www.candleheat.cloud/kgbhclhwv/swjgvfknf329iqqwxun/ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
200 OK 577 B URL HTTP/1.1 www.candleheat.cloud/kgbhclhwv/swjgvfknf329iqqwxun/ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (319)
Hash 0abd3ddad8314eb03380064fc762e54e
79a6215ecf914e41f1d7359d97a405ac36df5fba
4e60172dc83d521f125507c1f3fa62c972c0c2f8470dcb57ad22135799f70755
GET /kgbhclhwv/swjgvfknf329iqqwxun/ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sFKQ9j%2FoSORR3ZTn8th9RZSCxiV8MYzOL8XrbAqAqM5jlOUmqRaodMgWTq8wsEF8x87GbJZV4mEa2kTQgr8kKs5D8kpbUnZ9LJmuz1F%2F2FyRt2ePvsvVUe3zkdQqsp7lmkc96wMRWA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76c43c83e855bc8b-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d27590a1d3cbe1e9632b8ae92aaae3f4
202b34e8a0c3b88c8826fd56c6227b34f2cd6f46
6bcfa518476658128c1fb4ea2435c4e58531454cf97138dce7ece9def589aead
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6BCFA518476658128C1FB4EA2435C4E58531454CF97138DCE7ECE9DEF589AEAD"
Last-Modified: Wed, 16 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9288
Expires: Sat, 19 Nov 2022 01:20:13 GMT
Date: Fri, 18 Nov 2022 22:45:25 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 67f53a639d57dd6237b5be86fe4f6c1b
287f09532dc331228d09c20b75f4160e91e9800a
41913a8af366685c42af59e9d8e02fccedbe68a3313d2d9fe353deb0c1019075
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3826
Cache-Control: max-age=132567
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:26 GMT
Etag: "63775eeb-1d7"
Expires: Sun, 20 Nov 2022 11:34:53 GMT
Last-Modified: Fri, 18 Nov 2022 10:31:07 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3a38b6dd8a4cc335c026aebf2ed348b6
8a386e0ccb0ca4dc502746c45b2ebc3aa3f83cf8
8b4040a645cec1841a00a22765eb3a74978559daf15c54bd4b41b6b48aab7f95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B4040A645CEC1841A00A22765EB3A74978559DAF15C54BD4B41B6B48AAB7F95"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7779
Expires: Sat, 19 Nov 2022 00:55:05 GMT
Date: Fri, 18 Nov 2022 22:45:26 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 18 Nov 2022 22:45:04 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 22
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ktOhpb9APf5OuXSdc4QWe4Cv+YYoEoEz9JBL5uQG7sXQEIP6SxfaeXV6eXV+ynkoUcBynKb0Q4k=
x-amz-request-id: ECFVQZVDG3655K98
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 18 Nov 2022 22:15:46 GMT
age: 1780
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 22:45:26 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.candleheat.cloud/jquery-1.11.0.min.js
200 OK 33 kB URL HTTP/1.1 www.candleheat.cloud/jquery-1.11.0.min.js
IP
File type ASCII text, with very long lines (32341)
Hash 95fe3f4dd117c33f6015e1c3d6df1d0d
d5b8856932d1ea63f51824de0bb50670d2e960bc
e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16
GET /jquery-1.11.0.min.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/kgbhclhwv/swjgvfknf329iqqwxun/ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 07:16:06 GMT
ETag: W/"636a0236-1787d"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3055
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zB4C%2BSzbz8v7Pi7j37Z8U4Ke46UHnZJslt33Oz3HB8EAitj919Fa%2Flc78u6hXNyy6O0EqnKl47nNyjo3P1f16dzKhSlf3NCucU1Kb2x2ciqzF7Oy1Zk1%2B7DR8CyItdpA5teHHRiYSA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c867ab7bc8b-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 16bbadb18616687351d4047aedc2ab45
979123c7ad6726befbbab2c07b50ecca31aa2d18
de8231c6ee426b7a76ebf574998dec11ce908efc0a745c2182fb7b61c5915e9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 18 Nov 2022 22:25:01 GMT
cache-control: public,max-age=3600
age: 1225
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fe40cc6ea871d80382b6082111393fbe
281f75d0a35dc8ef908bb0500e57abd86bd5388e
6d15422cdf7a6d72d06497188f27af893682314e82ac8a189a0ee2d798cb62d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2631
Cache-Control: max-age=126321
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:26 GMT
Etag: "63774b30-1d7"
Expires: Sun, 20 Nov 2022 09:50:47 GMT
Last-Modified: Fri, 18 Nov 2022 09:06:56 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
www.candleheat.cloud/clicks/SleepConnection_files/analytics.js
200 OK 20 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 591d54bd92cf26b373257e9fb7a33f6b
a55b132ed25dee24900bf1d4672336ae640f22c8
851e9a6d089fa3f28cae238a77546d6e195f7148c8930e40636668d66b294fb0
GET /clicks/SleepConnection_files/analytics.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-c41d"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3053
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mo7cHzxaCE2htQATWQanQoIQj2OybeWOTY69Yq%2BOvUdXb3xTJtrZQdxV6h6t2d5WjWOWjfhE4zwY0iYDFv8EL%2BC%2FS5RixzVEnqxVQfakC07YYYzHbA%2FpVBnPMZafqqamENBYXRcrVA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8b08de778f-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/fbevents.js
200 OK 26 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/fbevents.js
IP
File type ASCII text, with very long lines (64343)
Hash 607fd0796037f5273840bd18de1ed9c2
03c73fb568ca20c59e4be006b883c3ba6e2eb4c1
484b53e9b3915beb71154f7b6efbd16e78a186ff7b2df750dd5bf5793e79fc04
GET /clicks/SleepConnection_files/fbevents.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-18de3"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3053
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NC%2F2N6kf1obhONR4W%2BIXlRBbcaNUpiqkTA5I3dCHJ7hL%2BB8AZY1C1AePewfdH18lEKHE9tD8gFfBvYutJeyWH%2F0FtmZxYpuutYduu2msOlqbyELC1EXAzr8tGAdWs05ynfNJOZLQPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8b08d306d5-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/gtm.js
200 OK 41 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/gtm.js
IP
File type ASCII text, with very long lines (6433)
Hash 12b2ac17b6e6735d17a48444dbc3ff0f
abea39270e05e0a8f22a558fa8e0bec56da8df10
8a42096f2579983fdcea2031bb337003ec0ceff9f1e34782386fcd197c894bb1
GET /clicks/SleepConnection_files/gtm.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-1ae91"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3053
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O%2FXDVl4JEyL0HuIZmysZ%2FVC%2F2V%2BzhMCbGd7s%2Bbmhi%2Fku64OsGoN4olRXCV3UgB%2FKhcxE1rTd0ZzZcA%2B3rypckx7%2FuuuxetI7YDTEtLHetnDKBtPtA6YgrPc6QGA3cPesDYnkrE5TAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8b1c13777d-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/66dff31435.js
200 OK 4.0 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/66dff31435.js
IP
File type ASCII text, with very long lines (10594)
Hash 041ae29c4f9228e9fc628393b842a669
50e9e240d10ebda23ffcae1038f651a6a3f867cd
4832f4c06c7bc1b6dbadaabd2c46522345c8d6a95d0411a2a0a1bfed61be00e9
GET /clicks/SleepConnection_files/66dff31435.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-2b10"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2927
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pqU05Gz3%2FFUPI%2BdOl%2BEJmXxIOKG%2BaGXWZdwqml8fV2AXitTl9FIUN8A%2Fgmbi%2BtMGa5EeamtvPe9Ux3U1zRE%2FdgYKTL6TPMGv2bFOxsBmehunC0nQ%2BRBboCVE6FrUrPi3e0tNY5%2BeyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8b1b59e640-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
200 OK 3.2 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
File type ASCII text, with very long lines (15953)
Hash ad40df06eba02b545cb2525a55735458
cdbf89fff534116a0e15cd7866741fd759678055
bddd06f3e866f1858bada4998396eb893b10747b143160764bf3660c164fd46d
GET /clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hrkOlxK9vAiVAiyQTvcVr%2FAA6bj2q6zy%2BKXqVl4UZ1Rx4rGhEXj9enOJkUsSdfCpags6sIVY59%2BNvXCDkCn%2B04ifldeg87lArkhMf%2B8ordjcSI%2FH7NJRsqXnCJiIf4YvxnnvgcooWw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76c43c89ddcbbc8b-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/wp-emoji-release.js
200 OK 4.6 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/wp-emoji-release.js
IP
File type ASCII text, with very long lines (10927)
Hash 44c878a68bd7aee913f82be76ab6c47b
69019989da92b51b397150ff0f6d334e1d4a63b6
e660f8e44094df53c821629ea6c3eee4456977ba9a7b01f5dd14ca304f835d2f
GET /clicks/SleepConnection_files/wp-emoji-release.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-363c"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K9tMcV3D6kTOrKhdltnGx5bIJ9Q0CKB%2Bgc7nXcFB3gJ%2BfBrU0VVdlfS%2BPZy%2BfTUaQXYPmciPpMCKngGJbJF4mD7gWPiCNIj6B7RozfrmjrcCdPSevdrWevtqLsfo6LUmbusNzUCpIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8bbd16777d-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/animations.css
200 OK 2.6 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/animations.css
IP
File type ASCII text, with very long lines (10019)
Hash 4c70bb5ced8549969c4fd5763e3ac298
20cb3c388b2e002b67b3d0f3b4be087b16d19976
f28829988ee5fda24ab97ab7f0a729e5d1a11a047c39f2947905f0d33ebc217f
GET /clicks/SleepConnection_files/animations.css HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-4824"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3056
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3WIi5BeSCRK5ToZOVp9zx%2FB4W4jXZ5ya3nRRsplHqH4ECtzRBC%2FmG3KRaWsRXjaNGcB2hzVDWhKl4AySWZwzBRCkWelH%2BwLQVm7LRis7uGJS%2F5WcX8A4cg%2F3tMuuomVubsybfmho0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8bba38778f-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/global.css
200 OK 735 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/global.css
IP
File type ASCII text, with very long lines (5563), with no line terminators
Hash c5f23c6ef2a7d927c8724971c8939e77
5e61db142a486927d03fb9b23e451d6e7075fd08
5a6621f0377cbfb199a7f69e8b9d9f0f6b5141202a4596fefa33b47c2b80f29a
GET /clicks/SleepConnection_files/global.css HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-15bb"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3055
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JJ%2FGYHhUygyrljChmCDS0s5jaUW5%2Fl3%2FNxwwuLWRvqmmJH576y9vC4MMNGXptSnbvesYYBbsjOpBYhBATZAfjcWOI82buWHm4o9yRz1sGNyIHhdXnbpsfbRTtJTb5%2F%2BE9bvyb6UBfw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8bcfa1bc8b-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/post-410.css
200 OK 1.2 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/post-410.css
IP
File type ASCII text, with very long lines (9730), with no line terminators
Hash 5494427e8081d127e03068ab214cdd79
c535cc9a4e1bae020dff6819103595a4e209a21a
d83ae29d6cefadcfd2c6cbc761bfb6241a9d735a12f20dd2cdaa3334e2395471
GET /clicks/SleepConnection_files/post-410.css HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-2602"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3053
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uVvX5vKU1v4xI4%2F%2B41lPRDhfip%2BeWnZa5KU%2BhL9KNz%2F57TiUHN0PQGdbSNjaR9Nh2jtMhiFqZuKyvWcfr4ehF915fN9chElOdjCQmmVIuwNzP3khM%2BIYh%2FxRoeLlst34ezfFT8nVkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8be9df06d5-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/css.css
200 OK 2.4 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/css.css
IP
Hash 884c85855318af5f3de085fc932abffc
853b1fd29bf048269fb901affb0f3788f3a81171
