r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7635
Expires: Sun, 11 Sep 2022 10:59:32 GMT
Date: Sun, 11 Sep 2022 08:52:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 11 Sep 2022 08:07:28 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EYQ8OvGrtw3DaoqjWJbenMZgJziChIJekqyb2_AiZ6qDoxkqiEGiqw==
Age: 2690
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 11 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SnWEP4t4hLKGBIlIvak-U_R1OBD5BbMaBRVkUhkDuNdReDsdouXUfQ==
age: 5706
X-Firefox-Spdy: h2
nets.whealthhut.com/ga/click/2-308232059-1584-14035-27407-25281-97c3ae1a6f-m454ba719f
302 Found 125 B URL HTTP/1.1 nets.whealthhut.com/ga/click/2-308232059-1584-14035-27407-25281-97c3ae1a6f-m454ba719f
IP
ASN #16095 Sentia Denmark A/S
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 06acb1e7cfc5387f0ce80f9559913bb6
de9b0c2121866bede39fc571945a970d963763e8
f2e74201d0ab27f7ad0a45ccd1a231c2e68be197b402a17fdd905eda42c699f2
Analyzer Verdict Alert fortinet Malware
GET /ga/click/2-308232059-1584-14035-27407-25281-97c3ae1a6f-m454ba719f HTTP/1.1
Host: nets.whealthhut.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sun, 11 Sep 2022 08:51:55 GMT
Server: Apache/2.4.51 (Unix) OpenSSL/1.0.2k-fips PHP/7.3.29
Status: 302 Found
X-Rack-Cache: miss
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=utf-8
X-Request-Id: 9b2e470ad651a3a44164d3005ecc90b5
Location: https://lotamkt.com/?a=10362&c=117099&s1=XMduneThsj
X-UA-Compatible: IE=Edge,chrome=1
X-Runtime: 0.019135
Expires: Mon, 01 Jan 1990 00:00:00 GMT
X-Powered-By: Phusion Passenger(R) 6.0.9
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 08:52:18 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 11 Sep 2022 07:56:07 GMT
Expires: Sun, 11 Sep 2022 08:22:28 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0uj3PutccawB4IU_TXrlSy2M6VfeF1i2Wyq70m6i8QBUz6OpTzmerg==
Age: 3371
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 4232e2f95b568c4f7d3e0d2f25bb8063
72c59f4c3e585fdcc7a6d6a4a3c5a1ec186e225b
48b6e506337ff069398657867a50a62c3151a396294829393355153648ad0688
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 15 Sep 2022 08:52:17 GMT
ETag: "72c59f4c3e585fdcc7a6d6a4a3c5a1ec186e225b"
Last-Modified: Sun, 11 Sep 2022 08:52:18 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 748f2a9efec8b521-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 36fe04277220227ba5ecfe7d2ff1d9d9
2eb9f6560336248cc45c1cd66d87505b5ebdf5d4
94f8f2f8f3b67db18825ea48740ff0ce218d7156fe851d6b023ef43b6bee4f7f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4537
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:18 GMT
Last-Modified: Sun, 11 Sep 2022 07:36:41 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
lotamkt.com/?a=10362&c=117099&s1=XMduneThsj
302 Found 215 B URL HTTP/1.1 lotamkt.com/?a=10362&c=117099&s1=XMduneThsj
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 0b4983240f7d92c8cdf0603df019e8b3
4cdd7d68b24e763d791bc04f1a2141b1fa5affe2
df728628a556e95b5fd5150845b419779f8cdb07f180aadac403773de2240128
GET /?a=10362&c=117099&s1=XMduneThsj HTTP/1.1
Host: lotamkt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 215
Content-Type: text/html; charset=utf-8
Date: Sun, 11 Sep 2022 08:52:18 GMT
Location: https://refineyoursleep.com/news/1662/video_sr_mb?tid=affiliati&cid=512319535|10362|XMduneThsj
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: sid=jheLfjq26tKw2S36d/3reYte1ljIarmL2uLOlVkpAqJXh10ZQUwn/A==; domain=.lotamkt.com; path=/; SameSite=None; secure; HttpOnly
trk=BoCyqqcLNSHcEa+JqFTrKYte1ljIarmL2uLOlVkpAqJXh10ZQUwn/A==; domain=.lotamkt.com; expires=Wed, 11-Sep-2024 08:52:18 GMT; path=/; SameSite=None; secure; HttpOnly
c21558=jheLfjq26tIiHxJXqV+lLTR4i9ZJrWGeBJWUxkwSVWM8eBGUI9rwVw==; domain=.lotamkt.com; expires=Tue, 11-Oct-2022 08:52:18 GMT; path=/; SameSite=None; secure; HttpOnly
Connection: close
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hvDzf62oCbtPWHayB4e5qA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: OYDoNTFO0ohs/ZdQ3IjPJE30qoI=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d5c078dc06c2878219a10fdbbf0e7a9
a5b271e7efaf61d51f805383f5a31bf11ba699ef
4673d2cc00178506feb77a5c053926ac5a392bf702f0f0ac29357f914eea3d44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4673D2CC00178506FEB77A5C053926AC5A392BF702F0F0AC29357F914EEA3D44"
Last-Modified: Sun, 11 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21543
Expires: Sun, 11 Sep 2022 14:51:22 GMT
Date: Sun, 11 Sep 2022 08:52:19 GMT
Connection: keep-alive
refineyoursleep.com/news/1662/video_sr_mb?tid=affiliati&cid=512319535|10362|XMduneThsj
200 OK 8.6 kB URL HTTP/1.1 refineyoursleep.com/news/1662/video_sr_mb?tid=affiliati&cid=512319535|10362|XMduneThsj
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (778)
Hash cbaaa2eb2b37ae2947d34d30190b3bee
86701043158b6b4540be9b64bbbcb6bfb6238ce4
4e73e755a158eebeeba565428a4c53cc05ce62b7b1e02ae597c03622cc9f455d
GET /news/1662/video_sr_mb?tid=affiliati&cid=512319535|10362|XMduneThsj HTTP/1.1
Host: refineyoursleep.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:19 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8553
Content-Type: text/html; charset=UTF-8
Set-Cookie: primal=9o9ki5t1ghhrrpc0mh44nlidi6; path=/; domain=.refineyoursleep.com
fid=1662; expires=Tue, 11-Oct-2022 08:52:19 GMT; Max-Age=2592000; path=/; domain=.refineyoursleep.com
tid=affiliati; expires=Sun, 11-Sep-2022 08:52:09 GMT; Max-Age=-10; path=/; domain=.refineyoursleep.com
cid=512319535%7C10362%7CXMduneThsj; expires=Sun, 11-Sep-2022 08:52:09 GMT; Max-Age=-10; path=/; domain=.refineyoursleep.com
tid=affiliati; expires=Tue, 11-Oct-2022 08:52:19 GMT; Max-Age=2592000; path=/; domain=.refineyoursleep.com
cid=512319535%7C10362%7CXMduneThsj; expires=Tue, 11-Oct-2022 08:52:19 GMT; Max-Age=2592000; path=/; domain=.refineyoursleep.com
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65deebab57142db522e6c874673bdd9f
bfd022181afaec5035f868ccd05fac58113f81dc
7470143c8bd79f00190a3766ebaa9c632d0aa47693fc4c146f097873865da327
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js
200 OK 6.5 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js
IP
File type ASCII text, with very long lines (1190)
Hash c3bdf8c5d3c435f9a254e98df59a76d3
49de71ce7f439579b17b89d41630ecc42990f5f9
6ef91d15e35c54b958239444ffa14bcd4aa4d84f10ea10a5a3af71543b74ee85
GET /ajax/libs/webfont/1.5.18/webfont.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 6490
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Sep 2022 12:31:32 GMT
expires: Mon, 04 Sep 2023 12:31:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 591647
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
refineyoursleep.com/themes/default/css/site.css
200 OK 116 B URL HTTP/1.1 refineyoursleep.com/themes/default/css/site.css
IP
Hash 9cfa7f77fb5552267e4b8acb6d899eb9
fa3c6d774fb6141a24ffa76a90ec354b21d517fe
0eea7414307cc23d6c7a4b912a642b7e70093b7316bcf9e7de5466541c68f35d
GET /themes/default/css/site.css HTTP/1.1
Host: refineyoursleep.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/news/1662/video_sr_mb?tid=affiliati&cid=512319535|10362|XMduneThsj
Cookie: primal=9o9ki5t1ghhrrpc0mh44nlidi6; fid=1662; tid=affiliati; cid=512319535%7C10362%7CXMduneThsj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:19 GMT
Server: Apache
Last-Modified: Thu, 10 Feb 2022 15:37:26 GMT
ETag: "62-5d7abba2ac77a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000, public
Content-Length: 116
Content-Type: text/css
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65deebab57142db522e6c874673bdd9f
bfd022181afaec5035f868ccd05fac58113f81dc
7470143c8bd79f00190a3766ebaa9c632d0aa47693fc4c146f097873865da327
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 847de0f568756d0d5a245768ef018e80
3f48f0963136458f489482d6c35c2ba41be6ec13
ebaf23d60b27bc5308cbb0de5992f46081893700c7fef9be6efc1e0ebbf14883
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBAF23D60B27BC5308CBB0DE5992F46081893700C7FEF9BE6EFC1E0EBBF14883"
Last-Modified: Fri, 09 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19168
Expires: Sun, 11 Sep 2022 14:11:48 GMT
Date: Sun, 11 Sep 2022 08:52:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 847de0f568756d0d5a245768ef018e80
3f48f0963136458f489482d6c35c2ba41be6ec13
ebaf23d60b27bc5308cbb0de5992f46081893700c7fef9be6efc1e0ebbf14883
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBAF23D60B27BC5308CBB0DE5992F46081893700C7FEF9BE6EFC1E0EBBF14883"
Last-Modified: Fri, 09 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19420
Expires: Sun, 11 Sep 2022 14:16:00 GMT
Date: Sun, 11 Sep 2022 08:52:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 847de0f568756d0d5a245768ef018e80
3f48f0963136458f489482d6c35c2ba41be6ec13
ebaf23d60b27bc5308cbb0de5992f46081893700c7fef9be6efc1e0ebbf14883
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBAF23D60B27BC5308CBB0DE5992F46081893700C7FEF9BE6EFC1E0EBBF14883"
Last-Modified: Fri, 09 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8767
Expires: Sun, 11 Sep 2022 11:18:27 GMT
Date: Sun, 11 Sep 2022 08:52:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 847de0f568756d0d5a245768ef018e80
3f48f0963136458f489482d6c35c2ba41be6ec13
ebaf23d60b27bc5308cbb0de5992f46081893700c7fef9be6efc1e0ebbf14883
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBAF23D60B27BC5308CBB0DE5992F46081893700C7FEF9BE6EFC1E0EBBF14883"
Last-Modified: Fri, 09 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21584
Expires: Sun, 11 Sep 2022 14:52:04 GMT
Date: Sun, 11 Sep 2022 08:52:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 847de0f568756d0d5a245768ef018e80
3f48f0963136458f489482d6c35c2ba41be6ec13
ebaf23d60b27bc5308cbb0de5992f46081893700c7fef9be6efc1e0ebbf14883
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBAF23D60B27BC5308CBB0DE5992F46081893700C7FEF9BE6EFC1E0EBBF14883"
