{"report_id":"19021ecd-ca47-4fcb-a29e-5a40d78e33b8","version":6,"status":"done","tags":[],"date":"2026-04-10T18:39:21Z","url":{"schema":"http","addr":"top.offershelters.com/2F9RTRK/3CSXT3F/?sub1=F1k7bRRn5FALLxwSUspCMr\u0026source_id=","fqdn":"top.offershelters.com","domain":"offershelters.com","tld":"com"},"ip":{"addr":"54.196.173.211","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"title":"Candy AI: AI Girlfriend App | Chat w/ Pics, Voice, \u0026 Video","dom":{"size":112798,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2497)","md5":"9883e529d59c0966113a4dad9093cd34","sha1":"3bd9bc244bfa5cfbb65609d7289db98d6a750e56","sha256":"0238aabf49776d9dc781cfe1c1cf778a72135c52de7040cb0b55dd8e8f064d2a","sha512":"bc67af9f0d74e3b981f2438f98848e12ea18c51d964fde0e0a2d27e4c87c8f3c783e8d4ee61fc4cdf8493eb30ad53e44196f9de0fb0792494bb1b8218881c54e","ssdeep":"1536:jG715adplGRRRRXNLJIlZLFxdMr/QCOGHOQcf:j45urGRRRRXfaZvAQT","tlshash":"f5b3282576e025f7019341e4b5a7db9aa9b4e703da1fd898b3bc02521fcedeb0913358","dom_hash":"domhashb20af9d6512b8543699de6ca852ce464","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"top.offershelters.com/2F9RTRK/3CSXT3F/?sub1=F1k7bRRn5FALLxwSUspCMr\u0026source_id=","fqdn":"top.offershelters.com","domain":"offershelters.com","tld":"com"},"ip":{"addr":"54.196.173.211","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-15T18:39:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":2,"received_data":33070,"sent_data":984,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.ejd1s4io.com","ip":{"addr":"34.160.134.83","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2024-05-08","domain_rank":2190250,"first_seen":"2024-05-25T06:21:26Z","last_seen":"2026-04-05T06:39:01.14674Z","alert_count":0,"request_count":2,"received_data":33446,"sent_data":1013,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdn.24metrics.com","ip":{"addr":"138.199.37.230","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2015-03-01","domain_rank":1702813,"first_seen":"2025-07-04T02:05:37.835961Z","last_seen":"2026-04-03T21:46:44.598646Z","alert_count":0,"request_count":1,"received_data":245770,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-04-05T22:43:44.876774Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-04-05T22:38:38.539019Z","alert_count":0,"request_count":2,"received_data":1175,"sent_data":2626,"comment":"","tags":null,"fingerprints":null},{"fqdn":"candy.ai","ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-16","domain_rank":44834,"first_seen":"2017-04-08T00:54:17Z","last_seen":"2026-04-07T20:36:46.968142Z","alert_count":0,"request_count":47,"received_data":2882422,"sent_data":64028,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Everflow","description":"Everflow is a partner marketing analytics platform.","website":"https://www.everflow.io","common_platform_enumeration":"","icon":"Everflow.png","categories":["Analytics"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Stimulus","description":"A modest JavaScript framework for the HTML you already have.","website":"https://stimulusjs.org/","common_platform_enumeration":"","icon":"Stimulus.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-05T22:38:33.735903Z","alert_count":0,"request_count":16,"received_data":11830,"sent_data":16948,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.candy.ai","ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-16","domain_rank":2852165,"first_seen":"2024-02-21T14:00:24Z","last_seen":"2026-04-07T20:36:46.880473Z","alert_count":0,"request_count":12,"received_data":2866130,"sent_data":5563,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-04-05T22:39:23.453784Z","alert_count":0,"request_count":2,"received_data":1664,"sent_data":2180,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":6,"received_data":68901,"sent_data":3226,"comment":"","tags":null,"fingerprints":null},{"fqdn":"top.offershelters.com","ip":{"addr":"54.196.173.211","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2025-03-20","domain_rank":1848132,"first_seen":"2025-07-09T05:23:09.73556Z","last_seen":"2026-04-03T15:34:44.10157Z","alert_count":0,"request_count":1,"received_data":108818,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sc-static.net","ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":3142,"first_seen":"2017-09-05T18:35:04Z","last_seen":"2026-04-08T23:21:14.331382Z","alert_count":0,"request_count":1,"received_data":59178,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-05T22:24:03.651898Z","alert_count":0,"request_count":5,"received_data":2328256,"sent_data":2232,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ead386e7d028bdf0f0e452f07a33fb8a","sha1":"91279bae7ac09fd5a836c3b9c357dba1b259c710","sha256":"72b2102f860b87c4884e02000a267a370608364f28adcecfce584676a2bce713","sha512":"c8126fb50f6bc75195579aba8d012de9652ac798568be4f0276a5a1e5bc3dc11690fb6d3f5f324acdf0f2cee914af4baa01869d67c953c36d80b48c9f3c7a9c1","ssdeep":"","tlshash":"9441324ba8d33865e59370ecbf6fe50432b8101bc19cc849f60ec1995f10d290abd79c","size":2401,"data":"","first_seen":"2024-07-19T05:35:04Z","last_seen":"2026-04-10T18:39:31.526187Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"237cde90deed1289f2b19af539d4ad4b","sha1":"5d4976cbfbb543bf27d6f3b0f3d109ae2b635577","sha256":"39be6ff502d063f87ee4ef7bd58ab7f956802b9e3cd3ce845984e42c54889a17","sha512":"c31dc15f6cabce0808cf47a0ee6b3b18e5923e5b9c6a85197c9707a2ee37fcd6cc087eb055ed0f1369dddf15190f1f3b3317fe198ab06a537349333ddbd50692","ssdeep":"","tlshash":"1b61340860f75092e9d3a09defbb321221397d07051be860bace93502f4e0677176bdb","size":3347,"data":"","first_seen":"2025-12-28T21:19:52.457501Z","last_seen":"2026-04-10T18:39:31.527166Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NM6MQN67","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ed59f653fe03a521946b319bc54ed8c","sha1":"8b6c2d91bb862b0fd1eedfd967c607005a759748","sha256":"c72f8ddd137c469ec22797b1096eeb5b1c5dda65c08c9c01667dd734c9cd738d","sha512":"3bd44f65d390e4b9441d6b40d5a22b2b594c3c4b5f4f87191ba7e266a35caa596ca0022ab3adca0c63f84de8e15cd5eaab08eff4b6c862796bd5f41359fffe54","ssdeep":"6144:FXESjtw7Ww0O5OI4wlzqj8V5iXVl5Wc0CV324q30tOi:pw7WcJ7zY8N6","tlshash":"4fb40aceb3d674669393e478d03f018b697a28e2b44cd8a5f189ccd42e7469a1123f7d","size":502138,"data":"","first_seen":"2026-04-10T17:47:52.323458Z","last_seen":"2026-04-10T18:39:31.437941Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4af448ebdd8d932a380b12c5f9464e08","sha1":"5d469dc07e7037285803d41f31c28c4e716a9010","sha256":"9c25e92da7176f4bf8de2f47ddef5c190c4f3d2bdd615d549533d47192d2390a","sha512":"69b512565817e53e0a75c99d0a4e7b22ddbc2957709dde30db56cf990d711a6949da005045d996afcb643084e4b4f20a60d232b69a1897259b674a9d8ba139f2","ssdeep":"","tlshash":"8ac02bacf0963171763048e802374360d8371013a8403111c06b0ab031844478001653","size":132,"data":"","first_seen":"2025-06-14T04:06:33.268489Z","last_seen":"2026-04-10T18:39:31.528249Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-DQNSP6409Y\u0026cx=c\u0026gtm=4e6481","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7de7cb7022b0dbf2b3cbef066c55a9b7","sha1":"771b55442e848af3ee87ae3e072173a326175f5c","sha256":"556787eb848d03b1125b9a5b3532307c1a473ea8e96c1ab60b45acc18b9c804d","sha512":"d022c2233e501f2fa27dd1769f70aa28e368867080896e29f9a9d207664bd761b1eb40bbc5ebd48bc8d71e8d4ce92255a4137fe177e220f448b825b5f862887b","ssdeep":"6144:iIESjtww7Ww2e5OI4wlz+j8V5iXVl5Wc0CVJ2h/E5zVk5RJotLXq:Bww7WiJ7zM8bGzVla","tlshash":"29c40aceb3d67422529af478d03f01cba97b25e2b45cc8aaf099cce02d7455a5127f78","size":549218,"data":"","first_seen":"2026-04-10T17:47:52.342408Z","last_seen":"2026-04-10T18:39:31.414489Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16632358160\u0026cx=c\u0026gtm=4e6481","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"782aca26590766092629ab1ffe9791ed","sha1":"a8f6ed6d53b554aa83642ff019185736519b032e","sha256":"b1a3d91295a7c60dd4fe90c47f3db40313d6efe7e3d7ec7456d2425eb80a9fdd","sha512":"b45b3dcaacc0cb60255a5579d9128b2215f8ada0072cd3747282b39ef4d7c6a98618d52cfc2d10d90d46d5d299130c3e8ca01e5008670f1fc284bc1c594cfd1b","ssdeep":"6144:RESj1w7Ww0e5OI4wlzqj8V5iXVl5Wc0CV+2ed30FXg:9w7W4J7zY88vQ","tlshash":"939408cdb3da742253a3b478903f018ba57a69e2b44cc899f185ccd42e7469a5237f7c","size":420286,"data":"","first_seen":"2026-04-10T17:47:52.364333Z","last_seen":"2026-04-10T18:39:31.465482Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ejd1s4io.com/scripts/sdk/everflow.js","fqdn":"www.ejd1s4io.com","domain":"ejd1s4io.com","tld":"com"},"ip":{"addr":"34.160.134.83","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b56407575342bd0dccce8c0ec5232952","sha1":"218902d488790d5aeddccc44945ee206caf0589d","sha256":"d41834bb2371b88277b9738e14c92408bcd73be8ac6f0bb99ba5ca7bdbf26325","sha512":"ac57bd8c2c9c947ec8cdc33fc082550e471321fdcbbb78c4f349b3d2b0bd818365474c807b2a8b6d3e6e806276ace5aaf8861c70df7168e290a42b33d11eb026","ssdeep":"768:LlWyGtHhaRAktdvNiGS3sTlCTEFQTYhgUjeGWce4:LOYGLTQIUjefcD","tlshash":"d0e2c4487790b17203a330f0517f540bb3ba98a91888c564fa25dce55e7cb9e92a7f7c","size":32276,"data":"","first_seen":"2025-12-15T14:18:23.295632Z","last_seen":"2026-04-10T18:39:31.44087Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/application-c0018cff2cdde4778a2b3f11cd6147b2868adf0142ef93173b42d89c1307ea0e.js","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bea1c572a539612c0669ec5bb1d0512","sha1":"9614fd9709b80de7cb454a493161531ee653ff6f","sha256":"6de070b01b73cdcde9d214b1582411b4260fe9b9e1071c0d7055b8a444a6c6d2","sha512":"6146057dc67bae5d2fd20c8f834e39ed7fb418aa77e7eae2e74a837e81d6daf8e4f6895dc0f6421cc0927fe43d2fbda6ce59a3eae044be2b25c3787d9fe38a3f","ssdeep":"12288:3BuAhr3ogFSDRjAHKMjJAbm6aF/rCteJPfpKyChKetKuT/yWiiA7:xuAejAqDm6atrCMPf+zyWc","tlshash":"bf3507d1b29555ba47efc1baa4a24b80633224d8a408443c7d3cfcdb479ac857277bf6","size":1094360,"data":"","first_seen":"2026-04-10T17:47:52.372056Z","last_seen":"2026-04-10T18:39:31.529231Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/tour_addon-a894c2f593cbb5852f8c8f6377945b2a4f8a6d34982413348db36473c04f6c84.js","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72be8fd6b74df260b11b3aada69015cd","sha1":"1b9a47fd1dd1198bfd4569d559c2bdd21b985981","sha256":"f5ce392e2fd1c2ed4b84769878893c38e208e8b0e19891691320970a634d4e5b","sha512":"6f3ae9b36bb4a6b27ebf0b918005a5cb2fb31a276eacbd95748550a007cab29cc41387cb68c835b514507d790117ecd936fd6da90256ba1f74c566a80a5c210f","ssdeep":"1536:WpXzHRykfuf3L/JA/Z2ZojpOm9peUws2JRNI9QLGlQYPNz2zkI:W3882JRNIVz2zkI","tlshash":"fa43e5d833a2b17543ce41aa907b420af33a58d4544a902cf57cdeda39b4e5682f3f79","size":58863,"data":"","first_seen":"2026-04-09T08:02:55.655304Z","last_seen":"2026-04-10T18:39:31.442787Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-04-10T20:55:42.106735Z","times_seen":33634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-10T20:56:29.280404Z","times_seen":240011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"130fea66abc27818c59bae3af2ed7efe","sha1":"69731c06211b3a17e421c0342fc8748dbb3ba250","sha256":"50d78a11382e6fdabfada25e84f2aa94ae6f7e95810dd0ef776f0e183c90e802","sha512":"b16c0fc0585f667b11d871dff519313daee6bb1db81939ed20faf0559b7d24c5492d76ad5d6de5e1f84289404fe84f46366838a9f5f1fdc642c7115a3abcfc65","ssdeep":"","tlshash":"07c08ceef2663a302e52169a28389208a82215105d030014042f8412852c81ea228a08","size":148,"data":"","first_seen":"2025-07-04T02:05:41.057671Z","last_seen":"2026-04-10T18:39:31.531815Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38f605b9755442aea3e394cd12692c67","sha1":"f6be13020134df0aea623a3c6084245f26d17811","sha256":"6be58a59611cade5948f529a91c7a929be4640f2dad0a2d51702bdd002c1357d","sha512":"15385b5639537ed0bc80708493be01523e311385e959e1d725ae115cea2bb1ead202aba079503f845c8265a38213fee3ca73b5995d119c1c97eee4a7fe5922cf","ssdeep":"","tlshash":"2111212d38eb2408d20f9afa716f878d2077b8125d80cd90c159c4e4a419fc800a1bbc","size":944,"data":"","first_seen":"2025-12-02T17:27:49.588766Z","last_seen":"2026-04-10T18:39:31.532767Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17559036072\u0026cx=c\u0026gtm=4e6481","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"afc8e7640edc2239403258e0b39ff903","sha1":"c11a4bdfece29390b0f1b346d4ba406dcb7f3450","sha256":"a407b6c272a5efd5e1e05ceb0a71cd716194e6f32316c4cff217ba30196d197e","sha512":"0d809a8ac8b6353b692e21d6695fcefeb747a11e89c0b117d5c3582494e4273792769aab38eb768a28bd8638af7fc09c963d6c829afe1d4e4f7dcdef6f845aea","ssdeep":"6144:SESj1w7Ww0e5OI4wlzqj8V5iXVl5Wc0CV+2pS3x8Xz:Ww7W4J7zY88Fj","tlshash":"249409ceb3d674625393f478903f018ba57a29e2b44cc899f189c8d42e7469a5237f7c","size":432392,"data":"","first_seen":"2026-04-10T17:47:52.29197Z","last_seen":"2026-04-10T18:39:31.521221Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.24metrics.com/lib/index.js","fqdn":"cdn.24metrics.com","domain":"24metrics.com","tld":"com"},"ip":{"addr":"138.199.37.230","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"16292e3df90886ce0349b680959f9891","sha1":"d806b5c4241894a64732880c7218816d834f0764","sha256":"d3794592eae7bc199056a022eab3fecb091a11fdf11268995cffbfc93b1d1816","sha512":"0628fcae8928a4cffd1646bc0791a27598667d3951e45ae4c691a0f4aafbc8226d92f6dc721c7345da76d634e858513a3ae72c6339600835a09de1291539d5bc","ssdeep":"1536:bWyJ0JYRF2gEzVc2qvwg/HjTIemgOroWLsvlGIAQWA605s6c5cWgW5Q4KHkJTerp:K80lx18Hj8eAiO05sRc0erlNmLOgHYT","tlshash":"9f341ccab7b6e03146ea50a5903b1003e33a3f4d644c841cf66f99cd399d94a6277f7a","size":244815,"data":"","first_seen":"2026-04-06T17:43:06.156973Z","last_seen":"2026-04-10T18:39:31.457423Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f59c68a34889c8cb4114f160e606c0e0","sha1":"bf0024ee2b4425cbf1f05ccd6be22efd3103d351","sha256":"aa4edfe123966282a01c91da5e1f168c7a470d0e9a9a13240eeb9224ddf7cd2d","sha512":"bed62337a68498c5824383fea538156f9bad68c2b12cb3aaa7c78c6d057faf34b72d8bc405488daae1378b2e61093d218de3cc7eb8b50d52b127c24468f427fb","ssdeep":"","tlshash":"842127159f621e62022771be6a5fc23a50ff40473498e899b9dc10464f5ef9ca020b54","size":1180,"data":"","first_seen":"2026-04-03T15:34:49.257783Z","last_seen":"2026-04-10T18:39:31.533708Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"946e8386e83761fcd2a3100ae0994e5e","sha1":"7166c94b658d61936932880b9a1d8b92abdc5b3c","sha256":"d3e962f60c0fdc5b6947291b59ff7dd0d3404fc8a2d23317d9d48f9f83837e99","sha512":"c8e37c769c76dfc9bb668072803c78835a377c9d563bb6e4263f4f6d33b7f6b5760b6d5b30f6d0c600d93602ea7fadae15b2816f11f5ed82cc0156da49b5a23b","ssdeep":"","tlshash":"08e0c0dbb4524c7561ef85b963b1a1347193320e74091c33fded88246f185d7481759c","size":378,"data":"","first_seen":"2024-08-29T17:20:27.990467Z","last_seen":"2026-04-10T18:39:31.534492Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/alpine-69b009b4309a19f099cf57a5f03edb7fbc7a130fdc6a2e9b34bb32a1ca3ef10d.js","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c0db0e5056c4738ddd1593d3847a04e","sha1":"e662a621205d68b098156a3b487bbf6035dab364","sha256":"5fa69450be71f5d8bdd2438d816e71153b0510124ed814136b623a582764ce2a","sha512":"bba4c92ad3901f78fb54e65550eadd705f9cb3bcdf35b2378454f4935303999a68fd7bba6190f5f48a8492722324e30e156e3476b43d1c10686bc899492e451f","ssdeep":"768:cV0eYdN1hyuEg0xBGxt1O8N6WOTgXs2ABMUWLxNjuTx5CqXuffv:RXdQBGP1O4mPVBMUWLxJ6Dd2v","tlshash":"e0130be972dab17283ef01b260fb4649f3395c94680e1429f529e9da383548d41f3fb9","size":41777,"data":"","first_seen":"2026-02-24T05:17:27.218429Z","last_seen":"2026-04-10T18:39:31.45973Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-10T20:56:29.280404Z","times_seen":240011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"130fea66abc27818c59bae3af2ed7efe","sha1":"69731c06211b3a17e421c0342fc8748dbb3ba250","sha256":"50d78a11382e6fdabfada25e84f2aa94ae6f7e95810dd0ef776f0e183c90e802","sha512":"b16c0fc0585f667b11d871dff519313daee6bb1db81939ed20faf0559b7d24c5492d76ad5d6de5e1f84289404fe84f46366838a9f5f1fdc642c7115a3abcfc65","ssdeep":"","tlshash":"07c08ceef2663a302e52169a28389208a82215105d030014042f8412852c81ea228a08","size":148,"data":"","first_seen":"2025-07-04T02:05:41.057671Z","last_seen":"2026-04-10T18:39:31.531815Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4af448ebdd8d932a380b12c5f9464e08","sha1":"5d469dc07e7037285803d41f31c28c4e716a9010","sha256":"9c25e92da7176f4bf8de2f47ddef5c190c4f3d2bdd615d549533d47192d2390a","sha512":"69b512565817e53e0a75c99d0a4e7b22ddbc2957709dde30db56cf990d711a6949da005045d996afcb643084e4b4f20a60d232b69a1897259b674a9d8ba139f2","ssdeep":"","tlshash":"8ac02bacf0963171763048e802374360d8371013a8403111c06b0ab031844478001653","size":132,"data":"","first_seen":"2025-06-14T04:06:33.268489Z","last_seen":"2026-04-10T18:39:31.528249Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16678257446\u0026cx=c\u0026gtm=4e6481","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6334f8f40e6ebfdc658256673d55ecf1","sha1":"67048314b1497d9f00b304a0aaa8ecf926a95e41","sha256":"0cc32344315a0537260f8f3442f36d0617af6c58f477639c34df000da1ab9e2e","sha512":"102d6b45535b1f5cdd2b0b98ecf6e2ac92e770be4968aff69e00f3566c3c3eda9eba8d978c80e02ba952b5f74f158faf4bcd5dc837e1824c428dd76a00801e41","ssdeep":"6144:HESj1w7Ww0e5OI4wlzqj8V5iXVl5Wc0CV+2ed30FXg:Lw7W4J7zY88vQ","tlshash":"3d9408cdb3da742253a3b478903f018ba57a69e2b44cc899f185ccd42e7469a5237f7c","size":420286,"data":"","first_seen":"2026-04-10T17:47:52.328478Z","last_seen":"2026-04-10T18:39:31.475088Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fd82a8be767c9d75f1e8c2066ca8354","sha1":"b9a844c9bf9405066a72594d72319f1890ef734f","sha256":"899af8033720587328e88eb7594fefb106de695741270fca5470e32a623e545c","sha512":"a2239195f7b5f54604d5fd9d1f54a2d57a6265ca63bd1f4ec879c65569714214a4735f8feb03feeda306aa5478a094c2bf60277a05bd68101c8820ee27c10e78","ssdeep":"","tlshash":"45e04fc86dfb7140e217313a079f2044b075a043141ed918bb0c72511f9292d76aead8","size":389,"data":"","first_seen":"2025-09-19T02:31:39.92459Z","last_seen":"2026-04-10T18:39:31.535257Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/voice_call_addon-27358c732613641225832d0ec48407f6a5f12a4592f8b87eca4ec191f5322a21.js","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2087a23eabe65e05e2f2009c1e343921","sha1":"d03696dfa5a0962a16c500484f0a4b357aea741f","sha256":"01b28f5449d2b111c38dab86d4a4e49b825052473e10f4099cf03b0101c226ef","sha512":"ff501b89a40b45c8c6dc4937bc803e2891fbccae9f0e034946b0716576a2928dcf07caa817a6f0ff3d468d5fcd406c8b79adfdfc1af954a7ff317fd144e9baf7","ssdeep":"12288:CC5V4AusKW7M7vTwg/bB6d4fWM0IEq+vhkw215VUxAF:CCTg/t6WfWM5F","tlshash":"73054cd4b3d674620386d2f5a83b1202a3792d58140c806cfb6de5eb6b78e49b1b3f75","size":828752,"data":"","first_seen":"2026-04-09T08:02:55.666344Z","last_seen":"2026-04-10T18:39:31.433436Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e053d92aaa43a8efb9737af1f25b826b","sha1":"462e72a486ad9e11d19aa185bb58f2aba3033d09","sha256":"27e02bad76ba1ea6550bcae6a00c307f92674ef478f178e37a0e9ae807eee53e","sha512":"8a87c315bf1f9ace13de71f15584ba384913f308a17be330e455e082f22c8cb331cd3708868cc911d240e29917ec4acabe50a1bd93430bd3187e6d53acbe4756","ssdeep":"","tlshash":"6fc02b4fb3cd7432c1c3bd022f0e8314c01310a30d488b189b350ddc361b2cb6014ac9","size":146,"data":"","first_seen":"2025-11-21T07:30:48.182636Z","last_seen":"2026-04-10T18:39:31.535969Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"779dad81833261bc5bb0a005e1f01254","sha1":"12d7162ceb3f36169373d8935fabfe54383bdc49","sha256":"93230595b6dab54d976a3739d1b5c741f15161c568e4be72acf514dae4db984d","sha512":"3194159f5b7870c1ee051e973be89bc09b272e6dd29a2a8e174cfcda83da4f1c424108051a6dd4131934fa40d09b13ff817d4c401418f1e1cda3ff97cb60fb8a","ssdeep":"1536:kSO1Ejiaa1zoLOIkxUanOChvb6rXhWXvVC1Kazgpk5DXV:ZOxA+/lWWMDF","tlshash":"9943c79cf7e9b02103973472497f541be33bba646c0b8650c526e5883dbc59e9237eac","size":58518,"data":"","first_seen":"2026-04-01T22:36:39.136818Z","last_seen":"2026-04-10T20:19:40.601835Z","times_seen":1346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"candy.ai/assets/pwa/modal-images/ios-modal-40b29571e1375efdfc7a26432094dfc32d3c7e58cfdc180e409e71f966e4a91b.webp","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/pwa/modal-images/ios-modal-40b29571e1375efdfc7a26432094dfc32d3c7e58cfdc180e409e71f966e4a91b.webp HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4810\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=hpm6Zn7O%2FNMy6xUDR2XtSLG7cnWVH1o%2BWdYz4EaXpIM%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1769087229\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=hpm6Zn7O%2FNMy6xUDR2XtSLG7cnWVH1o%2BWdYz4EaXpIM%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769087229\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 5312\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a8332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"523f75fe47875371d244c4a4be93dbce","sha1":"b5ac34d44fd2dbad94d4c979e79cb0da3c006c9b","sha256":"41305ddc7315c5faa19e2d15cad5978969daa4feba558cc2aeafe3760eb0add1","sha512":"b5be199fcfe19a04b26159e3aa52c64f6aa1a9c792d66b963f9026511a5262e666aa218bb794d85704d8e6569e4c570c287c4cc938517cfde10426ce16b8dc5f","ssdeep":"96:A6CD6kOi2md42VvIZEcefLDKJnrfSFL4uSzPxCg:A6CDrOiLHVvrelrKF8DzPx/","tlshash":"68a18e8ffe5930f1d8b49638f64e273de811f6848113c91fb5a8b066ba02534b90d5e4","first_seen":"2025-07-12T03:28:11.065645Z","last_seen":"2026-04-10T18:39:31.411397Z","times_seen":70,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/pwa/modal-images/add-to-home-d9bf063fa60ea41fa35551f89de965f8afaad1139f6024f5bacc4d9bbae90ea2.