
x-amz-request-id: YQX2RCWFWYNCFA5N
last-modified: Fri, 11 Nov 2022 00:12:58 GMT
etag: "10241c59a86c7928f90d45a55b13bc7c"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: O4eT1_jDn59DvpPe9ex9946DLSV9H08f
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:15 GMT
age: 239906
x-served-by: cache-lga21973-LGA, cache-bma1644-BMA
x-cache: HIT, HIT
x-cache-hits: 4, 155187
vary: Accept-Encoding
content-length: 13847
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/static.2a7d6da79b4746dd65dc.js?cb=1
151.101.86.133200 OK 5.2 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/static.2a7d6da79b4746dd65dc.js?cb=1
IP 151.101.86.133:0
File type ASCII text, with very long lines (12470), with no line terminators
Hash e37f3eaaa7977e6460d9dada42028dc1
becb39c0c0ee1c0531730e3c4a56c24bd29075d1
bf2fb0a1407521d637f701a5e34d8fd4c036569ab8ab2788ee43b264b4210ef7
GET /onsite/js/static.2a7d6da79b4746dd65dc.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
x-amz-id-2: DRdqDIMtaNuCHiGswJTReVYzua9qr/SUSDGNh0Ozub13IAxj2qsZp/Egcan0SIBk6RYTwd2y1Xo=
x-amz-request-id: GVJT343FGT95KTYV
last-modified: Tue, 25 Oct 2022 15:47:53 GMT
etag: "77892ad2b77ecca4245d2b89d47eed08"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 7wBZPekhsgwGATIHgi7HH2bztiL97mm4
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:15 GMT
age: 239905
x-served-by: cache-lga21924-LGA, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 161457
vary: Accept-Encoding
content-length: 5239
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/fender_analytics.42a910303762129b987c.js?cb=1
151.101.86.133200 OK 11 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/fender_analytics.42a910303762129b987c.js?cb=1
IP 151.101.86.133:0
File type ASCII text, with very long lines (27749), with no line terminators
Hash 0cfada57d478d97560b453019c523816
4503f32aa052c4ab0be24d9e3d383ce0ca568b0b
9a6fb085ebc0985e24aad977f126412a763fb7920f819e592e9baa1ff6362708
GET /onsite/js/fender_analytics.42a910303762129b987c.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
x-amz-id-2: TVj4JadKocCV4h3NElq7oufjh6VUPmKs/RmMK3GsmHVEIEljMrEcW06e1Di1LhQKmT1Dja0y3h4=
x-amz-request-id: GVJMDN3QM916A9S6
last-modified: Tue, 25 Oct 2022 15:47:53 GMT
etag: "141ae207735ed4c2a3fb9ba628dca228"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 3uoP2mttpPOUARdp4efml6Pc5m5_bVca
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:15 GMT
age: 239905
x-served-by: cache-lga21944-LGA, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 157550
vary: Accept-Encoding
content-length: 10696
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/sentry.7cb637d727d84366f2b1.js
151.101.86.133200 OK 14 kB URL HTTP/2 static.klaviyo.com/onsite/js/sentry.7cb637d727d84366f2b1.js
IP 151.101.86.133:0
File type Unicode text, UTF-8 text, with very long lines (39984), with no line terminators
Hash 2759dea35890ea765569bb029b70f566
b853ad1d51c2de9aab7f75cfc8235ac3f58d329f
272f20e6309fc49a326a55b4e7a5704456af52e6ab76ee492e39693ac97b3e10
GET /onsite/js/sentry.7cb637d727d84366f2b1.js HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
x-amz-id-2: ZYF8nNCZ98iAX1I9YVABHPh4hXQFF6UYjxe8xiihnC39fPDE1pds7lW6eSG/wpOf3nhYpbJWy4E=
x-amz-request-id: G1339RR1WVFHHHTS
last-modified: Mon, 27 Jun 2022 21:34:52 GMT
etag: "46c646cae5b80823d9695afc6ccfed75"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 5RLCs8HEr6hVMb6T_V77Y81r85sp95MR
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:16 GMT
age: 239905
x-served-by: cache-lga13621-LGA, cache-bma1644-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 93831
vary: Accept-Encoding
content-length: 13747
X-Firefox-Spdy: h2
fast.a.klaviyo.com/custom-fonts/api/v1/company-fonts/onsite?company_id=XpUKWW
151.101.86.133200 OK 711 B URL HTTP/2 fast.a.klaviyo.com/custom-fonts/api/v1/company-fonts/onsite?company_id=XpUKWW
IP 151.101.86.133:0
File type JSON data\012- , ASCII text, with very long lines (711), with no line terminators
Hash 5c7d94e80c041fc88ff7b3ad2a4ba5da
20cde362da5aa679913b249bfc61854a25bdfd8d
2129aa0ad5a84059400bd60cd761925ba24c1f0c537840bfc2141f2226d681cd
GET /custom-fonts/api/v1/company-fonts/onsite?company_id=XpUKWW HTTP/1.1
Host: fast.a.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: GET, HEAD, OPTIONS
cache-control: max-age=10
content-type: application/json; charset=utf-8
server: nginx
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:16 GMT
age: 1342064
x-served-by: cache-bos4668-BOS, cache-bma1649-BMA
x-cache: HIT, HIT
x-cache-hits: 1314, 1
vary: Cookie
strict-transport-security: max-age=900
content-length: 711
X-Firefox-Spdy: h2
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 26d158232d443cad47eecda1d940623b
28b76bb685cf7d0bbf55f9e5aee187be9460eb3a
77e6951a28320f9edfa75abab73611fcb4c65abdf845865fbdd25f60a8cb3b82
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5887
Cache-Control: max-age=86597
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Etag: "6380cbe2-1d7"
Expires: Sun, 27 Nov 2022 15:44:33 GMT
Last-Modified: Fri, 25 Nov 2022 14:06:26 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash c1bec79407daf5600e200c61a1c52c62
35ebfef7e2f6b92620102e67726767ae039d593c
761d8973d2f481ba3b52bdfcfd4bccf53efbd29a046ea1249e82098ba7aa3bde
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2207
Cache-Control: max-age=141961
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Etag: "6381b286-118"
Expires: Mon, 28 Nov 2022 07:07:17 GMT
Last-Modified: Sat, 26 Nov 2022 06:30:30 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
www.redditstatic.com/ads/pixel.js
151.101.85.140200 OK 7.7 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP 151.101.85.140:0
File type ASCII text, with very long lines (25224)
Hash 3528fd00b652f61a266eb584d96f4fcc
d89e16aa1323c6c4f1ed3941122020684a599361
77efa9f2ddfdca7a45df37bbcd22fdaeb7b97161a2acd87e21eb78bdeaad1332
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
last-modified: Mon, 07 Nov 2022 16:45:46 GMT
etag: "3528fd00b652f61a266eb584d96f4fcc"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:16 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash eecb68811e1c0522e54d79ee9859af9a
b49db774d7c8425b46f65f6045bf15606bf43eac
4f180642659bdadd651ff95de9576b0b6863b6119fbcb1b88b05d8f98bdbc293
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4F180642659BDADD651FF95DE9576B0B6863B6119FBCB1B88B05D8F98BDBC293"
Last-Modified: Fri, 25 Nov 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15274
Expires: Sat, 26 Nov 2022 19:55:50 GMT
Date: Sat, 26 Nov 2022 15:41:16 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1d4/CCh3rUTg6fw
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/CCh3rUTg6fw
IP 142.250.74.3:0
Hash ea9a199f93857dabff22774a73182b29
e28c0c6fd0ea12f27ca7b58390bb51766188beb8
38cbbf70acc903f66a594ceaf5d9145836bfca1b9eb92c32c595932f624cc7ef
POST /s/gts1d4/CCh3rUTg6fw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.pdst.fm/ping.min.js
35.244.142.80200 OK 5.8 kB IP 35.244.142.80:0
File type ASCII text, with very long lines (26948), with no line terminators
Hash d001d1c9f5a942fa5524eeacb047e819
6ebc303d4e3fe71192400673808f37ce1c6a1d25
63882c75983a011c7ae5041061a95babb9e67fa508b0628e1c00f455ccd40b0a
GET /ping.min.js HTTP/1.1
Host: cdn.pdst.fm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvnv9JubEz5i2Bw1Nhg75Uxa20gJ6WyxSr1c4dlfNy3RMx0U1nwivtHB1Gcf2ISHu9N_xOHjRPj87aUBbfUxnTi9QROlbMn
x-goog-generation: 1622234043862937
x-goog-metageneration: 3
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 5774
content-encoding: gzip
x-goog-hash: crc32c=oKoi/w==, md5=0AHRyfWpQvpVJO6ssEfoGQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 5774
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
date: Sat, 26 Nov 2022 15:02:46 GMT
expires: Sat, 26 Nov 2022 16:02:46 GMT
cache-control: public, max-age=3600
age: 2310
last-modified: Fri, 28 May 2021 20:34:03 GMT
etag: "d001d1c9f5a942fa5524eeacb047e819"
content-type: application/javascript;
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/CCh3rUTg6fw
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/CCh3rUTg6fw
IP 142.250.74.3:0
Hash ea9a199f93857dabff22774a73182b29
e28c0c6fd0ea12f27ca7b58390bb51766188beb8
38cbbf70acc903f66a594ceaf5d9145836bfca1b9eb92c32c595932f624cc7ef
POST /s/gts1d4/CCh3rUTg6fw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dev.visualwebsiteoptimizer.com/lib/628794.js
34.96.102.137200 OK 64 kB URL HTTP/2 dev.visualwebsiteoptimizer.com/lib/628794.js
IP 34.96.102.137:0
Hash 7a3db69ff1617a80bf65d08342f7e76c