Last-Modified: Fri, 09 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 11 Sep 2022 14:52:20 GMT
Date: Sun, 11 Sep 2022 08:52:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4914
Expires: Sun, 11 Sep 2022 10:14:14 GMT
Date: Sun, 11 Sep 2022 08:52:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4914
Expires: Sun, 11 Sep 2022 10:14:14 GMT
Date: Sun, 11 Sep 2022 08:52:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4914
Expires: Sun, 11 Sep 2022 10:14:14 GMT
Date: Sun, 11 Sep 2022 08:52:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4914
Expires: Sun, 11 Sep 2022 10:14:14 GMT
Date: Sun, 11 Sep 2022 08:52:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79f019c6-c6f0-4468-b319-ffe5379d4a42.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79f019c6-c6f0-4468-b319-ffe5379d4a42.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b290c3f75a769f5cb0f36b5c84436c9b
22e386713ccb95ca1cf9aa367a5ad02bd1664954
e311757ae3bc5b821a9c1d4d654250b1ac936228eb4a600aa1e5b391d25adaaf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79f019c6-c6f0-4468-b319-ffe5379d4a42.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10611
x-amzn-requestid: f034fbd9-c83e-4a29-84ff-674629759818
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3yN3E8PoAMFwfA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312fd8b-63dd86ec10dbc2fb7dc0e5de;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 07:08:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -Fht5R4_rLcLWqglaPldh1846mPs_JS6_L3G_mi5G2iQbmkCPopvuQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 14:09:00 GMT
age: 67400
etag: "22e386713ccb95ca1cf9aa367a5ad02bd1664954"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e407da4d97d497925b1ab523fd416787
166741631fb93d109b18dde6d316b3fa3276aa8f
707460c02438da6114e35e0b6569d42c0f3fb747f8cb51002f4d52bedbcffa61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8485
x-amzn-requestid: a56c9282-2786-4ae7-9fc2-0468bcc820a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ1k_FM1oAMFZ2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d02ec-753cc4f121c9b77d22bb82b5;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:34:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Mfmj40aUc8l5RPk56M-pbqTwhde_HzYcmN5MDrfv-WFPhbpoShWYNw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:57:28 GMT
age: 39292
etag: "166741631fb93d109b18dde6d316b3fa3276aa8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c35b7f5f8e1b0b24570a41b7d18533a
c5b82c9d77851820b8d206573d5c03cd36d27a20
bb2456b31c48e6ebc9595c2bb9972b74531e93dd02ec4571d5af614f2d116ec7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6109
x-amzn-requestid: 271b006e-9d17-46ba-9eed-22fd638c4e9e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ2AhHZgIAMFlSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d039c-444e7d6b22f2a08f7215a986;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:37:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rnkjEbkwVPPR1stEuMkkuFcQ4WZMDjsuYKA46ZcxejvotwfCG6huhQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:43:03 GMT
age: 40157
etag: "c5b82c9d77851820b8d206573d5c03cd36d27a20"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234d0658-5bd0-4cc9-a828-3300a0005951.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234d0658-5bd0-4cc9-a828-3300a0005951.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash de6622cfd812509b317913e1a5e9cfc8
84e4a39c92ab111cc1072f898990cea6b05da6cf
6d41b564c2e15215d05ba74ba2ae08abf74f6aef9e58e808d31afc6d1ba123af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234d0658-5bd0-4cc9-a828-3300a0005951.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9319
x-amzn-requestid: 44d731e9-1da0-4ad0-9fbb-1b170fac3bf0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTxaFtpIAMFWAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c666f-2e155359546dae806f6dbfe2;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:10:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: cZslQ5Qc4PPIlpAtmGVbfr3NaPybUWZMJBz_pCrXkCSSq6hUztXVjA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:41:01 GMT
age: 40279
etag: "84e4a39c92ab111cc1072f898990cea6b05da6cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7d1d7d9-dc6d-4841-a150-2f22abc6729a.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7d1d7d9-dc6d-4841-a150-2f22abc6729a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd709702d50113aec782e45bb5ecb2a8
c5fcae1c388ff8f44b9e47734b6b65fd4e0fd856
0ec10618a7f2f77cd339e9d1b4e58d29c1c9ad1575f434c813c1d3014c90bf76
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7d1d7d9-dc6d-4841-a150-2f22abc6729a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9990
x-amzn-requestid: 852e5710-d962-4b43-ad48-9530797ab548
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YBsisHAioAMFqsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6316f477-7de59a7d3553767c45e06ed2;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 07:19:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: edjwyX-124C71X-bNNnD2tP70Y4XuhX7G5LKmkKjU4IclvCekOOtgQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 15:33:37 GMT
age: 62323
etag: "c5fcae1c388ff8f44b9e47734b6b65fd4e0fd856"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d72ce1b-951e-4f1f-97b1-db99c399d5f9.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d72ce1b-951e-4f1f-97b1-db99c399d5f9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eee5b4d617dab6f10d7053f5c4f4e98e
6c728c56797ba921e8001919df4d36e56dd37e54
76a53e2c81ec8da2bc469760b2c57098d587c6a36fa70e5b7c743a224a47d362
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d72ce1b-951e-4f1f-97b1-db99c399d5f9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8171
x-amzn-requestid: 39c8c044-5287-47bb-8731-5706c27a73e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0feFFtkIAMF9NA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6311ac59-246e1b7e019965f74db95df0;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 07:10:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FVraudPaXgrkcCLGkaxntfC3h4XtbSfnRgzyp72Wgwb-WgWkDwjYPw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 11:24:10 GMT
age: 77290
etag: "6c728c56797ba921e8001919df4d36e56dd37e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.primalhealthcrm.com/global/css/default.css
200 OK 4.4 kB URL HTTP/1.1 cdn.primalhealthcrm.com/global/css/default.css
IP
File type ASCII text, with very long lines (15403)
Hash 30b507154d6071392c0bd78cd3efd042
01f22bb35ed589c53c2ae32b89926c1106517662
c5bea98d4a1e577842d4b76452c6828cdca57d23ade68013f919f1b6902217fa
GET /global/css/default.css HTTP/1.1
Host: cdn.primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:20 GMT
Server: Apache
Content-Length: 4403
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type, origin, x-requested-with, content-type
Accept-Ranges: bytes
X-Original-Content-Length: 24557
Vary: Accept-Encoding,User-Agent,Save-Data
Content-Encoding: gzip
Etag: W/"PSA-aj-fQSdk-CeS5"
Expires: Tue, 11 Oct 2022 08:15:21 GMT
Cache-Control: max-age=2589780, public
X-Content-Type-Options: nosniff
Content-Type: text/css
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
cdn.primalhealthcrm.com/global/js/primal-health-crm-global.js
200 OK 2.9 kB URL HTTP/1.1 cdn.primalhealthcrm.com/global/js/primal-health-crm-global.js
IP
File type ASCII text, with very long lines (3542)
Hash 42eaf9a8484cab285bd90f80b5b5bb5f
2085d708e7c35012c971888b729906207b17607b
83a277ad56f595dc1eb20af338a08657d9338a9a6a8652dddf04d961ddf340ac
GET /global/js/primal-health-crm-global.js HTTP/1.1
Host: cdn.primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:20 GMT
Server: Apache
Content-Length: 2913
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type, origin, x-requested-with, content-type
Accept-Ranges: bytes
X-Original-Content-Length: 19136
Vary: Accept-Encoding
Content-Encoding: gzip
Etag: W/"PSA-aj-oFdUx49fn6"
Expires: Tue, 11 Oct 2022 08:15:21 GMT
Cache-Control: max-age=2589780, public
X-Content-Type-Options: nosniff
Content-Type: application/javascript
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
cdn.primalhealthcrm.com/js/ie10-viewport-bug-workaround.js
200 OK 213 B URL HTTP/1.1 cdn.primalhealthcrm.com/js/ie10-viewport-bug-workaround.js
IP
Hash f2a08ae2c1805855abe755126b179ff1
97726cf9e12dcfc12291d12bb542449fdd9785e3
cb3f92301213da24a797cff41aeece6b3aa768be57c0a553881164a0dd0cf6d2
GET /js/ie10-viewport-bug-workaround.js HTTP/1.1
Host: cdn.primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:20 GMT
Server: Apache
Content-Length: 213
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type, origin, x-requested-with, content-type
Accept-Ranges: bytes
X-Original-Content-Length: 640
Vary: Accept-Encoding
Content-Encoding: gzip
Etag: W/"PSA-aj-DLMMSJMQmP"
Expires: Tue, 11 Oct 2022 08:15:21 GMT
Cache-Control: max-age=2589780, public
X-Content-Type-Options: nosniff
Content-Type: application/javascript
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
cdn.primalhealthcrm.com/global/css/bootstrap.min.css
200 OK 23 kB URL HTTP/1.1 cdn.primalhealthcrm.com/global/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65324)
Hash 973633478dfefdfd1c6c3e4d7586740b
2257a5da982f93f4389a6e76ad0ba3349cf34e5f
67898ac1e3c1955f2c6f93b25fdbe232f46dee192532ffdf3e899223f9936c1e
GET /global/css/bootstrap.min.css HTTP/1.1
Host: cdn.primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:20 GMT
Server: Apache
Content-Length: 23154
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type, origin, x-requested-with, content-type
Last-Modified: Mon, 09 Sep 2019 19:46:32 GMT
ETag: "2606e-592240b77bff8-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Cache-Control: max-age=2592000, public