83f663802b04684ed114a74bf6b60e527b692992414bd998d1de4a728241d77c
GET /clicks/SleepConnection_files/css.css HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-13168"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3056
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K0XbBPoCK0Gr4EZImsoK15wPwRsm97c6DComh8%2FBXlI0NJFNmAo76C%2B%2BIhHcWoF0smbCm7LHvIjgS1Ntd86izDx1kYleP0YG2rZCz4g2zpByOe3Kwvs0CAtjn63Uyart4ncCjJCRiA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8bfd6c777d-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.googletagmanager.com/gtag/js?id=UA-22484186-3
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-22484186-3
IP
File type ASCII text, with very long lines (1921)
Hash a5a9c2b59c3c0674f0265403ad071079
632f1358e2dc877e5639e24cc2b09775461633dd
05fb1ea1865cb7d6ee879664600e913f9afbaddf739cb8f8f71ca6ea6c011790
GET /gtag/js?id=UA-22484186-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 18 Nov 2022 22:45:27 GMT
expires: Fri, 18 Nov 2022 22:45:27 GMT
cache-control: private, max-age=900
last-modified: Fri, 18 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43613
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.candleheat.cloud/clicks/SleepConnection_files/solid.css
200 OK 310 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/solid.css
IP
File type ASCII text, with very long lines (482)
Hash 75cef4c54b9c37dc12391dc73cb9c622
c686bbae4186b699ca8bb902454b029bbd19ef49
a0df25312489d04feba47689c98d964cebd39150489bc0a4ed257465bbb67274
GET /clicks/SleepConnection_files/solid.css HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-29c"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3055
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OZH7Fs9EIp%2FQXU9CE3oaPV32WasTFRN5pDE7txs4GlssFIAJon3k6f%2B3NQisl5qyhxBGeWz2yOCWzi6tJHXTl5askKZ5Bc7%2FUa87nMikcBP1ZN%2FZomHsmjTEGogCOk%2Fie7oETxtdRg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8c0fccbc8b-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/fontawesome.css
200 OK 12 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/fontawesome.css
IP
File type ASCII text, with very long lines (55567)
Hash 8a241f544ae834a548c776771d6294f2
50a07c5332016e43376fc40787fd714cbcaf9e6b
a0a44ccc9ac1247f99329c0a99884d603bdc76325d0c7da984322856bee50b2c
GET /clicks/SleepConnection_files/fontawesome.css HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-d9c9"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3055
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OeRcHuBQu10CYf7XGCZDywVwKybcbwfoNw3uq%2Bnb%2Fo1o%2FySUbr9pHFWq6wnxPh20LlJ7xpCIIypaQLadZflFd2wszpb6SMxZO7KapoJziDDsbE1yer3JT25l3ZSXCIW5KoKxZHWB3A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8bea9c778f-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hUV+nOK19Du8xO9zv1Wx3Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: p61sd/22wuzx2hdTCoGEnSyKDYw=
www.candleheat.cloud/clicks/SleepConnection_files/style.css
200 OK 1.0 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/style.css
IP
Hash e99b51ef4084cd73f88cb7a91d894af9
d092923bdf3e3625fb1c7d5447825afe0ead22a1
b04c604b656626b3f8952e397e0516851e219d246f8838337b7a7b1235285e91
GET /clicks/SleepConnection_files/style.css HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-99c"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3053
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zfn8Py%2B4jHTwkU2bAAAGy8pzhMgR0Sghc79nrJ5bz2YXllFCqsA1u5z94D9lYter%2Bf7Rj1Wr6jMtda32bCZOnBNYMTnPc0SKhZA8RYhinYVu2utLHSb%2FHqzuNV17XitnSEjb3iaDAg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8c1a0b06d5-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/jquery_002.js
200 OK 34 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/jquery_002.js
IP
File type ASCII text, with very long lines (31997)
Hash 81b3900d90d25a6b8f3b58ceed629450
52b5b6fdccee288955712e7a82165351777ea6b0
3c799d9165bc9380b8274968eb72f1ed898d50ea75f41fafe9c0f3638f228781
GET /clicks/SleepConnection_files/jquery_002.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-17a69"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3056
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KIlqt00rMlBNrK9Ujbz7ZUtUC4sfZ71TxtMigCjJgwBLaoAY%2FLxavKQpv64qMQ1fOMtjFetjMGHlpOEA2jtlTGBBF9gF0kAhhDuDEiZ7o7oxMe0OOLpnR4zNUiAuRYJ9QT225rMP6g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8c2db6777d-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/jquery.js
200 OK 692 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/jquery.js
IP
File type ASCII text, with very long lines (1147)
Hash b0f0e27b47d584e46e466a11c6efef14
b27ba27d86d69362eaf1304578aca91221ca5c51
ef07cae09807150f7ba902fa76f8a1b7c5affa782b71026bc8ba009ac56d0c34
GET /clicks/SleepConnection_files/jquery.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-526"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ApWADC2gqZdCqfSzSsxRI38TaxJRlvt6QSiCdKNQ0o1iJUT5dQhgh%2BRTKOg2Y9gf5hFhKnAlV%2F%2BlOCw%2FKFmCXuKHHn8bryiZHDD301qECj3MMEhSYqTiXi1eUhxUHQumgghwbgN4rA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8c4a4c06d5-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/jq-sticky-anything.js
200 OK 1.9 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/jq-sticky-anything.js
IP
File type ASCII text, with very long lines (7245), with CRLF line terminators
Hash 8003438bf997fd9277a159076354cbe3
d52b0a136d663c7fa7c66ae6377a00091c7a92de
1d9784d5466546a791423ce807992fc61af9f486fc4ec8b20e7d02e3648997b5
GET /clicks/SleepConnection_files/jq-sticky-anything.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-1cf2"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3055
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a0%2FjX5empg%2FRYamakxFmqHISm2%2BXyNNh5VoMzw1dlljo6bUHag8JLvMoWTpg5B0sgJT5hk9HoBbkx0O7fb4Lf56xlXBmD3Z2nrodGkVzk635WLsccGYz%2BFkAqpTEaGFyy2yioT4KSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8c4b35778f-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/js.js
200 OK 900 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/js.js
IP
File type ASCII text, with very long lines (1709)
Hash 02dc85e8fe1e05bd2e8963a4fb8abb2c
389b8e8900425f359a29831c06aca306a5a7ec3a
a1602c9895d527a385d935becf0c305b9dd7c93e213ec32653575bdaf67534df
GET /clicks/SleepConnection_files/js.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-6d7"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3055
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wUHAoTbiM%2FyNAZmVa%2B56TFj70FTcudqE6Qd3SJebevMfUmTeFRo7Pftf1bdhf6bNNubBzaXvJ3xscK8kZAzT4kC33eLq9VOKOwdyrvJPMYybaGyKizqvql%2FMeT6T7d79YHQZkvRYVw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8c6e13777d-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/DMCABadgeHelper.js
200 OK 275 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/DMCABadgeHelper.js
IP
Hash 45b235fb87b19eb2f5be4363d7f1ac52
7491f288afba6f25eca00247be400e20d3914eb3
086f75c995c89b50bfa807b21044a82d240c75f7307ff724a5d1a488c85719a4
GET /clicks/SleepConnection_files/DMCABadgeHelper.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-1d1"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XKvdG9JdxW%2BaGrUm6MLz%2FSiBQDIgu09qRLRRmxFXU7VNmAnAoupmkH8hazreuW3XZuQ9OG6dUtsoF%2BIiJlwJDK4C2d%2BuD8GAWbRPhASvUre0plw0paGBMDrYiAsjXJliIOl4f%2Fyx%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8c8aa406d5-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/stickThis.js
200 OK 331 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/stickThis.js
IP
File type ASCII text, with CRLF line terminators
Hash 771ee5832cc028d407e7965ceadcb8cb
f4d8260d4d362b2b2f1fc6096e3d0f7032e41036
e8b6b612fb832b0097e04e35de8baec1200e2c0f14c0018b13e8f2942e09bd3a
GET /clicks/SleepConnection_files/stickThis.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-2d6"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3055
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9r8DK44AehmhVk92k45VFjdKlZLmNMlYdzyUIP11Yy9%2FOUYIZenllZYfZZNfHoIaxBmn7pG6xTPssLP1%2F%2BaP8L8rbkqYqejD3VgSO2chiyvZ2F0cPS%2FJyi1mQ5zg%2FxYn%2BV%2FPDJmwVA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8c8bd1778f-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/public.js
200 OK 8.0 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/public.js
IP
Hash a569217b9028b3d65b574448a1ba8021
befa37b28e08f4c42fd4f3e5fd5cc400b0577808
45559323c238da41a8ecc059621932a74cbeaf46d7178d735bddbf66276ebebd
GET /clicks/SleepConnection_files/public.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-c76c"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3055
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KqfrLCw%2BMXuQObOkajPYJMXKM8fDWDy9zTxl57TXNHTWVljdgT8cpsDPl616s%2FqCwGBY7umC6KXkYTDoKCCOjGj3orUKLgdmsY6e53nbJg9R7ts8cw4dq%2Fqf0NftgS%2F5JPZDB1NcOA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8c9864bc8b-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/wp-embed.js
200 OK 769 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/wp-embed.js
IP
File type ASCII text, with very long lines (1391)
Hash 82e67f050afdb38c20ac6eb305f97c17
df1349df76d66a9cf64377cf335c67c337d85470
5f6c33116e2106cd0f2f28c16062f1d584e74b8539a14ed45e17957634d71b7e
GET /clicks/SleepConnection_files/wp-embed.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-592"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3055
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b%2BPD%2FDZYvRfIEsqqGpHTbY1yM73WBHqrq0TDNOcs1hIw%2BhANy4jKPr4e61mdG3FNrt4iPmrNdk9QT%2F%2FYd3JG%2BqkU1QEAt%2FoHwh%2BVEqvAAN9%2F%2BQFw%2BOIwy3t%2FcNUIscTUlNsIhEKlzg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8c9e96777d-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/main.js
200 OK 17 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/main.js
IP
File type ASCII text, with no line terminators
Hash a932bc38777af90144148f9db9e3a6d6
1e5066d4bca2ce414111ee89b7aa4caf2564720e
8e9b2258b5383cd80acc415960b62c979d06f45af9ea4d59ee328ed76e8a69ab
GET /clicks/SleepConnection_files/main.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Content-Length: 17
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: "6369f3fb-11"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nxE6I98N%2FuzZNT0A4J1qAdC3Zch%2BS483TtBTRA4V%2B9%2FzFH1EkJRJnCSqhKFRhyM6NdH%2FA29w%2FC%2FTWZxWbvrl8zHqGauvJnACs7t8hlySugHkVkxXyqL60iArP%2FfCjJV8vtwHvDm1dg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8ccc62778f-LHR
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/position.js
200 OK 2.5 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/position.js
IP
File type ASCII text, with very long lines (6217)
Hash be67978f782f57325337582246c69b24
fa689d85f7cddd421bb0d65e7826a1ee8c7a33d2
6a7338aa365d61fe4d765e106859d1c30d55a2cb0ff50ebf2b4782fdf703a197
GET /clicks/SleepConnection_files/position.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-1926"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3055
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FHQbOtn5ZQVjRTuRMm2kwUiiigYaMOrr3DnjUIwbhH8dUam6i%2FfBh81ur2Pa8DTwNZRhQqfpTszGylO5fjgH4UbgWiEUKINsVvFlnNoo3f0Ic2Sq29hthms4ol%2F1dsMDL1FzeMYaZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8cdf00777d-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/frontend-modules.js