089409a5a76fc08442501aa6d7b33ff061c64eda
3bba1bdbf382383e35d1f896b0c51fe4ed49e30981bc067b593dc8816baac267
GET /lib/628794.js HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 15:41:15 GMT
content-type: text/javascript; charset=UTF-8
etag: W/"1669411743"
cache-control: no-cache,max-age=0, public, max-age=0
ptime: 0.0057699999997567
server: gams1
x-computed: true
vary: Accept-Encoding
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 1193dcd2ee5d844ce368e7e1ce9c13fb
d01d50dc9c02fb671fa341de9bab0fdb2fbd3758
cf9253345fa7a7fb521cc207505044012934c001e62c9f5e72af6e85a9873a5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 1193dcd2ee5d844ce368e7e1ce9c13fb
d01d50dc9c02fb671fa341de9bab0fdb2fbd3758
cf9253345fa7a7fb521cc207505044012934c001e62c9f5e72af6e85a9873a5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 23b61b1ef5dd7b9481cf7caa19433a72
0400788ca6bc128fa52b3dea353d9a043ff21d3c
642d0db91430e21f645a228e3cc7e73a80c3dfcba0b174f9a64f1e675a375055
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=112748
Date: Sat, 26 Nov 2022 15:41:16 GMT
Etag: "63813150-1d7"
Expires: Sun, 27 Nov 2022 23:00:24 GMT
Last-Modified: Fri, 25 Nov 2022 21:19:12 GMT
Server: ECS (dcb/7F5E)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dw8mhHTUP697PT163Y00pinzAYhWwykvnHQF5AKokpLphF8j5cZQgQ==
Age: 6072
dev.visualwebsiteoptimizer.com/gv.gif?a=628794&u=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate
34.96.102.137200 OK 6.5 kB URL HTTP/2 dev.visualwebsiteoptimizer.com/gv.gif?a=628794&u=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate
IP 34.96.102.137:0
File type Unicode text, UTF-8 text, with very long lines (16384)
Hash 92fd6743d437cebc77cb1dbd4c89d191
f8ec3e6d67c4d1daee16f2fda2cf02f3ad4b58b5
f56c0b25ee773a4ba020aeaa531d1fbcf32b3fe86a5b3f88aaf9c61937c5a250
GET /gv.gif?a=628794&u=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 15:41:15 GMT
content-type: text/javascript; charset=UTF-8
server: gams1
timing-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tags.b1js.com/tags/49064b76ba7e4898a3a8b21da186494e.js
54.230.111.17200 OK 42 B URL HTTP/2 tags.b1js.com/tags/49064b76ba7e4898a3a8b21da186494e.js
IP 54.230.111.17:0
Hash cd580530e46671a95d75f1b2c472fe90
6f4dbc6a016879a941d9ec3c62e5df7ee6d31e67
a9437e3f1d79a5e09c08deb1b826d4b5a1063000e8db20f1eb05dba66b2b937c
GET /tags/49064b76ba7e4898a3a8b21da186494e.js HTTP/1.1
Host: tags.b1js.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
content-type: application/javascript
content-length: 42
last-modified: Wed, 23 May 2018 13:18:09 GMT
accept-ranges: bytes
server: AmazonS3
date: Sat, 26 Nov 2022 12:53:35 GMT
etag: "cd580530e46671a95d75f1b2c472fe90"
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zObRbHJ-u-DlnZFkqYL3yTka55el2A9WeA5ZZ9TSa7qf7W_HQo-doA==
age: 10095
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/klaviyo.js
151.101.86.133304 Not Modified 0 B URL HTTP/2 static.klaviyo.com/onsite/js/klaviyo.js
IP 151.101.86.133:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /onsite/js/klaviyo.js HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-None-Match: "252b8be63043e5fd780ba548e8f958d6"
Cache-Control: max-age=0
TE: trailers
HTTP/2 304 Not Modified
date: Sat, 26 Nov 2022 15:41:16 GMT
via: 1.1 varnish
cache-control: max-age=1, stale-while-revalidate=10800
etag: "252b8be63043e5fd780ba548e8f958d6"
age: 239906
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 42284
x-timer: S1669477276.456447,VS0,VE0
vary: Accept-Encoding
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash eecb68811e1c0522e54d79ee9859af9a
b49db774d7c8425b46f65f6045bf15606bf43eac
4f180642659bdadd651ff95de9576b0b6863b6119fbcb1b88b05d8f98bdbc293
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4F180642659BDADD651FF95DE9576B0B6863B6119FBCB1B88B05D8F98BDBC293"
Last-Modified: Fri, 25 Nov 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15274
Expires: Sat, 26 Nov 2022 19:55:50 GMT
Date: Sat, 26 Nov 2022 15:41:16 GMT
Connection: keep-alive
static.klaviyo.com/onsite/js/klaviyo.js?company_id=XpUKWW
151.101.86.133304 Not Modified 0 B URL HTTP/2 static.klaviyo.com/onsite/js/klaviyo.js?company_id=XpUKWW
IP 151.101.86.133:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /onsite/js/klaviyo.js?company_id=XpUKWW HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-None-Match: W/"cab89a289d30431bce558627cb76e79f"
Cache-Control: max-age=0
TE: trailers
HTTP/2 304 Not Modified
date: Sat, 26 Nov 2022 15:41:16 GMT
via: 1.1 varnish
cache-control: max-age=1, stale-while-revalidate=10800
etag: W/"cab89a289d30431bce558627cb76e79f"
age: 239892
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1669477276.499803,VS0,VE0
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/xDfqzOho3QU
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/xDfqzOho3QU
IP 142.250.74.3:0
Hash fa7a5f68cf0b8834c86d5132158cb64e
52e8b72a45ca276c0186b0e73df3e053598848b8
ca9582888a1b0e6dd2cccb4cd18e776e2bb4c10821eef1b2a9a340bffd5531b3
POST /s/gts1d4/xDfqzOho3QU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink
216.239.36.54200 OK 22 B URL HTTP/2 us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink
IP 216.239.36.54:0
File type ASCII text, with no line terminators
Hash 8e7120c76040a47f820e8c87b95dddce
0ae6d0d5578537f5011e44f97e812069362ac7b2
e64c6bbbdbf2cc009eeb259cfb5f877274d073ea0ef1770008344cdf7d640c3c
OPTIONS /pdst-events-prod-sink HTTP/1.1
Host: us-central1-adaptive-growth.cloudfunctions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://sleep.me/
Origin: https://sleep.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-headers: Content-Type, Accept
access-control-allow-methods: GET, POST
access-control-allow-origin: *
content-type: text/html; charset=utf-8
etag: W/"2-ROqGvmcGDXooyAXFZHZ+i4au1yQ"
function-execution-id: 9f704muemwaw
x-powered-by: Express
x-cloud-trace-context: 42b8f256ad6eba531f5532b82f65a318
content-encoding: gzip
date: Sat, 26 Nov 2022 15:41:16 GMT
server: Google Frontend
cache-control: private
content-length: 22
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash b569040d7971c3e2a85ce6be95c39ee1
ed862aadf91cbc739e1b785ffe5ee492289508ea
1074c09e9df20a47ca001ce47d3b70acdffbb8e34fa5e80680f809b49ec42c94
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=145590
Date: Sat, 26 Nov 2022 15:41:16 GMT
Etag: "6381bdf6-1d7"
Expires: Mon, 28 Nov 2022 08:07:46 GMT
Last-Modified: Sat, 26 Nov 2022 07:19:18 GMT
Server: ECS (dcb/7EEC)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: posQ1_whZhYuW4HSyqN1Ozp4EOpBR2PPJ8-hTddpXsJikkwdSAhlqg==
Age: 2908
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 3f5de0bdacbff3c0d4552194c8787afb
51e05e7419e3c8220520632115ea6f74dc45a8c4
770945202c8c885fa2167b76daaa1a8cdb47fcffbb57db3c2cecb209deaa278c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=105761
Date: Sat, 26 Nov 2022 15:41:16 GMT
Etag: "63812a52-1d7"
Expires: Sun, 27 Nov 2022 21:03:57 GMT
Last-Modified: Fri, 25 Nov 2022 20:49:22 GMT
Server: ECS (bsa/EB1A)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9bjkiNSouJ2Lm4qitGRgy4VmE5GvFqUO2tZML8WRrZKNPixYTEp8uA==
Age: 875
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 1193dcd2ee5d844ce368e7e1ce9c13fb
d01d50dc9c02fb671fa341de9bab0fdb2fbd3758
cf9253345fa7a7fb521cc207505044012934c001e62c9f5e72af6e85a9873a5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn0.forter.com/9434d2988a85/dfd12629eac344d6be88c74e6b738642/prop.json?_=1669477276363
54.243.108.33200 OK 20 B URL HTTP/1.1 cdn0.forter.com/9434d2988a85/dfd12629eac344d6be88c74e6b738642/prop.json?_=1669477276363
IP 54.243.108.33:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 5820854f62a6eb3d38ba7ba0d1b3ea75
639df0b84fe699b4a290a713fd6b9a94bd4deb95
912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
GET /9434d2988a85/dfd12629eac344d6be88c74e6b738642/prop.json?_=1669477276363 HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://sleep.me
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
Content-Type: application/json
Connection: keep-alive
Date: Sat, 26 Nov 2022 15:41:16 GMT
Transfer-Encoding: chunked
listen.audiohook.com/2580de6e-88df-4780-9af5-8c57835bc57e/pixel.png?gtmcb=719315203
52.6.159.174200 OK 42 B URL HTTP/2 listen.audiohook.com/2580de6e-88df-4780-9af5-8c57835bc57e/pixel.png?gtmcb=719315203
IP 52.6.159.174:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /2580de6e-88df-4780-9af5-8c57835bc57e/pixel.png?gtmcb=719315203 HTTP/1.1
Host: listen.audiohook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
date: Sat, 26 Nov 2022 15:41:16 GMT