X-Original-Content-Length: 155758
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Content-Type: text/css
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
cdn.primalhealthcrm.com/global/js/bootstrap.min.js
200 OK 15 kB URL HTTP/1.1 cdn.primalhealthcrm.com/global/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (57791), with no line terminators
Hash 8c8a1e7644449044402ef7031ef16a61
5b82e3cfd44f08ab860affc7088f58808613e09d
77281c35170228147765b9a80266c407449972bf900d0931707177d2194c2ec5
GET /global/js/bootstrap.min.js HTTP/1.1
Host: cdn.primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:20 GMT
Server: Apache
Content-Length: 15213
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type, origin, x-requested-with, content-type
Accept-Ranges: bytes
X-Original-Content-Length: 58072
Vary: Accept-Encoding
Content-Encoding: gzip
Etag: W/"PSA-aj-m29fZhtnNs"
Expires: Tue, 11 Oct 2022 08:15:21 GMT
Cache-Control: max-age=2589780, public
X-Content-Type-Options: nosniff
Content-Type: application/javascript
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
cdn.primalhealthcrm.com/global/js/jquery.js
200 OK 31 kB URL HTTP/1.1 cdn.primalhealthcrm.com/global/js/jquery.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash c169c50f6d17fb9395153fb7acaaa4fb
588a9c7b0e49826b4327ef8584c9e3ede3c67120
06df1fa576368a6884ca7415299fd1736c4fcce5db4b483c8661a40838edcf69
GET /global/js/jquery.js HTTP/1.1
Host: cdn.primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:20 GMT
Server: Apache
Content-Length: 30576
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type, origin, x-requested-with, content-type
Accept-Ranges: bytes
X-Original-Content-Length: 88144
Vary: Accept-Encoding
Content-Encoding: gzip
Etag: W/"PSA-aj-tJmcu2pzqb"
Expires: Tue, 11 Oct 2022 08:15:21 GMT
Cache-Control: max-age=2589780, public
X-Content-Type-Options: nosniff
Content-Type: application/javascript
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
js.go2sdk.com/v2/tune.js
200 OK 18 kB IP
File type ASCII text, with very long lines (7486)
Hash 074c9e70b17ef9db8aced963fef4e2d9
caa1063a824083eb483f25bfab3e7aade3441bcd
cca8ce472cbf8c44acf7ac24067c2d6075acd1e0cd4c9003de6055289ac5c68a
GET /v2/tune.js HTTP/1.1
Host: js.go2sdk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 17921
last-modified: Wed, 06 Jan 2021 18:55:14 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Sun, 11 Sep 2022 01:47:50 GMT
etag: "074c9e70b17ef9db8aced963fef4e2d9"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NAKE29j2x_1cHNT148BNUIXMZpRgJT76NqZsZEy3IaRGC-RcHVevVA==
age: 25529
X-Firefox-Spdy: h2
cdn.primalhealthcrm.com/images/as-seen-on.jpg
200 OK 6.4 kB URL HTTP/1.1 cdn.primalhealthcrm.com/images/as-seen-on.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 636x72, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1e12e5a6cd46b59f3e0570f7194f7a29
a52be5da1189f6b85d846f9a14acb320472cf9fd
b2f9c5090cc113b8b469dcc5199415f38ccf252db5629cf74a0fd78ae3cfffc2
GET /images/as-seen-on.jpg HTTP/1.1
Host: cdn.primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:20 GMT
Server: Apache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type, origin, x-requested-with, content-type
Accept-Ranges: bytes
X-Original-Content-Length: 22908
Etag: W/"PSA-aj-93otLl7-fd-gzip"
Expires: Tue, 11 Oct 2022 04:14:59 GMT
Vary: User-Agent,Save-Data,Accept-Encoding
Cache-Control: max-age=2575358, public
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Length: 6407
Content-Type: image/webp
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
cdn.primalhealthcrm.com/images/logo-tpss-moon2.png
200 OK 6.7 kB URL HTTP/1.1 cdn.primalhealthcrm.com/images/logo-tpss-moon2.png
IP
File type PNG image data, 448 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash 2a62291f4e3434217a0052b3a715153e
90aa16fde024afe2db8e7219efef3cd8be5fa267
ccc133340fdce41b33a29128895405b51a544827bc98930504de221c7b027c62
GET /images/logo-tpss-moon2.png HTTP/1.1
Host: cdn.primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:20 GMT
Server: Apache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type, origin, x-requested-with, content-type
Accept-Ranges: bytes
X-Original-Content-Length: 7996
Etag: W/"PSA-aj-wLxJpoVpfn-gzip"
Expires: Tue, 11 Oct 2022 05:14:57 GMT
Vary: User-Agent,Accept-Encoding
Cache-Control: max-age=2578956, public
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Length: 6683
Content-Type: image/png
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
cdn.primalhealthcrm.com/images/btn-close.png
200 OK 1.1 kB URL HTTP/1.1 cdn.primalhealthcrm.com/images/btn-close.png
IP
File type PNG image data, 30 x 31, 8-bit gray+alpha, non-interlaced\012- data
Hash b130507d5c4349c50eac15337f9261e3
6960eb6714fc216492e191590a0455e90b35d316
1f82b9d050454a0f45ab32940626323bdf8478ac4afe8da87331b696b7a9aebd
GET /images/btn-close.png HTTP/1.1
Host: cdn.primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:20 GMT
Server: Apache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type, origin, x-requested-with, content-type
Accept-Ranges: bytes
X-Original-Content-Length: 2472
Etag: W/"PSA-aj-K-yLl8zQbz-gzip"
Expires: Tue, 11 Oct 2022 05:14:57 GMT
Vary: User-Agent,Accept-Encoding
Cache-Control: max-age=2578956, public
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Length: 1123
Content-Type: image/png
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
cdn.primalhealthcrm.com/images/ajax-loader-3.gif
200 OK 3.5 kB URL HTTP/1.1 cdn.primalhealthcrm.com/images/ajax-loader-3.gif
IP
File type GIF image data, version 89a, 128 x 15\012- data
Hash ccb089834f9fd4d09ab89da2a4e18c8f
822d59c255d821e181fb337f292d3976962de658
877575d7351d6eaadc3ceeb2dad0d5f678a6759910c24841c78b0ef7856025b3
GET /images/ajax-loader-3.gif HTTP/1.1
Host: cdn.primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:20 GMT
Server: Apache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type, origin, x-requested-with, content-type
Last-Modified: Wed, 31 Jan 2018 19:20:52 GMT
ETag: "f6f-5641760a4ed00-gzip-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Cache-Control: max-age=2592000, public
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Length: 3453
Content-Type: image/gif
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
fast.vidalytics.com/embeds/DOBezDQw/1q01xpVeThenmcsk/loader.min.js
200 OK 11 kB URL HTTP/2 fast.vidalytics.com/embeds/DOBezDQw/1q01xpVeThenmcsk/loader.min.js
IP
Hash f42143519263cb03ef3f5746ad6c8a11
bd86c2d956cb3904f29621d915a97054dc75dc71
ed38671a49c44c08acb5c901a49ff1b78584d635e3e341e64fcbc5079d3bc1fb
GET /embeds/DOBezDQw/1q01xpVeThenmcsk/loader.min.js HTTP/1.1
Host: fast.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:20 GMT
content-type: application/javascript
last-modified: Wed, 03 Aug 2022 13:46:10 GMT
accept-ranges: bytes
x-guploader-uploadid: ADPycdtYSMPmYccdICfBawJGyjcSirqCeh7K0bqQMOjs8rKY_utxaxBwJIJ6iDSyOLCUO5cIGQo-Jffw8bKqr0uaFVqofw
cache-control: public, max-age=300, s-maxage=2592000
etag: "4531414b85a3c054437c2c3d1d2d5f5d"
x-goog-generation: 1659534370832489
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 9740
x-goog-hash: crc32c=UGf3Sg==, md5=RTFBS4WjwFRDfCw9HS1fXQ==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-hw, server
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
content-encoding: gzip
x-hw: 1662886340.cds214.sk1.hn,1662886340.cds214.sk1.hc,1662886340.cds223.sk1.c,1662886340.cds214.sk1.sl
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 08:31:01 GMT
expires: Wed, 06 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 433279
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 18:59:14 GMT
expires: Tue, 05 Sep 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 481986
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.primalhealthcrm.com/images/next-step-gold.png
200 OK 18 kB URL HTTP/1.1 cdn.primalhealthcrm.com/images/next-step-gold.png
IP
File type PNG image data, 931 x 260, 8-bit colormap, non-interlaced\012- data
Hash 71d713fbd67bb1eec1c5fd5a36e82fb0
88a047f7f5f168016ea4cdbd35da4026686259eb
8db109c701ba5843cba8150d30b8c1156b32817db806bdaaae726eb916bbb1ec
GET /images/next-step-gold.png HTTP/1.1
Host: cdn.primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:20 GMT
Server: Apache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type, origin, x-requested-with, content-type
Last-Modified: Thu, 07 May 2020 18:03:14 GMT
ETag: "466a-5a512b1cfb4c2-gzip-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Cache-Control: max-age=2592000, public
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Length: 17960
Content-Type: image/png
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.heapanalytics.com/js/heap-1279333676.js
200 OK 44 kB URL HTTP/2 cdn.heapanalytics.com/js/heap-1279333676.js
IP
Hash 152ff0db862ef5ccef6726bafeda90ca
8ed39dc361498f7bd99dd001439a49ccb681168e
973fcdfdfcfb92293bc31d6b5db6298ceec430003a7c3d0c97f33ac6e8f2e739
GET /js/heap-1279333676.js HTTP/1.1
Host: cdn.heapanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sun, 11 Sep 2022 08:50:27 GMT
server: nginx
etag: W/"1b5ce-UJMnqIrLYjH6zJhZIEv3wQ"
cache-control: public, max-age=120
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: FyGMi1FTO-EaNLspjA3SZnQCYqjn6K_zwcCudVYjdiolHE1wR8rv4Q==
age: 113
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2fb56fc920f3162650f2535dceea3c4c
d3a961d3ce2215049868a723d149b0f1a44e0690
65dae6dcf01d46f642c5c34be5b51100072c9f88a9337201292a0b342e549971
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65DAE6DCF01D46F642C5C34BE5B51100072C9F88A9337201292A0B342E549971"
Last-Modified: Fri, 09 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 11 Sep 2022 14:52:20 GMT
Date: Sun, 11 Sep 2022 08:52:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aa582995829e170cb6fce094aa2fc55d