200 OK 17 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/frontend-modules.js
IP
File type Unicode text, UTF-8 text, with very long lines (38520), with LF, NEL line terminators
Hash d8ac1c34baa018773f57989eac9c6697
118af990ccaa7792fb7bfa957129853972de50e2
f83592a8abb61a4c8bf52300897a800a22d5d80b56ece2bd17f26eb5a6c4a09b
GET /clicks/SleepConnection_files/frontend-modules.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-e983"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=46owGWHqszKxecPdfZyDa3TFs1o6olS48s3efd7ojoV30il%2Bp3qMLXelrAP%2BsJYFpLWxi2BcX%2BuWMa9vinHS5pUTSC%2F2KHu87d7BS5i6FQ%2BDrFDpqBIvNzNV29GlVNR1Ky4edv7p3g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8cd894bc8b-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/bootstrap.js
200 OK 9.8 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/bootstrap.js
IP
File type ASCII text, with very long lines (32003)
Hash 58d37dee3da217a04a9928284dd6e09a
412d316bc6cc79694772c5a86405cac30b00e2d8
d38e60ffa16dcdc8904f412aa9a74d96d637ddd2eec98a338cff900fa9d5283c
GET /clicks/SleepConnection_files/bootstrap.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-9004"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3012
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6dwDQb%2FsB%2FH1PdUst8zA9Bfa%2B17tTUZJGmHTuWYOXA%2B8TktaXOI5Er6T8em4PHbRrezSJWDv5GcshVbMbBdXzRtOyaUuHqRLapNaI5ed7ii8dbeKdhRgTwXysPlB2OXhLyVcTWh7gQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8ccae906d5-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/dialog.js
200 OK 3.5 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/dialog.js
IP
File type ASCII text, with very long lines (10557)
Hash 4d4f3de47e0fa2881c455553af6db547
7cbcbd093566884bd048f35d32cf2b057f1e7cc7
3e5258a59d7d51eb1b554a46943dfbcc16903ed2f0fe334225ed4c85aff1a087
GET /clicks/SleepConnection_files/dialog.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-29c7"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3055
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5uH3Wh%2Fw8QmF3j9vix8gyW%2FGC4T7eS%2BThtFeAq9kLXWVQX5pdJqHLUNJVRgHVG5A0Vljh7fgoBbr%2B4WhdTjEAQ77%2F5Lb3Tw2M44dplFxCjVEaXSErrGMxQznP43rheU8L2T%2Fj7pRNA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8cfcdc778f-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/share-link.js
200 OK 1.1 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/share-link.js
IP
File type ASCII text, with very long lines (2634)
Hash 3ab97850280705e11cb4677637c06f28
9aa1c31984fd4b13519748a36cbc401beaedb609
aa68ff29e8c8167da1192bcefd4ac26e57fa44be92dafe43a998cffd3999a9ec
GET /clicks/SleepConnection_files/share-link.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-a4b"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3052
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sD6RBOcEsdcBoR3KjOttImSlzP6SiRfw6GEulNUaMrwGa0PksNoVHAzOrSbKi677uoDCE4pEQuG0jhdlG5%2FN8n6wFFZA2J%2F6J0kBmTWy9FnqzH4n2f23fiYFX7eIdlsNof07D2bSRg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8d0b3006d5-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/waypoints.js
200 OK 3.0 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/waypoints.js
IP
File type ASCII text, with very long lines (12198), with no line terminators
Hash c0db6d5c401074694c0330081ea8fffe
6a7474cbdd8d9f96165eb43a2d0e26840061a7fc
45cb1f190f039721a49a08310c0d932c469c9cb470786b34d6a904e20ffa8c93
GET /clicks/SleepConnection_files/waypoints.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-2fa6"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bo4JeG5KKEU7tCX4b%2BtEVa4B96YAfIf%2BRH1LTny8IIoyjFZhavYgkqpz5b0f4WbFg2Z6gVt81h%2BnQ8lxmvkBb6gGfv2WRy4%2FH6hqAMfuCJuZb8C2%2FQSf%2BVtwAxqSi9xX5OjR8YIj4w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8d1f96777d-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 16bbadb18616687351d4047aedc2ab45
979123c7ad6726befbbab2c07b50ecca31aa2d18
de8231c6ee426b7a76ebf574998dec11ce908efc0a745c2182fb7b61c5915e9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.candleheat.cloud/clicks/SleepConnection_files/swiper.js
200 OK 35 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/swiper.js
IP
File type ASCII text, with very long lines (65280)
Hash bb656f53278d3fcf29c95761f1a42ded
dafa431e2839fa9eb8cdc59c4733b9c7d352b2a8
ac2569fb314af91db6316289fabebac5d2729ae678d6713ac228a7c2cca2effc
GET /clicks/SleepConnection_files/swiper.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-21fb7"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R83%2FirOqFkpHlY4kEHsdvwZ%2Bbao%2BUqBiMI1z2LQqrPVw%2F%2BY787%2BpxaPMtmDW97znj2cssGGk%2Fh7dJEqkuwV%2FFA09iJJN4jonx%2FQrDirHGepU9fJK3UJl%2BhDGqVD1WtoqUv7Yc%2FIurw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8d18c6bc8b-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/frontend.css
200 OK 15 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/frontend.css
IP
File type ASCII text, with very long lines (65497)
Hash e9ef55aebe6ca19f48dfcecdc316caa6
e62870eb7afa73f726e9f5c08f167b03c0faeb3e
417104224b65d31437ca24b3da6523d98f00dbd71a18e79ab10585beadfd9763
GET /clicks/SleepConnection_files/frontend.css HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-1ad98"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3056
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4oeHvL0MW3AenNJ2KrGOUzDFMsCHXvCtr1XV2ZikShrley6zm1gTOVkUDfi%2B%2BzxnXSn0BuIt0xtfasjFLC56VfJG0VEqSLCqMfmFPYrayxXj5%2Flumhq8JinWXVGIJOw%2FOb6t2vo2cw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8bcbffe640-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/bootstrap.css
200 OK 23 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/bootstrap.css
IP
File type ASCII text, with very long lines (65324)
Hash 2411ea3d851ca16338935ed676888a64
7de43ac6df911ba972b49642e45972f6ecaee5d7
b06c09e2d8d125398789b58ceeb656ca1ea51be18a09c4a261aaf4bf2db29521
GET /clicks/SleepConnection_files/bootstrap.css HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-2606e"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fhrcEr9iuFuU4XpHdnDgazVZCn7M8V9JbyU9obyCoRVeP6km6Z4DRMTA6icEP7ZJfG8EPih2YJrsGv8Z9jomF%2BLY9KISYM8AYfyEgQ5V%2FigY3rSL2SPA3FyjtM0iLMo7Mr0Z6FJwDg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8afc0b756a-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/right.jpg
200 OK 19 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/right.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 306x258, components 3\012- data
Hash 34994b47e5d961124fe9224e91d4187e
da611822c5b74bf4e90c3b3f6c8ac5f14283ed83
1d5e5a4a8642b261bef62bedb5760a6da89182ee8e7f81dcecf1397e87244072
GET /clicks/SleepConnection_files/right.jpg HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: image/jpeg
Content-Length: 18916
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: "6369f3fb-49e4"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3049
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e7a1fnQ0Zb076jTHMjOGhaAV7jdIiUnkHTKwExaEcLX%2F99GIxj1IplJTQCefEVhInqrwc%2BP8bn43zIFP59at56mOhfczkzRwE3c9teHg7C26%2BmBlrCSpc8dxZmFV8I3buQjiiVT3Gg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8e6f95756a-LHR
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/dmca-badge-w100-5x1-11.png
200 OK 2.4 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/dmca-badge-w100-5x1-11.png
IP
File type PNG image data, 100 x 20, 8-bit/color RGBA, interlaced\012- data
Hash 521db716019fc733b48f77f9822b30ee
8f8e11a44c38076713fd1a0233ef7de9f68498ed
2292a183dd2a364653441cf13efd89138c43eab4dacbb35e9bc061b07c749be1
GET /clicks/SleepConnection_files/dmca-badge-w100-5x1-11.png HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: image/png
Content-Length: 2390
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: "6369f3fb-956"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3053
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YwDsuVz2i1n1mmGjff%2FLJndAADpSS7%2FcPbRuEAtxm1RW16fZ7zCcu3sMGzYwHc2YoKc0NiUx0ie0cGZSoUn2g6a19fJ%2Fp%2FA%2FVjZWQSZgZjmMTB%2Bf8NRUl31dGgChOQGyPjWeK2rQgg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8e7a01bc8b-LHR
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/sleep8.jpg
200 OK 74 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/sleep8.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, orientation=upper-left, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 900x500, components 3\012- data
Hash 6fa7f935ca379f46e0da3a2d53e218f0
291f37698a59386f354ff4a9baa7293c6e5ef9fe
9dd706864012531124011502699bf1c5cbd7c6a5cd08bfc081a157d91e1ecc85
GET /clicks/SleepConnection_files/sleep8.jpg HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: image/jpeg
Content-Length: 73909
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: "6369f3fb-120b5"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3053
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bZaQIcd728HkK7Lb7k9X1pYd0%2B1aSzydk5rTH59ALUutPqAY9HK1YoUUjQsFeLX%2FETKVZz56gqzQF3qiFiJ%2FyulbJfm9BUd7eZkfzmHAF5KNjhzWC3XtB6UD%2BHQyGuR5hSc9268gXw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8e6f26778f-LHR
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/mylogo1-300x63.png
200 OK 16 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/mylogo1-300x63.png
IP
File type PNG image data, 300 x 63, 8-bit/color RGBA, non-interlaced\012- data
Hash 856d22ca5c5d83e31d664c09c9dd2254
1cec9230aeab8e188fb1360edb62ea50735329c1
fc74229bb4f3bbbbced2a5a87a531cd2b17301e3b4ffd36d2410bc279009c65f
GET /clicks/SleepConnection_files/mylogo1-300x63.png HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: image/png
Content-Length: 15625
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: "6369f3fb-3d09"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CqDDe%2B5ZeSlobeXGAI6OeDnj19SmJ51ribc8h%2BH2vSRpPAqZCDMYx5R9I%2F3Kf%2B0bjwK49p1bYrtyufvSvqlEJhJD%2FPWTrbVf3Lj6F4MO1a%2BrQzDhf6DivATq6SZ1MOAr3G1YzjULtA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8eafc0756a-LHR
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/sleep20-1.jpg
200 OK 170 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/sleep20-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, orientation=upper-left, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 900x500, components 3\012- data
Size 170 kB (169859 bytes)
Hash f27cf9f087f45a27d162e9e14649b8f5
11e1ea3a4ca543597aab0685ecd4049857c67306
6e772002d1f39ac9e2403d06c84d0bf5161750cdd2c63599c292c081510c06a3
GET /clicks/SleepConnection_files/sleep20-1.jpg HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: image/jpeg
Content-Length: 169859
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: "6369f3fb-29783"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3053
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ut2D4mDXyqRTuo8iQ6y5UaoUtpKVVo7lx6H1zIHvwH%2FBENLiNvIjJjW5pCb7qpkfU20na%2FxM5mK0eaFynEVT4aqkAPpfkpWiORN0vZlsGmUoxYooI00P1al5t4DEFr9D33oB%2BQtC4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8e7a13777d-LHR
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/sleep20.jpg