content-type: image/gif
content-length: 42
server: meinheld/1.0.2
access-control-allow-origin: *
X-Firefox-Spdy: h2
b1img.com/49064b76ba7e4898a3a8b21da186494e/eu_tag?type=1
34.102.245.58200 OK 95 B URL HTTP/2 b1img.com/49064b76ba7e4898a3a8b21da186494e/eu_tag?type=1
IP 34.102.245.58:0
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 71a50dbba44c78128b221b7df7bb51f1
0ec63b140374ba704a58fa0c743cb357683313dd
3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517
GET /49064b76ba7e4898a3a8b21da186494e/eu_tag?type=1 HTTP/1.1
Host: b1img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
server: gunicorn/20.0.4
date: Sat, 26 Nov 2022 15:41:16 GMT
content-type: image/png
content-length: 95
set-cookie: visitor=""; expires=Sat, 26 Nov 2022 15:41:15 GMT; Path=/
uuid=""; expires=Sat, 26 Nov 2022 15:41:15 GMT; Path=/
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.segment.com/analytics.js/v1/EERxo1EDQYe9SWp8wGv73aMhb96LIcAR/analytics.min.js
143.204.48.96200 OK 27 kB URL HTTP/2 cdn.segment.com/analytics.js/v1/EERxo1EDQYe9SWp8wGv73aMhb96LIcAR/analytics.min.js
IP 143.204.48.96:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 52870772b71235f442d8a43b757628ee
ba32717bca8a062088a697ece58b06c2ee96d7a3
6cbd3967289b75bad060e9005aaecd658c63f3e21e8c5cc6fe70da2bf0c4cfad
GET /analytics.js/v1/EERxo1EDQYe9SWp8wGv73aMhb96LIcAR/analytics.min.js HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Mon, 21 Nov 2022 20:25:40 GMT
x-amz-version-id: v1b16tFHC4ynqik0C4J7hSqx_eCf2vMK
server: AmazonS3
content-encoding: br
date: Sat, 26 Nov 2022 15:41:16 GMT
cache-control: public, max-age=120
etag: W/"123da34a7863edf13606e83e78462981"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NPDuNnWpvyDcZDOHQl_m6poB6z68KLtgwW8bvKwHsZByLizvEHLndA==
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/xDfqzOho3QU
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/xDfqzOho3QU
IP 142.250.74.3:0
Hash fa7a5f68cf0b8834c86d5132158cb64e
52e8b72a45ca276c0186b0e73df3e053598848b8
ca9582888a1b0e6dd2cccb4cd18e776e2bb4c10821eef1b2a9a340bffd5531b3
POST /s/gts1d4/xDfqzOho3QU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink
216.239.36.54204 No Content 0 B URL HTTP/2 us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink
IP 216.239.36.54:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pdst-events-prod-sink HTTP/1.1
Host: us-central1-adaptive-growth.cloudfunctions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 573
Origin: https://sleep.me
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 204 No Content
access-control-allow-headers: Content-Type, Accept
access-control-allow-methods: GET, POST
access-control-allow-origin: *
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
function-execution-id: 0a9cyzr0wj9v
x-powered-by: Express
x-cloud-trace-context: 5534eb7a8344eec0aecf1b5b334b1ef4
date: Sat, 26 Nov 2022 15:41:16 GMT
content-type: text/html
server: Google Frontend
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn0.forter.com/9434d2988a85/dfd12629eac344d6be88c74e6b738642/prop.json?_=1669477276621
54.243.108.33200 OK 20 B URL HTTP/1.1 cdn0.forter.com/9434d2988a85/dfd12629eac344d6be88c74e6b738642/prop.json?_=1669477276621
IP 54.243.108.33:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 5820854f62a6eb3d38ba7ba0d1b3ea75
639df0b84fe699b4a290a713fd6b9a94bd4deb95
912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
GET /9434d2988a85/dfd12629eac344d6be88c74e6b738642/prop.json?_=1669477276621 HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://sleep.me
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
Content-Type: application/json
Connection: keep-alive
Date: Sat, 26 Nov 2022 15:41:16 GMT
Transfer-Encoding: chunked
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 407ca8387c360d434a53812c03688310
90e74fa4928adcf8ae410f2eea7956b6ae7f687b
5690f667c20ba6c6daf71668a7c02c6d50383b585521e6f3e7a0ddcf895358d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6321
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Last-Modified: Sat, 26 Nov 2022 13:55:55 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 30f833b25d6e5af2229d9584c6f6cf97
ee79c3fa994d53c1d0687ca61353d63cce459e25
1bc091991c4663dbc86ae735e47ddc3e887a24661050ad9f24b8d458bfd11a6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 26 Nov 2022 14:41:08 GMT
expires: Sat, 26 Nov 2022 16:41:08 GMT
cache-control: public, max-age=7200
age: 3608
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: a/gP4Q5/4K9hs0TNoV03glTOEseiAjpZAc6lP5FM6NJV7CTKgY34j7jfw8lpJygb2hWNP8ZhD56+KaN4zqs1HA==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1904183273
date: Sat, 26 Nov 2022 15:41:16 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash f3424fd0abb5ab18be62cd209cb3d3dc
dbb2a21b12e92c8837c4346b6d052454bb6dffd6
e69548655278cf6a48fce549928656eb5a91d787e7b1afc12959e2bffb58990b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.20.226:0
Hash f1a09eb18706c43c8dec04e1bb024707
440c0401eeb3c8d6bf93b135a5dc7bdc30e2bc6c
778d6338d98d098cf9b1363554d317ff9e6cd4bc0ea64b5ec94f7b0a0d99a9a6
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 15:41:16 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Wed, 30 Nov 2022 13:03:33 GMT
ETag: "440c0401eeb3c8d6bf93b135a5dc7bdc30e2bc6c"
Last-Modified: Sat, 26 Nov 2022 13:03:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2031
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703ba34ea20b50c-OSL
bat.bing.com/bat.js
204.79.197.200200 OK 11 kB IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Hash 22e2e3226eb5ada04929a2e43307eeda
04615fa88f80567974bdeb0f103ca5909746ebd7
41feebdfb0b03cd7fee2eb886adef6f3f1f85d3f14215e9a388d2a50e42efb9b
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11421
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 09 Nov 2022 21:23:50 GMT
accept-ranges: bytes
etag: "077538f81f4d81:0"
vary: Accept-Encoding
set-cookie: MUID=2AEEA11A58A167B1366EB37259546640; domain=.bing.com; expires=Thu, 21-Dec-2023 15:41:16 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 833556F51F14434E8A5806575F54BAE5 Ref B: OSL30EDGE0510 Ref C: 2022-11-26T15:41:16Z
date: Sat, 26 Nov 2022 15:41:16 GMT
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/1048371170/?random=1669477276153&cv=11&fst=1669477276153&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=XoClCLHDk4sDEOK_8_MD&hn=www.google.com&frm=0&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&tiba=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&value=0&bttype=purchase&auid=1138505253.1669477276&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
142.250.74.164302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/1048371170/?random=1669477276153&cv=11&fst=1669477276153&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=XoClCLHDk4sDEOK_8_MD&hn=www.google.com&frm=0&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&tiba=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&value=0&bttype=purchase&auid=1138505253.1669477276&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP 142.250.74.164:0
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1048371170/?random=1669477276153&cv=11&fst=1669477276153&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=XoClCLHDk4sDEOK_8_MD&hn=www.google.com&frm=0&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&tiba=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&value=0&bttype=purchase&auid=1138505253.1669477276&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 15:41:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1048371170/?random=1669477276153&cv=11&fst=1669477276153&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=XoClCLHDk4sDEOK_8_MD&hn=www.google.com&frm=0&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&tiba=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&value=0&bttype=purchase&auid=1138505253.1669477276&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-MGP6PGPZWF>m=2oeb90&_p=462083596&_gaz=1&cid=452005823.1669477276&ul=en-us&sr=1280x1024&_s=1&sid=1669477276&sct=1&seg=0&dl=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&dt=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.32.36204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-MGP6PGPZWF>m=2oeb90&_p=462083596&_gaz=1&cid=452005823.1669477276&ul=en-us&sr=1280x1024&_s=1&sid=1669477276&sct=1&seg=0&dl=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&dt=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MGP6PGPZWF>m=2oeb90&_p=462083596&_gaz=1&cid=452005823.1669477276&ul=en-us&sr=1280x1024&_s=1&sid=1669477276&sct=1&seg=0&dl=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&dt=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://sleep.me