f0e18401db1fad51e8501c5ed4633107184a348f
4732dc0f0d024e79bfb2543de273c8ee59d08b3529e54fb02e6f8fe7a3283461
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4732DC0F0D024E79BFB2543DE273C8EE59D08B3529E54FB02E6F8FE7A3283461"
Last-Modified: Fri, 09 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 11 Sep 2022 14:52:21 GMT
Date: Sun, 11 Sep 2022 08:52:21 GMT
Connection: keep-alive
primalhealthcrm.com/IPN2/visits_pixel.php?tid=affiliati&cid=512319535|10362|XMduneThsj&ip=168430334&domain=93
200 OK 527 B URL HTTP/1.1 primalhealthcrm.com/IPN2/visits_pixel.php?tid=affiliati&cid=512319535|10362|XMduneThsj&ip=168430334&domain=93
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 1x1, components 3\012- data
Hash 00b62c6b9684fadb5407aaf99a77fbe7
f16a5742ef54501dacf8e106a66c2161b02a5d47
216394359a8d5ff2d18fc7d719ba061fa3791881dca92be8f6868dbf50a997f9
GET /IPN2/visits_pixel.php?tid=affiliati&cid=512319535|10362|XMduneThsj&ip=168430334&domain=93 HTTP/1.1
Host: primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:21 GMT
Server: Apache
Access-Control-Allow-Origin: *
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: s-maxage=10
Content-Length: 527
Content-Type: image/jpeg
Set-Cookie: PubVisit=200318598; expires=Mon, 12-Sep-2022 08:52:21 GMT; Max-Age=86400; path=/
MasterTid=affiliati; expires=Mon, 11-Sep-2023 08:52:21 GMT; Max-Age=31536000; path=/
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 70c436dd55790f536b7424dfbb27918b
16d9f75ea5a4345ed98dd05563c3b137ba0e21d7
a89102e9cfa1480f95bba88f13cf07aae94c1df09e23d9e912bf611b9c8e434b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 08:52:21 GMT
Last-Modified: Sun, 11 Sep 2022 07:17:27 GMT
Server: ECS (nyb/1D06)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sBHt0pwpNd6dFtTkPXbpSmoxrmwa-5wXZw_Sh66nmpjQ2mPHc6JaOg==
Age: 5694
vibranthealthnetwork.com/js.js
200 OK 0 B URL HTTP/1.1 vibranthealthnetwork.com/js.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js.js HTTP/1.1
Host: vibranthealthnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:21 GMT
Server: Apache
Last-Modified: Fri, 18 Feb 2022 16:47:45 GMT
ETag: "0-5d84da45c7742"
Accept-Ranges: bytes
Content-Length: 0
Content-Type: application/javascript
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 70c436dd55790f536b7424dfbb27918b
16d9f75ea5a4345ed98dd05563c3b137ba0e21d7
a89102e9cfa1480f95bba88f13cf07aae94c1df09e23d9e912bf611b9c8e434b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 08:52:21 GMT
Last-Modified: Sun, 11 Sep 2022 08:42:06 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kkMV9SvlqyuPX0nX6i2bUbqC1UaEI3Ef_hF8WQf3_gseyp5wdrhq1w==
Age: 615
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 70c436dd55790f536b7424dfbb27918b
16d9f75ea5a4345ed98dd05563c3b137ba0e21d7
a89102e9cfa1480f95bba88f13cf07aae94c1df09e23d9e912bf611b9c8e434b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 08:52:21 GMT
Last-Modified: Sun, 11 Sep 2022 08:06:00 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: f5YP6PJRU4zWksYnww3eBcC8ymrLhX4OqYYfuSWjLlZBMdDdrJYhVA==
Age: 2781
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 70c436dd55790f536b7424dfbb27918b
16d9f75ea5a4345ed98dd05563c3b137ba0e21d7
a89102e9cfa1480f95bba88f13cf07aae94c1df09e23d9e912bf611b9c8e434b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 08:52:21 GMT
Last-Modified: Sun, 11 Sep 2022 08:06:00 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 75SXvIHd6qC9-zyl_6lhyuJXHCwm1EA6lWlkckNnb_WqRDzzqIF2bQ==
Age: 2781
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 70c436dd55790f536b7424dfbb27918b
16d9f75ea5a4345ed98dd05563c3b137ba0e21d7
a89102e9cfa1480f95bba88f13cf07aae94c1df09e23d9e912bf611b9c8e434b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 08:52:21 GMT
Last-Modified: Sun, 11 Sep 2022 07:03:19 GMT
Server: ECS (nyb/1D0D)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4vMSJmaeDf2S9g3xA3j9OhTWpkpSgI1FQFK-HsTdngqsi9YcFdWszA==
Age: 6542
heapanalytics.com/api/telemetry?a=1279333676&te=type&te=data&te=cm&te=eventPropertiesTelemetry%20-%20added%20new%20properties&te=val&te=1&st=1662886330178&hv=4.18.4
200 OK 37 B URL HTTP/2 heapanalytics.com/api/telemetry?a=1279333676&te=type&te=data&te=cm&te=eventPropertiesTelemetry%20-%20added%20new%20properties&te=val&te=1&st=1662886330178&hv=4.18.4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /api/telemetry?a=1279333676&te=type&te=data&te=cm&te=eventPropertiesTelemetry%20-%20added%20new%20properties&te=val&te=1&st=1662886330178&hv=4.18.4 HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:21 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-PqzQEyMQ6kTK11azeKO8Bw"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
heapanalytics.com/h?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&z=0&h=%2Fnews%2F1662%2Fvideo_sr_mb&q=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&d=refineyoursleep.com&t=Special%20Offer&k=FID&k=1662&k=TID&k=affiliati&k=CID%20Part%201&k=512319535&k=CID%20Part%202&k=10362&k=CID%20Part%203&k=XMduneThsj&ts=1662886330208&st=1662886330210
200 OK 37 B URL HTTP/2 heapanalytics.com/h?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&z=0&h=%2Fnews%2F1662%2Fvideo_sr_mb&q=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&d=refineyoursleep.com&t=Special%20Offer&k=FID&k=1662&k=TID&k=affiliati&k=CID%20Part%201&k=512319535&k=CID%20Part%202&k=10362&k=CID%20Part%203&k=XMduneThsj&ts=1662886330208&st=1662886330210
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /h?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&z=0&h=%2Fnews%2F1662%2Fvideo_sr_mb&q=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&d=refineyoursleep.com&t=Special%20Offer&k=FID&k=1662&k=TID&k=affiliati&k=CID%20Part%201&k=512319535&k=CID%20Part%202&k=10362&k=CID%20Part%203&k=XMduneThsj&ts=1662886330208&st=1662886330210 HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:21 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-PqzQEyMQ6kTK11azeKO8Bw"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
heapanalytics.com/h?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&sp=z&sp=0&sp=ts&sp=1662886330208&sp=d&sp=refineyoursleep.com&sp=h&sp=%2Fnews%2F1662%2Fvideo_sr_mb&sp=t&sp=Special%20Offer&sp=q&sp=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&pp=d&pp=refineyoursleep.com&pp=q&pp=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&pp=h&pp=%2Fnews%2F1662%2Fvideo_sr_mb&pp=t&pp=Special%20Offer&pp=ts&pp=1662886330208&id0=4136290504336811&k0=FID&k0=1662&k0=TID&k0=affiliati&k0=CID%20Part%201&k0=512319535&k0=CID%20Part%202&k0=10362&k0=CID%20Part%203&k0=XMduneThsj&k0=Page&k0=%2Fnews%2F1662%2Fvideo_sr_mb&t0=Video%20-%20Load%20Started&ts0=1662886330190&st=1662886330211
200 OK 37 B URL HTTP/2 heapanalytics.com/h?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&sp=z&sp=0&sp=ts&sp=1662886330208&sp=d&sp=refineyoursleep.com&sp=h&sp=%2Fnews%2F1662%2Fvideo_sr_mb&sp=t&sp=Special%20Offer&sp=q&sp=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&pp=d&pp=refineyoursleep.com&pp=q&pp=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&pp=h&pp=%2Fnews%2F1662%2Fvideo_sr_mb&pp=t&pp=Special%20Offer&pp=ts&pp=1662886330208&id0=4136290504336811&k0=FID&k0=1662&k0=TID&k0=affiliati&k0=CID%20Part%201&k0=512319535&k0=CID%20Part%202&k0=10362&k0=CID%20Part%203&k0=XMduneThsj&k0=Page&k0=%2Fnews%2F1662%2Fvideo_sr_mb&t0=Video%20-%20Load%20Started&ts0=1662886330190&st=1662886330211
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /h?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&sp=z&sp=0&sp=ts&sp=1662886330208&sp=d&sp=refineyoursleep.com&sp=h&sp=%2Fnews%2F1662%2Fvideo_sr_mb&sp=t&sp=Special%20Offer&sp=q&sp=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&pp=d&pp=refineyoursleep.com&pp=q&pp=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&pp=h&pp=%2Fnews%2F1662%2Fvideo_sr_mb&pp=t&pp=Special%20Offer&pp=ts&pp=1662886330208&id0=4136290504336811&k0=FID&k0=1662&k0=TID&k0=affiliati&k0=CID%20Part%201&k0=512319535&k0=CID%20Part%202&k0=10362&k0=CID%20Part%203&k0=XMduneThsj&k0=Page&k0=%2Fnews%2F1662%2Fvideo_sr_mb&t0=Video%20-%20Load%20Started&ts0=1662886330190&st=1662886330211 HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:21 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-PqzQEyMQ6kTK11azeKO8Bw"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
heapanalytics.com/api/add_user_properties_v3?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&_Last%20FID=1662&st=1662886330211
200 OK 37 B URL HTTP/2 heapanalytics.com/api/add_user_properties_v3?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&_Last%20FID=1662&st=1662886330211
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /api/add_user_properties_v3?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&_Last%20FID=1662&st=1662886330211 HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:21 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-PqzQEyMQ6kTK11azeKO8Bw"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
heapanalytics.com/api/add_user_properties_v3?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&_Last%20IP=91.90.42.154&st=1662886330212
200 OK 37 B URL HTTP/2 heapanalytics.com/api/add_user_properties_v3?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&_Last%20IP=91.90.42.154&st=1662886330212
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /api/add_user_properties_v3?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&_Last%20IP=91.90.42.154&st=1662886330212 HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:21 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-PqzQEyMQ6kTK11azeKO8Bw"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
heapanalytics.com/api/add_user_properties_v3?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&_Last%20TID=affiliati&st=1662886330212