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/pwa/modal-images/add-to-home-d9bf063fa60ea41fa35551f89de965f8afaad1139f6024f5bacc4d9bbae90ea2.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 342\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=b7sS7aCQbUqi8xc5CM0mOkhvIGHaIqH7MLmVIn3d68M%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772469952\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=b7sS7aCQbUqi8xc5CM0mOkhvIGHaIqH7MLmVIn3d68M%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772469952\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 3013\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df111ace32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":626,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b32db58f473f903b1524fea25934881c","sha1":"3e13259ff738db002a6650a66e0549df7d3d8e80","sha256":"9c4634ebb8a084a2d1bd86cf0e4a99a41ceec85a7474ba34a31fc786bcc6f98e","sha512":"8ce5a18811eb9ce09beb0805c6442585009f1b68aaaf080b95104fd0750de48eb29ae445eeecd08c397f8f71d89ef51c4d4b68fa609bc51fdad288ed04b3f0bb","ssdeep":"","tlshash":"cbf07dfba503e395a1868b08d53460fad16f00f573769bb0dac1d25534509ea4dee4dc","first_seen":"2025-06-14T04:06:33.202396Z","last_seen":"2026-04-10T18:39:31.413246Z","times_seen":81,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-DQNSP6409Y\u0026cx=c\u0026gtm=4e6481","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtag/js?id=G-DQNSP6409Y\u0026cx=c\u0026gtm=4e6481 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\nexpires: Fri, 10 Apr 2026 18:38:57 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 176923\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":549218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9690)","md5":"7de7cb7022b0dbf2b3cbef066c55a9b7","sha1":"771b55442e848af3ee87ae3e072173a326175f5c","sha256":"556787eb848d03b1125b9a5b3532307c1a473ea8e96c1ab60b45acc18b9c804d","sha512":"d022c2233e501f2fa27dd1769f70aa28e368867080896e29f9a9d207664bd761b1eb40bbc5ebd48bc8d71e8d4ce92255a4137fe177e220f448b825b5f862887b","ssdeep":"6144:iIESjtww7Ww2e5OI4wlz+j8V5iXVl5Wc0CVJ2h/E5zVk5RJotLXq:Bww7WiJ7zM8bGzVla","tlshash":"29c40aceb3d67422529af478d03f01cba97b25e2b45cc8aaf099cce02d7455a5127f78","first_seen":"2026-04-10T17:47:52.342408Z","last_seen":"2026-04-10T18:39:31.414489Z","times_seen":2,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/rmkt/collect/16632358160/?random=1775846338378\u0026cv=11\u0026fst=1775846338378\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be6481v9189513968z89164096164za20gzb9164096164zd9164096164xea\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~118128923~118442252\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=2\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026_tu=CA\u0026data=ads_data_redaction%3Dfalse\u0026gcp=5","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /rmkt/collect/16632358160/?random=1775846338378\u0026cv=11\u0026fst=1775846338378\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be6481v9189513968z89164096164za20gzb9164096164zd9164096164xea\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~118128923~118442252\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=2\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026_tu=CA\u0026data=ads_data_redaction%3Dfalse\u0026gcp=5 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/voice_call_addon-27358c732613641225832d0ec48407f6a5f12a4592f8b87eca4ec191f5322a21.js","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/voice_call_addon-27358c732613641225832d0ec48407f6a5f12a4592f8b87eca4ec191f5322a21.js HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 217538\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 08 Apr 2026 11:52:59 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=4JsNKnZPFHFW%2FHSbjNJhn4tDAcjABw2SQ%2FaOO4irJRA%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1775649448\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=4JsNKnZPFHFW%2FHSbjNJhn4tDAcjABw2SQ%2FaOO4irJRA%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1775649448\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 2483\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10c9aa32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":828752,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36126)","md5":"2087a23eabe65e05e2f2009c1e343921","sha1":"d03696dfa5a0962a16c500484f0a4b357aea741f","sha256":"01b28f5449d2b111c38dab86d4a4e49b825052473e10f4099cf03b0101c226ef","sha512":"ff501b89a40b45c8c6dc4937bc803e2891fbccae9f0e034946b0716576a2928dcf07caa817a6f0ff3d468d5fcd406c8b79adfdfc1af954a7ff317fd144e9baf7","ssdeep":"12288:CC5V4AusKW7M7vTwg/bB6d4fWM0IEq+vhkw215VUxAF:CCTg/t6WfWM5F","tlshash":"73054cd4b3d674620386d2f5a83b1202a3792d58140c806cfb6de5eb6b78e49b1b3f75","first_seen":"2026-04-09T08:02:55.666344Z","last_seen":"2026-04-10T18:39:31.433436Z","times_seen":3,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.candy.ai/044a17e4-00b0-476c-ae01-0fdc361e0a27","fqdn":"cdn.candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /044a17e4-00b0-476c-ae01-0fdc361e0a27 HTTP/1.1\r\nHost: cdn.candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 22254\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"44cdfaebba912a197b08e07063147484\"\r\nlast-modified: Wed, 04 Mar 2026 11:53:53 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 5849\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-ray: 9ea3df114b4e32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x262, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"44cdfaebba912a197b08e07063147484","sha1":"b219d5f8783c5087b02b5adcd3d42630319facb8","sha256":"cf0b9519e4dd52707b70104a28577f9e5be63c1c9a6c7e170fe6fe44a983cd79","sha512":"4bce15b34eae7bb34bb1f08bce16dce7eca368373ccdc9539c6398e95ab53462b597e81e7d1b608516bbe87b0818b1e0eaad63368533ec5f7bd50332ea64ab5c","ssdeep":"384:I5mABSbcycEwrqhpXEHv33bzQ40kfuI7kQ+hCkbo/xiM+zVJUcSfkL7wTA8gILyh:5AEZcEwrOV4/3bzQ4fklCkbYxipVifmr","tlshash":"f9a2e084ec39bf1b7f8791368565682396f5f67a706ccf23bc644830004ae4258adcb7","first_seen":"2026-03-07T01:28:05.252931Z","last_seen":"2026-04-10T18:39:31.43563Z","times_seen":8,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/homepage_experiment/faq_arrow-05b91b4f6ded57f1bc95b70bd97b5284a4dacb107f3c1c1bc9f82fbe84c47a8f.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/homepage_experiment/faq_arrow-05b91b4f6ded57f1bc95b70bd97b5284a4dacb107f3c1c1bc9f82fbe84c47a8f.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 322\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=x8OMu4z7ARXg%2FWkCnhdWNIgkInFBrAco3a390Qal99I%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772129933\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=x8OMu4z7ARXg%2FWkCnhdWNIgkInFBrAco3a390Qal99I%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772129933\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 865\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10fa3c32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":566,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8971927243d7395716ab58309b699951","sha1":"7848aa927b9d40f2ce046c4e162da7d637d23743","sha256":"d464e69af4d4d9f916a320db2fc437bf2be777b69362907d01b7a0433f4215c2","sha512":"687f0625424dd7f5f572ccc81876c88e166366e56a9b3fc87b0af59ecd6a854d585b99a6598233822e34fee24b0891facda04978c0fd4f8d5d9fcab3f0c28b67","ssdeep":"","tlshash":"dff022f6b30805c0ef1ed023ace028f57026f49189069114458ed01c98eb52a325ae96","first_seen":"2026-02-24T05:17:27.23124Z","last_seen":"2026-04-10T18:39:31.436915Z","times_seen":10,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NM6MQN67","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtm.js?id=GTM-NM6MQN67 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\nexpires: Fri, 10 Apr 2026 18:38:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 10 Apr 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159599\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":502138,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21754)","md5":"8ed59f653fe03a521946b319bc54ed8c","sha1":"8b6c2d91bb862b0fd1eedfd967c607005a759748","sha256":"c72f8ddd137c469ec22797b1096eeb5b1c5dda65c08c9c01667dd734c9cd738d","sha512":"3bd44f65d390e4b9441d6b40d5a22b2b594c3c4b5f4f87191ba7e266a35caa596ca0022ab3adca0c63f84de8e15cd5eaab08eff4b6c862796bd5f41359fffe54","ssdeep":"6144:FXESjtw7Ww0O5OI4wlzqj8V5iXVl5Wc0CV324q30tOi:pw7WcJ7zY8N6","tlshash":"4fb40aceb3d674669393e478d03f018b697a28e2b44cd8a5f189ccd42e7469a1123f7d","first_seen":"2026-04-10T17:47:52.323458Z","last_seen":"2026-04-10T18:39:31.437941Z","times_seen":2,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":165,"dns":2,"connect":21,"send":0,"wait":33,"receive":65,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Special+Gothic+Expanded+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Special+Gothic+Expanded+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 10 Apr 2026 18:38:57 GMT\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":963,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fc615e245422bd2ee372711f269e159f","sha1":"7290fb009ebdcbfc533695a0e9cc0c1b1a01b657","sha256":"1fb57ad8c4fe7f3f3655598c8f79163217457b0aa52c78e8804cdaa93f533b5f","sha512":"ca66e418c6c3e09bf6174b1b0a9117eadc15589f8390b02c948796e5e53278ffc4654facaab5ade3fb2fddf575ea87cbb554d1097c2d73638fa6b9da18494b01","ssdeep":"","tlshash":"811110510c2be500af930dc222ce7d31ee4e5151e411e9b44afe0cd8accbc362366b0d","first_seen":"2025-06-02T06:41:09.904204Z","last_seen":"2026-04-10T18:39:31.439878Z","times_seen":26,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":137,"dns":5,"connect":11,"send":0,"wait":21,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ejd1s4io.com/scripts/sdk/everflow.js","fqdn":"www.ejd1s4io.com","domain":"ejd1s4io.com","tld":"com"},"ip":{"addr":"34.160.134.83","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ejd1s4io.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 09:00:07 GMT","end":"Tue, 02 Jun 2026 09:56:02 GMT"},"fingerprint":{"sha1":"15:F3:D3:8E:60:9D:AF:78:14:DC:AC:B1:8C:C2:C0:80:B5:7C:22:B2","sha256":"40:E1:CE:5D:5D:E8:B9:DF:33:20:EC:27:E6:A0:FE:77:6D:CB:D8:79:9A:6A:77:23:A9:F2:6C:CF:ED:6A:B0:0E"}}},"request":{"raw":"GET /scripts/sdk/everflow.js HTTP/1.1\r\nHost: www.ejd1s4io.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: text/javascript\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\ncache-control: max-age=14400\r\nvary: Origin\r\nx-eflow-request-id: 10225750-11d9-45b2-b6ff-d45a4c239071\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":32276,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32275)","md5":"b56407575342bd0dccce8c0ec5232952","sha1":"218902d488790d5aeddccc44945ee206caf0589d","sha256":"d41834bb2371b88277b9738e14c92408bcd73be8ac6f0bb99ba5ca7bdbf26325","sha512":"ac57bd8c2c9c947ec8cdc33fc082550e471321fdcbbb78c4f349b3d2b0bd818365474c807b2a8b6d3e6e806276ace5aaf8861c70df7168e290a42b33d11eb026","ssdeep":"768:LlWyGtHhaRAktdvNiGS3sTlCTEFQTYhgUjeGWce4:LOYGLTQIUjefcD","tlshash":"d0e2c4487790b17203a330f0517f540bb3ba98a91888c564fa25dce55e7cb9e92a7f7c","first_seen":"2025-12-15T14:18:23.295632Z","last_seen":"2026-04-10T18:39:31.44087Z","times_seen":49,"resource_available":true,"data":null}},"time_used":762,"timings":{"blocked":298,"dns":33,"connect":21,"send":0,"wait":127,"receive":0,"ssl":280},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/homepage_experiment/avatar2-44121e72784cad43109b5ba3002c4ad74d5412f7713ece413497686d5d4e5c20.webp","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/homepage_experiment/avatar2-44121e72784cad43109b5ba3002c4ad74d5412f7713ece413497686d5d4e5c20.webp HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2500\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=SpgAtMRW1N49cPA%2FQznms2nd%2BmSRlNNH8Zv26aFqH%2BA%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1769086003\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=SpgAtMRW1N49cPA%2FQznms2nd%2BmSRlNNH8Zv26aFqH%2BA%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769086003\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 6396\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10d9f032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2500,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"112f55b96ffc9990f29161bb8ee17c9d","sha1":"7d0acaf93c20bb5620e59628b26c28f33c0fdcf1","sha256":"ba8a99189a3e8f6210e12c4bc129e95236f6f08601cab062f135468867f2a69d","sha512":"873f116a921cffc805a1040f6b92f8f32c61ab1816cc3b8eebbfcede930a09b23f304fcfaca622117bff9ea5fae4e685b817109ad4d7a9d31333eaa08eafa24c","ssdeep":"","tlshash":"28514a2ce32ec6d358643e99b8166959040f47e7161caf8e52f5ccd591c34f367a0c25","first_seen":"2026-02-24T05:17:27.195224Z","last_seen":"2026-04-10T18:39:31.441902Z","times_seen":10,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-DQNSP6409Y\u0026gtm=45je6481v9189641916z89164096164za20gzb9164096164zd9164096164\u0026_p=1775846336621\u0026_gaz=1\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026npa=0\u0026dma_cps=a\u0026dma=1\u0026ecid=1522927559\u0026_eu=AAAAAGA\u0026cid=442748788.1775846338\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=2\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115616985~115938465~115938469~118128922\u0026sid=1775846338\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026_tu=CA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026ep.is_pwa=non%20PWA\u0026tfd=3002","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-DQNSP6409Y\u0026gtm=45je6481v9189641916z89164096164za20gzb9164096164zd9164096164\u0026_p=1775846336621\u0026_gaz=1\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026npa=0\u0026dma_cps=a\u0026dma=1\u0026ecid=1522927559\u0026_eu=AAAAAGA\u0026cid=442748788.1775846338\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=2\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115616985~115938465~115938469~118128922\u0026sid=1775846338\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026_tu=CA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026ep.is_pwa=non%20PWA\u0026tfd=3002 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://candy.ai\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:195:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:195:0\r\nreport-to: {\"group\":\"ascnsrsggc:195:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:195:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":65,"dns":0,"connect":23,"send":0,"wait":32,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/tour_addon-a894c2f593cbb5852f8c8f6377945b2a4f8a6d34982413348db36473c04f6c84.js","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/tour_addon-a894c2f593cbb5852f8c8f6377945b2a4f8a6d34982413348db36473c04f6c84.js HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 20071\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 08 Apr 2026 08:07:35 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=MeQgq2JoN3bBbSCDbv3IEgD%2FMaOAhmkbxbY9n3toMT0%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1775635934\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=MeQgq2JoN3bBbSCDbv3IEgD%2FMaOAhmkbxbY9n3toMT0%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1775635934\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 1598\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10c9b332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58863,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (58762)","md5":"72be8fd6b74df260b11b3aada69015cd","sha1":"1b9a47fd1dd1198bfd4569d559c2bdd21b985981","sha256":"f5ce392e2fd1c2ed4b84769878893c38e208e8b0e19891691320970a634d4e5b","sha512":"6f3ae9b36bb4a6b27ebf0b918005a5cb2fb31a276eacbd95748550a007cab29cc41387cb68c835b514507d790117ecd936fd6da90256ba1f74c566a80a5c210f","ssdeep":"1536:WpXzHRykfuf3L/JA/Z2ZojpOm9peUws2JRNI9QLGlQYPNz2zkI:W3882JRNIVz2zkI","tlshash":"fa43e5d833a2b17543ce41aa907b420af33a58d4544a902cf57cdeda39b4e5682f3f79","first_seen":"2026-04-09T08:02:55.655304Z","last_seen":"2026-04-10T18:39:31.442787Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/homepage_experiment/sparkle-4123dc21f65005857994f5a198c6bebc368b4acec09b95d88156923c4cc63423.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/homepage_experiment/sparkle-4123dc21f65005857994f5a198c6bebc368b4acec09b95d88156923c4cc63423.