date: Sat, 26 Nov 2022 15:41:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 407ca8387c360d434a53812c03688310
90e74fa4928adcf8ae410f2eea7956b6ae7f687b
5690f667c20ba6c6daf71668a7c02c6d50383b585521e6f3e7a0ddcf895358d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6321
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:16 GMT
Last-Modified: Sat, 26 Nov 2022 13:55:55 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-MGP6PGPZWF&cid=452005823.1669477276>m=2oeb90&aip=1&z=529353671
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-MGP6PGPZWF&cid=452005823.1669477276>m=2oeb90&aip=1&z=529353671
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-MGP6PGPZWF&cid=452005823.1669477276>m=2oeb90&aip=1&z=529353671 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 15:41:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn0.forter.com/9434d2988a85/dfd12629eac344d6be88c74e6b738642/wpt.json
54.243.108.33204 No Content 0 B URL HTTP/1.1 cdn0.forter.com/9434d2988a85/dfd12629eac344d6be88c74e6b738642/wpt.json
IP 54.243.108.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /9434d2988a85/dfd12629eac344d6be88c74e6b738642/wpt.json HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://sleep.me/
Origin: https://sleep.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Vary: Access-Control-Request-Headers
Access-Control-Allow-Headers: content-type
Content-Length: 0
Date: Sat, 26 Nov 2022 15:41:16 GMT
Connection: keep-alive
googleads.g.doubleclick.net/pagead/viewthroughconversion/1048371170/?random=1669477276153&cv=11&fst=1669477276153&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=XoClCLHDk4sDEOK_8_MD&hn=www.google.com&frm=0&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&tiba=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&value=0&bttype=purchase&auid=1138505253.1669477276&gcp=1&ct_cookie_present=1
216.58.207.226200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1048371170/?random=1669477276153&cv=11&fst=1669477276153&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=XoClCLHDk4sDEOK_8_MD&hn=www.google.com&frm=0&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&tiba=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&value=0&bttype=purchase&auid=1138505253.1669477276&gcp=1&ct_cookie_present=1
IP 216.58.207.226:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1048371170/?random=1669477276153&cv=11&fst=1669477276153&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=XoClCLHDk4sDEOK_8_MD&hn=www.google.com&frm=0&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&tiba=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&value=0&bttype=purchase&auid=1138505253.1669477276&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 15:41:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 26-Nov-2022 15:56:17 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-MGP6PGPZWF&cid=452005823.1669477276>m=2oeb90&aip=1
142.251.1.154204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-MGP6PGPZWF&cid=452005823.1669477276>m=2oeb90&aip=1
IP 142.251.1.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MGP6PGPZWF&cid=452005823.1669477276>m=2oeb90&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://sleep.me
date: Sat, 26 Nov 2022 15:41:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1669477276296&id=t2_jqhuh17c&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=a041565b-be05-4c34-999f-0476aaeb58ce&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
151.101.85.140200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1669477276296&id=t2_jqhuh17c&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=a041565b-be05-4c34-999f-0476aaeb58ce&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
IP 151.101.85.140:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1669477276296&id=t2_jqhuh17c&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=a041565b-be05-4c34-999f-0476aaeb58ce&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:17 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1317858/tfa.js
151.101.85.44200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1317858/tfa.js
IP 151.101.85.44:0
File type ASCII text, with very long lines (58501)
Hash 816436debc5e88cef4d08a8205948b10
12a1c993f44bf053f0f7aafd2e7b5bbe5bb3ee0a
6ff68eb3c1b92c1fdb5893375366b998da419c55c4655742ab554a5b82fae50f
GET /libtrc/unip/1317858/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
x-amz-id-2: 8G/hbprz+qXLkhaKsTEUvJ0eoOnEeQ7aQnE/uLrtQusV4c4gmmfxcMflJ0GCuMqfxICj7K6lV90=
x-amz-request-id: DK5BFMP56FXWP2XV
x-amz-replication-status: COMPLETED
last-modified: Sun, 20 Nov 2022 11:22:26 GMT
etag: "902730b6174ee028bbdec4dd6d790390"
x-amz-version-id: 8HnQpS3iuD2FH2wtOsuKLgb3Rzq9YT0g
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:17 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1661-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669477277.938480,VS0,VE103
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 55
content-length: 17948
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash f3424fd0abb5ab18be62cd209cb3d3dc
dbb2a21b12e92c8837c4346b6d052454bb6dffd6
e69548655278cf6a48fce549928656eb5a91d787e7b1afc12959e2bffb58990b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn0.forter.com/9434d2988a85/dfd12629eac344d6be88c74e6b738642/wpt.json
54.243.108.33200 OK 20 B URL HTTP/1.1 cdn0.forter.com/9434d2988a85/dfd12629eac344d6be88c74e6b738642/wpt.json
IP 54.243.108.33:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 5820854f62a6eb3d38ba7ba0d1b3ea75
639df0b84fe699b4a290a713fd6b9a94bd4deb95
912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
POST /9434d2988a85/dfd12629eac344d6be88c74e6b738642/wpt.json HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
Content-Length: 28
Origin: https://sleep.me
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://sleep.me
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
Expires: -1
Pragma: no-cache
Content-Type: application/json; charset=utf-8
Content-Length: 20
ETag: W/"14-Y53wuE/mmbSikKcT/WualL1N65U"
Date: Sat, 26 Nov 2022 15:41:17 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 15:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 16405876091c60555e3d790436cee9ba
711d9ec2ab11e8c34d5147f5358e927fccb49132
3bdeb6c69b37609e094d5e59048238c4e5df1fe75d671d5c95a6522b9debc736
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 15:41:17 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 20:03:53 GMT
Expires: Sat, 26 Nov 2022 20:03:53 GMT
ETag: "711d9ec2ab11e8c34d5147f5358e927fccb49132"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash ee91c5fc038ce0973fb8164cf37444f1
4f4757542be795fb585d6bcb3253e2dfd037f4d8
0dfa11dcc1ca122eb532620f3813c8c39d10431de2e14ab33a8fe269f77ff13c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=110522
Date: Sat, 26 Nov 2022 15:41:17 GMT
Etag: "63813f38-1d7"
Expires: Sun, 27 Nov 2022 22:23:19 GMT
Last-Modified: Fri, 25 Nov 2022 22:18:32 GMT
Server: ECS (dcb/7F5E)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vu_kIaIWmeg41xLPvHD7KVZD86BdvaDxOZ8qpCyqDen48iCg-BQ44Q==
Age: 287
bat.bing.com/action/0?ti=4011193&tm=gtm002&Ver=2&mid=e346f97f-1932-49f2-86c1-085c99beea03&sid=c4309d006da011ed93bbc9fc996a0e6d&vid=c43081606da011ed88029f3347112878&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sleepme,%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&p=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&r=<=4733&evt=pageLoad&sv=1&rn=830225
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=4011193&tm=gtm002&Ver=2&mid=e346f97f-1932-49f2-86c1-085c99beea03&sid=c4309d006da011ed93bbc9fc996a0e6d&vid=c43081606da011ed88029f3347112878&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sleepme,%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&p=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&r=<=4733&evt=pageLoad&sv=1&rn=830225
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=4011193&tm=gtm002&Ver=2&mid=e346f97f-1932-49f2-86c1-085c99beea03&sid=c4309d006da011ed93bbc9fc996a0e6d&vid=c43081606da011ed88029f3347112878&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sleepme,%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&p=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&r=<=4733&evt=pageLoad&sv=1&rn=830225 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=064AB6D3AC006CDD27E9A4BBADF56DDE; domain=.bing.com; expires=Thu, 21-Dec-2023 15:41:17 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 198B42472A294E4F9B81B24A1A91FF59 Ref B: OSL30EDGE0510 Ref C: 2022-11-26T15:41:17Z