200 OK 170 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/sleep20.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, orientation=upper-left, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 900x500, components 3\012- data
Size 170 kB (169859 bytes)
Hash f27cf9f087f45a27d162e9e14649b8f5
11e1ea3a4ca543597aab0685ecd4049857c67306
6e772002d1f39ac9e2403d06c84d0bf5161750cdd2c63599c292c081510c06a3
GET /clicks/SleepConnection_files/sleep20.jpg HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: image/jpeg
Content-Length: 169859
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: "6369f3fb-29783"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3052
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q3Ym7%2Fv1COEj48McEAz4TEldgPuKo8EDUeJ9SVnFQBIO7LzrLMsTLUiabR5f8FrnOEJvkKhMp5gPP8tmeHM7E7j5cP1ZDzBwf5XGGqJZAxq8GI1GARhy93OMyWkXV6KwZJWoWMT2lg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8e6ca706d5-LHR
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/placeholder.png
200 OK 6.1 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/placeholder.png
IP
File type PNG image data, 1200 x 800, 8-bit colormap, non-interlaced\012- data
Hash 1632e46a5c79d43f3125ca62c54189cb
0897f3db9a66f710a4975dbdcc5fed765b62be0f
1a8352b9372452ab024b5dfd3c74cd8fac2c84e7ff152879f83949c4707fd87e
GET /clicks/SleepConnection_files/placeholder.png HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: image/png
Content-Length: 6146
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: "6369f3fb-1802"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jBWy5RJQhnwoUDMvzf0jyF%2F1eWTUm3OdVSc1yeNSRSFxxp%2BaaGNcJ13lYwU9rKTraie6i4WvtBKTx6vK3%2FBr%2BrrUUXXaLYJdlOmCNk2S1IrSqJZ4pldPqglsDs1NNz81YUwjIMZ0hg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8ecff0778f-LHR
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/sleep24a.jpg
200 OK 124 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/sleep24a.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 900x500, components 3\012- data
Size 124 kB (124248 bytes)
Hash 446185ddb1a7cde0837ba5b7ab38afbb
c7bac20c31f8be16093dab53477b5ecc039e22f1
7f150cb528372ca50842e6c538666b34ef1474c9d7a48e3e1aa4661dea874eff
GET /clicks/SleepConnection_files/sleep24a.jpg HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: image/jpeg
Content-Length: 124248
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: "6369f3fb-1e558"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TWMXgcPQVpbeMPUjCxHeLRknfuMKY5JoCQftoT3t5V1jwkrNvHfSkYYg0FIwJB%2BnVDsx%2FHq1MCSCU1KMJTENuN1giT24QadCHw7sQZ6CW9nWmVF9fVzfycVKToALE79YxzaKvIGBIw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8eba37bc8b-LHR
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 278 B IP
Hash 021b8a32ed77b8959e740ab746dfa3fd
257da6bc88e5dd560f5f575e8818ebb482f73361
b6e8ab0d80f4ff11617e5b9ce4288c019d891efeb63aefca6b2da9fae302694a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2510
Cache-Control: max-age=144223
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:27 GMT
Etag: "63779198-116"
Expires: Sun, 20 Nov 2022 14:49:10 GMT
Last-Modified: Fri, 18 Nov 2022 14:07:20 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
www.candleheat.cloud/clicks/SleepConnection_files/sddefault-1.jpg
200 OK 122 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/sddefault-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, orientation=upper-left, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 900x500, components 3\012- data
Size 122 kB (121847 bytes)
Hash 3e0da8fa14df20c03af9ee885e8363d6
b21ae6d7ac8fa227f4313bd9f4da1614386ba247
9880920f8da1054e68f3967372a621d8edc83ede7526c05fe7b3794bb4db06b0
GET /clicks/SleepConnection_files/sddefault-1.jpg HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: image/jpeg
Content-Length: 121847
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: "6369f3fb-1dbf7"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SOQGTWZWY2dDp7hNOwfHqQud4J3iWL5GAYFMmyit1VgHyOAd54RILxz73EemvvZWhpURHZ9wHUBJowOTvRdmhi5eJSdke9ZyNFDeUfLDhdFVNMtwfSDmrNmKQtUCkbXiWWWgB0rCcw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8e7e85e640-LHR
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 278 B IP
Hash 021b8a32ed77b8959e740ab746dfa3fd
257da6bc88e5dd560f5f575e8818ebb482f73361
b6e8ab0d80f4ff11617e5b9ce4288c019d891efeb63aefca6b2da9fae302694a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2510
Cache-Control: max-age=144223
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:27 GMT
Etag: "63779198-116"
Expires: Sun, 20 Nov 2022 14:49:10 GMT
Last-Modified: Fri, 18 Nov 2022 14:07:20 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
www.google-analytics.com/j/collect?v=1&_v=j96&a=157190997&t=pageview&_s=1&dl=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&ul=en-us&de=UTF-8&dt=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=KEBAAEABEAAAAC~&jid=322507135&gjid=1595430948&cid=986689732.1668811526&tid=UA-163444056-1&_gid=218417465.1668811526&_r=1&_slc=1&z=1626774001
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j96&a=157190997&t=pageview&_s=1&dl=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&ul=en-us&de=UTF-8&dt=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=KEBAAEABEAAAAC~&jid=322507135&gjid=1595430948&cid=986689732.1668811526&tid=UA-163444056-1&_gid=218417465.1668811526&_r=1&_slc=1&z=1626774001
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j96&a=157190997&t=pageview&_s=1&dl=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&ul=en-us&de=UTF-8&dt=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=KEBAAEABEAAAAC~&jid=322507135&gjid=1595430948&cid=986689732.1668811526&tid=UA-163444056-1&_gid=218417465.1668811526&_r=1&_slc=1&z=1626774001 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.candleheat.cloud
date: Fri, 18 Nov 2022 22:45:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 021b8a32ed77b8959e740ab746dfa3fd
257da6bc88e5dd560f5f575e8818ebb482f73361
b6e8ab0d80f4ff11617e5b9ce4288c019d891efeb63aefca6b2da9fae302694a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3745
Cache-Control: max-age=145458
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:27 GMT
Etag: "63779198-116"
Expires: Sun, 20 Nov 2022 15:09:45 GMT
Last-Modified: Fri, 18 Nov 2022 14:07:20 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 278
ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-brands-400.woff2
200 OK 77 kB URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196\012- data
Hash 4f5ec865a8274ab291b6a42b5f70639e
6f00f8c75208b96e585646824c4011093446acd2
b5be0732ab1cc16692e165a7950810f0c772e400f6a2f63e1026a0b938016813
GET /releases/v5.15.4/webfonts/free-fa-brands-400.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 18 Nov 2022 22:45:27 GMT
content-type: font/woff2
content-length: 76736
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:58:24 GMT
etag: "4f5ec865a8274ab291b6a42b5f70639e"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 cb342f3b88a84fbd5ec716e3cbcd7d76.cloudfront.net (CloudFront)
x-amz-cf-pop: DUB2-C1
x-amz-cf-id: __D29pVxSNlF6HN5qa_O7TDNlcAlQqTPE603_qsv0JvhkhVbtLF7eA==
age: 3048
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mOam6WMrJ72O0p1i3DaB8JPENrRBP%2BFtWaYliNmuxGz2ZE5JYgvg6w5S%2FiLQAv1t7Qf0hqB34vtevTFc3sC5pJEvBcmBzOSEhmyECyDWupKTy9RzfTLoxde%2Fg2V7yiY%2FWVtOjCdtEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76c43c8fadf47539-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 71821131fa0825a241bb6f95ad63a26a
4c676dbf861c2fca225bd1b9620237246ddfc724
f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15828, version 1.0\012- data
Hash bf28241e67511184c14dbd0ef7d39f91
c706e0a4122ab727645b744c21667390e8898a4d
0eaeadb58e6995ba85eccb6198aaef77eeb1d4b66699e4e1f3fc10eb6adfcdb9
GET /s/roboto/v29/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15828
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Nov 2022 05:47:04 GMT
expires: Wed, 15 Nov 2023 05:47:04 GMT
cache-control: public, max-age=31536000
age: 320303
last-modified: Wed, 22 Sep 2021 16:13:28 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash f00e7e4432f7c70d8c97efbe2c50d43b
d836c7d4bc52bcd67626b8960ae030ad315c2507
bb46ed079c3dd3c39af5051b4ada48f29f49151dad4fa218117bad2fdb5e616f
GET /s/roboto/v29/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Nov 2022 01:29:34 GMT
expires: Sun, 12 Nov 2023 01:29:34 GMT
cache-control: public, max-age=31536000
age: 594953
last-modified: Wed, 22 Sep 2021 16:13:21 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v28/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v28/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16408, version 1.0\012- data
Hash 875ba54801f7cf83ea70abf613fab665
a747343db86c1ba5d10d6cb1814fd6ac6db42b65
a61d67250a5c36640e22099937af31613e68d6134439d5d4329efea0372aea79
GET /s/opensans/v28/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:01:30 GMT
expires: Thu, 16 Nov 2023 19:01:30 GMT
cache-control: public, max-age=31536000
age: 186237
last-modified: Tue, 01 Mar 2022 22:02:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c58de690a701dea26333a42815dc3003
91d9e60c285f6578b5d814901a90f52cafbb8790
179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v28/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v28/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17768, version 1.0\012- data
Hash b42f06e6ecc6ae551b010ba0ff4fa6a3
363c4ff155d5e82e88d9dfe31e129dcf62b4dced
f27408b033a0195d0f29b0ecbc143f470c4fbb0807472a688b2f9e66403651e0
GET /s/opensans/v28/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17768
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 02:25:13 GMT
expires: Thu, 16 Nov 2023 02:25:13 GMT
cache-control: public, max-age=31536000
age: 246014
last-modified: Tue, 01 Mar 2022 22:01:29 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v28/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjr0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v28/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjr0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16792, version 1.0\012- data
Hash 423d5842ba21b519dd444bd2aa5cb6fe
8ff105cb7d4f988037ba37cb7fe4f5889fae8772
c64e196f537555a5bb4232d9df908cea1612e58a74b6dc43f0ee32be1a505a24
GET /s/opensans/v28/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjr0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16792
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 21:45:40 GMT
expires: Fri, 17 Nov 2023 21:45:40 GMT
cache-control: public, max-age=31536000
age: 89987
last-modified: Tue, 01 Mar 2022 22:06:49 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v28/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v28/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16692, version 1.0\012- data
Hash d65113b6da7ba4bd0a59dbda5a7e24d4
929ecf3ad6ab03123a7bad0609b4b8ba1623d4e8
cce577471c2586f3e0c2518fff84a970d33f61491fb8c629341b86f238cf07c0
GET /s/opensans/v28/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16692
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 21:42:27 GMT
expires: Fri, 17 Nov 2023 21:42:27 GMT
cache-control: public, max-age=31536000