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 822\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=N7Nbj%2BaagHttDmanPQmgVhPBo5pK%2Ff7IatK56bs5ADs%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1770732380\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=N7Nbj%2BaagHttDmanPQmgVhPBo5pK%2Ff7IatK56bs5ADs%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1770732380\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 3968\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10fa3b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1583,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5adba017a46f77cd4c5615c701b38aa","sha1":"7a4a697b7d284d979616bb3d16a1676c82a95f69","sha256":"e8e38d9e8e96d8d5f078e249323172699d5a152ee2f707bc99e281dc717431ec","sha512":"a506a634ebeea9c3cf00aa2d65babeeed6052a3e3706cfc8e809dbb5639d5eed386f2d6cd5f7afdd0c6a1932a2b8d23c2147c7df57e06bf2d1b72ed3097f3ef7","ssdeep":"","tlshash":"693185fbd6c882f040465f44de25cc607eba3cf91fca8acd5384e346ad62098d44ee40","first_seen":"2026-02-24T05:17:27.230486Z","last_seen":"2026-04-10T18:39:31.443612Z","times_seen":10,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 22:14:21 GMT\r\nexpires: Sun, 04 Apr 2027 22:14:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 505476\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-10T20:55:38.899271Z","times_seen":300095,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":68,"dns":0,"connect":20,"send":0,"wait":9,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/icons/gender_switch/anime-white-02986b4e7107a1be01a284a4818231a6edf19aa880d8a9680fb1a7874416f532.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/icons/gender_switch/anime-white-02986b4e7107a1be01a284a4818231a6edf19aa880d8a9680fb1a7874416f532.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 273\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=WbVchZUCU7%2FlpYFobnkIswwv8s%2BAyQ2E6MQ9tnyqPxM%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772149354\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=WbVchZUCU7%2FlpYFobnkIswwv8s%2BAyQ2E6MQ9tnyqPxM%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772149354\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 2615\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10d9bf32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a3e59bd6773497ed57dab01a6c2d3d4","sha1":"2da9d472792d4e6d7c3df3aa5f205532455d0a40","sha256":"71008e490b67a0574882ad4e6f1d4e05e8ce5ff1ab0392f4ec18b1a404330add","sha512":"62469457f77b16eeef18442ac0a2f16341466bb0b0e819bea9393baf968bd0826dbced90f7335f41e1257d046c42d1f8f76116c09a52ff9c2f6aabd2ee884c16","ssdeep":"","tlshash":"85e0c0fe935c5a644502d724de6860b5707931321f9bd35cc8411a10b5428dc653f4e8","first_seen":"2026-02-24T10:56:43.316163Z","last_seen":"2026-04-10T18:39:31.445303Z","times_seen":30,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/icons/chevron_right-9d958490e73d82dd976d385cd60968fd4b089bf2e522122db46d73d32d94b657.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/icons/chevron_right-9d958490e73d82dd976d385cd60968fd4b089bf2e522122db46d73d32d94b657.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 267\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=sz9i%2Bw2Bt14MI1PRw0MOxSF53xOC7h5ashPpu5%2F301k%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1769088445\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=sz9i%2Bw2Bt14MI1PRw0MOxSF53xOC7h5ashPpu5%2F301k%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769088445\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 3060\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10fa3a32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":472,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"874007aa8530688b9a338514a54266d9","sha1":"3214059c954518ddf14ccd30331471985bbd824b","sha256":"2f1d1c8f3891bb86213f6736e8cf46abe6bd42b2b91744dc615b9e445653940c","sha512":"a6c04463b0ff25c6fc134cc02010c0b9ed855065ca35e502abf65b87daa92a3c31eb7e29aa1f7b29332f710d1afa6d96093ac3db9cfcbd35619cd4f9ddb9292a","ssdeep":"","tlshash":"09f027ecd3d8b0f0ea78d23240d8e091792245f94345ae9bd7057194ce650c45f3d1ec","first_seen":"2026-02-24T05:17:27.219252Z","last_seen":"2026-04-10T18:39:31.448035Z","times_seen":26,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/pwa/modal-images/android-modal-f106e68bf14b25603c1ea69d915975f22df7ff4b5fa23020155aebafbb19bce5.webp","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/pwa/modal-images/android-modal-f106e68bf14b25603c1ea69d915975f22df7ff4b5fa23020155aebafbb19bce5.webp HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4004\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=U87wZQ5OYUrhASxFybFB%2FyG29ehXMye1G7wvpZqEEVs%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1769086311\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=U87wZQ5OYUrhASxFybFB%2FyG29ehXMye1G7wvpZqEEVs%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769086311\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 4746\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df112ad132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4004,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ef09580b5e72e691fd0b243365a2e2b","sha1":"5b639f3e1dc8f67e4cfbb949ead2477d0258318f","sha256":"51a6e2659bd937c00577700bc024b2d8c1dd8ed2274ee8e8e0469f15c70efe05","sha512":"dfb39123e4008984b0763c72bbe66d068bce6174b5778a2a950457c1d238621f242f98d0c6e3942ca4a5351a5a71b3f2b6d852f707621e87d2c8b395f05e3a6a","ssdeep":"","tlshash":"db816e147c7150a9de317a7c5c43367ce3a9ca2819c9274bd9718e0d4d505728e1fdc4","first_seen":"2025-07-12T03:28:11.072352Z","last_seen":"2026-04-10T18:39:31.4497Z","times_seen":70,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/pwa/icons/apple/Icon-App-60x60@3x-010de2e7f02801c7ffc9aef0b5e99559465237d6a1c0a88067e95a6d6970aa4e.png","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/pwa/icons/apple/Icon-App-60x60@3x-010de2e7f02801c7ffc9aef0b5e99559465237d6a1c0a88067e95a6d6970aa4e.png HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 30025\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=ljuku0FT4ZH6fwuslI%2B%2FRgZkS9VHp2SXv8Vxu%2BUkTeI%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1771870039\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=ljuku0FT4ZH6fwuslI%2B%2FRgZkS9VHp2SXv8Vxu%2BUkTeI%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1771870039\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 7042\r\nexpires: Mon, 11 May 2026 18:38:57 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df18580432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"90d2c7a9961a693aa20149225cb7b46d","sha1":"a70c2409774d5e02d9a39a7fd386419ffe9fb206","sha256":"a7cf98d9b232731b97d3ea505968046f6ee7b53ecbca5c147f2083ad5f9871be","sha512":"4c7cdd283b37065c4b2c489884669652f28ca6837f96bd259660942dacd608fe466ce3e4ec3173e43eed8f61c20c4919d25a616f6a00e59c4d2c5babaeab2639","ssdeep":"768:aVAzW8HJ49PekpKne+/wz/1xBbWYkXhjl/Sq5Kg:ylMJKpKe7zFbWYkXLD5t","tlshash":"19d2f12db31bb4536ec2b8db53823707541b946daad3c08a48cce1eb5e3ce0a44df661","first_seen":"2026-04-07T20:36:52.894139Z","last_seen":"2026-04-10T18:39:31.451033Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:12:26 GMT\r\nexpires: Sun, 04 Apr 2027 02:12:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 577591\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-10T20:55:39.056783Z","times_seen":208208,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":68,"dns":0,"connect":7,"send":0,"wait":9,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:00:41 GMT\r\nexpires: Sun, 04 Apr 2027 02:00:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 578296\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-10T20:57:25.097579Z","times_seen":207407,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":69,"dns":0,"connect":23,"send":0,"wait":8,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/pwa/modal-images/add-to-home-android-a92441e4d8c5071e7327003c070dc41072370f91a4875b08f1f2d28b0daee6c2.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/pwa/modal-images/add-to-home-android-a92441e4d8c5071e7327003c070dc41072370f91a4875b08f1f2d28b0daee6c2.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 378\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=%2BUVl04TZjuLsafvV0UuJ5afdzMY0WUth%2FtwT1qAwDGY%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772671231\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=%2BUVl04TZjuLsafvV0UuJ5afdzMY0WUth%2FtwT1qAwDGY%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772671231\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 3976\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df113b1032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":764,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66372a5b184f690ee8102cae721e64c5","sha1":"a6c9420d273d23f45f4bfc882b4dd94bb6f4b25a","sha256":"c708acea1ea77503ea73de4e3c9d1dda46e6165305f479956fa864015814b83e","sha512":"6e99d32a409ebcef9254fc3e336193c4e6f38f9b3a391a988e9df427318b106b6b8145d6d330c5d9ac95d51eed1cae379b6e2246f3c10e57a8b43033e52273fc","ssdeep":"","tlshash":"010168e006c8503241433381b974f920f18520ff7dd6dcdad298afc19060c97accaa9b","first_seen":"2025-06-14T04:06:33.171604Z","last_seen":"2026-04-10T18:39:31.45376Z","times_seen":81,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/homepage_experiment/avatar4-4de79b3f8eb26a14e49620421d3e41dc244238f4eec1c9a4feaa97d5894935f5.webp","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/homepage_experiment/avatar4-4de79b3f8eb26a14e49620421d3e41dc244238f4eec1c9a4feaa97d5894935f5.webp HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2376\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=nmbGeq9J7v4m41%2FLYLJOBZL4a7hq7tbSDleGME1j5%2BY%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1769819355\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=nmbGeq9J7v4m41%2FLYLJOBZL4a7hq7tbSDleGME1j5%2BY%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769819355\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 1685\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10fa3432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2376,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58789c3ab39c7fa07fdb5cb4ba11d2da","sha1":"ad73c8de49f98b4aeedcbb2b5bef326567665c01","sha256":"845a152e67ef636b565bd5cdc6c4ca5949383e956162178cd2481d6f1f547b84","sha512":"0b8791e21c0b799172edd750e9826bc83e626cd2105191cd388272580385c7510cebdfc4fa72c8827fa3ad4068b8701139f46f8e33f2e58c9bb88332fbcf1e8a","ssdeep":"","tlshash":"2f416e2cf75a4230e57d8ce5611431b055e57eb4933d3aaa13fcdbc93b83254b052e60","first_seen":"2026-02-24T05:17:27.225913Z","last_seen":"2026-04-10T18:39:31.454574Z","times_seen":10,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/homepage_experiment/star-f0b078cf434c77513797d92a7b15bedc28ec9e7b68b7e703e39ecbafa66e5567.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/homepage_experiment/star-f0b078cf434c77513797d92a7b15bedc28ec9e7b68b7e703e39ecbafa66e5567.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 678\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=N7Nbj%2BaagHttDmanPQmgVhPBo5pK%2Ff7IatK56bs5ADs%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1770732380\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=N7Nbj%2BaagHttDmanPQmgVhPBo5pK%2Ff7IatK56bs5ADs%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1770732380\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 4486\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10fa3632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1273,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c630f1cfa45336b465420270341a3df5","sha1":"6ff0eac7c02867b179ada6898d1b34090bfdf4d4","sha256":"4b3893f9405751ab5e10aa444447df9c9191720764080eea69f688ca45fb4821","sha512":"4ed2a7e1b3a7971312e2004eb62de40e1bd9c02ad42cb768b8d0c86be5136424abfc82afddbeca4d58306c04e977cade34d1262ae697ebac8680287c6f3cf73f","ssdeep":"","tlshash":"d12112baa3e8a1e05405d7d0d939f496273b68bb3bdddc0941e4cde4b51354fce89814","first_seen":"2026-02-24T05:17:27.211543Z","last_seen":"2026-04-10T18:39:31.455248Z","times_seen":10,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.candy.ai/5d44f857-66be-458b-9faf-488d980370fd","fqdn":"cdn.candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /5d44f857-66be-458b-9faf-488d980370fd HTTP/1.1\r\nHost: cdn.candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7772\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"9f1bb3acee2a2b8ed9b2abf07bcbc265\"\r\nlast-modified: Wed, 04 Mar 2026 11:53:56 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 1292\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-ray: 9ea3df114b3632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7772,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x264, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9f1bb3acee2a2b8ed9b2abf07bcbc265","sha1":"860e99c7f194884dc4c49daade4e940082e78fd3","sha256":"75d92a95fa1904e10b03a5b6bd514e1a00fcd4a3bb19aac1938fbb4c0fc08c2d","sha512":"30a68d70cef8dfebbae911ab1f9b47b32382151ee8a8794c9727771f684738248232f7df9756ac8562aee0ed7c1c50bf32c25695336b55c4eedf9a459fe2bea5","ssdeep":"192:2zaMqgOMiG6Vm3ZQmDjxE5Y1VEPHJZppJvRV8x3gV2MWl:2DqCifg3ZQmDjS50V4ZprSk2Ma","tlshash":"37f19e2890637ff9c08c46cad2aea523e708759ea6bdd912978824907987ff03797350","first_seen":"2026-03-07T01:28:05.294347Z","last_seen":"2026-04-10T18:39:31.456046Z","times_seen":8,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/sidebar-icons/nl-97e8eaae5d58516fc498087d3680681235450b25907e5eb1899e513109ef0bc2.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/sidebar-icons/nl-97e8eaae5d58516fc498087d3680681235450b25907e5eb1899e513109ef0bc2.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 359\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=g2%2FRABZSVVA3k6CMOrHy%2B3SAw0K8ica9fkENu8FFhKw%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772776815\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=g2%2FRABZSVVA3k6CMOrHy%2B3SAw0K8ica9fkENu8FFhKw%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772776815\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 547\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a7d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":694,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d323bb5361b7d15fa4ace428b2dc5825","sha1":"a23fd8da6975a5273ba33403771f217665045d67","sha256":"362e01244d578525b1ce49c64b25394637bbadaf183b1e14c09dba81a93959c4","sha512":"8b41135032e6db7284cfd9131552bc8dc740c46a5dba4b782e9510a937c2380876a706cca4a90141da70c7b5c3d8514c7c9c8647189f2ebce82c94825938a890","ssdeep":"","tlshash":"b6019ef852fc414ca60b8782036c786d177c72ff31ad852837c81720af5896d5d17ac8","first_seen":"2026-03-07T01:28:05.321984Z","last_seen":"2026-04-10T18:39:31.456712Z","times_seen":29,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.24metrics.com/lib/index.js","fqdn":"cdn.24metrics.com","domain":"24metrics.com","tld":"com"},"ip":{"addr":"138.199.37.230","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.24metrics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 17:02:37 GMT","end":"Sat, 06 Jun 2026 17:02:36 GMT"},"fingerprint":{"sha1":"FC:93:0E:87:29:86:03:1A:F3:9F:D5:87:DE:4A:B2:B7:72:44:11:6E","sha256":"C0:EF:2E:74:DC:16:D0:E2:29:27:B2:55:1A:86:37:73:32:BA:F3:9E:77:01:7F:EF:30:D7:76:B0:9C:F6:9B:3C"}}},"request":{"raw":"GET /lib/index.js HTTP/1.1\r\nHost: cdn.24metrics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-DE1-864\r\ncdn-pullzone: 2095242\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"69ca826d-3bc4f\"\r\nlast-modified: Mon, 30 Mar 2026 14:02:21 GMT\r\ncdn-storageserver: DE-755\r\ncdn-fileserver: 599\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/06/2026 09:27:34\r\ncdn-edgestorageid: 864\r\ncdn-requestid: 1b47f3aee4259f78eefb64001c03f50e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":244815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"16292e3df90886ce0349b680959f9891","sha1":"d806b5c4241894a64732880c7218816d834f0764","sha256":"d3794592eae7bc199056a022eab3fecb091a11fdf11268995cffbfc93b1d1816","sha512":"0628fcae8928a4cffd1646bc0791a27598667d3951e45ae4c691a0f4aafbc8226d92f6dc721c7345da76d634e858513a3ae72c6339600835a09de1291539d5bc","ssdeep":"1536:bWyJ0JYRF2gEzVc2qvwg/HjTIemgOroWLsvlGIAQWA605s6c5cWgW5Q4KHkJTerp:K80lx18Hj8eAiO05sRc0erlNmLOgHYT","tlshash":"9f341ccab7b6e03146ea50a5903b1003e33a3f4d644c841cf66f99cd399d94a6277f7a","first_seen":"2026-04-06T17:43:06.156973Z","last_seen":"2026-04-10T18:39:31.457423Z","times_seen":5,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":85,"dns":39,"connect":29,"send":0,"wait":38,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 18:54:17 GMT\r\nexpires: Sat, 03 Apr 2027 18:54:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 603880\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-10T20:55:38.92897Z","times_seen":196759,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":191,"dns":0,"connect":7,"send":0,"wait":11,"receive":1,"ssl":182},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/rmkt/collect/16678257446/?random=1775846338322\u0026cv=11\u0026fst=1775846338322\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be6481v9215935795z89164096164za20gzb9164096164zd9164096164xea\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~117266400\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026_tu=CA\u0026data=ads_data_redaction%3Dfalse\u0026gcp=5","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /rmkt/collect/16678257446/?random=1775846338322\u0026cv=11\u0026fst=1775846338322\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be6481v9215935795z89164096164za20gzb9164096164zd9164096164xea\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~117266400\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026_tu=CA\u0026data=ads_data_redaction%3Dfalse\u0026gcp=5 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.candy.ai/c979db56-0e89-4131-96ea-18ef35912044","fqdn":"cdn.candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /c979db56-0e89-4131-96ea-18ef35912044 HTTP/1.1\r\nHost: cdn.candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 17654\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"da9366ae60d62d912863948375e85b43\"\r\nlast-modified: Wed, 04 Mar 2026 11:54:04 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 6862\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-ray: 9ea3df114b5032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17654,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 478x270, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"da9366ae60d62d912863948375e85b43","sha1":"96d100adf5aafdc46304bdfce466097245340170","sha256":"17cd34f1afccaaeb6f86107cf1d8bae627bcc5615047092a3ed6aeb314765d1d","sha512":"fc59fe3665a391d7c64614e39a13638d640cc3552121dc0bdd4130890e538578cc6c6ea2bc9b43150eccfff5e125008cb3fc9e60b3eb4c5d6d2da5a303b6cc05","ssdeep":"384:YDjj35xHZSmwPCuMPOgBkfYK6SuHEMB0I/mWu4dUI5qW4ZUZCawTQwao:YDjjf5m6uMFM5uHZ7T5qW4x","tlshash":"3282d0c0903d072f317a1fa7210ea62763a5795e9784307066ba16da7c641eb0375efb","first_seen":"2026-03-07T01:28:05.310585Z","last_seen":"2026-04-10T18:39:31.459004Z","times_seen":8,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/trigger_everflow?everflow_id=57e49bcabbb8448d8e10d67b62c0ed39\u0026affid=37\u0026oid=1","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /trigger_everflow?everflow_id=57e49bcabbb8448d8e10d67b62c0ed39\u0026affid=37\u0026oid=1 HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/vnd.turbo-stream.html\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D; _gcl_au=1.1.1283755403.1775846338; ef_witness=1; ef_affid=37; ef_session_1=1; ef_tid_c_o_1=57e49bcabbb8448d8e10d67b62c0ed39; ef_tid_c_a_1=57e49bcabbb8448d8e10d67b62c0ed39\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\ncache-control: no-cache\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=R0BPgEE20VYZ3Kjd2eQHQKgU9qZMMIsY9O1w2pAx%2BHY%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1775846337\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=R0BPgEE20VYZ3Kjd2eQHQKgU9qZMMIsY9O1w2pAx%2BHY%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1775846337\"\r\nserver: cloudflare\r\nset-cookie: _chat_chat_session=7eNXgaKkRvp%2FIy8%2BeGH4CjVGLAq1aw%2Fa84N%2Fi3Gu8c%2FcMAp5SC0u9ODXveZCOw7bzVLt%2FCgXCw2up4zASTK5Sfhx4DVhGRqjLfNzmhBbip2CIfxHa27pCM5XzQkdbrM3gQ%2Bing%2FH5uop7RarDn3ruPTYXHg8yp8c9qzD19TCoX0D%2B%2BAxBqT6PiQiqD1Jy%2BI66DwAU4MTk7ty8MsDtfVsbY0szOThhdSe7ijebPYFdxI4biZyMJhXwtEd%2FG%2B93AJxUw%2BpoJoZ%2Fp8NDOiv41d4TWT0kTbdEZLnZ3MdDYnt1bNI5NW9itKkh1Mv4I%2BnZX547VCYNox6XiqZ0hHujRSEWeSPRgj%2FulcYmpUp5v5Ib79xeQpHFgzhh4IxIksdjVejRt78EwinbYtiw8AAFD6cJKlhDYDGOCWXGYJAHegl%2B7bWDN4YMq49m5qaFputth7uaVhj7p3W52FK5l%2FVjxrhH8CSZb3AymVWZmsDRYYNXuI9cO%2FBivL5JxV23ayVty7R8ExaEyZIWqhhrhdKnQ9Y%2F5af5Zx0Z2wqLU0jfshlTMzOamTk1V1wymxC5%2B%2FHFpNL5a4lpJuDuWLuR76K8nD0i6JQsQfb6ktP5Xsd6daEhH%2B8wxDUkwDL3oWLSKyLK%2FluRUWMunn4K9AjDVMJv1yzRtTYq2vQ%2BYERMEYhaVQBEUeX8rn9jRLdh7ZxHmrB0SBTpVdWTXCeEtoS%2FC2kRSrGx7xbyHxqq4HpjgUUsGEiP1BlHChy--FgoFTg5ZIzv8BQ%2BA--zGk8nkIPPC7hZC6%2BixINCw%3D%3D; path=/; expires=Fri, 24 Apr 2026 18:38:57 GMT; secure; httponly; samesite=lax\r\nstrict-transport-security: max-age=15552000\r\nvary: Origin\r\nvia: 2.0 heroku-router\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 8fc7cefa-a29d-6311-b48d-f44cf3ea4859\r\nx-runtime: 0.006440\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9ea3df1baa6032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"top.offershelters.com/2F9RTRK/3CSXT3F/?sub1=F1k7bRRn5FALLxwSUspCMr\u0026source_id=","fqdn":"top.offershelters.com","domain":"offershelters.com","tld":"com"},"ip":{"addr":"54.196.173.211","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T18:38:55.