date: Sat, 26 Nov 2022 15:41:16 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/4011193.js
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/4011193.js
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/4011193.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=1DABE90A737564230687FB62728065C1; domain=.bing.com; expires=Thu, 21-Dec-2023 15:41:17 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3F26430BC8674A02AD63E1EC30F01AEB Ref B: OSL30EDGE0510 Ref C: 2022-11-26T15:41:17Z
date: Sat, 26 Nov 2022 15:41:16 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 47dc82bfaf74cd9c4b4c9288e9dc164f
21554c818294070442302bc6e177241ecc0e58bb
a2c4ab33bfe04728650fdfabf0f99210ef2f17eab4c2343a8d3faaa9c43fbaf4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=135368
Date: Sat, 26 Nov 2022 15:41:17 GMT
Etag: "638190d8-1d7"
Expires: Mon, 28 Nov 2022 05:17:25 GMT
Last-Modified: Sat, 26 Nov 2022 04:06:48 GMT
Server: ECS (dcb/7EA2)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: N7qoKzln3ztJ8COJyITyuUzcC3UN19GiUKBhGuy1XwYsINHCCVffhQ==
Age: 4237
api.segment.io/v1/p
35.161.125.23200 OK 21 B IP 35.161.125.23:0
File type JSON data\012- , ASCII text
Hash 90749a50019a27e1f32cebdbaa7a1bc1
8329e3339f928f8591024bb0f938dab99c0ad4b8
12f71cb993958eefc4bdb41d7dbbda490779a9c7aba448f7be52bb63912e0254
POST /v1/p HTTP/1.1
Host: api.segment.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2118
Origin: https://sleep.me
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
date: Sat, 26 Nov 2022 15:41:17 GMT
content-type: application/json
content-length: 21
access-control-allow-origin: https://sleep.me
strict-transport-security: max-age=31536000
vary: Origin
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1500279637110656&ev=PageView&dl=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&rl=&if=false&ts=1669477277577&sw=1280&sh=1024&ud[external_id]=0d1f2162bfaefd59be8b19a200d6dfa4f091485d8aa4a69b547a2c57ddad05fa&v=2.9.89&r=stable&a=seg&ec=0&o=29&fbp=fb.1.1669477277577.273433596&it=1669477277244&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1500279637110656&ev=PageView&dl=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&rl=&if=false&ts=1669477277577&sw=1280&sh=1024&ud[external_id]=0d1f2162bfaefd59be8b19a200d6dfa4f091485d8aa4a69b547a2c57ddad05fa&v=2.9.89&r=stable&a=seg&ec=0&o=29&fbp=fb.1.1669477277577.273433596&it=1669477277244&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1500279637110656&ev=PageView&dl=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&rl=&if=false&ts=1669477277577&sw=1280&sh=1024&ud[external_id]=0d1f2162bfaefd59be8b19a200d6dfa4f091485d8aa4a69b547a2c57ddad05fa&v=2.9.89&r=stable&a=seg&ec=0&o=29&fbp=fb.1.1669477277577.273433596&it=1669477277244&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 26 Nov 2022 15:41:17 GMT
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 6303a8c2444c19003c7655b76ca65b17
d63ce76d74bb0e7dd842f16a229dcd328bd3ebde
f89b6da6191a63b4640646e483b470bc8fd4b74fe01d48b2a003ad57e6a7f3cd
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 15:41:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 21:56:56 GMT
Expires: Sat, 26 Nov 2022 21:56:56 GMT
ETag: "d63ce76d74bb0e7dd842f16a229dcd328bd3ebde"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
d2jjzw81hqbuqv.cloudfront.net/integration/curebit-1.0.min.js
54.230.111.128200 OK 4.6 kB URL HTTP/2 d2jjzw81hqbuqv.cloudfront.net/integration/curebit-1.0.min.js
IP 54.230.111.128:0
Hash 7d3196ec047d47a270f1c0d2d32b487a
7e368634bb8b5979be34c653be2713263b87fc23
74a3bbd8d2b5fdc0370919a98a6b86a94c44d0cc62650efe766729d9ccbcb623
GET /integration/curebit-1.0.min.js HTTP/1.1
Host: d2jjzw81hqbuqv.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Thu, 04 Aug 2016 11:14:53 GMT
server: AmazonS3
content-encoding: gzip
date: Sat, 26 Nov 2022 15:41:16 GMT
etag: W/"3597854a6c9ab2ab168822e5514d492a"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EaysMs2fEMwCgvxX7bEKrxJwtqSlHvKEFW4pBodhXE5MIOnvBB5dlw==
age: 80556
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
www.talkable.com/public/sleepme/affiliate_members/create.html?v=5.0.2&matched_placement_ids%5B%5D=1388463&ts=1668707455&ii=sleepme&cvuuid=4913e3ae-0d0a-4c22-beb8-b2268a68b49c
54.172.248.103200 OK 92 kB URL HTTP/2 www.talkable.com/public/sleepme/affiliate_members/create.html?v=5.0.2&matched_placement_ids%5B%5D=1388463&ts=1668707455&ii=sleepme&cvuuid=4913e3ae-0d0a-4c22-beb8-b2268a68b49c
IP 54.172.248.103:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52994)
Hash ed9e195a1c7332b7c64d046f915b3d3f
231b2444b3049fe55129eefc5de65b337da31714
7b1a707c495b366e39ec3772046dadcbd5345eabe24cb2e0e0fa6430ebcab2a5
GET /public/sleepme/affiliate_members/create.html?v=5.0.2&matched_placement_ids%5B%5D=1388463&ts=1668707455&ii=sleepme&cvuuid=4913e3ae-0d0a-4c22-beb8-b2268a68b49c HTTP/1.1
Host: www.talkable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 15:41:17 GMT
content-type: text/html; charset=utf-8
server: nginx/1.20.1
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
set-tkbl_cvuuid: 4913e3ae-0d0a-4c22-beb8-b2268a68b49c;
x-talkable-offer-code: KvIVxy
cache-control: max-age=0, private, must-revalidate
etag: W/"bfb64465-a01f-40bd-85b5-79635140fda7"
x-robots-tag: noindex, nofollow
p3p: CP="CAO PSA OUR"
set-cookie: tkbl_cvuuid=4913e3ae-0d0a-4c22-beb8-b2268a68b49c; path=/; expires=Wed, 26 Nov 2042 15:41:17 GMT; secure; SameSite=None
uuid=4913e3ae-0d0a-4c22-beb8-b2268a68b49c; path=/; expires=Wed, 26 Nov 2042 15:41:17 GMT; secure; SameSite=None
x-request-id: 55996f3b-4042-429b-9f54-d5c43bb5855f
x-runtime: 0.165745
strict-transport-security: max-age=63072000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
js-agent.newrelic.com/290.2d6a2503-1220.js
151.101.86.137200 OK 3.4 kB URL HTTP/2 js-agent.newrelic.com/290.2d6a2503-1220.js
IP 151.101.86.137:0
File type ASCII text, with very long lines (8544)
Hash b9baa2cb6a3b1a3d0fda03cd7db51631
42d37467e05182e3cab2fcb54577dc462adcf50b
31a8b4d47298cae24c66e37256a51474ae88a745fdfec79f99b2d43608e6d822
GET /290.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.talkable.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: w13KyJHc6nZxbdEwslB41w8/Eu8hqTxWFthe9Ce9ktH5t1CQfPDcADzeIbbM0XmVboDReCBCqwPazqB/yCHcHQ==
x-amz-request-id: ENM21W9CJ64N9SCW
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "13898fbb4d7a1f83fc6722c4c12faf40"
x-amz-version-id: C4hj6k9j4I7xXuTBZvcbX78Bf.Ep8KMk
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: HIT
x-cache-hits: 10
x-timer: S1669477278.203261,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3424
X-Firefox-Spdy: h2
js-agent.newrelic.com/820.2d6a2503-1220.js
151.101.86.137200 OK 3.0 kB URL HTTP/2 js-agent.newrelic.com/820.2d6a2503-1220.js
IP 151.101.86.137:0
File type ASCII text, with very long lines (7460)
Hash 7d1295a839190615b34d5a62acceee4f
eef26f5c6d2ae14cb81b3a9b669da224faceacd0
4d59d58f31b6638fbc3792a0b5fddca6e8eafc19a0c9e9aabadb5ad4d9197198
GET /820.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.talkable.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: mfz69jbwDdVjAOvigezanDeGlG58lNEgRQZJ5bHuLqr3T+YzVd1KlatkpX7gSSdNs3YsWLt1rsw=
x-amz-request-id: 7DG6EGGM14MJB93M
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "897a1a72a47e4f4a24c05aec49af638f"
x-amz-version-id: P6j2S.7Iht6lmVHyZ_zkYmp136j6E8IA
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: HIT
x-cache-hits: 624
x-timer: S1669477278.211649,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2979
X-Firefox-Spdy: h2
js-agent.newrelic.com/368.2d6a2503-1220.js
151.101.86.137200 OK 1.4 kB URL HTTP/2 js-agent.newrelic.com/368.2d6a2503-1220.js
IP 151.101.86.137:0
File type ASCII text, with very long lines (3382)
Hash fa50a55750d1d0978fca32be5dbc3988
a7f447621d48b3ecf7fc0192b515d506d3d1ad18
c621038fb07e536af8a1ec6d260853dfe69055dc2fb526700919c53b3b7e5f20
GET /368.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.talkable.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: GUwozRedGseijuU5ypA/WbbnDIf/u5E5/2u5+kb3ugz/wj5jQhWm8oFz9CQSV79o7P1yeeJAp+M=
x-amz-request-id: K9T2FMDPRF0ZCE4Q
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "16b4f3676c3859e1378a2ccdebbad675"
x-amz-version-id: zC.KoTaM7bjdFj.W4KQMilxtjXXSNPks
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: HIT
x-cache-hits: 325