200 OK 37 B URL HTTP/2 heapanalytics.com/api/add_user_properties_v3?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&_Last%20TID=affiliati&st=1662886330212
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /api/add_user_properties_v3?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&_Last%20TID=affiliati&st=1662886330212 HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:21 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-PqzQEyMQ6kTK11azeKO8Bw"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
heapanalytics.com/api/telemetry?a=1279333676&te=type&te=data&te=cm&te=eventPropertiesTelemetry%20-%20added%20new%20properties&te=val&te=1&st=1662886330187&hv=4.18.4
200 OK 37 B URL HTTP/2 heapanalytics.com/api/telemetry?a=1279333676&te=type&te=data&te=cm&te=eventPropertiesTelemetry%20-%20added%20new%20properties&te=val&te=1&st=1662886330187&hv=4.18.4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /api/telemetry?a=1279333676&te=type&te=data&te=cm&te=eventPropertiesTelemetry%20-%20added%20new%20properties&te=val&te=1&st=1662886330187&hv=4.18.4 HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:21 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-PqzQEyMQ6kTK11azeKO8Bw"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 5.9 kB IP
File type ASCII text, with very long lines (16553), with no line terminators
Hash 2f6a1b8a4843f74a5ba54c055fcb3850
919a5f9166f3f9c73803cebd312ad016570a30d8
1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: KQRwsNjR9pNFX8+lwNzxpSQ45swd3MGW7TkO0fwkjh26wgDRCgtK32wZszk4o1RMEP5kBKx7ujo=
x-amz-request-id: 3MMZAKR0729HHX6Y
date: Sun, 11 Sep 2022 08:13:01 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 2361
content-length: 5929
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 3.2 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (8072), with no line terminators
Hash 9b19340ef7db3cbb26aa923adb8dbe6e
082e699bca6e80ca6c72a43f2894f4a32e785e26
c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Sun, 11 Sep 2022 09:12:21 GMT
Date: Sun, 11 Sep 2022 08:52:21 GMT
Content-Length: 3249
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 57b75ea93de540716c45f1397781431a
431cc2c684385c4e46facd7210b5ac49b9dd09cc
4581d7dd422dc110fa7cfe667297cdb75d92a02ce7226db6db89448befa5b780
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=2066F9B8135D6D312266EBA412A86C5D; domain=.bing.com; expires=Fri, 06-Oct-2023 08:52:21 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BD4B948E50AF41A1AD6855A6B6929BE8 Ref B: OSL30EDGE0117 Ref C: 2022-09-11T08:52:21Z
date: Sun, 11 Sep 2022 08:52:21 GMT
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sun, 11 Sep 2022 08:41:12 GMT
expires: Sun, 11 Sep 2022 10:41:12 GMT
cache-control: public, max-age=7200
age: 669
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-1796349.js?sv=5
200 OK 2.5 kB URL HTTP/2 static.hotjar.com/c/hotjar-1796349.js?sv=5
IP
File type ASCII text, with very long lines (3790)
Hash 19d49682099f86015506fa815723cdf6
bd0271e2e3433c455c3a430b10c2db5ae6927405
05edd07d24e4f071c8d47300cb98f6b9ce79078a9711ad6398cd3024100eb457
GET /c/hotjar-1796349.js?sv=5 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Sun, 11 Sep 2022 08:52:21 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/8d9de94cafdae300865920f1e9dcf5de
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: T4TdGO263JeNpi7b_BxBUxVfEQ4uaEMFcPskxIrO4cpBtQ1ejdmQSw==
X-Firefox-Spdy: h2
cdn.primalhealthcrm.com/global/img/faviconsr.ico
200 OK 3.3 kB URL HTTP/1.1 cdn.primalhealthcrm.com/global/img/faviconsr.ico
IP
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 84bf24d249ac607879957b0510e8c4d5
b0fdb0af4bb4b5a3b9ae2748ee99e59f9accfe93
c327301a2fffc9ef2d1bc409d8287af2620d99d3c5ade985c1447bee65c7460c
GET /global/img/faviconsr.ico HTTP/1.1
Host: cdn.primalhealthcrm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:21 GMT
Server: Apache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type, origin, x-requested-with, content-type
Last-Modified: Mon, 04 May 2020 20:18:39 GMT
ETag: "3aee-5a4d83c8bb740-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=2592000, public, s-maxage=10
Content-Length: 3341
Content-Type: image/vnd.microsoft.icon
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
cdn.taboola.com/libtrc/unip/1074154/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1074154/tfa.js
IP
File type ASCII text, with very long lines (58458)
Hash b4f75733404bd3389db9a609200c3a53
058de51eb11a94dcefc32a578b78a6fc36a5032d
a08cd741f3369ec43bc4168f9d8b6042058d5c549720df52ec602b94f070bb3e
GET /libtrc/unip/1074154/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: YOno5dveuzTOxN1rIu3N7FWLGQn+wmmPzA1DA0+GlUDV8SVJDcZ32bVgHRL2DdpNtLinL0WaJsg=
x-amz-request-id: K7GE0B7A99M1RTV9
x-amz-replication-status: COMPLETED
last-modified: Sun, 04 Sep 2022 11:14:16 GMT
etag: "3f43cc313db7e2d8858dbb792996c755"
x-amz-version-id: BoA.2UDr2LhKbv7YCeZc3YZ4tFdHaA5H
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 11 Sep 2022 08:52:21 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1667-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1662886342.630381,VS0,VE121
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 97
content-length: 17944
X-Firefox-Spdy: h2
vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Hash f6a9ca04b0687ea3c0d98e8430c8c77b
35503b2deb23091a9a9c6c68d4020dbdf879588e
8e4328ecb6b395499567369e3c227231dbdaf361f43ce315934d7a2a3abbed41
GET /box-69edcc3187336f9b0a3fbb4c73be9fe6.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1044
date: Wed, 07 Sep 2022 09:17:07 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "f6a9ca04b0687ea3c0d98e8430c8c77b"
last-modified: Wed, 07 Sep 2022 09:16:57 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mGDnyE7SfJ2bk3zwPKpDjEXRn9fLjQCDjN6wCrVv3LDrq_1FF1rDjA==
age: 344114
X-Firefox-Spdy: h2
script.hotjar.com/modules.448392d04fd1e15c100a.js
200 OK 66 kB URL HTTP/2 script.hotjar.com/modules.448392d04fd1e15c100a.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash dda0289b22368ab84a40f8dab68ddb9e
bef03b9e4930e3fddeee2dbd16f79fb04a78e11d
114cd1432d8d08eb7625146120b27b7046f5c3f841c25ff7889bd56ab1cd19ff
GET /modules.448392d04fd1e15c100a.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 65486
date: Wed, 07 Sep 2022 10:58:07 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "dda0289b22368ab84a40f8dab68ddb9e"
last-modified: Wed, 07 Sep 2022 10:57:54 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: llKuP6adIV_idJ47uYe1tIf96jqcBgCnavwXE_vIMLyYS5XO0NJFEA==
age: 338054
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=11042310&Ver=2&mid=dc0e2cc6-9045-4eea-b2a5-84af6eda48f9&sid=0626469031af11ed86f05110194731de&vid=0626863031af11ed9987c598a1121337&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Special%20Offer&p=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&r=<=2901&evt=pageLoad&sv=1&rn=263568
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=11042310&Ver=2&mid=dc0e2cc6-9045-4eea-b2a5-84af6eda48f9&sid=0626469031af11ed86f05110194731de&vid=0626863031af11ed9987c598a1121337&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Special%20Offer&p=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&r=<=2901&evt=pageLoad&sv=1&rn=263568
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=11042310&Ver=2&mid=dc0e2cc6-9045-4eea-b2a5-84af6eda48f9&sid=0626469031af11ed86f05110194731de&vid=0626863031af11ed9987c598a1121337&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Special%20Offer&p=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&r=<=2901&evt=pageLoad&sv=1&rn=263568 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=122E712B3C386E12162363373DCD6F14; domain=.bing.com; expires=Fri, 06-Oct-2023 08:52:21 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2C53DE461DCB4C8397C9997E9C0D77A8 Ref B: OSL30EDGE0117 Ref C: 2022-09-11T08:52:21Z
date: Sun, 11 Sep 2022 08:52:21 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 55d14c90ec16748861894ce8f82eafcd
f3ebe8972971c1201c1ec7c533f019f79c36cde5
fa0dc0f0a76f3407dad8dae59a4817ef6b1371fcaa930448373d64720a036698
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-58496902-46&cid=139074236.1662886331&jid=1783609651&gjid=202788351&_gid=684375503.1662886331&_u=YGBAgEABAAAAAE~&z=1333315078
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-58496902-46&cid=139074236.1662886331&jid=1783609651&gjid=202788351&_gid=684375503.1662886331&_u=YGBAgEABAAAAAE~&z=1333315078
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-58496902-46&cid=139074236.1662886331&jid=1783609651&gjid=202788351&_gid=684375503.1662886331&_u=YGBAgEABAAAAAE~&z=1333315078 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://refineyoursleep.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 11 Sep 2022 08:52:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
trc.taboola.com/1074154/trc/3/json?tim=1662886331125&data=%7B%22id%22%3A812%2C%22ii%22%3A%22%2Fnews%2F1662%2Fvideo_sr_mb%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1662886331117%2C%22cv%22%3A%2220220904-2-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dtaboolaaccount-dianeprimalhealthlpcom%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1662886331124%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 1.8 kB URL HTTP/2 trc.taboola.com/1074154/trc/3/json?tim=1662886331125&data=%7B%22id%22%3A812%2C%22ii%22%3A%22%2Fnews%2F1662%2Fvideo_sr_mb%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1662886331117%2C%22cv%22%3A%2220220904-2-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dtaboolaaccount-dianeprimalhealthlpcom%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1662886331124%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
Hash dec10fe44c4e3638d96ad77d4b52dfc6