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top.offershelters.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 07:50:41 GMT","end":"Thu, 07 May 2026 07:50:40 GMT"},"fingerprint":{"sha1":"53:6D:7A:83:74:D4:51:C6:DA:DB:14:4B:AB:A7:CD:D8:C0:FE:41:2C","sha256":"68:DF:DA:82:25:A1:B1:1A:55:C3:2F:55:CD:D0:68:A2:64:46:AB:42:A1:49:2C:E9:4B:2D:CA:A8:03:93:3C:75"}}},"request":{"raw":"GET /2F9RTRK/3CSXT3F/?sub1=F1k7bRRn5FALLxwSUspCMr\u0026source_id= HTTP/1.1\r\nHost: top.offershelters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 124\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\nlocation: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nset-cookie: uniqueClick_3CSXT3F=1e0b73cb-a5b6-430a-b836-63992182bf77:1775846335; Path=/; Expires=Sat, 11 Apr 2026 18:38:55 GMT; SameSite=None\ntransaction_id=963118c47b3d459ab3b6e707eefca2d4; Path=/; Expires=Thu, 09 Jul 2026 18:38:55 GMT; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: 26fa0ecd-d476-449a-86bf-6b718701aab2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108202,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":215,"dns":15,"connect":93,"send":0,"wait":132,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/alpine-69b009b4309a19f099cf57a5f03edb7fbc7a130fdc6a2e9b34bb32a1ca3ef10d.js","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/alpine-69b009b4309a19f099cf57a5f03edb7fbc7a130fdc6a2e9b34bb32a1ca3ef10d.js HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 15365\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 04 Feb 2026 13:55:45 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=RM2XUuv%2FvpOaba3aYJzstmAyFgtwl6Kd51wMAkdiuI0%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1770213605\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=RM2XUuv%2FvpOaba3aYJzstmAyFgtwl6Kd51wMAkdiuI0%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1770213605\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 6670\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10c9b532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41777,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36743)","md5":"4c0db0e5056c4738ddd1593d3847a04e","sha1":"e662a621205d68b098156a3b487bbf6035dab364","sha256":"5fa69450be71f5d8bdd2438d816e71153b0510124ed814136b623a582764ce2a","sha512":"bba4c92ad3901f78fb54e65550eadd705f9cb3bcdf35b2378454f4935303999a68fd7bba6190f5f48a8492722324e30e156e3476b43d1c10686bc899492e451f","ssdeep":"768:cV0eYdN1hyuEg0xBGxt1O8N6WOTgXs2ABMUWLxNjuTx5CqXuffv:RXdQBGP1O4mPVBMUWLxJ6Dd2v","tlshash":"e0130be972dab17283ef01b260fb4649f3395c94680e1429f529e9da383548d41f3fb9","first_seen":"2026-02-24T05:17:27.218429Z","last_seen":"2026-04-10T18:39:31.45973Z","times_seen":35,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/sidebar-icons/de-db79bb08d3e5276fa0cbc9b5842763202f1f272f191b2f55187f844979dd8761.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/sidebar-icons/de-db79bb08d3e5276fa0cbc9b5842763202f1f272f191b2f55187f844979dd8761.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 15517\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=CyVm92uMkQN5BeawFNknOevWiAPWKPTu%2Bsk6K%2FZFx2w%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772233176\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=CyVm92uMkQN5BeawFNknOevWiAPWKPTu%2Bsk6K%2FZFx2w%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772233176\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 3437\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a7432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21349,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b73a17add6c444a7e1b23473d24f6c6","sha1":"d1c932812482808018673bfa7e19fbaeda328773","sha256":"01c48da73b261571c4203f5c8554bd74669aa2cfa43156593c70ce9ceb6f2dd8","sha512":"55171addf09fe67fced46ac0a03e11516541f6faecf859c70aebecd3201ac97012c51571d3b192ad67cbf925d41ab95e058b488ee81f09fd43aaed10a11c3814","ssdeep":"384:CGUvw6BzmYM1i0ZmphLUfPF91Jwr5TJ8QzSggXiTtt7gbAB5Gq91:CGwB6YM1i0AUfPFCRJ8QzSggyTtRgsBb","tlshash":"d5a2b03336234f7d9df00c14b487acaadce9505fc1c3d0cdaf6a219656aa24099ddeb6","first_seen":"2025-06-24T16:01:33.06327Z","last_seen":"2026-04-10T18:39:31.460534Z","times_seen":77,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/homepage_experiment/avatar1-654c21ac9127283fb70f6004a1bd08c3e7b887fc479072ac8823c5a4dd3389dc.webp","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/homepage_experiment/avatar1-654c21ac9127283fb70f6004a1bd08c3e7b887fc479072ac8823c5a4dd3389dc.webp HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2408\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=QYH4omXdl8oz1FmuO8xMwzJtgZ6I2q2%2BrFN9uHqCvTs%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1773871938\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=QYH4omXdl8oz1FmuO8xMwzJtgZ6I2q2%2BrFN9uHqCvTs%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1773871938\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 3871\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10d9ea32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2408,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f1a94e8566d7790e4e635e46aa53e11c","sha1":"ecebdcc1b4b7fdd2ef82eda1a306afbc447520a4","sha256":"8633a028a8db6fbd9f33029ff962ce0ac74e8d8ba60ad416c482e2235c1f2141","sha512":"37556c34d435e70b3a382a10bff4a04341ce7ee18dfa4a0b2d43d93b64b3e67a62316c066595f7abc32dbbdc51c30a34613bab89ee8dc5bfcf48229d420ca9bb","ssdeep":"","tlshash":"e8412a1f5979838879aec82d29a87c5c5243a6e018585fee0770e9164bc3d718230e97","first_seen":"2026-02-24T05:17:27.184345Z","last_seen":"2026-04-10T18:39:31.461586Z","times_seen":10,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/sidebar-icons/sv-1c83b95efd1cac7da5d32767a046bf153dd3fc4b4028b269658ed7a8ff9bd13b.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/sidebar-icons/sv-1c83b95efd1cac7da5d32767a046bf153dd3fc4b4028b269658ed7a8ff9bd13b.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 465\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=H68RCl2YIEV8yFDQ82kGR7%2FcLA%2FkQE3Rf%2BQkBognd5o%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1770882976\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=H68RCl2YIEV8yFDQ82kGR7%2FcLA%2FkQE3Rf%2BQkBognd5o%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1770882976\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 3824\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a8132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":987,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ef88d0f520975902da276d832c154b6","sha1":"9ae5f36fbfa979a5e77f77f063aa7dc73d40ca75","sha256":"305645197cc7ab50b148199ee68783c24379ee2376d037dd743738b1e1c7dd6b","sha512":"ea591281dcb047f17aea08c3e4a675f50d022153cd5e3e2ec8358c6bf627b707f90b79a019f99c7b3aed48ae3c716ccf036891b1e2038a5c324f9cbcb57a5e6d","ssdeep":"","tlshash":"30119ef023dc42196a0a63a1536c2226173f70ffb356851633481b48bf45e7e2c56ec8","first_seen":"2026-03-31T11:33:46.531898Z","last_seen":"2026-04-10T18:39:31.462497Z","times_seen":13,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/pwa/modal-images/new-features-8d91d4198e6b9ca53df4c77ffeacf3a41d166f3675dcd33b9a52d71fd65e1f5a.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/pwa/modal-images/new-features-8d91d4198e6b9ca53df4c77ffeacf3a41d166f3675dcd33b9a52d71fd65e1f5a.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 435\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=d2QI6MYpldI7QPKKNk7k4lvqfT0o5rnYBE6mHZXPmVA%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1769088743\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=d2QI6MYpldI7QPKKNk7k4lvqfT0o5rnYBE6mHZXPmVA%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769088743\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 7160\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a8432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":668,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c784cdde6b60ee7ead5b98c40ec321c","sha1":"1992c0a0daa50c9ef598e48a812998408f2f2e4a","sha256":"16935408207c1326a523edde31b92c360484f6fb795fb9e83ad4943fe68909a4","sha512":"b5a5984721f5256e0e9880c4860dc10425f098144b9088972a2f9d638e7f7521f0f001f495a916ab017d82de39ec3137d8a44465e636775e097025649c1321a6","ssdeep":"","tlshash":"9b0183e5d30c6885c01bd3a4efc8722501ef33f943c050e458027d2974908160dbf2ec","first_seen":"2025-06-14T04:06:33.164306Z","last_seen":"2026-04-10T18:39:31.463313Z","times_seen":81,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ea3df116d6cb51d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-04-10T20:55:42.106735Z","times_seen":33634,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":14,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16632358160\u0026cx=c\u0026gtm=4e6481","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtag/destination?id=AW-16632358160\u0026cx=c\u0026gtm=4e6481 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\nexpires: Fri, 10 Apr 2026 18:38:58 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 10 Apr 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:70:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:70:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:70:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:70:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 143076\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420286,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"782aca26590766092629ab1ffe9791ed","sha1":"a8f6ed6d53b554aa83642ff019185736519b032e","sha256":"b1a3d91295a7c60dd4fe90c47f3db40313d6efe7e3d7ec7456d2425eb80a9fdd","sha512":"b45b3dcaacc0cb60255a5579d9128b2215f8ada0072cd3747282b39ef4d7c6a98618d52cfc2d10d90d46d5d299130c3e8ca01e5008670f1fc284bc1c594cfd1b","ssdeep":"6144:RESj1w7Ww0e5OI4wlzqj8V5iXVl5Wc0CV+2ed30FXg:9w7W4J7zY88vQ","tlshash":"939408cdb3da742253a3b478903f018ba57a69e2b44cc899f185ccd42e7469a5237f7c","first_seen":"2026-04-10T17:47:52.364333Z","last_seen":"2026-04-10T18:39:31.465482Z","times_seen":2,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026ep.ads_data_redaction=0\u0026_tu=CA\u0026gtm=45be6481v9215935795z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~117266400\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16678257446\u0026tid=AW-16678257446\u0026tft=1775846338342\u0026tfd=3208","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026ep.ads_data_redaction=0\u0026_tu=CA\u0026gtm=45be6481v9215935795z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~117266400\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16678257446\u0026tid=AW-16678257446\u0026tft=1775846338342\u0026tfd=3208 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://candy.ai\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026ep.ads_data_redaction=0\u0026_tu=CA\u0026gtm=45be6481v9215935795z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~117266400\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16678257446\u0026tid=AW-16678257446\u0026tft=1775846338342\u0026tfd=3208","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026ep.ads_data_redaction=0\u0026_tu=CA\u0026gtm=45be6481v9215935795z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~117266400\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16678257446\u0026tid=AW-16678257446\u0026tft=1775846338342\u0026tfd=3208 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/rmkt/collect/16632358160/?random=1775846338378\u0026cv=11\u0026fst=1775846338378\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be6481v9189513968z89164096164za20gzb9164096164zd9164096164xea\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~118128923~118442252\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=2\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026_tu=CA\u0026data=ads_data_redaction%3Dfalse\u0026gcp=5","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /rmkt/collect/16632358160/?random=1775846338378\u0026cv=11\u0026fst=1775846338378\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be6481v9189513968z89164096164za20gzb9164096164zd9164096164xea\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~118128923~118442252\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=2\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026_tu=CA\u0026data=ads_data_redaction%3Dfalse\u0026gcp=5 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-10T20:55:51.639793Z","times_seen":785914,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T18:38:55.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4 HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=5,cfOrigin;dur=131\r\nlink: \u003c/assets/application-ea4075cc4679ea9dcafb33a425924f348a8fc1d5cfe6fbdbc998af183e65fba9.css\u003e; rel=preload; as=style; nopush,\u003chttps://cdn.24metrics.com/lib/index.js\u003e; rel=preload; as=script; nopush, \u003chttps://cdn.candy.ai/cdn-cgi/image/format=webp,quality=90/09c0f6c7-3779-4ec9-a94f-3275c09f282f\u003e; rel=preload; as=image; type=\"image/webp\"; media=\"(min-width: 768px)\"; fetchpriority=high, \u003chttps://cdn.candy.ai/cdn-cgi/image/format=webp,quality=90/11f9e2a1-47bd-4a25-9eba-c7fba2dca629\u003e; rel=preload; as=image; type=\"image/webp\"; media=\"(max-width: 767px)\"; fetchpriority=high\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=dWaoktQWA%2FQBRZbvyocDtJb0zPlM3xxGEfgu1ct%2FTA0%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1775846335\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=dWaoktQWA%2FQBRZbvyocDtJb0zPlM3xxGEfgu1ct%2FTA0%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1775846335\"\r\nserver: cloudflare\r\nset-cookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D; path=/; expires=Fri, 24 Apr 2026 18:38:55 GMT; secure; httponly; samesite=lax\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding, Origin\r\nvia: 2.0 heroku-router\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 617a4b16-585e-907b-b994-ba83eb3ade5a\r\nx-runtime: 0.026481\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9ea3df0d4f1d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Everflow","description":"Everflow is a partner marketing analytics platform.","website":"https://www.everflow.io","common_platform_enumeration":"","icon":"Everflow.png","categories":["Analytics"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Stimulus","description":"A modest JavaScript framework for the HTML you already have.","website":"https://stimulusjs.org/","common_platform_enumeration":"","icon":"Stimulus.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108202,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (607)","md5":"0f98f21e9d5ffa1e52c851448a122541","sha1":"c4b3ea0bd819cb0351e01a52f7d37c55876b4cb0","sha256":"1f093a76f9ea767d2c248a7d65bbf25f97641ca65cfd1b10dfcf0a03f5a14a87","sha512":"0502a6399a3fe5f3a7c38699903da62f22e6e56918401edc0f46bc9f1f91375eb60f943fc19c74743af5d5b73b80fdf9984e9d6d93b954c4d841090e9096e29e","ssdeep":"1536:y4E5Bd/RgMMMMc62OOSZLFxdMr/Qe8Iv8Il:yR5rpgMMMMckjZvAQk","tlshash":"a9b3091162f025f7119741f475a3ab96a9b4e607da1fd89cb3bd02821fcedeb0a13358","first_seen":"2026-04-10T18:39:31.469485Z","last_seen":"2026-04-10T18:39:31.469485Z","times_seen":1,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":44,"dns":20,"connect":1,"send":0,"wait":245,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/application-ea4075cc4679ea9dcafb33a425924f348a8fc1d5cfe6fbdbc998af183e65fba9.css","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/application-ea4075cc4679ea9dcafb33a425924f348a8fc1d5cfe6fbdbc998af183e65fba9.css HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 84339\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 10 Apr 2026 13:59:57 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=plEZ%2F4weggiNbClIVrm6UdJB%2BqrAycVqARqVeN0I7ug%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1775829928\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=plEZ%2F4weggiNbClIVrm6UdJB%2BqrAycVqARqVeN0I7ug%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1775829928\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 2007\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10c99632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":598410,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65436)","md5":"eccc709cb2c96d0bee36fbc8383e29e0","sha1":"d8c6d3097d20478db0cf370fd5747f3c85b5311a","sha256":"2ac8c1d2f404d96c4c7d6c8a49fbbaa29da14a5aaa5cafa158e696743a72e953","sha512":"8c374118de7fbcae33caca7b5387c2f7db8ede534c5900e10edad905091f8e22ee007806ceb8625c97ced23e931d17a6b52eac7955b9cb4a6b85ecc8e4502b60","ssdeep":"6144:k0X04pUOMTu9aa04QnwTwqU8RSe3Q9+aShPydV+kaBh7LORspccEi5a/SaSI7FBg:k0XybJjVN/lRD3Yuq7s2/d","tlshash":"7dd492b0b265d13bbc27b1f8c6eca8cc791eb1a6de6657f8f850611127d27f60c16a10","first_seen":"2026-04-10T17:47:52.360403Z","last_seen":"2026-04-10T18:39:31.47172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/sidebar-icons/es-c5012b64835b0b28261af86f76e46cc8c131ee20fc34dfb987bb7cfc196b24f9.