age: 90180
last-modified: Tue, 01 Mar 2022 22:06:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.candleheat.cloud/clicks/SleepConnection_files/frontend.js
200 OK 279 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/frontend.js
IP
Hash d7beb2cf8aaf9142a649d83d2edd30e1
eb9302bfc7c6d22a1f65585b27472809175322fd
c1346d43a4e7f7815c7e5354d4297aad5e9f47c5d213e674837bbf8059aa668a
GET /clicks/SleepConnection_files/frontend.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-1c567"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CANuh11tjU9s0mWkqSzrFQ941s1YljHxCSb4uHa%2FV0RXT3IsL2jQYZksQbkkgwiNnOqEIbt1wc%2Fsg%2FvEqA8WAUfcbd6HBmJhgfv0%2BziugqcCmn7LlgDJN2kcsSL0trbwOxuPrNfhAA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c8d3d21778f-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 71821131fa0825a241bb6f95ad63a26a
4c676dbf861c2fca225bd1b9620237246ddfc724
f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nxt.snorestopper-watch.com/tracking/universalJSRequest.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&ffq=set|ff|flux_url|ff|http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0|ff|set|ff|flux_ref|ff||ff|set|ff|flux_f|ff|898555254864530559|ff|set|ff|flux_inject|ff|%7B%22intoUrl%22%3Afalse%2C%22intoForms%22%3A%7B%22selector%22%3Anull%7D%2C%22intoLinks%22%3A%7B%22selector%22%3Anull%7D%2C%22tokens%22%3A%7B%7D%7D&frameId=_ffq_track_
301 Moved Permanently 0 B URL HTTP/1.1 nxt.snorestopper-watch.com/tracking/universalJSRequest.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&ffq=set|ff|flux_url|ff|http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0|ff|set|ff|flux_ref|ff||ff|set|ff|flux_f|ff|898555254864530559|ff|set|ff|flux_inject|ff|%7B%22intoUrl%22%3Afalse%2C%22intoForms%22%3A%7B%22selector%22%3Anull%7D%2C%22intoLinks%22%3A%7B%22selector%22%3Anull%7D%2C%22tokens%22%3A%7B%7D%7D&frameId=_ffq_track_
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tracking/universalJSRequest.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&ffq=set|ff|flux_url|ff|http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0|ff|set|ff|flux_ref|ff||ff|set|ff|flux_f|ff|898555254864530559|ff|set|ff|flux_inject|ff|%7B%22intoUrl%22%3Afalse%2C%22intoForms%22%3A%7B%22selector%22%3Anull%7D%2C%22intoLinks%22%3A%7B%22selector%22%3Anull%7D%2C%22tokens%22%3A%7B%7D%7D&frameId=_ffq_track_ HTTP/1.1
Host: nxt.snorestopper-watch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 18 Nov 2022 22:45:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 18 Nov 2022 23:45:27 GMT
Location: https://nxt.snorestopper-watch.com/tracking/universalJSRequest.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&ffq=set|ff|flux_url|ff|http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0|ff|set|ff|flux_ref|ff||ff|set|ff|flux_f|ff|898555254864530559|ff|set|ff|flux_inject|ff|%7B%22intoUrl%22%3Afalse%2C%22intoForms%22%3A%7B%22selector%22%3Anull%7D%2C%22intoLinks%22%3A%7B%22selector%22%3Anull%7D%2C%22tokens%22%3A%7B%7D%7D&frameId=_ffq_track_
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BYLEXtErOkzU02%2B8aoxvf8K9Qt2U0zgMoEcJxlbF1RsB1zPDTtt30cBeNliZnrHA5KO24tcgAxv07EjUjghqDRWuFmMACipc3WcpEtbtnV4WFTw7v2ZY1%2FfIHT0hdnpIeRnpA%2FrbPz3TU8dBsg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c906da7b4f7-OSL
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/roboto/v29/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v29/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15688, version 1.0\012- data
Hash aa23b7b4bcf2b8f0e876106bb3de69c6
106ac454ba4e503e0a1cd15e1275130918049182
cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca
GET /s/roboto/v29/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15688
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Nov 2022 10:09:16 GMT
expires: Wed, 15 Nov 2023 10:09:16 GMT
cache-control: public, max-age=31536000
age: 304571
last-modified: Wed, 22 Sep 2021 16:13:19 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 71821131fa0825a241bb6f95ad63a26a
4c676dbf861c2fca225bd1b9620237246ddfc724
f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA_data/embed.js
200 OK 8.4 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA_data/embed.js
IP
File type ASCII text, with very long lines (3391)
Hash 52c10a799b13c8ec9637e646be96aa76
2de282275185763825f51a0b691270708362b01e
f1ce83f8cf988091a9845a8cbacc0234a074b7bd88423580fcd1d3dc39b22126
GET /clicks/SleepConnection_files/0hhQzuJFAxA_data/embed.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA.htm
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-6ba6"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3053
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G1wOugngg6%2Fts%2BFbMkM5LShWy9F0F32rfd4mH6hla8vOzcsftpbe%2F21I6libRWt8C1x6TdexD0FnvxZCd2s6PVLatseYNzbyZE5IxFIrpkO7qDAL4TWCOTwQ%2BK9VNTtqU1bLPe1BNw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c90bc60bc8b-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/blank.htm
200 OK 548 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/blank.htm
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1254), with CRLF line terminators
Hash 0a16aec008013f053a922381dee71f9d
13a69b2e43a426ce54f9a47146955ec0bb169172
4686bf42f5ae452ed851ee0e084ece44ceccef9bc2fde5eee10a33a6c92461ae
GET /clicks/SleepConnection_files/blank.htm HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EzsSljdk%2Btgi8lPqDcVO6DMZznQUoNRkEkEkrURKVB1psmmA4xbKrDj78zScFEwDGrD7rtIzJiI%2Bvg8ekJqyl2x%2Bf6uQP3700Tw%2BAMG18mThVh8sPLkMnmrhfK5xXb14ibXkWYYTyw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76c43c8ffecf06d5-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA.htm
200 OK 36 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA.htm
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (59659), with CRLF line terminators
Hash 779a02d2e9b19979aa04ab893cd07569
09e1bebb016a282d2527b9b0440f4ac00e169c37
8cba24714467e44b772435b706d991c8aeee5852397e569b86777a1b4b244665
GET /clicks/SleepConnection_files/0hhQzuJFAxA.htm HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection.php?sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wYqD7FFYcRGoiBQrfOw%2FiLqqryGnK1WFKly%2FH3GAyqE%2F17m3TY%2FS9RoM8Rp9aw1qMFWTi1lHMXAx4xByKc9hkGWOUztqmyxBnn6D7zjSPZDjWtYSOQvlpgrKXNd8NAeN0V46RHsTvg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76c43c8f6b8f777d-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 279 B IP
Hash d7beb2cf8aaf9142a649d83d2edd30e1
eb9302bfc7c6d22a1f65585b27472809175322fd
c1346d43a4e7f7815c7e5354d4297aad5e9f47c5d213e674837bbf8059aa668a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=117921
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:27 GMT
Etag: "637734a8-117"
Expires: Sun, 20 Nov 2022 07:30:48 GMT
Last-Modified: Fri, 18 Nov 2022 07:30:48 GMT
Server: nginx
Content-Length: 279
www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA_data/bkinGJw7CuACkYKadGmfj0dQGKfhUQj59ovkW6bR-6o.js
200 OK 15 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA_data/bkinGJw7CuACkYKadGmfj0dQGKfhUQj59ovkW6bR-6o.js
IP
File type ASCII text, with very long lines (36064), with no line terminators
Hash 7807d4cbf3c492d9883d729fa37dd7b6
193a01a6d23f4cc3c2e0fbd777dc853f2e1e754c
95cf6c0c695cc2adabaa9454e7c5f498d6806b8413d5012529ede2dc32ebd48b
GET /clicks/SleepConnection_files/0hhQzuJFAxA_data/bkinGJw7CuACkYKadGmfj0dQGKfhUQj59ovkW6bR-6o.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA.htm
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-8ce0"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3050
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ikYIV9AtvMXW29oJQGdR4YPXi3QyRYKdVWOLJD767aeYp4HeSfUop5GVfbQr3vPmXs2Op4clbZKK8ywkl5vXrCRJOwWgeUpPJrtbn39nGerPRvgh75hUK2eSz3wBd62afFx9mdp8Rg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c90d8e6e67c-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA_data/ad_status.js
200 OK 29 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA_data/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /clicks/SleepConnection_files/0hhQzuJFAxA_data/ad_status.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA.htm
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Content-Length: 29
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: "6369f3fb-1d"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3052
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=soWo0mVPiRbv3rDFGi%2F8zGO3bGeeY0Wfx7IbnLngCU50ZP136%2BS5K5nM%2BbkT0P3UmOT4%2B7CNZ7UjbdG8qGCtBOQddVU8eSFGyAPMnxtLzSE2fsvoaqUgrWebcpN6SVUj2tr%2B10pJYg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c90efa206d5-LHR
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/fonts/eicons.woff2?5.6.2
404 Not Found 162 B URL HTTP/1.1 www.candleheat.cloud/clicks/fonts/eicons.woff2?5.6.2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /clicks/fonts/eicons.woff2?5.6.2 HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/elementor-icons.css
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1
HTTP/1.1 404 Not Found
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SN1YIvfDi3L6%2BshbU028J70dU%2B2mZmQHeNXLSUiCxeTlJqCgGWKiyaMKSpdGDNg77sd1vDGsK08r2hB0EIWHSssJbrVwbnSUNCR3RL6jWoPCjADYpVeODLidzHf9nWdtY1Yq%2Bfi5DA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c903807e640-LHR
alt-svc: h2=":443"; ma=60
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=66dff31435
200 OK 44 kB URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=66dff31435
IP
File type ASCII text, with very long lines (26500)
Hash f0d69249a5f549de099062240a70c036
1c61e09d43c1e218d7bc0aeba9f014d63171344e
7bd8c568183bcf7a8cb5f9525fec2c39be5f28b56a720b4f2cd4bf8aec2691ab
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=66dff31435 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.candleheat.cloud/
Origin: http://www.candleheat.cloud
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 18 Nov 2022 22:45:27 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ba40b29244b06c0206de307cc9a49eec.cloudfront.net (CloudFront)
x-amz-cf-pop: QRO50-C1
x-amz-cf-id: pVECUsTziLsxIZLEJr03j1xwm10EYdDJT2ALMp8cttZiGe-_mhLQAw==
age: 3054
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UR1a46mlRGnxv9R%2Bo%2BqVqEA%2ForV%2FABPEihG8%2B2l1NWJ12pmRFNQNvdYKEog5sUUayVRgMR3JI%2Bhk3WswCaTHJTO7WchB9MYy0imxO%2B7klbMQnybocm6PStZCu%2BEhxbp5w98FTw2Nkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76c43c8f4d247539-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA_data/www-player.css
200 OK 54 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA_data/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash f62e7a36e91f0573dce26b6e20f15edc
e1b902b45a4e715b4678bb5ce52174915a70ac56
9a8dc2b8586ceeea79b62f203f18aacda260b5905a0e1629f0ed4c24b4e71e24
GET /clicks/SleepConnection_files/0hhQzuJFAxA_data/www-player.css HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA.htm
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-545f1"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3054