3c6da4aaf08585643b15150cce18f53503ef9e1e
b44732ba8b9eb07ed796267e6a94d30787692ffeb8db0917f90aaef11ba45376
GET /1074154/trc/3/json?tim=1662886331125&data=%7B%22id%22%3A812%2C%22ii%22%3A%22%2Fnews%2F1662%2Fvideo_sr_mb%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1662886331117%2C%22cv%22%3A%2220220904-2-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dtaboolaaccount-dianeprimalhealthlpcom%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1662886331124%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sun, 11 Sep 2022 08:52:22 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662886342.896605,VS0,VE106
vary: Accept-Encoding
x-vcl-time-ms: 106
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10012620.json
200 OK 22 B URL HTTP/2 s.yimg.com/wi/config/10012620.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 14293ad9ad0ffaf9f7a3acf1b0793b66
718dea6b65b9516e5e33fac53451056397deb255
73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
GET /wi/config/10012620.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: MRGXSTG62P6CHMZN
x-amz-id-2: yYobuypBiFkhTPBwQ/zT7gizwibHg0QE2f4wXEPPNFJ7AxzM3YbUoV3Y2ee+DS5jBfz8fYsOPK8=
content-type: application/json
date: Sun, 11 Sep 2022 08:52:21 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
age: 3
content-encoding: gzip
content-length: 22
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 6fd66d0988f5bb65e7951fb29b878af5
f5d8264509674747d963865521ea458b5990ddd3
ae581701d5b9bed9e14f2752a8de4e7c45d0e12e20fc5744dc9fb994244b3e4b
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4938
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:22 GMT
Last-Modified: Sun, 11 Sep 2022 07:30:04 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 6fd66d0988f5bb65e7951fb29b878af5
f5d8264509674747d963865521ea458b5990ddd3
ae581701d5b9bed9e14f2752a8de4e7c45d0e12e20fc5744dc9fb994244b3e4b
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4938
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:22 GMT
Last-Modified: Sun, 11 Sep 2022 07:30:04 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
bat.bing.com/p/action/11042310.js
200 OK 667 B URL HTTP/2 bat.bing.com/p/action/11042310.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash f08f017599cadd807a7ae0b3bc73c37a
8e74528f088aad05574f6da964744b7918ba12c9
4f5b4143faffd62ed72cefd14aa0ade19ef3e6c45054e19141b1856b61e1eab1
GET /p/action/11042310.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 667
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=2E6660E82DDD63F4020C72F42C28620C; domain=.bing.com; expires=Fri, 06-Oct-2023 08:52:21 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6C0221B802BE48A5AA6D2054B5C574E9 Ref B: OSL30EDGE0117 Ref C: 2022-09-11T08:52:21Z
date: Sun, 11 Sep 2022 08:52:21 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8f760d1df2e7c0df054a0ce3f161dae0
dd88e4c58741bf1c84b564081a04707b600eec40
e0f277d53f6dc87db5e6885ee9a6c5d0bf7f0f233a48eb168e8772c26acf79da
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 08:52:22 GMT
Last-Modified: Sun, 11 Sep 2022 07:26:48 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tGMz3byOQ6yEb3AyAheT7xux5S9b2AtHmA5RXCO-XLJvy0qE1rbGRw==
Age: 5134
tr.outbrain.com/unifiedPixel?marketerId=00c8cb59043e91fe98cbb336c2f007ab19&obApiVersion=1.0&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&optOut=false&bust=07598200163683204&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00c8cb59043e91fe98cbb336c2f007ab19&obApiVersion=1.0&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&optOut=false&bust=07598200163683204&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00c8cb59043e91fe98cbb336c2f007ab19&obApiVersion=1.0&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&optOut=false&bust=07598200163683204&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:22 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 79866735c78bba9709af581be63ab445
content-encoding: gzip
tr.outbrain.com/cachedClickId?marketerId=00c8cb59043e91fe98cbb336c2f007ab19
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00c8cb59043e91fe98cbb336c2f007ab19
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00c8cb59043e91fe98cbb336c2f007ab19 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:22 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: c4cf01abc8afd00f18a10cc3c14efeb7
content-encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 25e12d7b35a1a6efb4bc97945209072e
72b67424bbd3042de531de92a57bfd97036e9526
3836fa49727f6b0cff300e4aaa480a76848ceda64f98d1a6e4e4986284fcd1ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da7b1c24eee0db0c23872933557b7521
b8bc1215b4073784c048587e51a40152bd88c8ed
6ba38b5c68971135ed3f1fbe7afa658ce883240142a4244ce7d84fa251a64c3f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rp.liadm.com/j?dtstmp=1662886331084&aid=a-060r&se=e30&duid=4e7568173087--01gcnvzgjnv9pqp9xdys56b19d&tna=v2.4.2&pu=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&wpn=lc-bundle&c=PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-PHRpdGxlIGNsYXNzPSJzd2l0Y2hGYXZUaXRsZSI-U3BlY2lhbCBPZmZlcjwvdGl0bGU-PGgxIGNsYXNzPSJoZWFkbGluZSI-SG93IFRvIFB1dCBBbiBFbmQgVG8gU2xlZXBsZXNzIE5pZ2h0cyBBbmQgR3JvZ2d5IE1vcm5pbmdzIEJ5IFNpbXBseSBSZWFjdGl2YXRpbmcgWW91ciBCcmFpbuKAmXMg4oCcU2xlZXAgWm9uZeKAnTwvaDE-
302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1662886331084&aid=a-060r&se=e30&duid=4e7568173087--01gcnvzgjnv9pqp9xdys56b19d&tna=v2.4.2&pu=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&wpn=lc-bundle&c=PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-PHRpdGxlIGNsYXNzPSJzd2l0Y2hGYXZUaXRsZSI-U3BlY2lhbCBPZmZlcjwvdGl0bGU-PGgxIGNsYXNzPSJoZWFkbGluZSI-SG93IFRvIFB1dCBBbiBFbmQgVG8gU2xlZXBsZXNzIE5pZ2h0cyBBbmQgR3JvZ2d5IE1vcm5pbmdzIEJ5IFNpbXBseSBSZWFjdGl2YXRpbmcgWW91ciBCcmFpbuKAmXMg4oCcU2xlZXAgWm9uZeKAnTwvaDE-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1662886331084&aid=a-060r&se=e30&duid=4e7568173087--01gcnvzgjnv9pqp9xdys56b19d&tna=v2.4.2&pu=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&wpn=lc-bundle&c=PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-PHRpdGxlIGNsYXNzPSJzd2l0Y2hGYXZUaXRsZSI-U3BlY2lhbCBPZmZlcjwvdGl0bGU-PGgxIGNsYXNzPSJoZWFkbGluZSI-SG93IFRvIFB1dCBBbiBFbmQgVG8gU2xlZXBsZXNzIE5pZ2h0cyBBbmQgR3JvZ2d5IE1vcm5pbmdzIEJ5IFNpbXBseSBSZWFjdGl2YXRpbmcgWW91ciBCcmFpbuKAmXMg4oCcU2xlZXAgWm9uZeKAnTwvaDE- HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 11 Sep 2022 08:52:22 GMT
content-length: 0
trace-id: 2f92df52fd1db63d
vary: Origin
location: /j?dtstmp=1662886331084&aid=a-060r&se=e30&duid=4e7568173087--01gcnvzgjnv9pqp9xdys56b19d&tna=v2.4.2&pu=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&wpn=lc-bundle&c=PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-PHRpdGxlIGNsYXNzPSJzd2l0Y2hGYXZUaXRsZSI-U3BlY2lhbCBPZmZlcjwvdGl0bGU-PGgxIGNsYXNzPSJoZWFkbGluZSI-SG93IFRvIFB1dCBBbiBFbmQgVG8gU2xlZXBsZXNzIE5pZ2h0cyBBbmQgR3JvZ2d5IE1vcm5pbmdzIEJ5IFNpbXBseSBSZWFjdGl2YXRpbmcgWW91ciBCcmFpbuKAmXMg4oCcU2xlZXAgWm9uZeKAnTwvaDE-&n3pc=true
set-cookie: lidid=2927a8c8-7179-4aba-b076-67b9a33d6ad1; Max-Age=63072000; Expires=Tue, 10 Sep 2024 08:52:22 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://refineyoursleep.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-58496902-46&cid=139074236.1662886331&jid=1783609651&_u=YGBAgEABAAAAAE~&z=1150599993
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-58496902-46&cid=139074236.1662886331&jid=1783609651&_u=YGBAgEABAAAAAE~&z=1150599993
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-58496902-46&cid=139074236.1662886331&jid=1783609651&_u=YGBAgEABAAAAAE~&z=1150599993 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 11 Sep 2022 08:52:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-58496902-46&cid=139074236.1662886331&jid=1783609651&_u=YGBAgEABAAAAAE~&z=1150599993
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-58496902-46&cid=139074236.1662886331&jid=1783609651&_u=YGBAgEABAAAAAE~&z=1150599993
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-58496902-46&cid=139074236.1662886331&jid=1783609651&_u=YGBAgEABAAAAAE~&z=1150599993 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 11 Sep 2022 08:52:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 25e12d7b35a1a6efb4bc97945209072e
72b67424bbd3042de531de92a57bfd97036e9526
3836fa49727f6b0cff300e4aaa480a76848ceda64f98d1a6e4e4986284fcd1ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6c2fea93ba89de81c2b01aaca1a87835
0a7f50001f709285bc10f6ef044ef39a60535bff
6cae8a5f9949975a3adedc41088196b8c9dd984e4023e54bbe655800a9478349
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 08:52:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sp.analytics.yahoo.com/sp.pl?a=10000&d=Sun%2C%2011%20Sep%202022%2008%3A52%3A11%20GMT&n=0&b=Special%20Offer&.yp=10012620&f=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&enc=UTF-8&yv=1.13.0
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Sun%2C%2011%20Sep%202022%2008%3A52%3A11%20GMT&n=0&b=Special%20Offer&.yp=10012620&f=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&enc=UTF-8&yv=1.13.0
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Sun%2C%2011%20Sep%202022%2008%3A52%3A11%20GMT&n=0&b=Special%20Offer&.yp=10012620&f=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&enc=UTF-8&yv=1.13.0 HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:22 GMT
expires: Sun, 11 Sep 2022 08:52:22 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBMahHWMCEEou0gHVeNv9N7foeJo_CdEFEgEBAQHzHmMnYwAAAAAA_eMAAA&S=AQAAAhlnXrQFPFjs_1DjO13wzS0; Expires=Mon, 11 Sep 2023 14:52:22 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1662886331084&aid=a-060r&se=e30&duid=4e7568173087--01gcnvzgjnv9pqp9xdys56b19d&tna=v2.4.2&pu=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&wpn=lc-bundle&c=PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-PHRpdGxlIGNsYXNzPSJzd2l0Y2hGYXZUaXRsZSI-U3BlY2lhbCBPZmZlcjwvdGl0bGU-PGgxIGNsYXNzPSJoZWFkbGluZSI-SG93IFRvIFB1dCBBbiBFbmQgVG8gU2xlZXBsZXNzIE5pZ2h0cyBBbmQgR3JvZ2d5IE1vcm5pbmdzIEJ5IFNpbXBseSBSZWFjdGl2YXRpbmcgWW91ciBCcmFpbuKAmXMg4oCcU2xlZXAgWm9uZeKAnTwvaDE-&n3pc=true