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/sidebar-icons/es-c5012b64835b0b28261af86f76e46cc8c131ee20fc34dfb987bb7cfc196b24f9.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 405\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=ZblWaGRjlmogR%2FyNlUATCp9nZl69nAtnMykNb0rYqzk%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1771953341\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=ZblWaGRjlmogR%2FyNlUATCp9nZl69nAtnMykNb0rYqzk%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1771953341\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 4419\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a7732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":800,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6650091bfb84fdf52e1865f3b8104e33","sha1":"97df22efa1674802b88bcaa27637c7eaf13d3466","sha256":"a98e75388b04cfc264524f26251d36e348c7d16379373a7398b40f2bb0ffcab1","sha512":"645a0bfdccc73739e0a1bc9f53aefb0bc07cf9335c4e9aa8382a3ed400c6d1b59294570a3ee820b6a43d94660a7ab2d5f7e9d4a82f16c77f94065d66f2f2ab4b","ssdeep":"","tlshash":"a201fde6f2cc4109c63b47d4867d207b30b2b8fb5b36406531892660af4c172ae1bac8","first_seen":"2025-10-16T23:24:34.835913Z","last_seen":"2026-04-10T18:39:31.473566Z","times_seen":44,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/rmkt/collect/17559036072/?random=1775846337897\u0026cv=11\u0026fst=1775846337897\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=gtag.config\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xec\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026_tu=CA\u0026data=event%3Dgtag.config\u0026gcp=5","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:39:53 GMT","end":"Mon, 15 Jun 2026 08:39:52 GMT"},"fingerprint":{"sha1":"84:73:AD:21:D7:99:85:74:5C:48:5A:0D:AC:D6:69:F6:B8:C0:F7:92","sha256":"E0:8F:67:97:65:DF:94:C4:50:AD:BB:CB:88:9B:3D:53:89:9B:60:FF:F3:D8:C7:40:94:0F:14:65:BC:FB:C3:B8"}}},"request":{"raw":"POST /rmkt/collect/17559036072/?random=1775846337897\u0026cv=11\u0026fst=1775846337897\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=gtag.config\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xec\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026_tu=CA\u0026data=event%3Dgtag.config\u0026gcp=5 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16678257446\u0026cx=c\u0026gtm=4e6481","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtag/destination?id=AW-16678257446\u0026cx=c\u0026gtm=4e6481 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\nexpires: Fri, 10 Apr 2026 18:38:58 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 10 Apr 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:70:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:70:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:70:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:70:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 143071\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420286,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"6334f8f40e6ebfdc658256673d55ecf1","sha1":"67048314b1497d9f00b304a0aaa8ecf926a95e41","sha256":"0cc32344315a0537260f8f3442f36d0617af6c58f477639c34df000da1ab9e2e","sha512":"102d6b45535b1f5cdd2b0b98ecf6e2ac92e770be4968aff69e00f3566c3c3eda9eba8d978c80e02ba952b5f74f158faf4bcd5dc837e1824c428dd76a00801e41","ssdeep":"6144:HESj1w7Ww0e5OI4wlzqj8V5iXVl5Wc0CV+2ed30FXg:Lw7W4J7zY88vQ","tlshash":"3d9408cdb3da742253a3b478903f018ba57a69e2b44cc899f185ccd42e7469a5237f7c","first_seen":"2026-04-10T17:47:52.328478Z","last_seen":"2026-04-10T18:39:31.475088Z","times_seen":2,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/socials/x-710fb250b6a281a788a8826269ec81a35f9a3873b084add3e0198ef826c1cb35.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/socials/x-710fb250b6a281a788a8826269ec81a35f9a3873b084add3e0198ef826c1cb35.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 390\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=ltMjW%2BPf1UfZctJFpBC31gNyBwclIQpeHA7g5fTXl6c%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1769086236\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=ltMjW%2BPf1UfZctJFpBC31gNyBwclIQpeHA7g5fTXl6c%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769086236\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 3584\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a6e32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":666,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6509fe15265273ea20c39a742c779944","sha1":"c83cb70c90248112f18c0ad39dbce19856de6172","sha256":"e9ede30cf9444d55a22c4f951188ced7e549bdc09705f5f7558ae7f104b20ff3","sha512":"65dd3c15971801bb2af5f0d8bf2c3eae60b79dd1794bd58f0e5f1bb3f1660773540be000ba98c1a52ed0896985e0c046fce6aa875c66a19ae1bc48809ab24a3d","ssdeep":"","tlshash":"bc01235645eca29e8904df10466a6036122b22f0237dc959ffc4e710bc2e0f17d0dd5c","first_seen":"2025-06-14T04:06:33.16328Z","last_seen":"2026-04-10T18:39:31.476774Z","times_seen":50,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/spicy-candy/logo.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /spicy-candy/logo.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 10 Apr 2026 16:38:48 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=TLhPQ0o86NEWkQLgGjevjxhlwNHmMUaPmc8%2BVwtYeKM%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1775843896\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=TLhPQ0o86NEWkQLgGjevjxhlwNHmMUaPmc8%2BVwtYeKM%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1775843896\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Origin\r\nvia: 2.0 heroku-router\r\nx-content-type-options: nosniff\r\nage: 2440\r\ncf-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-ray: 9ea3df10c9b832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2251,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1b9e0694a26c0cd40866ab3df8519c0","sha1":"c43e913dc6f80159261f74f49d3e1b0b93d5659b","sha256":"b628f7958022a770392855ce5f9cd6c5c348d9295dcd8c71ae756d3f228be7b0","sha512":"fdfe0f58372295af196ce65367aa8ab430685e5685f2ad2e941a1882916baec52d43e3840e0e4717ea9efab33598908f3e8a6aa6c0864decff93043dcf4d7c84","ssdeep":"","tlshash":"3941c09bdb5076e5e0c4c3a65025c039bc2f8d793a33cb748355ca2576b18bd4552cd7","first_seen":"2025-06-14T04:06:33.231779Z","last_seen":"2026-04-10T18:39:31.477547Z","times_seen":64,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/sidebar-icons/ja-2ebfaaa67ba8f582f933d9a88f486834975f5b6535ed0e3b6b8c646669683b2f.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/sidebar-icons/ja-2ebfaaa67ba8f582f933d9a88f486834975f5b6535ed0e3b6b8c646669683b2f.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 331\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=4FtHWWh7rc7YxZI0DqlBBfwUneIe%2BzcOgk6%2Bd4rvPkQ%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1770905112\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=4FtHWWh7rc7YxZI0DqlBBfwUneIe%2BzcOgk6%2Bd4rvPkQ%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1770905112\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 4203\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a7b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":650,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfd928917fdb2f1f01337d49859073f6","sha1":"6082a1c3567784c7c55fbdfa7e9b2332cad8fa4e","sha256":"483067c8659f77aefe3c2d74ee860cc624a21c9d0d603aac51c5b0eeb1fabf30","sha512":"1c7240d3b83a34a9f9adc8296c3661c98c3e2595ad1b44a88a809df7d249a9bc56b8a689512d9db06d662717ecbcc66b03bebdef45284fa7e8feb848c4e10b43","ssdeep":"","tlshash":"18f02bdc52a89119d21f4751922c7135a3fd50aa670f050e369913206f49c6a5c4a7c8","first_seen":"2026-02-24T05:17:27.201505Z","last_seen":"2026-04-10T18:39:31.478352Z","times_seen":34,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.candy.ai/ad17b23f-b647-4036-b7a9-ab33c2544351","fqdn":"cdn.candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /ad17b23f-b647-4036-b7a9-ab33c2544351 HTTP/1.1\r\nHost: cdn.candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 556402\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"8d77735732d5398a6ed2d1fa28ff61d5\"\r\nlast-modified: Wed, 04 Mar 2026 11:54:02 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 6906\r\nexpires: Mon, 11 May 2026 18:38:57 GMT\r\ncache-control: public, max-age=2678400\r\ncf-ray: 9ea3df17ee7e32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d77735732d5398a6ed2d1fa28ff61d5","sha1":"46807dbae4fd6b13e2a19eedc4c55e27e152029f","sha256":"a0b8b69e04b1e82d4ea5feb87df6b58ae8053e2869e3f6bf39842315f46d0f87","sha512":"3be179773a28f2e71620b4809e5cb342ef132b431586696de194660e1c71ebf783d59d8bde191545e2a04b227e132538799aba80244189824d2c40761f54e6c2","ssdeep":"12288:U0j3phcg4jGnZHSMsERcIV4QnWjWpjD43eyWmIAEdrAmlo:U0j5Cg46ZHSkcIV7mWl4OYoFlo","tlshash":"51c42349320b6b11e45a325a67e9f23ef7d85372c320d86e15e99484b48c09fc5ef8e7","first_seen":"2026-03-07T01:28:05.300603Z","last_seen":"2026-04-10T18:39:31.47912Z","times_seen":8,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.candy.ai/65c6ab9e-76b2-49a6-b63d-12cfc8a61d90","fqdn":"cdn.candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /65c6ab9e-76b2-49a6-b63d-12cfc8a61d90 HTTP/1.1\r\nHost: cdn.candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://candy.ai/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2220207\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: HIT\r\nage: 1838\r\netag: \"bd98c3b62caaa94e0cafe0728c0d9b76\"\r\nlast-modified: Wed, 04 Mar 2026 11:53:57 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncontent-range: bytes 0-2220206/2220207\r\nexpires: Mon, 11 May 2026 18:38:57 GMT\r\ncache-control: public, max-age=2678400\r\ncf-ray: 9ea3df18886632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":983040,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"f481a8245ae46acd0184e55c184c6d9d","sha1":"575d4611f61b64814bcdac61e9a6ba344c4c130c","sha256":"ebeba4cbedfe127313017781794f99396d42e302dfc33401ade70b0802ffa194","sha512":"72feb4d12c3cfa0c60aa057f921e680ec498baad0cf2b89ad9421c49c1589442cd37d99991429cd2b20223fc6cfb9fc5a43364c59b8761885c945359b1535d8e","ssdeep":"12288:BeX0bM11xXBsaBqYFZAYanSEr82JiFGbo4AzgmrdNxxZtsQtbXck8dahlhUj9SIz:YX0bK+4FgTfiFx42trdhtb0dCoq9TiD","tlshash":"3f253317c37685dbc26a90366d9a5116f7edc8a73a81937f8c90f92cb3b4c3a8c19c54","first_seen":"2026-04-10T18:39:31.480555Z","last_seen":"2026-04-10T18:39:31.480555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/icons/chevron_left-de2998a1c014f985d6671bd37486b618f48fd968ae90aa918c13405ce9b8fcf5.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/icons/chevron_left-de2998a1c014f985d6671bd37486b618f48fd968ae90aa918c13405ce9b8fcf5.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 272\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=UeFgL7RV%2FcO5ejd7nfFW17D3j1JTfTjfkFrgdj2HJhM%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772205974\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=UeFgL7RV%2FcO5ejd7nfFW17D3j1JTfTjfkFrgdj2HJhM%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772205974\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 2603\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10fa3832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":461,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"058e96e2eb9776b075c8ee779018e9e7","sha1":"330cb0e39cd13b05ba6979ec38c786ff57312cb9","sha256":"2b0a589fa694cfa4baef15b2cc921fad0c32487823ee92688687a9880f9e36af","sha512":"4beb1d99a663b628caa84536dc4a2bd9b21868ab2c4495ce9e55497ed2e293f2245dbe9e665d4995bc5740268dac4bd8600ab0e4507315108f0011d94c00a3f5","ssdeep":"","tlshash":"01f05ce863e8606cd631e621d0dca5a2f13a48dec3c0d8e7db40e00ac6744d34b2c6d4","first_seen":"2026-02-24T05:17:27.24087Z","last_seen":"2026-04-10T18:39:31.482465Z","times_seen":26,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/socials/discord-1941fbdb65bbf0a7af9edf8206abc69f116e482275b867372a123372fc6b7c23.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/socials/discord-1941fbdb65bbf0a7af9edf8206abc69f116e482275b867372a123372fc6b7c23.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 737\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=b7sS7aCQbUqi8xc5CM0mOkhvIGHaIqH7MLmVIn3d68M%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772469952\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=b7sS7aCQbUqi8xc5CM0mOkhvIGHaIqH7MLmVIn3d68M%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772469952\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 4318\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10fa3f32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1741,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fa778ce10ed28d425bb55410b50b5454","sha1":"d49401de34049b632cc2ffeac03f0abec7d683f8","sha256":"4b150e90820b554c5b28caa347c0b85fdd4bd69237e06e26dfe2c8c03aeed29b","sha512":"2acfee4bf3b39198e574ac407e34a255fe90a76d74c76fee6ddffe75a99f66ba2432b9ec10eca3cac1c14be129b1e9d4d90802b5ef7afc8aa0ab8a3baa79b5c6","ssdeep":"","tlshash":"dd3167ea17ece2ac9206a3b1cc649d35e48765f12f7cc74e0250fb91ee200e58895d40","first_seen":"2025-06-14T04:06:33.234563Z","last_seen":"2026-04-10T18:39:31.483312Z","times_seen":50,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/sidebar-icons/it-037273da9396c546ea35ac5c2f4ef6d03373d25e962e707ef4d2fbea3e192869.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/sidebar-icons/it-037273da9396c546ea35ac5c2f4ef6d03373d25e962e707ef4d2fbea3e192869.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 350\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=KYFXTuN%2BGHuZzU8JCK3fvhsEPltN1G8DsXYF5LDme9M%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1769457695\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=KYFXTuN%2BGHuZzU8JCK3fvhsEPltN1G8DsXYF5LDme9M%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769457695\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 6876\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a7932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef7db55c326172bbb27cba318ac52acd","sha1":"2359d9cc77b4316808633d3f479e998749f2d83f","sha256":"d7488479ef8d8fafa45e1c9dcab0f41bf3dffc6c3141171a91533b2cbb857a88","sha512":"2e23afbda7aab65d5f1c7e6ebb096cc33db97c9b34f6131303b083092e30b1d4abf2b3bf29dc592a0a0ab71f59a2998da48e4e6bb3306f676c4b8128a26a5e42","ssdeep":"","tlshash":"f20176f892ec910ca60a8782036c7c38177c32ef22294519339823247f9cc6a5e57ed8","first_seen":"2026-02-24T05:17:27.191365Z","last_seen":"2026-04-10T18:39:31.484065Z","times_seen":34,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/pwa/modal-images/tag-3b4615afb2263a898e01967bc8206310c216fa40f33f4a7e416f66e38325e5a9.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/pwa/modal-images/tag-3b4615afb2263a898e01967bc8206310c216fa40f33f4a7e416f66e38325e5a9.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 341\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=0b5lYUPgzq09NC%2BXLN3zh0i4YmfKMY4iq6qKERsHSDg%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772496716\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=0b5lYUPgzq09NC%2BXLN3zh0i4YmfKMY4iq6qKERsHSDg%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772496716\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 3073\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a8532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":686,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab9f820d7bef9e8cd6bab39dd25ce558","sha1":"b68e4747ab40eeb51481ec78833979633d2e5565","sha256":"31dae6d866f63ec23d4305ecb0ccf07151bb79aae3957de9d684a28493806ab8","sha512":"593785ee3317ae5089f63a9728d29012d5a7d552ed70a5dc472577e8b05cac22fec93347e9529bb17dfc1b83d7c1c43c5be3b561f7224d361bdf64d0bc0effeb","ssdeep":"","tlshash":"b00126f543d009282813abbdf83afa50fa7e117639c44dc882506aa404b55faa29e09b","first_seen":"2025-06-14T04:06:33.155874Z","last_seen":"2026-04-10T18:39:31.484695Z","times_seen":81,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sc-static.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:63:7D:63:F2:DF:8F:C5:65:EF:16:8E:06:3E:E4:66:D9:41:67:CD","sha256":"91:A8:D7:CD:20:36:14:EC:9A:D5:10:BC:DD:44:F1:9D:26:20:78:F8:92:93:7B:37:6A:F8:E9:7B:FC:7E:72:66"}}},"request":{"raw":"GET /scevent.min.js HTTP/1.1\r\nHost: sc-static.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 24658\r\nserver: CloudFront\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, s-maxage=0, max-age=600\r\nset-cookie: X-AB=73d5d2c9b3eb4512b5a7ceff2d9cd7aa;max-age=86400;expires=Sat, 11 Apr 2026 18:38:57 GMT;Path=/scevent.min.js;Secure;SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d229ccc15dd984a81023d1b57fa0adbc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 9MpgUF6qObfQEC-vh3pPlX8ubdHEzzL-Dfakvgs0fEWuWV59g56T3w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58518,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58491)","md5":"779dad81833261bc5bb0a005e1f01254","sha1":"12d7162ceb3f36169373d8935fabfe54383bdc49","sha256":"93230595b6dab54d976a3739d1b5c741f15161c568e4be72acf514dae4db984d","sha512":"3194159f5b7870c1ee051e973be89bc09b272e6dd29a2a8e174cfcda83da4f1c424108051a6dd4131934fa40d09b13ff817d4c401418f1e1cda3ff97cb60fb8a","ssdeep":"1536:kSO1Ejiaa1zoLOIkxUanOChvb6rXhWXvVC1Kazgpk5DXV:ZOxA+/lWWMDF","tlshash":"9943c79cf7e9b02103973472497f541be33bba646c0b8650c526e5883dbc59e9237eac","first_seen":"2026-04-01T22:36:39.136818Z","last_seen":"2026-04-10T20:19:40.601835Z","times_seen":1346,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":65,"dns":53,"connect":3,"send":0,"wait":42,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=12\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026ep.ads_data_redaction=0\u0026_tu=CA\u0026gtm=45He6481v9164096164za200zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3v2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1775846337671\u0026tfd=2537","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:39:53 GMT","end":"Mon, 15 Jun 2026 08:39:52 GMT"},"fingerprint":{"sha1":"84:73:AD:21:D7:99:85:74:5C:48:5A:0D:AC:D6:69:F6:B8:C0:F7:92","sha256":"E0:8F:67:97:65:DF:94:C4:50:AD:BB:CB:88:9B:3D:53:89:9B:60:FF:F3:D8:C7:40:94:0F:14:65:BC:FB:C3:B8"}}},"request":{"raw":"POST /ccm/collect?rcb=12\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026ep.ads_data_redaction=0\u0026_tu=CA\u0026gtm=45He6481v9164096164za200zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3v2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1775846337671\u0026tfd=2537 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://candy.ai\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":84,"dns":0,"connect":23,"send":0,"wait":37,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026_tu=CA\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xec\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17559036072\u0026tid=AW-17559036072\u0026tft=1775846337974\u0026tfd=2840","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /ccm/collect?rcb=7\u0026frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026_tu=CA\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xec\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17559036072\u0026tid=AW-17559036072\u0026tft=1775846337974\u0026tfd=2840 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/socials/instagram-b5fde65477920778aea3af6756015e26581593eeeed5df4614a6da5a88b90a2f.