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GYWLGwxz0qJeOYJlxGl%2FbuhYmV1FqV3ghKTuK%2FHfGiSNW7OiWlnAlUyBftP%2FYEeKZzTGl9BLgoCUZSKK4Cd7aCJWhiUHYQDHeeQ6jKDmMi2zwy4Kf4%2F2UF4mxcrmNaHQkWRLnPZUHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c90fdbe777d-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 279 B IP
Hash d7beb2cf8aaf9142a649d83d2edd30e1
eb9302bfc7c6d22a1f65585b27472809175322fd
c1346d43a4e7f7815c7e5354d4297aad5e9f47c5d213e674837bbf8059aa668a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=117921
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:27 GMT
Etag: "637734a8-117"
Expires: Sun, 20 Nov 2022 07:30:48 GMT
Last-Modified: Fri, 18 Nov 2022 07:30:48 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
www.snorestopper-watch.com/wp-includes/js/wp-emoji-release.min.js?ver=5.4.10
200 OK 7.5 kB URL HTTP/2 www.snorestopper-watch.com/wp-includes/js/wp-emoji-release.min.js?ver=5.4.10
IP
File type ASCII text, with very long lines (10927)
Hash a875b08be18fd0206b1c883e24e4e9dc
9f9446f5deddfeb5fa46affc58b252d9fb919e5d
112b3be43c183933624391f1698336a6e68ce4b9237723ea72598f93423f0fea
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.4.10 HTTP/1.1
Host: www.snorestopper-watch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 18 Nov 2022 22:45:27 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 16 Apr 2021 14:25:09 GMT
etag: W/"363c-5c017bf479330"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KJVyM7e7SPqQCiU66q%2FJ3PP%2BrEKS9ISLO9jVbxgzDNQdEbe15yhZLAzIYsIM8pKF22qbzPIEaHSYN2kZ8Hmh5d%2FrzJ3CPiHi1U8rFRu18Qo4peoTV4%2Bem6X%2FPD1cvNFwc0%2FFvFSzocgbEjuGJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76c43c908bf5fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.candleheat.cloud/clicks/SleepConnection_files/blank_data/inject.css
200 OK 928 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/blank_data/inject.css
IP
File type ASCII text, with CRLF line terminators
Hash e1c22e631b7cce42e3ef13cd9bb02ff5
6c6c2b15c56e776d9eac10babf3a6c4a2bd964ae
93950a736308fe62073a44a76b8ec05b9a651062f6ecee4782059d0718aab6dc
GET /clicks/SleepConnection_files/blank_data/inject.css HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/blank.htm
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1; _gat_gtag_UA_22484186_3=1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-f28"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3049
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5RggWo7o7Vmfk%2BvdtU4LnUBr3zO129h7HuZ2IC9klTG4Nl8qxOiXTtmXZwkmMhA93gcYKDh0bIQz0ZeX1hbXnjoRHim27z54AynZWRzFTDpWLNJlSQGUijwKKHIXFdYWmBa8ZStPXg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c916d19bc8b-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA_data/www-embed-player.js
200 OK 95 kB URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA_data/www-embed-player.js
IP
File type ASCII text, with very long lines (570)
Hash 49f15cdb990e0a274f84c9ae9ec38620
b188400ba72bd9bdfe9fa14efff1d33399af3d0c
b9d35acbe1c6e5d96cbc9a4a2a9585d84b1e4353af20a3ba37216ac2e9779d8d
GET /clicks/SleepConnection_files/0hhQzuJFAxA_data/www-embed-player.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA.htm
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-45cd9"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3052
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VsLpjopUYRTEFqmwsbiWsFvbWISlrAshncHC0cbUiv3uu%2BIoAJOLQvrrH7QIv%2BKo3nmG8GusHVAxSxeLYAapA7DZoh7HB1emdUOwPzvTL0wnD7Uy9rfPyEFsTXGXPqX1KvZ9l4kwhA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c91290de67c-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.candleheat.cloud/clicks/webfonts/fa-solid-900.woff2
404 Not Found 162 B URL HTTP/1.1 www.candleheat.cloud/clicks/webfonts/fa-solid-900.woff2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /clicks/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/solid.css
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1
HTTP/1.1 404 Not Found
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vvHcxbi7n%2FHubOYpADUNxNcPlUWOqmDla8UU5Fmt28SkzkxTHyWIJaB%2F8pcBXj7UDnLlFEOQz3BJUF6I1hoZF%2Fx%2FFRraL4laiN2h%2FjZsYhZeuMwG0G1r0BfeJ1Uc06fjfF90MU2lxg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c903a15778f-LHR
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15344
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 14 Nov 2022 20:08:30 GMT
Expires: Tue, 14 Nov 2023 20:08:30 GMT
Cache-Control: public, max-age=31536000
Age: 355017
Last-Modified: Mon, 16 Oct 2017 17:32:55 GMT
Content-Type: font/woff2
www.snorestopper-watch.com/wp-content/uploads/2020/04/sleep9.jpg
200 OK 162 kB URL HTTP/2 www.snorestopper-watch.com/wp-content/uploads/2020/04/sleep9.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, manufacturer=BeFunky, orientation=upper-left, xresolution=94, yresolution=102, resolutionunit=2, software=BeFunky Photo Editor], baseline, precision 8, 900x500, components 3\012- data
Size 162 kB (162381 bytes)
Hash 9e53313ff14897c5417196fa36c6898b
97d1a47aa3e9d04ecc37df38fcd0145db9709547
81c8ed19c4b1536eec15705f8e192883963faf865032ae5a8642e5335c889cdf
GET /wp-content/uploads/2020/04/sleep9.jpg HTTP/1.1
Host: www.snorestopper-watch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 18 Nov 2022 22:45:27 GMT
content-type: image/jpeg
content-length: 162381
last-modified: Mon, 13 Apr 2020 14:48:53 GMT
etag: "27a4d-5a32d2e94315d"
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pTV9rXsAxEGp7aarafxMBLRvlakcjVlt4TTjYSpcL%2FnbfmanWjjDfQPDEFFIJW6Vy9qH4meV5k96o%2FnbLV7YBCkKs%2F9ssAm5tXC%2FxPlmThods8j%2F%2Bupw2ClXmHScCxNp8cV6chm9XgbkzKGLHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76c43c90ec3cfac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.candleheat.cloud/clicks/fonts/eicons.woff?5.6.2
404 Not Found 162 B URL HTTP/1.1 www.candleheat.cloud/clicks/fonts/eicons.woff?5.6.2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /clicks/fonts/eicons.woff?5.6.2 HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/elementor-icons.css
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1; _gat_gtag_UA_22484186_3=1
HTTP/1.1 404 Not Found
Date: Fri, 18 Nov 2022 22:45:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YI%2Fz0X12EtvTpPux0Ho3t3rBEWNPMgTuQWgktHszYJZrjnwxLMuL2JeIP93Qkxx8oK5Jc%2BiZEe8k%2FSXmYcFdx5XY0pYQ7aGFu20%2FsfxhMVbZj3A7v87rUo8YCE6EOyIuhXee7xNu6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c918e85777d-LHR
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 17af07b019100dc8adb529ce85f827bd
602adaa722e9a3ee89600ebe40cea7033c435483
aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9320
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 22:45:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 17af07b019100dc8adb529ce85f827bd
602adaa722e9a3ee89600ebe40cea7033c435483
aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9320
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 22:45:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 17af07b019100dc8adb529ce85f827bd
602adaa722e9a3ee89600ebe40cea7033c435483
aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9320
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 22:45:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce07c59e-2c1b-4d3b-8c02-f1ed4bca6607.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce07c59e-2c1b-4d3b-8c02-f1ed4bca6607.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 49115517a3f79b5092934e128d54c721
14582e35cacbfc2543587e546cb3b4faf2c898bf
0f9015683cacc252fb5e5053681da1b85b3dd0694e2cd04417e73e5e82ecac2f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce07c59e-2c1b-4d3b-8c02-f1ed4bca6607.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3962
x-amzn-requestid: 29b553ab-9ef2-44b8-aea9-b1582b207a6b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRWGKmIAMFSWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6e-3fb68804386112d17eba689d;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:38 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 6ISYqEe7AEtnPxzJUN6oEX_ohOSxVbfoW6b1_TNH6FInCc61ek4UnQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:48:36 GMT
etag: "14582e35cacbfc2543587e546cb3b4faf2c898bf"
content-type: image/jpeg
age: 3412
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg
200 OK 3.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d6b026c34985bbf2ebf89a62d0724c66
72369ebeccf447fa91ef77711d6297063c99777e
e5598ada634274ab9995dedda8c1fd18344abcfdd49b3a1aaede0a86fafc0f40
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3035
x-amzn-requestid: 3e3f3a7f-9a1d-4b37-b932-22c6e3e638f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRcFOuoAMF_fQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6f-09dc20ea5620dd167e3f7265;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:39 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: pLsLyVnqWVp3c5Z5IavS9Xumx3cYUsungYuOLojzKNtOoRQx7-rEOQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:48:36 GMT
etag: "72369ebeccf447fa91ef77711d6297063c99777e"
content-type: image/jpeg
age: 3412
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e34e5df-e3b1-4670-9ba0-f2403f02010c.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e34e5df-e3b1-4670-9ba0-f2403f02010c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2d658c05b4c8027fcd618510e09a3fb1
c9aa687d03ef0d1bd8ca2d024b1c0c22e53b57b0
89a4b61edc8a8e8d6db418731208c6e08ad987f1336e4c62f4fc0c4cd140d959
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e34e5df-e3b1-4670-9ba0-f2403f02010c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5097
x-amzn-requestid: ff66512d-5563-4824-badb-5d3bf4ad9e21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QR6HXXoAMF7qA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa72-784a02bd76dd22987f137400;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5DU1yKbhZlZlSkisr7MUALUp2oUuDxcZJGf99WUseJuMccv7b7tP2g==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:48:44 GMT
etag: "c9aa687d03ef0d1bd8ca2d024b1c0c22e53b57b0"
content-type: image/jpeg
age: 3404
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06c6e720bc9900b38e88cd72f739603e
22884cbc78622d6f78c1c3397c9b440946144a99
8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 34I3ZsWcHKNvx-MctWUIyOgHOm8vjDMxuHtcGZmykKvEtbs4JziNqA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 22:24:10 GMT
age: 1278
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f6118fc03f31862ff68fef8a2b9a7f
318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73
cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f3c55266-9b03-4b7f-b076-fdf56704318e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QQyECioAMFzdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6b-3e10cef6117a10a4115cfce7;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l3euSue3hLTcBU1OSLRCDuBDeXXM2mAIz0LhADeJV-30r-dW_TFV0w==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:48:36 GMT
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
age: 3412
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.candleheat.cloud/clicks/webfonts/fa-solid-900.woff
404 Not Found 162 B URL HTTP/1.1 www.candleheat.cloud/clicks/webfonts/fa-solid-900.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /clicks/webfonts/fa-solid-900.woff HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/solid.css