200 OK 13 B URL HTTP/2 rp.liadm.com/j?dtstmp=1662886331084&aid=a-060r&se=e30&duid=4e7568173087--01gcnvzgjnv9pqp9xdys56b19d&tna=v2.4.2&pu=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&wpn=lc-bundle&c=PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-PHRpdGxlIGNsYXNzPSJzd2l0Y2hGYXZUaXRsZSI-U3BlY2lhbCBPZmZlcjwvdGl0bGU-PGgxIGNsYXNzPSJoZWFkbGluZSI-SG93IFRvIFB1dCBBbiBFbmQgVG8gU2xlZXBsZXNzIE5pZ2h0cyBBbmQgR3JvZ2d5IE1vcm5pbmdzIEJ5IFNpbXBseSBSZWFjdGl2YXRpbmcgWW91ciBCcmFpbuKAmXMg4oCcU2xlZXAgWm9uZeKAnTwvaDE-&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?dtstmp=1662886331084&aid=a-060r&se=e30&duid=4e7568173087--01gcnvzgjnv9pqp9xdys56b19d&tna=v2.4.2&pu=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&wpn=lc-bundle&c=PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-PHRpdGxlIGNsYXNzPSJzd2l0Y2hGYXZUaXRsZSI-U3BlY2lhbCBPZmZlcjwvdGl0bGU-PGgxIGNsYXNzPSJoZWFkbGluZSI-SG93IFRvIFB1dCBBbiBFbmQgVG8gU2xlZXBsZXNzIE5pZ2h0cyBBbmQgR3JvZ2d5IE1vcm5pbmdzIEJ5IFNpbXBseSBSZWFjdGl2YXRpbmcgWW91ciBCcmFpbuKAmXMg4oCcU2xlZXAgWm9uZeKAnTwvaDE-&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://refineyoursleep.com
Referer: https://refineyoursleep.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:22 GMT
content-type: application/json
content-length: 13
trace-id: 21c968d498f39cde
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: e9d5810e-9701-48b2-b1b5-be9a25660472
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://refineyoursleep.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
ws26.hotjar.com/api/v2/client/ws
101 Switching Protocols 0 B URL HTTP/1.1 ws26.hotjar.com/api/v2/client/ws
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v2/client/ws HTTP/1.1
Host: ws26.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://refineyoursleep.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nKo8D4H2Af3MBiVoN4AiyA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 11 Sep 2022 08:52:22 GMT
Content-Type: application/octet-stream
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sEfD37UQw+ueLq0jpGUAuLKesqI=
Sec-WebSocket-Extensions: permessage-deflate
fast.vidalytics.com/video/DOBezDQw/HUjuKumKcypbkfn0/61240/52296/stream.mpd
200 OK 2.6 kB URL HTTP/2 fast.vidalytics.com/video/DOBezDQw/HUjuKumKcypbkfn0/61240/52296/stream.mpd
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash fcc3e08cedb8dbcc572faabcaeabcb5d
053815266a8db8be691059018e26970d762ab0e0
cc01f3a2d5c3e1f61d05f4765942eac8d658eb6c3e65c57464da4ab2995f24ad
GET /video/DOBezDQw/HUjuKumKcypbkfn0/61240/52296/stream.mpd HTTP/1.1
Host: fast.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:22 GMT
content-type: application/dash+xml
last-modified: Mon, 28 Mar 2022 15:36:09 GMT
accept-ranges: bytes
x-guploader-uploadid: ADPycdvt09hTnNyV1yx__LayT5TTahbe4pASecVOvAthvcdSbLrzwhgAWP_UjVXD7AjgIM9DgOiu_V7hjSQjDSF1IWuxkA
cache-control: public, max-age=31104000
etag: "fcc3e08cedb8dbcc572faabcaeabcb5d"
x-goog-generation: 1648481768937712
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2621
x-goog-hash: crc32c=PHLYVA==, md5=/MPgjO2428xXL6q8rqvLXQ==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-hw, server
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
content-length: 2621
x-hw: 1662886342.cds223.sk1.hn,1662886342.cds223.sk1.hc,1662886342.cds228.sk1.c,1662886342.cds223.sk1.sl
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 48ac220d68e08df64c88198cf733a35d
84517f481ec7107b068c3b78a5c1433de6c0116c
5e5e42cac1b267afb80d43b9ffa1f723617fa2c1993360c5b1eb2ad0d8648c3a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 11 Sep 2022 08:52:23 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 11 Sep 2022 07:35:58 GMT
Expires: Mon, 12 Sep 2022 07:35:58 GMT
ETag: "84517f481ec7107b068c3b78a5c1433de6c0116c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
analytics-ingress-global.bitmovin.com/licensing
200 OK 117 B URL HTTP/2 analytics-ingress-global.bitmovin.com/licensing
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f90d2c53623621471228392bf3047e2a
b9f0bb5e8fd5fd97cb47a25edb9b6950ad51627e
5c22e577292cc557786ad7c531cb0d73bfefd43e006865f2945bca9c04d2b700
POST /licensing HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 106
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: v1.53.0
date: Sun, 11 Sep 2022 08:52:22 GMT
content-type: application/json
content-length: 117
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
heapanalytics.com/h?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&sp=ts&sp=1662886330208&sp=d&sp=refineyoursleep.com&sp=h&sp=%2Fnews%2F1662%2Fvideo_sr_mb&sp=q&sp=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&pp=d&pp=refineyoursleep.com&pp=q&pp=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&pp=h&pp=%2Fnews%2F1662%2Fvideo_sr_mb&pp=t&pp=Special%20Offer&pp=ts&pp=1662886330208&id0=8358703542426444&k0=FID&k0=1662&k0=TID&k0=affiliati&k0=CID%20Part%201&k0=512319535&k0=CID%20Part%202&k0=10362&k0=CID%20Part%203&k0=XMduneThsj&k0=Page&k0=%2Fnews%2F1662%2Fvideo_sr_mb&t0=Video%20-%20Load%20Complete&ts0=1662886332394&st=1662886332395
200 OK 37 B URL HTTP/2 heapanalytics.com/h?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&sp=ts&sp=1662886330208&sp=d&sp=refineyoursleep.com&sp=h&sp=%2Fnews%2F1662%2Fvideo_sr_mb&sp=q&sp=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&pp=d&pp=refineyoursleep.com&pp=q&pp=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&pp=h&pp=%2Fnews%2F1662%2Fvideo_sr_mb&pp=t&pp=Special%20Offer&pp=ts&pp=1662886330208&id0=8358703542426444&k0=FID&k0=1662&k0=TID&k0=affiliati&k0=CID%20Part%201&k0=512319535&k0=CID%20Part%202&k0=10362&k0=CID%20Part%203&k0=XMduneThsj&k0=Page&k0=%2Fnews%2F1662%2Fvideo_sr_mb&t0=Video%20-%20Load%20Complete&ts0=1662886332394&st=1662886332395
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /h?a=1279333676&u=7073303785549379&v=6102883704167085&s=2175593783161621&b=web&tv=4.0&sp=ts&sp=1662886330208&sp=d&sp=refineyoursleep.com&sp=h&sp=%2Fnews%2F1662%2Fvideo_sr_mb&sp=q&sp=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&pp=d&pp=refineyoursleep.com&pp=q&pp=%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj&pp=h&pp=%2Fnews%2F1662%2Fvideo_sr_mb&pp=t&pp=Special%20Offer&pp=ts&pp=1662886330208&id0=8358703542426444&k0=FID&k0=1662&k0=TID&k0=affiliati&k0=CID%20Part%201&k0=512319535&k0=CID%20Part%202&k0=10362&k0=CID%20Part%203&k0=XMduneThsj&k0=Page&k0=%2Fnews%2F1662%2Fvideo_sr_mb&t0=Video%20-%20Load%20Complete&ts0=1662886332394&st=1662886332395 HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:23 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-PqzQEyMQ6kTK11azeKO8Bw"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1255
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Sun, 11 Sep 2022 08:52:22 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1836
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Sun, 11 Sep 2022 08:52:22 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1825
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Sun, 11 Sep 2022 08:52:22 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1825
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Sun, 11 Sep 2022 08:52:23 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics/error
204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics/error
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics/error HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 522
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Sun, 11 Sep 2022 08:52:22 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics/error
204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics/error
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics/error HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 511
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Sun, 11 Sep 2022 08:52:22 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
licensing.bitmovin.com/licensing
200 OK 165 B URL HTTP/2 licensing.bitmovin.com/licensing
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash bad32d07dc1ad9e3d334785067afbf34
653f8f612c6646daae0122b3b27e2c11486f86a4
41d9103b84690ae5330f1de907c91f6964d58cbb449887cf1bb0e13475dc0638
POST /licensing HTTP/1.1
Host: licensing.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 150
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
content-type: application/json
date: Sun, 11 Sep 2022 08:52:23 GMT
content-length: 165
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 48ac220d68e08df64c88198cf733a35d
84517f481ec7107b068c3b78a5c1433de6c0116c
5e5e42cac1b267afb80d43b9ffa1f723617fa2c1993360c5b1eb2ad0d8648c3a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 11 Sep 2022 08:52:23 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 11 Sep 2022 07:35:58 GMT
Expires: Mon, 12 Sep 2022 07:35:58 GMT
ETag: "84517f481ec7107b068c3b78a5c1433de6c0116c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.clarity.ms/eus2/s/0.6.40/clarity.js
200 OK 23 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.40/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (54745)
Hash 6a87d835543a151541da0ae963173dd7
80bac2abc74d2fa93a63ff82514fd64ee8caf9a0
c806647a143cb92f41ed1e60c6be245cd4e78b447c90adbed881ca54ecfa7337
GET /eus2/s/0.6.40/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 23442
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8bd4806fdad30"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0x6EdYwAAAABMI/jVY/DHQpC4JsaO3J9ZTFRTRURHRTEzMDkANmNmYmVlZTAtNTAyNy00ODRiLTg5NjctNGEyOWFmNzdmMWUx
date: Sun, 11 Sep 2022 08:52:23 GMT