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/socials/instagram-b5fde65477920778aea3af6756015e26581593eeeed5df4614a6da5a88b90a2f.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1177\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=N7Nbj%2BaagHttDmanPQmgVhPBo5pK%2Ff7IatK56bs5ADs%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1770732380\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=N7Nbj%2BaagHttDmanPQmgVhPBo5pK%2Ff7IatK56bs5ADs%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1770732380\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10fa3e32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c51171d650e7183ee6f41011b1128238","sha1":"e6ff51992cee568dc8fe114bcb6701956d12355b","sha256":"37159c61c2c6435a4c142d13d1d388bf65afb42e06a3c54b2ba372fc99815327","sha512":"f6fd816b301fc32a9df7933c5321d94be524c873898c7fcec70be887d6845197fa9afdb1d4bc6e3d72a1a565e00335d17fa060aa9896d21b0b44eea318af19c7","ssdeep":"","tlshash":"e25146f557ad63f08606fb00e86415217a5f34f76b88d74ac255eec4ed58189c8e8cc4","first_seen":"2026-02-24T05:17:27.16592Z","last_seen":"2026-04-10T18:39:31.485879Z","times_seen":10,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/pwa/modal-images/share-51f21c50ebd8708b137170cfa439749d647335c9d19877b6741808fb566835f8.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/pwa/modal-images/share-51f21c50ebd8708b137170cfa439749d647335c9d19877b6741808fb566835f8.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 870\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Wc9PB0pgkVBn%2FSMvQrMhASkHZqEpkyzwZGoH6CvZg3I%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1769082750\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Wc9PB0pgkVBn%2FSMvQrMhASkHZqEpkyzwZGoH6CvZg3I%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769082750\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 3811\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df111aa432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1873,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0450610b2f350a11dc85fa0a91e619c0","sha1":"353018805d11bb394943674f6cdfb766b617c310","sha256":"d704b6688c27018ff2f290651e9f7a5a85ec30d513dd0731b825251fc5fdc80e","sha512":"9451a485dbbaf808df79b853d8a1e9096e4c8ae278622c80a8f9067d85d65615774265049b745604c23e57d749d7deb8b8dc27d04042dea85df46f11adfdae34","ssdeep":"","tlshash":"7e3185ed66ce61e0b407cf98cd2b06343e1d1c7f5fccc9a506b2c1a0c26161c4469cda","first_seen":"2025-06-14T04:06:33.179118Z","last_seen":"2026-04-10T18:39:31.486443Z","times_seen":81,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.candy.ai/723128bf-b370-4d18-a7df-8584d99e170d","fqdn":"cdn.candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /723128bf-b370-4d18-a7df-8584d99e170d HTTP/1.1\r\nHost: cdn.candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://candy.ai/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 985083\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: HIT\r\nage: 3749\r\netag: \"04d8112554fc4f8841ca7cfc62d4f240\"\r\nlast-modified: Wed, 04 Mar 2026 11:53:58 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncontent-range: bytes 0-985082/985083\r\nexpires: Mon, 11 May 2026 18:38:57 GMT\r\ncache-control: public, max-age=2678400\r\ncf-ray: 9ea3df18786032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":851968,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"b3e9dfb6023bfc66f1f5675d24a1e347","sha1":"07dc8c07fadb5e361946c64d926770bbe26aa09c","sha256":"7b4465835ce879731d2005549d8f7876d09c48b213dae1ff80e313f26eeaa174","sha512":"8a79bd577df8da50bc372decd9ee8831065e0d401f3f7bbcb33b38a16ac7646afdd59cf6aafda6f79eb03adf7fb506cdd429e3ccf3e21d5f0f63fc3eb8137032","ssdeep":"24576:C4iY2UKoQWsWC40IIO/sOuttiGSObnhgNXJDOY0zARtCBLu:CrY2mQWbCV5n7SOb4OY0E6du","tlshash":"8d052372c3119af5d5c1e57d90068ed1fb38c484263956eec6b6043c2e2ee2ebe52e74","first_seen":"2026-04-10T18:39:31.486965Z","last_seen":"2026-04-10T18:39:31.486965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/17559036072/?random=960889587\u0026cv=11\u0026fst=1775846337955\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026label=D1EPCLy6vaIbEKjB5rRB\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026value=0\u0026hn=www.google.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026data=ads_data_redaction%3Dfalse\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgSN4b0t\u0026eitems=ChAI8L_izgYQ1fy7hNf1zvNXEh0AbEfyko2UDs1_Ii68_OQcuk_pjNY41nPtgEZ0rQ\u0026fsk=ChEI8L_izgYQ6vGi_L2v4-epARIsAG3Vor_rCpZ4Y5oFRJ7tSiP31fGk2ThNY2oRJoQObSRp3PSs8koaiUu-CtcaAhBW\u0026ipr=y\u0026pscrd=IhMI9vudkffjkwMVBw6iAx2qYjq2MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhFodHRwczovL2NhbmR5LmFpL0JYQ2hFSThMX2l6Z1lRcW9mbGhkTzRrTG4zQVJJdEFFYkVubG1NX0lMT1ZOVGFOSWwwU2tnQkZraDJFRFM5QmcxYUVmaWc0b2ZjTVJReG5BR1FVZS1iNTY3V3oMCAliCAgAEAAYACAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:41:21 GMT","end":"Mon, 15 Jun 2026 08:41:20 GMT"},"fingerprint":{"sha1":"4F:C1:3B:49:C1:2D:F9:6E:7F:DF:FC:FB:F1:E6:4C:B4:28:12:78:7A","sha256":"8A:F7:A0:0E:C0:B2:9F:EA:EA:61:B4:45:5B:D5:0B:97:EB:26:AE:C6:53:94:D9:51:25:AC:0E:E5:9B:6F:3B:94"}}},"request":{"raw":"GET /pagead/1p-conversion/17559036072/?random=960889587\u0026cv=11\u0026fst=1775846337955\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026label=D1EPCLy6vaIbEKjB5rRB\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026value=0\u0026hn=www.google.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026data=ads_data_redaction%3Dfalse\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgSN4b0t\u0026eitems=ChAI8L_izgYQ1fy7hNf1zvNXEh0AbEfyko2UDs1_Ii68_OQcuk_pjNY41nPtgEZ0rQ\u0026fsk=ChEI8L_izgYQ6vGi_L2v4-epARIsAG3Vor_rCpZ4Y5oFRJ7tSiP31fGk2ThNY2oRJoQObSRp3PSs8koaiUu-CtcaAhBW\u0026ipr=y\u0026pscrd=IhMI9vudkffjkwMVBw6iAx2qYjq2MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhFodHRwczovL2NhbmR5LmFpL0JYQ2hFSThMX2l6Z1lRcW9mbGhkTzRrTG4zQVJJdEFFYkVubG1NX0lMT1ZOVGFOSWwwU2tnQkZraDJFRFM5QmcxYUVmaWc0b2ZjTVJReG5BR1FVZS1iNTY3V3oMCAliCAgAEAAYACAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.candy.ai/83ef1ac2-3823-43fb-8413-f3be0c57396e","fqdn":"cdn.candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /83ef1ac2-3823-43fb-8413-f3be0c57396e HTTP/1.1\r\nHost: cdn.candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 72672\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"5a56c08e40ed73e46ee866cd8351f6ea\"\r\nlast-modified: Wed, 04 Mar 2026 11:54:00 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 4798\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-ray: 9ea3df115b6c32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72672,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1560x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5a56c08e40ed73e46ee866cd8351f6ea","sha1":"e9791affbb747341c3ecf78042750a3fdf2196f0","sha256":"47b3992dcc0c97fbceae3231e41670c47fb119155de4da920676f31046019367","sha512":"7f9c15904c013b16600cf5b847c2ae6aeef7f2915518e666307ee22c5a22592f37f02e802057a5cc283f49947c405f600268470df0db7e4d47cf9ee3b8339e57","ssdeep":"1536:nyOyQEUcdNM8fP07ER+mU42PNNJINIuxuSFuhYy:yXUNEcYR+c4N/Iy4y","tlshash":"f7630276d225e25d9ab8b825031e8389ef51f556bd2305f55d3eacccc7703a201a93a3","first_seen":"2026-03-07T01:28:05.286998Z","last_seen":"2026-04-10T18:39:31.501286Z","times_seen":8,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/pwa/modal-images/bubble-wide-notification-7b701200e5b8473f565530a160416620ff0a7ae20ba0db8f17da785808db5e13.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/pwa/modal-images/bubble-wide-notification-7b701200e5b8473f565530a160416620ff0a7ae20ba0db8f17da785808db5e13.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 412\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=WbVchZUCU7%2FlpYFobnkIswwv8s%2BAyQ2E6MQ9tnyqPxM%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772149354\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=WbVchZUCU7%2FlpYFobnkIswwv8s%2BAyQ2E6MQ9tnyqPxM%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772149354\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 6683\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a8732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab8e54cc154d5aece5ab49c843bff123","sha1":"670a9f1996e53ba1de7e63e885776b3d72eba0e0","sha256":"4c5673ce50419e4a44f8761fceda4e34e126458f6e17de9bd7f82a821a6c64c2","sha512":"fad940aedcaf41c6b4e93a570133327ef696fd7fd1618b6860691569c114dc1940715163d0cc7cd1000c51060e30526fdfbd5d5a08d69c116a5c345d9a737fe6","ssdeep":"","tlshash":"150164e902d43838aa03bb29d512fa34205e24fa3addddc5c231992a112046aa86e886","first_seen":"2025-06-14T04:06:33.165276Z","last_seen":"2026-04-10T18:39:31.503755Z","times_seen":81,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ejd1s4io.com/sdk/click?_ef_transaction_id=\u0026oid=1\u0026affid=37\u0026__cc=\u0026async=json\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\u0026source_id=2F9RTRK_\u0026__qp=oid%7Caffid%7Csource_id%7Csub1\u0026__rf=\u0026__efckuq=24","fqdn":"www.ejd1s4io.com","domain":"ejd1s4io.com","tld":"com"},"ip":{"addr":"34.160.134.83","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ejd1s4io.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 09:00:07 GMT","end":"Tue, 02 Jun 2026 09:56:02 GMT"},"fingerprint":{"sha1":"15:F3:D3:8E:60:9D:AF:78:14:DC:AC:B1:8C:C2:C0:80:B5:7C:22:B2","sha256":"40:E1:CE:5D:5D:E8:B9:DF:33:20:EC:27:E6:A0:FE:77:6D:CB:D8:79:9A:6A:77:23:A9:F2:6C:CF:ED:6A:B0:0E"}}},"request":{"raw":"GET /sdk/click?_ef_transaction_id=\u0026oid=1\u0026affid=37\u0026__cc=\u0026async=json\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\u0026source_id=2F9RTRK_\u0026__qp=oid%7Caffid%7Csource_id%7Csub1\u0026__rf=\u0026__efckuq=24 HTTP/1.1\r\nHost: www.ejd1s4io.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 109\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://candy.ai\r\nset-cookie: uniqueClick=df3b8d16-50e3-4175-aac0-883316a788ca:1775846337; Path=/; Expires=Thu, 09 Jul 2026 18:38:57 GMT; Secure; SameSite=None\ntransaction_id=57e49bcabbb8448d8e10d67b62c0ed39; Path=/; Expires=Thu, 09 Jul 2026 18:38:57 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: 69f1c5d4-52f7-431c-a309-61c24c234011\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"822b610a21d5ecae5cafeaec54440ec8","sha1":"7f9a53bd03445ba4b60397325093cd216269989f","sha256":"6fafca83d85d4c101f6495b6a3b96aeab34b37e8f66ff2202ad254fb46143644","sha512":"e38c0f2a8ba9f5a9a9c8fe269c9730ce70a99e417967930cee307725267dfb5d2bd207f38a49ebee324573af8224cd209e5b036574b99b0c9df5bdb5ee0fffbc","ssdeep":"","tlshash":"12b01240a8cf2970a9178203007f30160bffc7a1dc102312f7f94006031855e4647510","first_seen":"2026-04-10T18:39:31.506401Z","last_seen":"2026-04-10T18:39:31.506401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026_tu=CA\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xec\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17559036072\u0026tid=AW-17559036072\u0026tft=1775846337974\u0026tfd=2840","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:39:53 GMT","end":"Mon, 15 Jun 2026 08:39:52 GMT"},"fingerprint":{"sha1":"84:73:AD:21:D7:99:85:74:5C:48:5A:0D:AC:D6:69:F6:B8:C0:F7:92","sha256":"E0:8F:67:97:65:DF:94:C4:50:AD:BB:CB:88:9B:3D:53:89:9B:60:FF:F3:D8:C7:40:94:0F:14:65:BC:FB:C3:B8"}}},"request":{"raw":"POST /ccm/collect?rcb=7\u0026frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026_tu=CA\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xec\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17559036072\u0026tid=AW-17559036072\u0026tft=1775846337974\u0026tfd=2840 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://candy.ai\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/cdn-cgi/rum?","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\ncontent-type: application/json\r\nContent-Length: 641\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=7eNXgaKkRvp%2FIy8%2BeGH4CjVGLAq1aw%2Fa84N%2Fi3Gu8c%2FcMAp5SC0u9ODXveZCOw7bzVLt%2FCgXCw2up4zASTK5Sfhx4DVhGRqjLfNzmhBbip2CIfxHa27pCM5XzQkdbrM3gQ%2Bing%2FH5uop7RarDn3ruPTYXHg8yp8c9qzD19TCoX0D%2B%2BAxBqT6PiQiqD1Jy%2BI66DwAU4MTk7ty8MsDtfVsbY0szOThhdSe7ijebPYFdxI4biZyMJhXwtEd%2FG%2B93AJxUw%2BpoJoZ%2Fp8NDOiv41d4TWT0kTbdEZLnZ3MdDYnt1bNI5NW9itKkh1Mv4I%2BnZX547VCYNox6XiqZ0hHujRSEWeSPRgj%2FulcYmpUp5v5Ib79xeQpHFgzhh4IxIksdjVejRt78EwinbYtiw8AAFD6cJKlhDYDGOCWXGYJAHegl%2B7bWDN4YMq49m5qaFputth7uaVhj7p3W52FK5l%2FVjxrhH8CSZb3AymVWZmsDRYYNXuI9cO%2FBivL5JxV23ayVty7R8ExaEyZIWqhhrhdKnQ9Y%2F5af5Zx0Z2wqLU0jfshlTMzOamTk1V1wymxC5%2B%2FHFpNL5a4lpJuDuWLuR76K8nD0i6JQsQfb6ktP5Xsd6daEhH%2B8wxDUkwDL3oWLSKyLK%2FluRUWMunn4K9AjDVMJv1yzRtTYq2vQ%2BYERMEYhaVQBEUeX8rn9jRLdh7ZxHmrB0SBTpVdWTXCeEtoS%2FC2kRSrGx7xbyHxqq4HpjgUUsGEiP1BlHChy--FgoFTg5ZIzv8BQ%2BA--zGk8nkIPPC7hZC6%2BixINCw%3D%3D; _gcl_au=1.1.1283755403.1775846338; ef_witness=1; ef_affid=37; ef_session_1=1; ef_tid_c_o_1=57e49bcabbb8448d8e10d67b62c0ed39; ef_tid_c_a_1=57e49bcabbb8448d8e10d67b62c0ed39; _scid=mA0t8BS5LGvQ2os3fs2X0ZES6XWZpxyZ; _scid_r=mA0t8BS5LGvQ2os3fs2X0ZES6XWZpxyZ; _ga_DQNSP6409Y=GS2.1.s1775846338$o1$g0$t1775846338$j60$l0$h1522927559; _ga=GA1.1.442748788.1775846338; _ga_7K8SVTXQK1=GS2.1.s1775846338$o1$g0$t1775846338$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":641,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":2171,\"startTime\":1775846335133,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"84328580-7f6c-433a-9e71-ac9af445a9f5\",\"location\":\"https://candy.ai/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":384,\"domainLookupEnd\":405,\"connectStart\":405,\"connectEnd\":430,\"requestStart\":430,\"responseStart\":674,\"responseEnd\":679,\"domInteractive\":1624,\"domComplete\":3484,\"loadEventStart\":3486,\"loadEventEnd\":3486,\"transferSize\":25685,\"decodedBodySize\":108202},\"siteToken\":\"a4d5023a012f41e0b0324067f7ed0b96\",\"st\":2}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://candy.ai\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9ea3df2098ae32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/icons/gender_switch/female-white-b6edc81820cdf305c0e1644c0c5d2124b2aa2ecef701a01eff46baad9a05dd26.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/icons/gender_switch/female-white-b6edc81820cdf305c0e1644c0c5d2124b2aa2ecef701a01eff46baad9a05dd26.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 299\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=f%2FT4DUOqmCbcB5i4UkyISLxxakUuxZ5de1icCwVLBjg%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772060503\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=f%2FT4DUOqmCbcB5i4UkyISLxxakUuxZ5de1icCwVLBjg%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772060503\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 4498\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10d9be32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ff0f7c3c3fce0fdb2bb903ea52b020c","sha1":"ec5c8c9db4a9b2b93e62445f1100f4f4c66d21b1","sha256":"3f638a5d50209ffa0352d21c407fae7cdc0a2bcdef5017307ec749feafa21197","sha512":"e62827f6264c80c8e1cb53f2332f1963803be4df98cba9d8d4766c10af781306d70a34b00c174545086bb2c5d37e86c1f92a35986c53f6f8a8ae7289fd53ed20","ssdeep":"","tlshash":"2ff052ffd5c8a38cc010c385f311b81a94bf79f9e769917d801a0220fe88186d88cc81","first_seen":"2026-02-24T10:56:43.306667Z","last_seen":"2026-04-10T18:39:31.509524Z","times_seen":30,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=12\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026ep.ads_data_redaction=0\u0026_tu=CA\u0026gtm=45He6481v9164096164za200zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3v2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1775846337671\u0026tfd=2537","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /ccm/collect?rcb=12\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026ep.ads_data_redaction=0\u0026_tu=CA\u0026gtm=45He6481v9164096164za200zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3v2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1775846337671\u0026tfd=2537 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-DQNSP6409Y\u0026gtm=45je6481v9189641916z89164096164za20gzb9164096164zd9164096164\u0026_p=1775846336621\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026npa=0\u0026dma_cps=a\u0026dma=1\u0026ecid=1522927559\u0026_eu=AAAAAGQ\u0026cid=442748788.1775846338\u0026frm=0\u0026pscdl=noapi\u0026rcb=2\u0026sr=1280x1024\u0026ul=en-us\u0026_s=2\u0026tag_exp=0~115616985~115938465~115938469~118128922\u0026sid=1775846338\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026_tu=CA\u0026en=device_detector\u0026ep.is_pwa=non%20PWA\u0026ep.pwa_mode=non%20PWA\u0026tfd=8050","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:39:03.