x-timer: S1669477278.212660,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1443
X-Firefox-Spdy: h2
js-agent.newrelic.com/768.2d6a2503-1220.js
151.101.86.137200 OK 2.2 kB URL HTTP/2 js-agent.newrelic.com/768.2d6a2503-1220.js
IP 151.101.86.137:0
File type ASCII text, with very long lines (5523)
Hash 98a96a3306b7723c0b8c4bff074cdd9f
e9070da7daa34fa2d8ac2e4ec00e3c499ea37516
a6079d50fa4c72b521fd865e67be080b5b21c336a71dbf7a1800a12ad42384f7
GET /768.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.talkable.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: P4mBsEL/DTAFzpZmpgTrdkaNBJrByz58gWXjGItRhFpF6Y8vCPU2Lz0KL/HwWqBLBPUd/7ipab8=
x-amz-request-id: XM6J50R0X1MZPD9F
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "d6cc8b42eda6fd7734014b03b87b5787"
x-amz-version-id: 0CJw6LdyBdZcjhOiVrtC0pLcOFtA3d5G
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: HIT
x-cache-hits: 498
x-timer: S1669477278.213055,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2225
X-Firefox-Spdy: h2
js-agent.newrelic.com/775.2d6a2503-1220.js
151.101.86.137200 OK 632 B URL HTTP/2 js-agent.newrelic.com/775.2d6a2503-1220.js
IP 151.101.86.137:0
File type ASCII text, with very long lines (1169)
Hash 661520fd0dfebb919d68a69b60ca426f
b85ef80a0e0d95bf4904f9ce4fad56c49ae035be
ecd489671c6255fee8370fc1f8f4e99519ef8d4c4c0ab06640b0c021642e1db7
GET /775.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.talkable.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 7LFMHtjJh1S3I7Y2nadjyW3qD5GSEUAPkhvRiGWUqI2yNIsj2jxS1WztietgESJCTo8b+MSjBS8=
x-amz-request-id: XM6WXR7ZNKJZ7WDR
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "1dfdb74c0491489bf04c6deadb56add2"
x-amz-version-id: y1AQ2bnjUbwuFOuSS5MP1vew1dGw.1iz
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: HIT
x-cache-hits: 1947
x-timer: S1669477278.213215,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 632
X-Firefox-Spdy: h2
js-agent.newrelic.com/39.2d6a2503-1220.js
151.101.86.137200 OK 2.8 kB URL HTTP/2 js-agent.newrelic.com/39.2d6a2503-1220.js
IP 151.101.86.137:0
File type ASCII text, with very long lines (7169)
Hash a0a406e7bdf3e14f047e46bcea27640c
c1fbc88d260f16a092c1b7b0e58e4291401478e8
2309d4e82574d5402ec3454a76051987336fe3b4e4d546f6565a3a443c6d4049
GET /39.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.talkable.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: KxfPNXIQ38SSfzz490TMAo2ltA9W5l6OlU9HI6h8SfmvQBHsTP/3JrzkCdnsVJAOdxSfq1TwUMk=
x-amz-request-id: ESHWVX2RDYQJKTJS
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "0448380a8f2cd0426bbdf04dd45b5408"
x-amz-version-id: rKoZQfJFmGD6aC9Xn3l7.fk4j9L96MM_
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: HIT
x-cache-hits: 117
x-timer: S1669477278.214604,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2755
X-Firefox-Spdy: h2
js-agent.newrelic.com/0.2d6a2503-1220.js
151.101.86.137200 OK 2.3 kB URL HTTP/2 js-agent.newrelic.com/0.2d6a2503-1220.js
IP 151.101.86.137:0
File type ASCII text, with very long lines (5198)
Hash 852267b16c136b977ccd94900c6c6308
e013e1b2c6de5b625ebbfe2e7cf3cfb09cee6c16
9bb09a133a1b33e9cecb06aa44e1ea67b3ad4ea74df5c6a89b1580064364cced
GET /0.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.talkable.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: f1JzRiK4HoHej55UIxY8kufnlKMhSjW2G+Vtj2sq4OUFu6SREeWg9kZpjawiQxSTZPEfmKoLolg=
x-amz-request-id: XM6JN6V8R5PG7B8J
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "cc9b3d207e9ea2c79974f46bf474e6dd"
x-amz-version-id: 5C7ygpPS6JvoVHQoGDIm5lCTgaPcqmFc
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: HIT
x-cache-hits: 109
x-timer: S1669477278.215297,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2349
X-Firefox-Spdy: h2
js-agent.newrelic.com/571.2d6a2503-1220.js
151.101.86.137200 OK 1.1 kB URL HTTP/2 js-agent.newrelic.com/571.2d6a2503-1220.js
IP 151.101.86.137:0
File type ASCII text, with very long lines (2412)
Hash d392a55faa7a0a2a43781a495891c9aa
1998ba6f85354606c186fa1a29285676f0b596f0
33b4cb21373961aa88430ff72406d46e95ceddf50afc086598ea5bdc3a311815
GET /571.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.talkable.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Cn07g451pzP+BuOyXbJ5c0o8ExPUm1rBYP/GYVQDFxcy7KzhZDW/Ep1gB0iV/QBa/UCWbkhew68=
x-amz-request-id: XM6J6T5Z32K8FRFH
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "04b00905b32fd8d29459545bc125cff6"
x-amz-version-id: ySPuP7kOqGri8HjzDqW2TYirQNYv9NMF
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: HIT
x-cache-hits: 123
x-timer: S1669477278.215732,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1108
X-Firefox-Spdy: h2
34.215.155.61/is
34.215.155.61200 OK 32 B IP 34.215.155.61:0
File type ASCII text, with no line terminators
Hash 6ff7983e38109a67283ccfe17ab2f75e
03d906a83ab525435394126b4e1e596c2c3eec93
fc4a91b0f8184c0db9fc8a563374b92ac5dfdf5dff0ca54dd6d9d0bb32877ded
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 34.215.155.61
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/1.1 200 OK
date: Sat, 26 Nov 2022 15:41:17 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
d2jjzw81hqbuqv.cloudfront.net/static_assets/files/438529/original/tkbl_default_trigger-icon.png
54.230.111.128200 OK 257 B URL HTTP/2 d2jjzw81hqbuqv.cloudfront.net/static_assets/files/438529/original/tkbl_default_trigger-icon.png
IP 54.230.111.128:0
File type PNG image data, 22 x 22, 8-bit colormap, non-interlaced\012- data
Hash faade47b23b881bd6670aa550e4a9b30
1f83224672370ec8409e871415302e634a321fd7
14a7e0a8be6da00f225cac6d4484edc62e76587fa20d33c3cde7fae806b10c55
GET /static_assets/files/438529/original/tkbl_default_trigger-icon.png HTTP/1.1
Host: d2jjzw81hqbuqv.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.talkable.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 257
last-modified: Tue, 06 Oct 2020 20:47:53 GMT
content-disposition: inline; filename="tkbl_default_trigger-icon.png"; filename*=UTF-8''tkbl_default_trigger-icon.png
accept-ranges: bytes
server: AmazonS3
date: Sat, 26 Nov 2022 00:45:08 GMT
etag: "faade47b23b881bd6670aa550e4a9b30"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AKklgUgnN8TL9Sokw5dRTH3Sk1wWut3Vtd2LGzAmbnV8dNFXco8cig==
age: 53771
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
216.58.207.195200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.talkable.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:30:59 GMT
expires: Thu, 23 Nov 2023 19:30:59 GMT
cache-control: public, max-age=31536000
age: 245419
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash f36e2eabd0ff1bda188d1edef07341e3
1f1c8da868c1da30342ba06cc047842fafe54309
45102a8efe2960806c3ae53cf8a498330c0fc744a40ef30b74a321a23697ab1e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 15:41:18 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 01:02:14 GMT
Expires: Fri, 02 Dec 2022 01:02:13 GMT
Etag: "1f1c8da868c1da30342ba06cc047842fafe54309"
Cache-Control: max-age=465054,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7703ba3f4bbf0b69-OSL
dx.mountain.com/spx?dxver=4.0.0&shaid=33208&tdr=&plh=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&cb=54481464743276230term=value
44.238.33.223200 92 kB URL HTTP/1.1 dx.mountain.com/spx?dxver=4.0.0&shaid=33208&tdr=&plh=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&cb=54481464743276230term=value
IP 44.238.33.223:0
File type ASCII text, with very long lines (64471)
Hash 491fe47cc840ac9b8fde8c624659ab79
4ccf753c01fac242f495164373c82ea98f9ada58
d30ac74f344f90212a51a512ccf15221edd78df0ad0b8423fa549927e888a2b1
GET /spx?dxver=4.0.0&shaid=33208&tdr=&plh=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&cb=54481464743276230term=value HTTP/1.1
Host: dx.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/1.1 200
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Sat, 26 Nov 2022 15:41:18 GMT
connection: close
44.228.85.26/is
44.228.85.26200 OK 32 B IP 44.228.85.26:0
File type ASCII text, with no line terminators
Hash ec9d54de9784ed1b3a52e66d4b21ed16
531056704de04635f1bf3caf64b3090c730500d7
d70ae4fb0c38d68e4da92e724d29dec018b745789a46fc7bc4ac5fe0ee878b87
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 44.228.85.26
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/1.1 200 OK
date: Sat, 26 Nov 2022 15:41:18 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
sleep.me/_nuxt/vendors/components/audio-player/components/section-multi-media-block/components/section-purple-block/1379abcc.def5997.js