X-Firefox-Spdy: h2
trc-events.taboola.com/1074154/log/3/unip?en=pre_d_eng_tb&tos=1568&scd=100&ssd=1&est=1662886331119&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1662886332689&vi=1662886331117&ri=b91e4035363bfcc3bb7aed553e5d7188&ref=null&cv=20220904-2-RELEASE&item-url=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1074154/log/3/unip?en=pre_d_eng_tb&tos=1568&scd=100&ssd=1&est=1662886331119&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1662886332689&vi=1662886331117&ri=b91e4035363bfcc3bb7aed553e5d7188&ref=null&cv=20220904-2-RELEASE&item-url=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1074154/log/3/unip?en=pre_d_eng_tb&tos=1568&scd=100&ssd=1&est=1662886331119&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1662886332689&vi=1662886331117&ri=b91e4035363bfcc3bb7aed553e5d7188&ref=null&cv=20220904-2-RELEASE&item-url=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 11 Sep 2022 08:52:23 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://refineyoursleep.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
stats.vidalytics.com/awesome-log?cid=DOBezDQw
200 OK 43 B URL HTTP/2 stats.vidalytics.com/awesome-log?cid=DOBezDQw
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /awesome-log?cid=DOBezDQw HTTP/1.1
Host: stats.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: istio-envoy
date: Sun, 11 Sep 2022 08:52:23 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, public, max-age=2592000
etag: "DOBezDQw/21Rl8GCD2iCu4JT9"
access-control-expose-headers: Access-Control-Allow-Origin, Cache-Control, ETag, etag
access-control-allow-headers: Accept, Content-Type, Origin, Range, X-Requested-With
access-control-allow-methods: GET, POST, PUT, OPTIONS
x-envoy-upstream-service-time: 621
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 19a0b8437f7bf54428901512d8093e72
31997bc2337ea2ac58e23fb644dc4161b5bb2a3a
e1336c57b4d7985f157eb67149002cc19b093ef343bfae924826f8fc6958ab10
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 08:52:23 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 13:41:36 GMT
Expires: Wed, 14 Sep 2022 13:41:35 GMT
Etag: "31997bc2337ea2ac58e23fb644dc4161b5bb2a3a"
Cache-Control: max-age=275951,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748f2abfabe8b524-OSL
fast.vidalytics.com/embeds/DOBezDQw/1q01xpVeThenmcsk/player-dash-mse.min.js
200 OK 574 kB URL HTTP/2 fast.vidalytics.com/embeds/DOBezDQw/1q01xpVeThenmcsk/player-dash-mse.min.js
IP
Size 574 kB (574024 bytes)
Hash 83c817eca190a1d8d2ecad904b64ff59
d36efb3a8f3e768a675ae3fb92e0cba6a563d01c
a284b84cef1347662bf6c32df85a99da8e2b62a2980d6ee1a881de913828348a
GET /embeds/DOBezDQw/1q01xpVeThenmcsk/player-dash-mse.min.js HTTP/1.1
Host: fast.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:21 GMT
accept-ranges: bytes
content-type: application/javascript
x-guploader-uploadid: ADPycdt7USwvb6ctafl8PIRVSs9so3TrE4rzuxspmQVvQHAjvLp4cmsvWEKq5Wr5e367JZKGs-x-SOaHbXY6KweExaUeqg
cache-control: public, max-age=300, s-maxage=2592000
etag: "5ea2a302a567758da14465068847258f"
x-goog-generation: 1659534371163941
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 493818
x-goog-hash: crc32c=lquewg==, md5=XqKjAqVndY2hRGUGiEcljw==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-hw, server
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
last-modified: Wed, 03 Aug 2022 13:46:11 GMT
content-encoding: gzip
x-hw: 1662886340.cds223.sk1.hn,1662886340.cds223.sk1.hc,1662886340.cds253.sk1.s,1662886341.dop030.la3.r,1662886341.cds059.la3.c,1662886340.cds253.sk1.s,1662886341.dop030.la3.r,1662886341.cds059.la3.c,1662886341.cds253.sk1.p,1662886341.cds223.sk1.sl
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=C1BE47B3C4704D62911CBA00C4B094ED&RedC=c.clarity.ms&MXFR=0958D3BD878060BE1746C1A183806E2C
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=0958D3BD878060BE1746C1A183806E2C; domain=.clarity.ms; expires=Fri, 06-Oct-2023 08:52:23 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Sun, 11 Sep 2022 08:52:23 GMT
content-length: 0
X-Firefox-Spdy: h2
stats.vidalytics.com/scribe
200 OK 16 B URL HTTP/2 stats.vidalytics.com/scribe
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a1cbd35d4488ac8cc6f959d4c633dc37
11844023759429ec785ae1c18e6a9c69803ee2bd
707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c
POST /scribe HTTP/1.1
Host: stats.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 541
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: POST,OPTIONS
content-type: application/json
date: Sun, 11 Sep 2022 08:52:23 GMT
content-length: 16
x-envoy-upstream-service-time: 1
server: istio-envoy
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=C1BE47B3C4704D62911CBA00C4B094ED&RedC=c.clarity.ms&MXFR=0958D3BD878060BE1746C1A183806E2C
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=C1BE47B3C4704D62911CBA00C4B094ED&RedC=c.clarity.ms&MXFR=0958D3BD878060BE1746C1A183806E2C
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=C1BE47B3C4704D62911CBA00C4B094ED&RedC=c.clarity.ms&MXFR=0958D3BD878060BE1746C1A183806E2C HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://refineyoursleep.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=C1BE47B3C4704D62911CBA00C4B094ED&MUID=1E4A808D75A2627D2CDB92917457632E
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=1E4A808D75A2627D2CDB92917457632E; domain=c.bing.com; expires=Fri, 06-Oct-2023 08:52:23 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F6BA2EFF265042DE87BEC99389D42790 Ref B: OSL30EDGE0117 Ref C: 2022-09-11T08:52:23Z
date: Sun, 11 Sep 2022 08:52:23 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=C1BE47B3C4704D62911CBA00C4B094ED&MUID=1E4A808D75A2627D2CDB92917457632E
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=C1BE47B3C4704D62911CBA00C4B094ED&MUID=1E4A808D75A2627D2CDB92917457632E
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=C1BE47B3C4704D62911CBA00C4B094ED&MUID=1E4A808D75A2627D2CDB92917457632E HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://refineyoursleep.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Wed, 17 Aug 2022 23:56:46 GMT
accept-ranges: bytes
etag: "de363c295b2d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Sun, 11-Sep-2022 09:02:24 GMT; path=/; SameSite=None; Secure;
date: Sun, 11 Sep 2022 08:52:23 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 121886
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://refineyoursleep.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Sun, 11 Sep 2022 08:52:23 GMT
X-Firefox-Spdy: h2
trc-events.taboola.com/1074154/log/3/unip?en=pre_d_eng_tb&tos=4571&scd=100&ssd=1&est=1662886331119&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1662886335691&vi=1662886331117&ri=b91e4035363bfcc3bb7aed553e5d7188&ref=null&cv=20220904-2-RELEASE&item-url=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1074154/log/3/unip?en=pre_d_eng_tb&tos=4571&scd=100&ssd=1&est=1662886331119&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1662886335691&vi=1662886331117&ri=b91e4035363bfcc3bb7aed553e5d7188&ref=null&cv=20220904-2-RELEASE&item-url=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1074154/log/3/unip?en=pre_d_eng_tb&tos=4571&scd=100&ssd=1&est=1662886331119&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1662886335691&vi=1662886331117&ri=b91e4035363bfcc3bb7aed553e5d7188&ref=null&cv=20220904-2-RELEASE&item-url=https%3A%2F%2Frefineyoursleep.com%2Fnews%2F1662%2Fvideo_sr_mb%3Ftid%3Daffiliati%26cid%3D512319535%7C10362%7CXMduneThsj HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 11 Sep 2022 08:52:26 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://refineyoursleep.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1806
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Sun, 11 Sep 2022 08:52:26 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:20 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 11/15/2021 21:49:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 2729ae8f2fc6c761bdc17d91cc795f58
cdn-cache: HIT
cf-cache-status: HIT
age: 8333094
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 748f2aad1ca50b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,400i,700,700i,900,900i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,400i,700,700i,900,900i
IP
GET /css?family=Open+Sans:400,400i,700,700i,900,900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 11 Sep 2022 08:52:20 GMT
date: Sun, 11 Sep 2022 08:52:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
b-code.liadm.com/a-060r.min.js
200 OK 0 B URL HTTP/2 b-code.liadm.com/a-060r.min.js
IP
GET /a-060r.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 10 Sep 2022 18:45:35 GMT
cache-control: public, max-age=86400
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: y-ZVGWtsAZh8MgC_N4_xCgMAlkjfvDekj92JcjMd2X4WC4o1VU0Atg==
age: 50806
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/1796349/visit-data?sv=5
200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/1796349/visit-data?sv=5
IP
POST /api/v2/client/sites/1796349/visit-data?sv=5 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 112
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:22 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
ws26.hotjar.com/api/v2/sites/1796349/recordings/content
200 OK 0 B URL HTTP/2 ws26.hotjar.com/api/v2/sites/1796349/recordings/content
IP
POST /api/v2/sites/1796349/recordings/content HTTP/1.1
Host: ws26.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 34594
Origin: https://refineyoursleep.com
Connection: keep-alive
Referer: https://refineyoursleep.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 08:52:22 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
86.48.3.242
192.124.249.41
151.101.85.44
104.18.21.226
93.184.220.29
54.76.68.44
141.226.228.48
23.33.119.27