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1; _gat_gtag_UA_22484186_3=1
HTTP/1.1 404 Not Found
Date: Fri, 18 Nov 2022 22:45:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wZiyiIADV90PDLEYqgRxNJ67BBedwt0%2BS4crjOMG2F%2FSQLAm9BEn86r4o96jExGjTarczgLyCGy7F2%2FWLj4RE8JpsxUC3lPv75Rz4srhU4k2LoOh9G%2BzAoc%2FfDTBQ6G3nVl9JtcLlA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c92898a06d5-LHR
alt-svc: h2=":443"; ma=60
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b834de670098398062ac06865cfa82a4
6b50f4fdc7d7dcbb11d8739b71e8e1eecec047b4
9eefe7101330de28d8d0fdb3f17a5453f3368324fbacb9f3a36826f76b7c9bde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5226
x-amzn-requestid: c0655cd4-83f6-4c7c-97b6-2847f38df126
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRwFPwoAMFV5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa71-5f7eca026395cbe72daed116;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:41 GMT
x-amz-cf-pop: SEA19-C3, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: DnS0k9AYl9sm2A8iuri5RESUPmtYPV5x2lwFZkAv--qTtx7R62Z9hw==
via: 1.1 2c6b5dd77f1abe60653ce0454f344b64.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:48:43 GMT
etag: "6b50f4fdc7d7dcbb11d8739b71e8e1eecec047b4"
content-type: image/jpeg
age: 3405
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.candleheat.cloud/clicks/fonts/eicons.ttf?5.6.2
404 Not Found 131 B URL HTTP/1.1 www.candleheat.cloud/clicks/fonts/eicons.ttf?5.6.2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f758914aa953116df6aebbd7dd3c71cf
9e679d79c4e87bad87ab10d8a5f5d955a50c0350
2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
GET /clicks/fonts/eicons.ttf?5.6.2 HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/elementor-icons.css
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1; _gat_gtag_UA_22484186_3=1
HTTP/1.1 404 Not Found
Date: Fri, 18 Nov 2022 22:45:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cYL7Pzdvph4zp7D%2FLGohtXg29z0NGDmQpfK061XXY2R4kmiMOuxO504f8pW%2FeZz7jqJ%2BVB1uyMLE7BuFw6lQGJSyM1ciHgRglioWdbfRHdXWetT0WAXd%2FLr46rAuw1MFH%2FJW2CyqkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c9349b9777d-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
googleads.g.doubleclick.net/pagead/id
204 No Content 0 B URL HTTP/1.1 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
HTTP/1.1 204 No Content
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 18 Nov 2022 22:45:28 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 0
ocsp.digicert.com/
200 OK 471 B IP
Hash 3bccc7935612a834ead41e3457594647
9699606857e0c7d25a94f5f2d9caad3b4a9ef9f8
6e8fb76fc7ddf860aa43e0d54eb162f554b970ba096c92dbb36ed50341d55e6b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6371
Cache-Control: max-age=87588
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Etag: "6376a54a-1d7"
Expires: Sat, 19 Nov 2022 23:05:16 GMT
Last-Modified: Thu, 17 Nov 2022 21:19:06 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3ba0eba720a8e5904bee6e804873c24
df1f9c79e39f777ab12225af0af60b9f26af6485
76500b32cbac4ad40e3f42c7dfd46832f3854ba88c3a6d5a9d2b5633e8e1f27b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: Ev1PVzm0oBKExRIiY7YtvuDo6J8Xa/o0tweCvth50Wou79SUZ8FtV5rCtccN4wESKCxsJyNBFU2oHaFrS81Zjg==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1904183273
date: Fri, 18 Nov 2022 22:45:28 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2e3554d997233466d5613d937e021bd9
c3739f9343d51a234441ad66986f71a12f8d0376
3d142d70a05ab3ea2a7bb63edeea4144b6cc9082180b273813174bbf65e741a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/conversion_async.js
200 OK 15 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash ccc839aae3b4ff22e82de9305c51746b
f646be3ede92e09d1e26bf47bf5be59fe70b34ee
0873ef0f0234ff4f2d47c5764d96646140964f2d030d213e9a96f727e27c699f
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 18 Nov 2022 22:45:28 GMT
expires: Fri, 18 Nov 2022 22:45:28 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 6657920381332615615
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15184
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3bccc7935612a834ead41e3457594647
9699606857e0c7d25a94f5f2d9caad3b4a9ef9f8
6e8fb76fc7ddf860aa43e0d54eb162f554b970ba096c92dbb36ed50341d55e6b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6371
Cache-Control: max-age=87588
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Etag: "6376a54a-1d7"
Expires: Sat, 19 Nov 2022 23:05:16 GMT
Last-Modified: Thu, 17 Nov 2022 21:19:06 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
i.ytimg.com/vi_webp/0hhQzuJFAxA/sddefault.webp
200 OK 10 kB URL HTTP/2 i.ytimg.com/vi_webp/0hhQzuJFAxA/sddefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1355515c6b485db62b1386ba6d27fe36
b54d6729d8109feb4aa74a1ddefc87036ccf5b7e
05406cfa58f67983aa150c48d84bdcc1b0bfc5869677510e4aa9bbfd71e9b05b
GET /vi_webp/0hhQzuJFAxA/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 10122
date: Fri, 18 Nov 2022 22:45:28 GMT
expires: Sat, 19 Nov 2022 00:45:28 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a00fff9dd1711061b285e2136c973d13
66548ac11fc58024c6994539ab81804add41d2f2
4b87c5468c15817686a8497324c2a06d18fd5574141aa0476bf98aa3b8395a8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2e3554d997233466d5613d937e021bd9
c3739f9343d51a234441ad66986f71a12f8d0376
3d142d70a05ab3ea2a7bb63edeea4144b6cc9082180b273813174bbf65e741a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 34cdecc86a01fc135cb8a5c4618c3a55
1bfffa5028efbc1c5bf766c50cbf58b9ee1f4e86
4786dbae246f44e3944a1db922a464327ef498da3345670e967ac1b7db827b36
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.candleheat.cloud/clicks/webfonts/fa-solid-900.ttf
404 Not Found 131 B URL HTTP/1.1 www.candleheat.cloud/clicks/webfonts/fa-solid-900.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f758914aa953116df6aebbd7dd3c71cf
9e679d79c4e87bad87ab10d8a5f5d955a50c0350
2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
GET /clicks/webfonts/fa-solid-900.ttf HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/solid.css
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1; _gat_gtag_UA_22484186_3=1
HTTP/1.1 404 Not Found
Date: Fri, 18 Nov 2022 22:45:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d2cvcxlkdX4xuczcn99OJAHUxpdUAZfX9IT%2FCdPgFkQcUInncKEjc4NQ9jav3cQHNe%2F448ryppt76SbHTbnf5xH%2FLUs%2BEbjG7S01yzNF0HvLEZShzdcNdrCKfBbYvh0XQrq21zPOpw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c950c3306d5-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eaa6a3200eda9bf5788df6d9eb04d84c
12efbb66692df6d76c1103b152808d751c0e49f1
6d815027ae40ea2603c0ed5adac0821cd5526f11c2eeb0ada5294b6f2ec3492d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eaa6a3200eda9bf5788df6d9eb04d84c
12efbb66692df6d76c1103b152808d751c0e49f1
6d815027ae40ea2603c0ed5adac0821cd5526f11c2eeb0ada5294b6f2ec3492d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eaa6a3200eda9bf5788df6d9eb04d84c
12efbb66692df6d76c1103b152808d751c0e49f1
6d815027ae40ea2603c0ed5adac0821cd5526f11c2eeb0ada5294b6f2ec3492d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.taboola.com/libtrc/unip/1240201/tfa.js
200 OK 18 kB URL HTTP/1.1 cdn.taboola.com/libtrc/unip/1240201/tfa.js
IP
File type ASCII text, with very long lines (58518)
Hash 0401b9acd9b4599c476a251bc4c08e53
219e5c71faef8e39599b46fb661d449672dded73
29f8cb78efa6471868db3b77cee719ae06b990ad98d6af894748683f1b485614
GET /libtrc/unip/1240201/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 17958
x-amz-id-2: lI7dzp9HeDXTCeon/S2GmHIFSJtDQpOdNjCQrfmWqZdDYHERaY6J7IkHGFl71CQKb2can9J14k8=
x-amz-request-id: N2GPEZYHHV96H6HM
x-amz-replication-status: COMPLETED
Last-Modified: Sun, 13 Nov 2022 11:23:25 GMT
ETag: "91a1c980ddc80eac2e7d82c15a7aa61f"
x-amz-version-id: 7GuOx6lIdFqfj9o73CjyQOIZtthjlsdA
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Fri, 18 Nov 2022 22:45:28 GMT
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1675-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1668811528.472043,VS0,VE196
Cache-Control: private,max-age=14401
Vary: Accept-Encoding
abp: 12
googleads.g.doubleclick.net/pagead/viewthroughconversion/730905238/?random=1668811526644&cv=9&fst=1668811526644&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/730905238/?random=1668811526644&cv=9&fst=1668811526644&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2761), with no line terminators
Hash 432e78f8bbe02aed9724d33eeae620d9
d87fd7ef8694cbc365a1c3e37a1ae066e6d2b7ef
4343da8ac08668ce0af7105fa106fc02ae3b5f479c0725f9d4779d6bc9fa8767
GET /pagead/viewthroughconversion/730905238/?random=1668811526644&cv=9&fst=1668811526644&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 18 Nov 2022 22:45:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1168
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 18-Nov-2022 23:00:28 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
200 OK 78 kB URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78168, version 331.-31196\012- data
Hash a9fd1225fb2cd32320e2b931dca01089
44ec5c6a868b4ce62350d9f040ed8e18f7a1d128
c5dd43f53f3af822cbf17b1fb75f46192cdbd51724f277acf6cf0dacb3fd57e7
GET /releases/v5.15.4/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 18 Nov 2022 22:45:28 GMT
content-type: font/woff2
content-length: 78168
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:58:24 GMT
etag: "a9fd1225fb2cd32320e2b931dca01089"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 cc21ae933690a5b4513677425cfed23e.cloudfront.net (CloudFront)
x-amz-cf-pop: DUB2-C1
x-amz-cf-id: MDqOSTrMzxZubYOF4nElvMdcEv-wAO5ZkF-EEWvt6aONX5m_K-aIQA==
age: 3041
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BMjN4LLoufHETdNVGm5Uu8YfZ9mmY0u0nAOXImDsIIjDcd581w4Nfm0VwYUvC4Rzct3Q549SeDqir4nOeT%2B5BCfTsdSh3d4AOCBw1WkTGPu083d23sP8jizyIybBm1XR57x2hmll5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76c43c962da87539-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/730863180/?random=1668811526647&cv=9&fst=1668811526647&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/730863180/?random=1668811526647&cv=9&fst=1668811526647&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2761), with no line terminators
Hash 80f9e8880dfc2c8990d20dd4301b2101
5d50ad55637e7cb4c085a70b2be2ca5c0f960916
45c7d9730f48baa8835bdcce6d7223dc677e446e0d598fcfbdfa821cef9ad28a
GET /pagead/viewthroughconversion/730863180/?random=1668811526647&cv=9&fst=1668811526647&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 18 Nov 2022 22:45:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1165
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 18-Nov-2022 23:00:28 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/730868448/?random=1668811526647&cv=9&fst=1668811526647&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&hn=www.google.com&async=1