54.230.111.69200 OK 0 B URL HTTP/2 sleep.me/_nuxt/vendors/components/audio-player/components/section-multi-media-block/components/section-purple-block/1379abcc.def5997.js
IP 54.230.111.69:0
GET /_nuxt/vendors/components/audio-player/components/section-multi-media-block/components/section-purple-block/1379abcc.def5997.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Connection: keep-alive
Cookie: AWSALB=AosznoI2w66hibNe4h8kqj5S+wSg1ifEPNgMpSvGAjy4LsvNyNavmSPRMKpx35tSou6EFt+Dj1U+ugKhRPgcfjbwoIBpgSvgpSxSFHJ3o341knGGC4gLo9AZuAhU; AWSALBCORS=AosznoI2w66hibNe4h8kqj5S+wSg1ifEPNgMpSvGAjy4LsvNyNavmSPRMKpx35tSou6EFt+Dj1U+ugKhRPgcfjbwoIBpgSvgpSxSFHJ3o341knGGC4gLo9AZuAhU; tune_id=1020543a151ed20a2f6e1d69f574b0; _geuid=900d56ed-ef51-4ff4-8eca-ad9dcaf2f11c; _geps=true; forterToken=dfd12629eac344d6be88c74e6b738642_1669477274664__UDF43_15ck; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vwo_uuid=J92BADFAAFEB4C8CBC21C9955272B5379; _vwo_ds=3%3At_1%2Ca_1%3A0%241669477275%3A24.77714094%3A105_52_1_0_3%2C101_52_1_0_1%2C75_52_1_0_1%2C36_1_1_0_2%3A65_1%2C64_1%2C63_1%2C62_1%2C61_1%2C60_1%2C59_1%2C58_1%2C57_1%2C56_1%2C55_1%2C54_1%2C53_1%2C52_2%2C51_1%2C50_1%2C49_1%2C48_1%2C47_1%2C46_1%2C45_1%2C44_1%2C43_1%2C42_1%2C41_1%2C40_1%2C39_1%2C38_1%2C35_2%2C34_1%2C33_1%2C32_1%2C31_1%2C30_1%2C29_1%2C28_1%2C27_1%2C26_1%2C25_1%2C24_1%2C23_1%2C22_1%2C21_1%2C20_1%2C19_1%2C18_1%2C17_1%2C16_1%2C15_1%2C14_1%2C13_1%2C12_1%2C1_2%3A15_1%2C4_1%3A1; _vwo_sn=0%3A1%3Ar1.visualwebsiteoptimizer.com%3A1%3A1; ajs_anonymous_id=b927bf33-e957-4b19-b0a9-80e8d0f44bf4; _vwo_uuid_v2=D160044A0010107ADCF61CA1FC88BD85C|e80eb228e687e71d8fc2fab931acd478; tkbl_cvuuid=4913e3ae-0d0a-4c22-beb8-b2268a68b49c; _gcl_au=1.1.1138505253.1669477276; __kla_id=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; _ga_MGP6PGPZWF=GS1.1.1669477276.1.0.1669477276.60.0.0; _ga=GA1.2.452005823.1669477276; _rdt_uuid=1669477276296.a041565b-be05-4c34-999f-0476aaeb58ce; __pdst=dcbcdc282a3b4ac9bf5a310f58b1f2b4; _gid=GA1.2.2143263262.1669477277; _uetsid=c4309d006da011ed93bbc9fc996a0e6d; _uetvid=c43081606da011ed88029f3347112878; _gat=1; _fbp=fb.1.1669477277577.273433596
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:54:29 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Wed, 23 Nov 2022 19:53:18 GMT
etag: W/"8bcd-184a60d43b0"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aERT-pE-9VifsCZE3T9SAqt-OuUcuU4T0uedakfaL5Tt6rNnIg5z7A==
age: 236809
X-Firefox-Spdy: h2
sleep.me/_nuxt/pages/post/_slug.12f571e.js
54.230.111.69200 OK 0 B URL HTTP/2 sleep.me/_nuxt/pages/post/_slug.12f571e.js
IP 54.230.111.69:0
GET /_nuxt/pages/post/_slug.12f571e.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Connection: keep-alive
Cookie: AWSALB=AosznoI2w66hibNe4h8kqj5S+wSg1ifEPNgMpSvGAjy4LsvNyNavmSPRMKpx35tSou6EFt+Dj1U+ugKhRPgcfjbwoIBpgSvgpSxSFHJ3o341knGGC4gLo9AZuAhU; AWSALBCORS=AosznoI2w66hibNe4h8kqj5S+wSg1ifEPNgMpSvGAjy4LsvNyNavmSPRMKpx35tSou6EFt+Dj1U+ugKhRPgcfjbwoIBpgSvgpSxSFHJ3o341knGGC4gLo9AZuAhU; tune_id=1020543a151ed20a2f6e1d69f574b0; _geuid=900d56ed-ef51-4ff4-8eca-ad9dcaf2f11c; _geps=true; forterToken=dfd12629eac344d6be88c74e6b738642_1669477274664__UDF43_15ck; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vwo_uuid=J92BADFAAFEB4C8CBC21C9955272B5379; _vwo_ds=3%3At_1%2Ca_1%3A0%241669477275%3A24.77714094%3A105_52_1_0_3%2C101_52_1_0_1%2C75_52_1_0_1%2C36_1_1_0_2%3A65_1%2C64_1%2C63_1%2C62_1%2C61_1%2C60_1%2C59_1%2C58_1%2C57_1%2C56_1%2C55_1%2C54_1%2C53_1%2C52_2%2C51_1%2C50_1%2C49_1%2C48_1%2C47_1%2C46_1%2C45_1%2C44_1%2C43_1%2C42_1%2C41_1%2C40_1%2C39_1%2C38_1%2C35_2%2C34_1%2C33_1%2C32_1%2C31_1%2C30_1%2C29_1%2C28_1%2C27_1%2C26_1%2C25_1%2C24_1%2C23_1%2C22_1%2C21_1%2C20_1%2C19_1%2C18_1%2C17_1%2C16_1%2C15_1%2C14_1%2C13_1%2C12_1%2C1_2%3A15_1%2C4_1%3A1; _vwo_sn=0%3A1%3Ar1.visualwebsiteoptimizer.com%3A1%3A1; ajs_anonymous_id=b927bf33-e957-4b19-b0a9-80e8d0f44bf4; _vwo_uuid_v2=D160044A0010107ADCF61CA1FC88BD85C|e80eb228e687e71d8fc2fab931acd478; tkbl_cvuuid=4913e3ae-0d0a-4c22-beb8-b2268a68b49c; _gcl_au=1.1.1138505253.1669477276; __kla_id=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; _ga_MGP6PGPZWF=GS1.1.1669477276.1.0.1669477276.60.0.0; _ga=GA1.2.452005823.1669477276; _rdt_uuid=1669477276296.a041565b-be05-4c34-999f-0476aaeb58ce; __pdst=dcbcdc282a3b4ac9bf5a310f58b1f2b4; _gid=GA1.2.2143263262.1669477277; _uetsid=c4309d006da011ed93bbc9fc996a0e6d; _uetvid=c43081606da011ed88029f3347112878; _gat=1; _fbp=fb.1.1669477277577.273433596
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:54:29 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Wed, 23 Nov 2022 19:53:18 GMT
etag: W/"6590-184a60d43b0"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pgdmkhCHuNntro46pnEX8lb0CqLzU3wjljqxSYh1W6bdHqe3_3zv0w==
age: 236809
X-Firefox-Spdy: h2
cdn.segment.com/v1/projects/EERxo1EDQYe9SWp8wGv73aMhb96LIcAR/settings
143.204.48.96200 OK 0 B URL HTTP/2 cdn.segment.com/v1/projects/EERxo1EDQYe9SWp8wGv73aMhb96LIcAR/settings
IP 143.204.48.96:0
GET /v1/projects/EERxo1EDQYe9SWp8wGv73aMhb96LIcAR/settings HTTP/1.1
Host: cdn.segment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleep.me
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Oct 2022 16:21:46 GMT
x-amz-version-id: cGfS_cCaS.rR0FMr4Ez.Hm_x_YMr592j
server: AmazonS3
content-encoding: gzip
date: Sat, 26 Nov 2022 15:41:15 GMT
cache-control: public, max-age=10800
etag: W/"0344260fb14d92bb7d37a253dd7ad897"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AVSrSev2sbwGfmdypUp5gt8ANofNFlqadwZ1kmBFrtM8WCAFFQ8bbA==
age: 8576
X-Firefox-Spdy: h2
sleep.me/_nuxt/runtime.eab43a8.js
54.230.111.69200 OK 0 B URL HTTP/2 sleep.me/_nuxt/runtime.eab43a8.js
IP 54.230.111.69:0
GET /_nuxt/runtime.eab43a8.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:54:17 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Wed, 23 Nov 2022 19:53:18 GMT
etag: W/"24ec-184a60d43b0"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bDwfMXJIUoAVNHWAWX_c6ej6m20NVLKT3c-A4bEPbuRBllM0Kb0gTw==
age: 236815
X-Firefox-Spdy: h2
sleep.me/_nuxt/vendors/app.15ce4c3.js
54.230.111.69200 OK 0 B URL HTTP/2 sleep.me/_nuxt/vendors/app.15ce4c3.js
IP 54.230.111.69:0
GET /_nuxt/vendors/app.15ce4c3.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:23 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"20a984-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HZYlGOMVFPYwYcrDdz9qBy4mj_jcbUNp6fUgTYn2vIPn9Wt979b0nQ==
age: 237649
X-Firefox-Spdy: h2
sleep.me/_nuxt/components/form-newsletter.acf1378.js
54.230.111.69200 OK 0 B URL HTTP/2 sleep.me/_nuxt/components/form-newsletter.acf1378.js
IP 54.230.111.69:0
GET /_nuxt/components/form-newsletter.acf1378.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:54:17 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Wed, 23 Nov 2022 19:53:18 GMT
etag: W/"2dd5-184a60d43b0"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mTaavtBYQWz2H5uOHCBD9-amB9dqaeUfCp-CUlgXD_AdMSjizLZKzA==
age: 236815
X-Firefox-Spdy: h2
sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
54.230.111.69200 OK 0 B URL HTTP/2 sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
IP 54.230.111.69:0
GET /?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Sat, 26 Nov 2022 15:41:12 GMT
set-cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; Expires=Sat, 03 Dec 2022 15:41:10 GMT; Path=/
AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; Expires=Sat, 03 Dec 2022 15:41:10 GMT; Path=/; SameSite=None; Secure
tune_id=1020543a151ed20a2f6e1d69f574b0;domain=.sleep.me;max-age=3888000;path=/;secure;samesite=lax
etag: "b05ab-O4czvnOknivLJD3urHHgjO0TKwg"
accept-ranges: none
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PW6bEvNYeNBK4J5F5rHKHsQo4fzyczyipUflBPn89WfWqb3TZnFsjw==
X-Firefox-Spdy: h2
unpkg.com/@segment/consent-manager@5.6.0/standalone/consent-manager.js
104.16.125.175200 OK 0 B URL HTTP/2 unpkg.com/@segment/consent-manager@5.6.0/standalone/consent-manager.js
IP 104.16.125.175:0
GET /@segment/consent-manager@5.6.0/standalone/consent-manager.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 15:41:14 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"29fff-7FwyHVjeMFr1krwwI9Pzx15ibQw"
via: 1.1 fly.io
fly-request-id: 01GDC4GVDNVS8Q0NW94HD85HPT-ams
cf-cache-status: HIT
age: 5843787
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7703ba271fbeb523-OSL
content-encoding: br
X-Firefox-Spdy: h2
trc.taboola.com/1317858/trc/3/json?tim=1669477277149&data=%7B%22id%22%3A933%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669477277139%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fsleep.me%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dtaboolaaccount-nedglevitatefoundrycom%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669477277149%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate%22%2C%22tos%22%3A4%2C%22ssd%22%3A1%2C%22scd%22%3A14%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