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-DQNSP6409Y\u0026gtm=45je6481v9189641916z89164096164za20gzb9164096164zd9164096164\u0026_p=1775846336621\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026npa=0\u0026dma_cps=a\u0026dma=1\u0026ecid=1522927559\u0026_eu=AAAAAGQ\u0026cid=442748788.1775846338\u0026frm=0\u0026pscdl=noapi\u0026rcb=2\u0026sr=1280x1024\u0026ul=en-us\u0026_s=2\u0026tag_exp=0~115616985~115938465~115938469~118128922\u0026sid=1775846338\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026_tu=CA\u0026en=device_detector\u0026ep.is_pwa=non%20PWA\u0026ep.pwa_mode=non%20PWA\u0026tfd=8050 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://candy.ai\r\ndate: Fri, 10 Apr 2026 18:39:03 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:195:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:195:0\r\nreport-to: {\"group\":\"ascnsrsggc:195:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:195:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/application-c0018cff2cdde4778a2b3f11cd6147b2868adf0142ef93173b42d89c1307ea0e.js","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/application-c0018cff2cdde4778a2b3f11cd6147b2868adf0142ef93173b42d89c1307ea0e.js HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 253958\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 10 Apr 2026 16:41:29 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=TLeruNTs8Te5X%2B%2BjebvifgKpMcK4O7y2Cd2MvKP0jwg%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1775839564\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=TLeruNTs8Te5X%2B%2BjebvifgKpMcK4O7y2Cd2MvKP0jwg%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1775839564\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 6771\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10c9a532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1094360,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (35204)","md5":"42b2df10c106c62df4ee9b30cac82dcf","sha1":"403d59011feecf727231f6960976a630ad4b3182","sha256":"5ea948c9be3ee744998855edf75fc4f781090d2eeee0b3dccf21cef6aa420d08","sha512":"3fd956270b4752b573c9e00abd16b22dd922f16278cd225a9a67672dd24988f922262457787c8dc057060291b1159d0468ed57a92053d23d0abc3ff517eb8e1a","ssdeep":"12288:3BuAhr3ogFSDRjAHKMjJAbm6aF/rCteJPfpKyChKetKuT/yB:xuAejAqDm6atrCMPf+zyB","tlshash":"8b2507d1b35555ba47efc0baa4a24b80633224d8a408446c7d3cfcdb479ac85727bbf6","first_seen":"2026-04-10T17:47:52.303472Z","last_seen":"2026-04-10T18:39:31.510499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/rmkt/collect/16678257446/?random=1775846338322\u0026cv=11\u0026fst=1775846338322\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be6481v9215935795z89164096164za20gzb9164096164zd9164096164xea\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~117266400\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026_tu=CA\u0026data=ads_data_redaction%3Dfalse\u0026gcp=5","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /rmkt/collect/16678257446/?random=1775846338322\u0026cv=11\u0026fst=1775846338322\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be6481v9215935795z89164096164za20gzb9164096164zd9164096164xea\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~117266400\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026_tu=CA\u0026data=ads_data_redaction%3Dfalse\u0026gcp=5 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-10T20:55:51.639793Z","times_seen":785914,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.candy.ai/6db5e2dc-8b9b-4f69-9366-0d15479c24b7","fqdn":"cdn.candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /6db5e2dc-8b9b-4f69-9366-0d15479c24b7 HTTP/1.1\r\nHost: cdn.candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 27230\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"616497f7d505f1fbba7d9fce4add8078\"\r\nlast-modified: Wed, 04 Mar 2026 11:53:57 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 3040\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-ray: 9ea3df113b1232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27230,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 606x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"616497f7d505f1fbba7d9fce4add8078","sha1":"380f14b1ca22f9553c2c5ddacfabeed2476cfb5e","sha256":"d6d315fee117bcc12299450406d1b9e23ade1eb82d6a9879e7add0d854f312ff","sha512":"cf3a0cc03ab4a90fd1d906ef5273e19a99622a066fc087f36b6bdd781d98bf9a4190c48fc19f1f3bc5c36b4d381f5cdba7ce36f60037be3ddb512e398225363d","ssdeep":"768:Mtw5NsfCM3ZKTLR35rhKwEcxzioObAAOmuMmGdHE6cI:MGO3o95NKOrqmGdHR","tlshash":"a3c2f27463dea45c04ec32affe41dbcd7a8a2a71e3962a2ad1c12d1b5e07a5d03b505c","first_seen":"2026-03-07T01:28:05.291493Z","last_seen":"2026-04-10T18:39:31.5118Z","times_seen":8,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.candy.ai/531e63ce-4a44-4da8-90ef-703f7c03b58e","fqdn":"cdn.candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /531e63ce-4a44-4da8-90ef-703f7c03b58e HTTP/1.1\r\nHost: cdn.candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 37558\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"c8fd9795e773de4da19114dcd0fe6cbb\"\r\nlast-modified: Wed, 04 Mar 2026 11:53:56 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 1278\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-ray: 9ea3df115b6b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37558,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 948x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c8fd9795e773de4da19114dcd0fe6cbb","sha1":"2dc9a5e4a19fc3f94f018281126b17843f8cac70","sha256":"d11c3f005e77439a6b2c6f6481953996597fe19a6f1994420212e3afbc27b7f0","sha512":"6bddf5c9053fd66922853b9c6b7ba32d6b22e1bad1a897c1badfddf6c501e64ee87db4c4e704018021265a07fd9d9a7ed7f6aef88c02daa751de71a5623e49e8","ssdeep":"768:pBgW0+ULSDqMEqiqKlgvdCqh8paaoX7pEDE69Zr/DTrz4DN:If+Vq2iqXVpho8lEDE6L3zuN","tlshash":"c9f2f131edc156ab6f0750992cc90b02b55d9d18784cbedc3489b6b526eb9ef30e0233","first_seen":"2026-03-07T01:28:05.303759Z","last_seen":"2026-04-10T18:39:31.512586Z","times_seen":8,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/sidebar-icons/fr-02d9f7ba28cb9136ad0766feba1cdeab49f179b97efe0b8bdfacf4e195a969ae.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/sidebar-icons/fr-02d9f7ba28cb9136ad0766feba1cdeab49f179b97efe0b8bdfacf4e195a969ae.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 346\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=CyVm92uMkQN5BeawFNknOevWiAPWKPTu%2Bsk6K%2FZFx2w%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772233176\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=CyVm92uMkQN5BeawFNknOevWiAPWKPTu%2Bsk6K%2FZFx2w%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772233176\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 5260\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a7332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":643,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8479e8c2f63c99f80a516858cfd10f5b","sha1":"8ee1eb23e97b63a45e32c446324710a35abeb21f","sha256":"e498186e0c196d7d49fc8023034358362903677de0c46b3ab2b5ccc905235948","sha512":"836af266abf224a3244bb723a2e627bbeea9368f78bca88bdb87d801c460dbfd3f74853c5acb06e618df18cef4b244d00ade30bf99b2924fc15391a51803f7d6","ssdeep":"","tlshash":"3ff099da3298d348e5055f13693e7856212bf4ff3b08d082f8817e082fe50ba9d19b9c","first_seen":"2025-06-14T04:06:33.21004Z","last_seen":"2026-04-10T18:39:31.513384Z","times_seen":80,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/favico-c002e20e13e2ee0d917bef3242cab0236c1087207a951e9d578b370c519d800a.png","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/favico-c002e20e13e2ee0d917bef3242cab0236c1087207a951e9d578b370c519d800a.png HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1968\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=vOWwbhA4rUtCibZz7NqrqIYrklK3XhFRZv8PWY1OK0k%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1769086961\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=vOWwbhA4rUtCibZz7NqrqIYrklK3XhFRZv8PWY1OK0k%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769086961\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 3294\r\nexpires: Mon, 11 May 2026 18:38:57 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df18680832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b3c0873348670de74133a0210dd9b8be","sha1":"7107639609c06bb2f622060838a56c02239aedb8","sha256":"b32df290b8c23051c6eaf5cd73495bf67fb1a08cb75bd1d9e32901e8525747d3","sha512":"30d67353302f025d327703f87d92fe0af017f50dac3deefbe8e23754b51fca57d1d7f8ee7c574e22a54260fe2027b933bbe7b7bfe8c8242883eced8b7d32761f","ssdeep":"","tlshash":"37417de51438fc4c0941cba4f25e2121bc32a05f075e6736e6162e4d2f7401addd70e3","first_seen":"2024-05-05T03:41:42Z","last_seen":"2026-04-10T18:39:31.514102Z","times_seen":93,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.candy.ai/cdn-cgi/image/format=webp,quality=90/09c0f6c7-3779-4ec9-a94f-3275c09f282f","fqdn":"cdn.candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /cdn-cgi/image/format=webp,quality=90/09c0f6c7-3779-4ec9-a94f-3275c09f282f HTTP/1.1\r\nHost: cdn.candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 186012\r\ncf-resized: internal=ram/- q=0 n=0+0 c=0+0 v=2026.3.3 l=186012 wv=2026.3.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\ncf-ray: 9ea3df115b8532fa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 801535\r\ncache-control: public, max-age=2678400\r\netag: \"cfBaagu5H7rZZRuFfKEM9gb9wfphz51KjinyECayZ8DQ:95d2cf5dcd51505eb490cb5726c3a9ee\"\r\nlast-modified: Tue, 31 Mar 2026 17:41:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186012,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x390, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8abb3d5995aad5003b4a5d5aad6551c6","sha1":"322e8a7ccfb94487cad205f34d2905524bafbe04","sha256":"60b8dfb4089e82db035e0902c0012bbdfcb4cd4f9e657c9d4bb3975ed3adc8df","sha512":"02d97d022d0de148fe796c541592d1fd4a7f3c874ba0a754135072cfcc64d45cd6b0e860277aedc5466656628e77e7a056b422853e816860555d3423d65de7b2","ssdeep":"3072:NOJOaAl5l5Q1RA50OHkd4tJMfymhv3VHX2CImRFhrbPSE0UGt9tyIqq0MTt/S:EQl5l5cYCFD3ZG7wtP/0ztyIqq0MNS","tlshash":"7f0422cb6992cad745892fff96d06e0088cd546908d5d2d033ac6cafc6fce61d231b68","first_seen":"2026-04-03T15:34:49.230379Z","last_seen":"2026-04-10T18:39:31.514741Z","times_seen":11,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":32,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/17559036072/?random=1775846337955\u0026cv=11\u0026fst=1775846337955\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026label=D1EPCLy6vaIbEKjB5rRB\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026data=ads_data_redaction%3Dfalse\u0026em=tv.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:39:53 GMT","end":"Mon, 15 Jun 2026 08:39:52 GMT"},"fingerprint":{"sha1":"84:73:AD:21:D7:99:85:74:5C:48:5A:0D:AC:D6:69:F6:B8:C0:F7:92","sha256":"E0:8F:67:97:65:DF:94:C4:50:AD:BB:CB:88:9B:3D:53:89:9B:60:FF:F3:D8:C7:40:94:0F:14:65:BC:FB:C3:B8"}}},"request":{"raw":"POST /pagead/1p-conversion/17559036072/?random=1775846337955\u0026cv=11\u0026fst=1775846337955\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026label=D1EPCLy6vaIbEKjB5rRB\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026data=ads_data_redaction%3Dfalse\u0026em=tv.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/17559036072/?random=960889587\u0026cv=11\u0026fst=1775846337955\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026label=D1EPCLy6vaIbEKjB5rRB\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026value=0\u0026hn=www.google.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026data=ads_data_redaction%3Dfalse\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgSN4b0t\u0026eitems=ChAI8L_izgYQ1fy7hNf1zvNXEh0AbEfyko2UDs1_Ii68_OQcuk_pjNY41nPtgEZ0rQ\u0026fsk=ChEI8L_izgYQ6vGi_L2v4-epARIsAG3Vor_rCpZ4Y5oFRJ7tSiP31fGk2ThNY2oRJoQObSRp3PSs8koaiUu-CtcaAhBW\u0026pscrd=IhMI9vudkffjkwMVBw6iAx2qYjq2MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhFodHRwczovL2NhbmR5LmFpL0JYQ2hFSThMX2l6Z1lRcW9mbGhkTzRrTG4zQVJJdEFFYkVubG1NX0lMT1ZOVGFOSWwwU2tnQkZraDJFRFM5QmcxYUVmaWc0b2ZjTVJReG5BR1FVZS1iNTY3V3oMCAliCAgAEAAYACAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/icons/gender_switch/male-white-b1c60bef78d9065208e08ef4f03bea1d2d50bc8b33c3fb2fe9361a3c83646a92.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/icons/gender_switch/male-white-b1c60bef78d9065208e08ef4f03bea1d2d50bc8b33c3fb2fe9361a3c83646a92.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 751\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=b7sS7aCQbUqi8xc5CM0mOkhvIGHaIqH7MLmVIn3d68M%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772469952\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=b7sS7aCQbUqi8xc5CM0mOkhvIGHaIqH7MLmVIn3d68M%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772469952\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 4343\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10d9e532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1505,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a4cc150451c3835ed0e0c7c80559db1","sha1":"7b4db886e0006020570149412e15300510be32e4","sha256":"3b6dee9e20436c91925e3dc226fc57bb07aabb17700fe28ce08c4e48b9fcc6b0","sha512":"99e49c3f5f7ed8cfaedd7d2bd3297ad481d120e4ecc70ae40dc1356f82657c04a5e9043219ead050776eeab14a9a060c278337a15f41fa530d3a9f832f0736aa","ssdeep":"","tlshash":"ee3115e566d8b2d0b586cb40d826d17bf48734fd7b4d4f1ec184ca5cb9521e0a98cc90","first_seen":"2026-02-24T10:56:43.29505Z","last_seen":"2026-04-10T18:39:31.515345Z","times_seen":30,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/socials/facebook-57300cc353158ad02dca60b13e768773e5b53d631f9ff9a9b84da0f913001df1.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/socials/facebook-57300cc353158ad02dca60b13e768773e5b53d631f9ff9a9b84da0f913001df1.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 390\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=N7Nbj%2BaagHttDmanPQmgVhPBo5pK%2Ff7IatK56bs5ADs%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1770732380\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=N7Nbj%2BaagHttDmanPQmgVhPBo5pK%2Ff7IatK56bs5ADs%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1770732380\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 6395\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10fa3d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31849526e839ec9040e4556b3585217a","sha1":"ef22bd2ea4f369f0b1597fcbf0ff785e4ae70c4c","sha256":"9a6432ceedcd2bb60f78854fbc7adb35d684d93aa01e83f33bf80181971db6db","sha512":"7dde0b51aa117398e2e6d2bd37db5573957e49969f124b62d46875d32847b966c3d34b26c4b667269d04ac2c7d73fa8e4f182f1ca3226eb30bda65021fce20a0","ssdeep":"","tlshash":"5501c06a4188b54d4e0d4710cf1879b4066b0ea5262d8f48b150e740be0ca52fc588b7","first_seen":"2026-02-24T05:17:27.164536Z","last_seen":"2026-04-10T18:39:31.515957Z","times_seen":10,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900\u0026family=Roboto:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;500;600;700;800;900\u0026family=Roboto:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 10 Apr 2026 18:38:57 GMT\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30735,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4cfe73bc384f8256c72f2bdfc7419354","sha1":"ca9a1391e5202fd5564acf6fe3a9e4289d29ec5e","sha256":"cc33088ba12dafcfdca621f6682d4628e167353c7aa3abc3fcdc885aadf2ee37","sha512":"6a19da6f978230edab36dc8ec4a3e15eb3fdddc43d2e15b8c2475718585d7530a0236dd200e41d73499b0f13813f1ae0d5a611e249844c9d9f8f6353a305beb7","ssdeep":"768:WDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVKy8:6yll3","tlshash":"05d241a1042754009b834cd223cebf36fe1f92517041d0b9abfd5baaaddbc66436936d","first_seen":"2026-02-22T21:56:19.976088Z","last_seen":"2026-04-10T18:39:31.516546Z","times_seen":31,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":122,"dns":6,"connect":7,"send":0,"wait":18,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/rmkt/collect/17559036072/?random=1775846337897\u0026cv=11\u0026fst=1775846337897\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=gtag.config\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xec\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026_tu=CA\u0026data=event%3Dgtag.config\u0026gcp=5","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /rmkt/collect/17559036072/?random=1775846337897\u0026cv=11\u0026fst=1775846337897\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=gtag.config\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xec\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026_tu=CA\u0026data=event%3Dgtag.config\u0026gcp=5 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-10T20:55:51.639793Z","times_seen":785914,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=2\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026ep.ads_data_redaction=0\u0026_tu=CA\u0026gtm=45be6481v9189513968z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~118128923~118442252\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16632358160\u0026tid=AW-16632358160\u0026tft=1775846338401\u0026tfd=3268","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /ccm/collect?rcb=2\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026ep.ads_data_redaction=0\u0026_tu=CA\u0026gtm=45be6481v9189513968z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~118128923~118442252\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16632358160\u0026tid=AW-16632358160\u0026tft=1775846338401\u0026tfd=3268 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/sidebar-icons/en-337bbb31fb6de773da4d64ab2e90f99d4706f32ade21156a47b8603dfeccb1e4.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/sidebar-icons/en-337bbb31fb6de773da4d64ab2e90f99d4706f32ade21156a47b8603dfeccb1e4.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 939\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=EwhxfHVTTInbk4DTomp%2FwZO1qGTEvI0QbuRclkEeogM%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1771600520\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=EwhxfHVTTInbk4DTomp%2FwZO1qGTEvI0QbuRclkEeogM%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1771600520\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 2003\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10d9e932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"265aa2c5c2e758d088ac41f804423958","sha1":"d1cffd4fb409501760074f83fd5d78d00fb3c11f","sha256":"1a7c179300697defd0cad47978480672842cc939650528cc4a8b8f811510d63d","sha512":"03224e0af136e013ca91b6bb67adfba92b4f99818c38fc878596a5a24ebcc7f13b883b238b5c9b700e78dc9a27576895cd5627e2f75d132f48f9f2a44d864c62","ssdeep":"","tlshash":"784146f93248b1d4650b4b41da5ffc55b21eb4f9bb4582d65400fa84ad015bd8d0aec8","first_seen":"2025-06-14T04:06:33.236272Z","last_seen":"2026-04-10T18:39:31.517153Z","times_seen":82,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/sidebar-icons/check-099c7a4ee7fa9b6938587d46263179878670dc3e9c40ba1651f8b20ec98eb0aa.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/sidebar-icons/check-099c7a4ee7fa9b6938587d46263179878670dc3e9c40ba1651f8b20ec98eb0aa.