151.101.85.44200 OK 0 B URL HTTP/2 trc.taboola.com/1317858/trc/3/json?tim=1669477277149&data=%7B%22id%22%3A933%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669477277139%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fsleep.me%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dtaboolaaccount-nedglevitatefoundrycom%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669477277149%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate%22%2C%22tos%22%3A4%2C%22ssd%22%3A1%2C%22scd%22%3A14%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP 151.101.85.44:0
GET /1317858/trc/3/json?tim=1669477277149&data=%7B%22id%22%3A933%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669477277139%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fsleep.me%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dtaboolaaccount-nedglevitatefoundrycom%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669477277149%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate%22%2C%22tos%22%3A4%2C%22ssd%22%3A1%2C%22scd%22%3A14%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 15:41:17 GMT
via: 1.1 varnish
x-served-by: cache-bma1661-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669477277.369045,VS0,VE104
vary: Accept-Encoding
x-vcl-time-ms: 104
X-Firefox-Spdy: h2
a.klaviyo.com/media/js/analytics/analytics.js
104.18.3.187301 Moved Permanently 0 B URL HTTP/2 a.klaviyo.com/media/js/analytics/analytics.js
IP 104.18.3.187:0
GET /media/js/analytics/analytics.js HTTP/1.1
Host: a.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 301 Moved Permanently
date: Sat, 26 Nov 2022 15:41:16 GMT
content-type: text/html
location: https://static.klaviyo.com/onsite/js/klaviyo.js
cf-ray: 7703ba30fdd31c06-OSL
cf-cache-status: DYNAMIC
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
sleep.me/_nuxt/vendors/components/section-content-carousel/components/section-featured-products-carousel.90a68d8.js
54.230.111.69200 OK 0 B URL HTTP/2 sleep.me/_nuxt/vendors/components/section-content-carousel/components/section-featured-products-carousel.90a68d8.js
IP 54.230.111.69:0
GET /_nuxt/vendors/components/section-content-carousel/components/section-featured-products-carousel.90a68d8.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:24 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"3ce3-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DEdUGd_QdDHSwpwwe_bSz-Bee8tf2i-E2jou5vNpD-vQC2ir-8hzPg==
age: 237648
X-Firefox-Spdy: h2
insight.adsrvr.org/track/pxl/?adv=6k9d43f&ct=0:md13uiy&fmt=3
52.223.40.198200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/pxl/?adv=6k9d43f&ct=0:md13uiy&fmt=3
IP 52.223.40.198:0
GET /track/pxl/?adv=6k9d43f&ct=0:md13uiy&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/2 200 OK
date: Sat, 26 Nov 2022 15:41:16 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
p.alocdn.com/c/vn3d8u2u/a/etarget/p.gif?label=K97HVG3-collect-%257B%2522script%2522%253A%2522https%253A%252F%252Fs3-us-west-2.amazonaws.com%252Fjsstore%252Fa%252Fk97hvg3%252Fge.js%2522%252C%2522ver%2522%253A%25221.6.1%2522%252C%2522guid%2522%253A%2522900d56ed-ef51-4ff4-8eca-ad9dcaf2f11c%2522%257D&title=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&tdc=1
100.20.56.190200 OK 0 B URL HTTP/2 p.alocdn.com/c/vn3d8u2u/a/etarget/p.gif?label=K97HVG3-collect-%257B%2522script%2522%253A%2522https%253A%252F%252Fs3-us-west-2.amazonaws.com%252Fjsstore%252Fa%252Fk97hvg3%252Fge.js%2522%252C%2522ver%2522%253A%25221.6.1%2522%252C%2522guid%2522%253A%2522900d56ed-ef51-4ff4-8eca-ad9dcaf2f11c%2522%257D&title=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&tdc=1
IP 100.20.56.190:0
GET /c/vn3d8u2u/a/etarget/p.gif?label=K97HVG3-collect-%257B%2522script%2522%253A%2522https%253A%252F%252Fs3-us-west-2.amazonaws.com%252Fjsstore%252Fa%252Fk97hvg3%252Fge.js%2522%252C%2522ver%2522%253A%25221.6.1%2522%252C%2522guid%2522%253A%2522900d56ed-ef51-4ff4-8eca-ad9dcaf2f11c%2522%257D&title=Sleepme%2C%20The%20Home%20of%20ChiliSleep%20Cooling%20Mattress%20Pad%20%26%20More&url=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&tdc=1 HTTP/1.1
Host: p.alocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sleep.me/
Connection: keep-alive
Cookie: uuid=db2eb107-dc35-4acf-9dd6-8dfa19fde72b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 15:41:15 GMT
content-type: image/GIF
server: nginx/1.18.0
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
set-cookie: uuid=db2eb107-dc35-4acf-9dd6-8dfa19fde72b; domain=.alocdn.com; path=/; expires=Sun, 26 Nov 2023 15:41:15 GMT; secure; SameSite=None
_ep=1669477275; path=/; expires=Sat, 26 Nov 2022 15:41:15 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
sleep.me/_nuxt/components/content-video.0d4b2ef.js
54.230.111.69200 OK 0 B URL HTTP/2 sleep.me/_nuxt/components/content-video.0d4b2ef.js
IP 54.230.111.69:0
GET /_nuxt/components/content-video.0d4b2ef.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:24 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"a800-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YewISPaiwX_czVEhGNy2rozLLyUKAb1nzE_WQBJCtqt42xa9U7JPWw==
age: 237648
X-Firefox-Spdy: h2
sleep.me/_nuxt/components/section-stats-block.a3aa339.js
54.230.111.69200 OK 0 B URL HTTP/2 sleep.me/_nuxt/components/section-stats-block.a3aa339.js
IP 54.230.111.69:0
GET /_nuxt/components/section-stats-block.a3aa339.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:24 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"983-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aIGdpadMyviP1EVIb_uBuS84z7OLjfU7ldaV0gAFiXcEXYkY0idbDA==
age: 237648
X-Firefox-Spdy: h2
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=22920&tdr=&plh=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&cb=67055197099017360term=value
54.69.84.146200 0 B URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=22920&tdr=&plh=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&cb=67055197099017360term=value
IP 54.69.84.146:0
GET /spx?dxver=4.0.0&shaid=22920&tdr=&plh=https%3A%2F%2Fsleep.me%2F%3Foffer_id%3D2%26affiliate_id%3D1666%26transaction_id%3D1020543a151ed20a2f6e1d69f574b0%26utm_source%3DTUNE%26utm_medium%3Daffiliate&cb=67055197099017360term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://sleep.me/
Connection: keep-alive
HTTP/1.1 200
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Sat, 26 Nov 2022 15:41:16 GMT
connection: close
sleep.me/_nuxt/components/header-hero-block-one.c6e40e9.js
54.230.111.69200 OK 0 B URL HTTP/2 sleep.me/_nuxt/components/header-hero-block-one.c6e40e9.js
IP 54.230.111.69:0
GET /_nuxt/components/header-hero-block-one.c6e40e9.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:24 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"15e8-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AgkHRu3AAlHI_yl63cmcR4sg5h3-57O1EqZ2ohHV-p_RLcy_F_pwhA==
age: 237648
X-Firefox-Spdy: h2
sleep.me/_nuxt/components/section5050-component.e31cdc9.js
54.230.111.69200 OK 0 B URL HTTP/2 sleep.me/_nuxt/components/section5050-component.e31cdc9.js
IP 54.230.111.69:0
GET /_nuxt/components/section5050-component.e31cdc9.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:24 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"1307-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O_PuRADC70QsD7llxZGaSLahO0y78eXMOT-cRUVNJu0Uw-GMo-u88A==
age: 237648
X-Firefox-Spdy: h2
sleep.me/_nuxt/components/cart.b30ab60.js
54.230.111.69200 OK 0 B URL HTTP/2 sleep.me/_nuxt/components/cart.b30ab60.js
IP 54.230.111.69:0
GET /_nuxt/components/cart.b30ab60.js HTTP/1.1
Host: sleep.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sleep.me/?offer_id=2&affiliate_id=1666&transaction_id=1020543a151ed20a2f6e1d69f574b0&utm_source=TUNE&utm_medium=affiliate
Cookie: AWSALB=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; AWSALBCORS=b//oSz8j9XC3lrCeYtZsVsbaI/JKUNc5u7G4yOvodu9d6mmJiWYENHbw+FpLJwdzsVPvx9NbS9E+xplrihq4ITc6IVJdlRBkpUVhXG/+7/2vJUik/5PDVrnx3SNp; tune_id=1020543a151ed20a2f6e1d69f574b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 21:40:35 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 21:04:53 GMT
etag: W/"578e-184a1287108"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fK4jhYd0XmbwljaAHRv5sQrskEGO2Kk2VvcyrgjUHjNyRLxtnTqj0g==
age: 237638
X-Firefox-Spdy: h2