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 262\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=y3upopoyQ7zpPEIzBWa5%2FxxhSvjA0AJu5qzJc6PtY1w%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772220262\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=y3upopoyQ7zpPEIzBWa5%2FxxhSvjA0AJu5qzJc6PtY1w%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772220262\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 3444\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a7132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":393,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57477a64534d6fba5e618b09d77080be","sha1":"eb1a3b57d2e84bf8557233186c79ffe4d7fde8f3","sha256":"cc59754322987a348a844a06878be92e3a3c190e9539639a469606f3adad2135","sha512":"7b46fa34a1128c354651da5928dcc9255c45236a9706bc0d34bbd87cfe6ba7356d7d43e462f3a5557dd43eb56ba7fa8db8261f9c64b4e874443c0bafe6dacd0a","ssdeep":"","tlshash":"44e068fcb388b80984d6c720fe3a066e2007c8fa4fc887c2f48c6959ff0659394261a4","first_seen":"2025-10-16T23:24:35.230998Z","last_seen":"2026-04-10T18:39:31.517802Z","times_seen":44,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=2\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026ep.ads_data_redaction=0\u0026_tu=CA\u0026gtm=45be6481v9189513968z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~118128923~118442252\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16632358160\u0026tid=AW-16632358160\u0026tft=1775846338401\u0026tfd=3268","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /ccm/collect?rcb=2\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2Fcandy.ai%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1816713251.1775846338\u0026dt=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026auid=1283755403.1775846338\u0026navt=n\u0026npa=0\u0026ep.ads_data_redaction=0\u0026_tu=CA\u0026gtm=45be6481v9189513968z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~118128923~118442252\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16632358160\u0026tid=AW-16632358160\u0026tft=1775846338401\u0026tfd=3268 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://candy.ai\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 09:37:54 GMT\r\nexpires: Sun, 04 Apr 2027 09:37:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 550863\r\nlast-modified: Mon, 15 Sep 2025 16:35:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8d91ec1ca2d8b56640a47117e313a3e9","sha1":"a9e9bafe64666f4595051a0e895b47a5fa39e67e","sha256":"78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb","sha512":"bd3a864bd45f39ee83ee79ba4469a156ad8ff3dd33d8aae11e3edd97b29c2ef7f610ac851726041251e34b0108f618a2f945038bf6c0de9a7982e0d643cdfcfb","ssdeep":"192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb","tlshash":"68f19de0200937e4f73d5feee6276b7f2e2edb05e25305aa7556014c69de39310d21a2","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-04-10T20:25:33.15122Z","times_seen":57975,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":77,"dns":0,"connect":9,"send":0,"wait":10,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.candy.ai/9b77e7e8-7adc-40af-87e6-7fff1b4cb19f","fqdn":"cdn.candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /9b77e7e8-7adc-40af-87e6-7fff1b4cb19f HTTP/1.1\r\nHost: cdn.candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12970\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"593683f1b3a88b81c9fbbaf854e22f4e\"\r\nlast-modified: Wed, 04 Mar 2026 11:54:01 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 589\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-ray: 9ea3df113b1a32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12970,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 478x270, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"593683f1b3a88b81c9fbbaf854e22f4e","sha1":"66b5f1d7b39157a829f79f65c98fc070b1b25a07","sha256":"a1e70d5beaa717399840be6c9d40cfb33ab36b9c55f9d285bad1f40eabebdfec","sha512":"f85c8020ea1eb7137644002de1642c2f3c56f41477e31e36723d4e38291d83e1c1275676a86d787539a54272ce6aec49281c239c25d3d9b97d66eddd5619aa50","ssdeep":"192:oTnPGWpRK9v6n/7SZYUBnZ4GhuWnpm9YMklpDs7gZdCd3UJBTaYWhN4swUzN3:AGOs9inzfUBZtucrDlZMGJaJFwI","tlshash":"1242c0fb5212e8cf567cbbc1fbb2290095048e64cf4c7ea621734ad08b13d4e8e98a55","first_seen":"2026-03-07T01:28:05.323123Z","last_seen":"2026-04-10T18:39:31.519125Z","times_seen":8,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/specialgothicexpandedone/v2/IurO6Zxk74-YaYk1r3HOet4g75ENmBxUmOK61tA0Iu5QmJF_.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/specialgothicexpandedone/v2/IurO6Zxk74-YaYk1r3HOet4g75ENmBxUmOK61tA0Iu5QmJF_.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://candy.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 21:32:10 GMT\r\nexpires: Sat, 03 Apr 2027 21:32:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 594407\r\nlast-modified: Wed, 23 Apr 2025 16:07:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24608, version 1.0","md5":"b5aac1eb4f70878f3145b1408653c263","sha1":"ead6c2fa27665d5e1840922dd4ae904dc8666309","sha256":"40f987b3cccc85c1225701ca0eee753fc790b25807da1f6f653a3da71c5f5d1d","sha512":"999fb34e276714ab2a1f4a58b9965b89f22b13cb80ed0102c25fc8cd51756801e05c57a50cd472e299b3149bca7e6fd493162d2ada3eed6a048fd2ed384f06be","ssdeep":"384:lfrowIvntsczbcPxP4/ren09nqSAg7eIRIADCayv/3ez3VuQQ6huOf2iH9qwL1lU:lfnIfts2aJ8bbzZI6unqh9z1NJA0c","tlshash":"d8b2e1530a6ad22c80ff417b50656366832cf2ec369f8e470150cbbf765279622f9c6c","first_seen":"2025-07-07T01:34:46.657031Z","last_seen":"2026-04-10T18:39:31.519753Z","times_seen":36,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":71,"dns":0,"connect":22,"send":0,"wait":8,"receive":3,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/17559036072/?random=960889587\u0026cv=11\u0026fst=1775846337955\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026label=D1EPCLy6vaIbEKjB5rRB\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026value=0\u0026hn=www.google.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026data=ads_data_redaction%3Dfalse\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgSN4b0t\u0026eitems=ChAI8L_izgYQ1fy7hNf1zvNXEh0AbEfyko2UDs1_Ii68_OQcuk_pjNY41nPtgEZ0rQ\u0026fsk=ChEI8L_izgYQ6vGi_L2v4-epARIsAG3Vor_rCpZ4Y5oFRJ7tSiP31fGk2ThNY2oRJoQObSRp3PSs8koaiUu-CtcaAhBW\u0026pscrd=IhMI9vudkffjkwMVBw6iAx2qYjq2MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhFodHRwczovL2NhbmR5LmFpL0JYQ2hFSThMX2l6Z1lRcW9mbGhkTzRrTG4zQVJJdEFFYkVubG1NX0lMT1ZOVGFOSWwwU2tnQkZraDJFRFM5QmcxYUVmaWc0b2ZjTVJReG5BR1FVZS1iNTY3V3oMCAliCAgAEAAYACAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /pagead/1p-conversion/17559036072/?random=960889587\u0026cv=11\u0026fst=1775846337955\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026label=D1EPCLy6vaIbEKjB5rRB\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026value=0\u0026hn=www.google.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026data=ads_data_redaction%3Dfalse\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgSN4b0t\u0026eitems=ChAI8L_izgYQ1fy7hNf1zvNXEh0AbEfyko2UDs1_Ii68_OQcuk_pjNY41nPtgEZ0rQ\u0026fsk=ChEI8L_izgYQ6vGi_L2v4-epARIsAG3Vor_rCpZ4Y5oFRJ7tSiP31fGk2ThNY2oRJoQObSRp3PSs8koaiUu-CtcaAhBW\u0026pscrd=IhMI9vudkffjkwMVBw6iAx2qYjq2MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhFodHRwczovL2NhbmR5LmFpL0JYQ2hFSThMX2l6Z1lRcW9mbGhkTzRrTG4zQVJJdEFFYkVubG1NX0lMT1ZOVGFOSWwwU2tnQkZraDJFRFM5QmcxYUVmaWc0b2ZjTVJReG5BR1FVZS1iNTY3V3oMCAliCAgAEAAYACAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/17559036072/?random=960889587\u0026cv=11\u0026fst=1775846337955\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be6481v9230592360z89164096164za20gzb9164096164zd9164096164xea\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384406\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcandy.ai%2F%3Foid%3D1%26affid%3D37%26source_id%3D2F9RTRK_%26sub1%3D963118c47b3d459ab3b6e707eefca2d4\u0026rcb=7\u0026label=D1EPCLy6vaIbEKjB5rRB\u0026frm=0\u0026tiba=Candy%20AI%3A%20AI%20Girlfriend%20App%20%7C%20Chat%20w%2F%20Pics%2C%20Voice%2C%20%26%20Video\u0026value=0\u0026hn=www.google.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1283755403.1775846338\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026data=ads_data_redaction%3Dfalse\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgSN4b0t\u0026eitems=ChAI8L_izgYQ1fy7hNf1zvNXEh0AbEfyko2UDs1_Ii68_OQcuk_pjNY41nPtgEZ0rQ\u0026fsk=ChEI8L_izgYQ6vGi_L2v4-epARIsAG3Vor_rCpZ4Y5oFRJ7tSiP31fGk2ThNY2oRJoQObSRp3PSs8koaiUu-CtcaAhBW\u0026ipr=y\u0026pscrd=IhMI9vudkffjkwMVBw6iAx2qYjq2MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhFodHRwczovL2NhbmR5LmFpL0JYQ2hFSThMX2l6Z1lRcW9mbGhkTzRrTG4zQVJJdEFFYkVubG1NX0lMT1ZOVGFOSWwwU2tnQkZraDJFRFM5QmcxYUVmaWc0b2ZjTVJReG5BR1FVZS1iNTY3V3oMCAliCAgAEAAYACAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T20:55:54.129822Z","times_seen":13593502,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/homepage_experiment/avatar3-ee9f52df321e2f70e91d6a94d71f02103cfdd1ee89907dea5e4de68d9288dc8a.webp","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/homepage_experiment/avatar3-ee9f52df321e2f70e91d6a94d71f02103cfdd1ee89907dea5e4de68d9288dc8a.webp HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2482\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=N8bdYlOO6zXfBIoUvcBimocLIzMUvqiK4o3lKTEu5rQ%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1769089419\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=N8bdYlOO6zXfBIoUvcBimocLIzMUvqiK4o3lKTEu5rQ%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769089419\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 6340\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df10fa3232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2482,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"98a444b03ee38c04fb905af7f30d8899","sha1":"d828ddc78ab9c6e0a024d36586deb03e92f9c25c","sha256":"78a93d1a84130fc47c81bf0ab04ae5fef24f76c8891030ed91f108c97fd53cf0","sha512":"6abe34f398054e05a622856385dda625a068a11a873ef5a096db8fa5e4a42a2ca70e3edf8f7fe3367dbc3cf7032b586852e2c741489d7969c503021712275c0d","ssdeep":"","tlshash":"9f515d5c05570b30cc9b9d7ac73565c59097c4d7a26ec4498998c8e32fd7881d066d4a","first_seen":"2026-02-24T05:17:27.202319Z","last_seen":"2026-04-10T18:39:31.520414Z","times_seen":10,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17559036072\u0026cx=c\u0026gtm=4e6481","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:57.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtag/js?id=AW-17559036072\u0026cx=c\u0026gtm=4e6481 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\nexpires: Fri, 10 Apr 2026 18:38:57 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 10 Apr 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 145506\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432392,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"afc8e7640edc2239403258e0b39ff903","sha1":"c11a4bdfece29390b0f1b346d4ba406dcb7f3450","sha256":"a407b6c272a5efd5e1e05ceb0a71cd716194e6f32316c4cff217ba30196d197e","sha512":"0d809a8ac8b6353b692e21d6695fcefeb747a11e89c0b117d5c3582494e4273792769aab38eb768a28bd8638af7fc09c963d6c829afe1d4e4f7dcdef6f845aea","ssdeep":"6144:SESj1w7Ww0e5OI4wlzqj8V5iXVl5Wc0CV+2pS3x8Xz:Ww7W4J7zY88Fj","tlshash":"249409ceb3d674625393f478903f018ba57a29e2b44cc899f189c8d42e7469a5237f7c","first_seen":"2026-04-10T17:47:52.29197Z","last_seen":"2026-04-10T18:39:31.521221Z","times_seen":2,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-DQNSP6409Y\u0026cid=442748788.1775846338\u0026gtm=45je6481v9189641916z89164096164za20gzb9164096164zd9164096164\u0026rcb=2\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026npa=0\u0026frm=0\u0026tag_exp=0~115616985~115938465~115938469~118128922\u0026z=2064319581","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:58.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:41:21 GMT","end":"Mon, 15 Jun 2026 08:41:20 GMT"},"fingerprint":{"sha1":"4F:C1:3B:49:C1:2D:F9:6E:7F:DF:FC:FB:F1:E6:4C:B4:28:12:78:7A","sha256":"8A:F7:A0:0E:C0:B2:9F:EA:EA:61:B4:45:5B:D5:0B:97:EB:26:AE:C6:53:94:D9:51:25:AC:0E:E5:9B:6F:3B:94"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-DQNSP6409Y\u0026cid=442748788.1775846338\u0026gtm=45je6481v9189641916z89164096164za20gzb9164096164zd9164096164\u0026rcb=2\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G111\u0026gcd=13v3v3_2v5l1\u0026npa=0\u0026frm=0\u0026tag_exp=0~115616985~115938465~115938469~118128922\u0026z=2064319581 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-10T20:55:51.639793Z","times_seen":785914,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":77,"dns":4,"connect":10,"send":0,"wait":24,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/close-ec898236eb501d13f4d1343d4a90ed1c0afec71efde2ed1e606916d52f2c5331.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/close-ec898236eb501d13f4d1343d4a90ed1c0afec71efde2ed1e606916d52f2c5331.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 385\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:18 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=b7sS7aCQbUqi8xc5CM0mOkhvIGHaIqH7MLmVIn3d68M%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772469952\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=b7sS7aCQbUqi8xc5CM0mOkhvIGHaIqH7MLmVIn3d68M%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772469952\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 2567\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a6f32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":814,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3412e63dbe09b8eccce0786cbced4e7","sha1":"b9092d7c088041bde45c66187dd1adeed479af2a","sha256":"5f277e7e60b19c133337f21b4096e1221173e0298f8f831759c5c3adf8dc31e3","sha512":"385cc2c44dda5f3da3f8014d21f69cf876802fae490caadba74c3b5be98c58f8df9f386cc573f6695645f7d8853f6ed56b7e95240f0c591a16c5e90d391b5f45","ssdeep":"","tlshash":"25016be5a69cc2509b93cf11dc15e8d0435931f7bfac922012c4635dbc450d5898c9eb","first_seen":"2025-04-14T08:06:51.105895Z","last_seen":"2026-04-10T18:39:31.522767Z","times_seen":113,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/pwa/modal-images/dots-2a69a24f9e943ecc76c29829e83f34ea204254c54945cf142d3ddb9555aec149.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/pwa/modal-images/dots-2a69a24f9e943ecc76c29829e83f34ea204254c54945cf142d3ddb9555aec149.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 338\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=goq6HPmf4%2BIlnxSIdZbsZvHuPTbeM84YYIW%2BBjSloAc%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1769082628\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=goq6HPmf4%2BIlnxSIdZbsZvHuPTbeM84YYIW%2BBjSloAc%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769082628\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 4780\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df112af832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":957,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6da1e07d79d36e28b54f62c1cdde455f","sha1":"04a2b389a7419d79833a22cebc4232e588df74e0","sha256":"15a6afc57a1c2228d3fba442ae7c34a5787530b5386448636c62f5b96cf1ece0","sha512":"5e33b1bb8d203fb52e834a6a8dc64762615eebfe3be6e82d884f1f8e77170036df70891467178e4b5ec57e92f80712009c80ddbba3119173212889aa2aeca641","ssdeep":"","tlshash":"a9110aec730409fe745a2710f202fa20542f06fb03a51ed097755db465e4b5e9fb7492","first_seen":"2025-06-14T04:06:33.228726Z","last_seen":"2026-04-10T18:39:31.523565Z","times_seen":81,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.candy.ai/39d6f9b5-628f-400c-b9e4-844522aa37b4","fqdn":"cdn.candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /39d6f9b5-628f-400c-b9e4-844522aa37b4 HTTP/1.1\r\nHost: cdn.candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 84216\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"baeaf962821499672f69b26edd05a1df\"\r\nlast-modified: Wed, 04 Mar 2026 11:53:55 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 862\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-ray: 9ea3df113b1832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84216,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1060, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"baeaf962821499672f69b26edd05a1df","sha1":"4d355ac66e41b4177d8b5f7028e4bf65dbf6469a","sha256":"db4eab7e2cc473d1f1bf7cf7fc6315c5ef93f86dd6dd6886462a5873deca210a","sha512":"8693f24cc5fad27075612ae98e7d3c01fa8b6486c082938742b38f774de081db63dbb90c0afd3d1a4b7402039d97fb645d8c831f6f7c5e6f66a83ae0f13a25ef","ssdeep":"1536:n8jQSNJMxCf0hiTXwBXT/ndFMl2w6anU2C37kmKwIuI7E4bpkXag3lq9hZSEvPF:GtNK66iTA11wRnU2xvpqc93tHF","tlshash":"8e8312e95ba0d415771bcdb1bd2a2b80cb06b3b7759b5039232106fa1c7b461cae374a","first_seen":"2026-03-07T01:28:05.277591Z","last_seen":"2026-04-10T18:39:31.524417Z","times_seen":8,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":46,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy.ai/assets/sidebar-icons/pt-BR-33b823262b0cbd0d178c687128f2cecaa1f10ab73288b423701fa79e4db88ed8.svg","fqdn":"candy.ai","domain":"candy.ai","tld":"ai"},"ip":{"addr":"104.18.0.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4","date":"2026-04-10T18:38:56.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 04:58:18 GMT","end":"Fri, 26 Jun 2026 05:58:13 GMT"},"fingerprint":{"sha1":"A4:7C:22:A7:4A:04:2A:4E:FD:B5:57:8B:72:03:05:6E:1D:0E:91:16","sha256":"84:FC:7B:1A:56:48:F6:D2:5B:C1:BF:41:F3:FA:68:2F:F7:4B:8D:9A:D8:7C:87:31:5B:33:2F:45:0C:50:3D:16"}}},"request":{"raw":"GET /assets/sidebar-icons/pt-BR-33b823262b0cbd0d178c687128f2cecaa1f10ab73288b423701fa79e4db88ed8.svg HTTP/1.1\r\nHost: candy.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy.ai/?oid=1\u0026affid=37\u0026source_id=2F9RTRK_\u0026sub1=963118c47b3d459ab3b6e707eefca2d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _chat_chat_session=6FzEsmls%2BnGIcP3sbsdPcOkhQovHUp7dNtHPmsSTaR8F8Ly0VDskN86RUbB0xmkBRk3JgwuaezhMl7LKbJc7Dj5f0aK27Rc1W8JUuifn6mLvkngOtNv4ZNIsgb5Ms1JEvzL6rgrNWVhzYZ6WnNUcUrM0D%2BzTbLWe6z9MCO2jYM5GWCueSy7wfUHyIJ5yiIOIq9MhmR%2BbQf0y%2BebprLfRluclaQAljpgHbakyiprr5WXpi4gqMji9%2BQrDL%2BKtGwpbMyvRQoOccOkYj8QUjloeJL4xIujRsZwrZmySlcXg9DxsRjPHh%2F9IIpxwURkF%2BJLAvut6SgSBcGjlOhG5MBgh2msc1GTvLPrrw9DlrKCPiakQhG20IrG0AVu%2BtfrAl141iuWOlAAGSI60FCvvrAoM9%2FYfzUKowQ1HG0QtnpI63X1rEJ2DtK0cyH435UG%2BXIMlepbhr1NGff3dNgXQiLA0Z4VrX46ulCSpwh%2B%2FWgit7FhyxXqI28ZRXRK4hgQ6x1Wdr%2FeFKl6I1SLm4rAoEje%2BkDsNVrFNp2qCucN3%2BJan8nEh2fUbhOfYASS2ymrDLETJv%2B9PlZwWadG9pf6fWizAWKLQ5yWL66ihQWfPStlArgX1v6Z2JTMmHQo51xCWvzrq%2F2IxzmXFlYuu0p7R6KL0tw%3D%3D--yLaW9r9X%2F%2FsLk3hF--arMVEr%2B5s%2BpwX89U4MjJuA%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 567\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 22 Jan 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=x8OMu4z7ARXg%2FWkCnhdWNIgkInFBrAco3a390Qal99I%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1772129933\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=x8OMu4z7ARXg%2FWkCnhdWNIgkInFBrAco3a390Qal99I%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1772129933\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding, Origin\r\nvia: 2.0 heroku-router\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 4409\r\nexpires: Mon, 11 May 2026 18:38:56 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df110a7f32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1275,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d0e7647741c91e267024c7133087ad0","sha1":"7790925f70c7f026ff777845f0d71773c2e1f65e","sha256":"03449922569e4d7f35442bf99ba8103deca4ed6b098ce4bf6d1591d121e415fe","sha512":"9961151b881d771ce864c8dcda74a84dea6a7bac108a753f5f3ce5a0b2086c480ecb64e57dfa2789b58f25c971e23b9223d7cdf4946750f88febd13983564c22","ssdeep":"","tlshash":"7f21adf5eaec858dd6159391591c697a12bc30ef27ab910037c25345ab49cfd0d536c4","first_seen":"2026-01-17T16:57:25.095488Z","last_seen":"2026-04-10T18:39:31.525217Z","times_seen":35,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