302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/730868448/?random=1668811526647&cv=9&fst=1668811526647&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&hn=www.google.com&async=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/730868448/?random=1668811526647&cv=9&fst=1668811526647&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&hn=www.google.com&async=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 18 Nov 2022 22:45:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-user-list/730868448/?random=1668811526647&cv=9&fst=1668808800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&async=1&is_vtc=1&random=894705802&resp=GooglemKTybQhCsO
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 18-Nov-2022 23:00:28 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eaa6a3200eda9bf5788df6d9eb04d84c
12efbb66692df6d76c1103b152808d751c0e49f1
6d815027ae40ea2603c0ed5adac0821cd5526f11c2eeb0ada5294b6f2ec3492d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AKedOLS1dnQrjBEP9zo4ySqtGGi8msPKRBnGu9dh=s68-c-k-c0x00ffffff-no-rj
200 OK 1.2 kB URL HTTP/2 yt3.ggpht.com/ytc/AKedOLS1dnQrjBEP9zo4ySqtGGi8msPKRBnGu9dh=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash 52b7225c1db11e6095d795c6dbb26afc
b01409bd44ec3cf089c57d79a95dece629d45540
4494e63d53ba24dbfbd1d1ec70563ea048266eb078d533666e706ed4c00e8085
GET /ytc/AKedOLS1dnQrjBEP9zo4ySqtGGi8msPKRBnGu9dh=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 19 Nov 2022 22:45:28 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 18 Nov 2022 22:45:28 GMT
server: fife
content-length: 1244
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3b1d0042dde3a7cc0f3c9a298949354
5643577b85e8c0d80cf8a5c94262727138b8d001
3efe18400af9e79682d4505e35b7b2debe378453facc569dbb575b6ba849d874
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb5405ca08a5b1038b26ae8f2e3788f3
3341c3d5bed51686ed6c8d85aa59c59a27c652a3
6ffea4a38a9fc074321b874bce4a78eefbf657f1f2a05897fb32d0a9bffa08a1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/730905238/?random=1668811526644&cv=9&fst=1668808800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&async=1&fmt=3&is_vtc=1&random=3958429534&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/730905238/?random=1668811526644&cv=9&fst=1668808800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&async=1&fmt=3&is_vtc=1&random=3958429534&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/730905238/?random=1668811526644&cv=9&fst=1668808800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&async=1&fmt=3&is_vtc=1&random=3958429534&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 18 Nov 2022 22:45:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/730863180/?random=1668811526647&cv=9&fst=1668808800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&async=1&fmt=3&is_vtc=1&random=1411501821&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/730863180/?random=1668811526647&cv=9&fst=1668808800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&async=1&fmt=3&is_vtc=1&random=1411501821&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/730863180/?random=1668811526647&cv=9&fst=1668808800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&async=1&fmt=3&is_vtc=1&random=1411501821&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 18 Nov 2022 22:45:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/730868448/?random=1668811526647&cv=9&fst=1668808800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&async=1&is_vtc=1&random=894705802&resp=GooglemKTybQhCsO&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/730868448/?random=1668811526647&cv=9&fst=1668808800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&async=1&is_vtc=1&random=894705802&resp=GooglemKTybQhCsO&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/730868448/?random=1668811526647&cv=9&fst=1668808800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg3e0&sendb=1&frm=0&url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&tiba=SleepConnection%20-%20SnoreStopper%20Watch%20-%20Official%20Site&async=1&is_vtc=1&random=894705802&resp=GooglemKTybQhCsO&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.candleheat.cloud/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 18 Nov 2022 22:45:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 34cdecc86a01fc135cb8a5c4618c3a55
1bfffa5028efbc1c5bf766c50cbf58b9ee1f4e86
4786dbae246f44e3944a1db922a464327ef498da3345670e967ac1b7db827b36
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb5405ca08a5b1038b26ae8f2e3788f3
3341c3d5bed51686ed6c8d85aa59c59a27c652a3
6ffea4a38a9fc074321b874bce4a78eefbf657f1f2a05897fb32d0a9bffa08a1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=244682219446063&ev=PageView&dl=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&rl=&if=false&ts=1668811527102&cd[domain]=www.snorestopper-watch.com&cd[user_roles]=guest&cd[plugin]=PixelYourSite&sw=1280&sh=1024&v=2.9.89&r=stable&a=dvpixelyoursite&ec=0&o=30&fbp=fb.1.1668811527101.1743617663&it=1668811526653&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=244682219446063&ev=PageView&dl=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&rl=&if=false&ts=1668811527102&cd[domain]=www.snorestopper-watch.com&cd[user_roles]=guest&cd[plugin]=PixelYourSite&sw=1280&sh=1024&v=2.9.89&r=stable&a=dvpixelyoursite&ec=0&o=30&fbp=fb.1.1668811527101.1743617663&it=1668811526653&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=244682219446063&ev=PageView&dl=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&rl=&if=false&ts=1668811527102&cd[domain]=www.snorestopper-watch.com&cd[user_roles]=guest&cd[plugin]=PixelYourSite&sw=1280&sh=1024&v=2.9.89&r=stable&a=dvpixelyoursite&ec=0&o=30&fbp=fb.1.1668811527101.1743617663&it=1668811526653&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 18 Nov 2022 22:45:29 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=244682219446063&ev=GeneralEvent&dl=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&rl=&if=false&ts=1668811527105&cd[post_type]=page&cd[post_id]=410&cd[content_name]=SleepConnection&cd[domain]=www.snorestopper-watch.com&cd[user_roles]=guest&cd[plugin]=PixelYourSite&sw=1280&sh=1024&v=2.9.89&r=stable&a=dvpixelyoursite&ec=1&o=30&fbp=fb.1.1668811527101.1743617663&it=1668811526653&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=244682219446063&ev=GeneralEvent&dl=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&rl=&if=false&ts=1668811527105&cd[post_type]=page&cd[post_id]=410&cd[content_name]=SleepConnection&cd[domain]=www.snorestopper-watch.com&cd[user_roles]=guest&cd[plugin]=PixelYourSite&sw=1280&sh=1024&v=2.9.89&r=stable&a=dvpixelyoursite&ec=1&o=30&fbp=fb.1.1668811527101.1743617663&it=1668811526653&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=244682219446063&ev=GeneralEvent&dl=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0&rl=&if=false&ts=1668811527105&cd[post_type]=page&cd[post_id]=410&cd[content_name]=SleepConnection&cd[domain]=www.snorestopper-watch.com&cd[user_roles]=guest&cd[plugin]=PixelYourSite&sw=1280&sh=1024&v=2.9.89&r=stable&a=dvpixelyoursite&ec=1&o=30&fbp=fb.1.1668811527101.1743617663&it=1668811526653&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 18 Nov 2022 22:45:29 GMT
X-Firefox-Spdy: h2
trc.taboola.com/1255586/trc/3/json?tim=1668811527002&data=%7B%22id%22%3A188%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback3%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526805%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A9%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 1.4 kB URL HTTP/2 trc.taboola.com/1255586/trc/3/json?tim=1668811527002&data=%7B%22id%22%3A188%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback3%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526805%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A9%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
File type Unicode text, UTF-8 text, with very long lines (2418), with no line terminators
Hash 18db31499902ac26eaf20de096723f96
eb2e59f097e7efb0694a79c4e688cd12aadc146c
0dc3b0b4b46714637701ee06f8cdf43d0b71ecf205f2d68a5167708ae4bbf93b
GET /1255586/trc/3/json?tim=1668811527002&data=%7B%22id%22%3A188%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback3%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526805%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A9%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Fri, 18 Nov 2022 22:45:29 GMT
via: 1.1 varnish
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668811529.911994,VS0,VE174
vary: Accept-Encoding
x-vcl-time-ms: 174
X-Firefox-Spdy: h2
trc.taboola.com/1240208/trc/3/json?tim=1668811526995&data=%7B%22id%22%3A678%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback1%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526804%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A8%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 1.4 kB URL HTTP/2 trc.taboola.com/1240208/trc/3/json?tim=1668811526995&data=%7B%22id%22%3A678%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback1%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526804%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A8%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
File type Unicode text, UTF-8 text, with very long lines (2414), with no line terminators
Hash e1a38b5982a49f12c28dace1c61a2d4e
797a4118478bb6c31d7efd629d75ab3bd2c6d854
8e1736b6eb51e2bce0fce2c8aaeaa06f58a919da5089669ba851649d4f8304d3
GET /1240208/trc/3/json?tim=1668811526995&data=%7B%22id%22%3A678%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback1%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526804%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A8%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Fri, 18 Nov 2022 22:45:29 GMT
via: 1.1 varnish
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668811529.910062,VS0,VE96
vary: Accept-Encoding
x-vcl-time-ms: 96
X-Firefox-Spdy: h2
trc-events.taboola.com/1255589/log/3/unip?en=pre_d_eng_tb&tos=1616&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528412&vi=1668811526791&ri=9acff7210e77b3ac053d9e4cc17079ef&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1255589/log/3/unip?en=pre_d_eng_tb&tos=1616&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528412&vi=1668811526791&ri=9acff7210e77b3ac053d9e4cc17079ef&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1255589/log/3/unip?en=pre_d_eng_tb&tos=1616&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528412&vi=1668811526791&ri=9acff7210e77b3ac053d9e4cc17079ef&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 18 Nov 2022 22:45:30 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.candleheat.cloud
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc.taboola.com/1255589/trc/3/json?tim=1668811527009&data=%7B%22id%22%3A420%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback6%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526806%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A10%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 1.4 kB URL HTTP/2 trc.taboola.com/1255589/trc/3/json?tim=1668811527009&data=%7B%22id%22%3A420%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback6%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526806%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A10%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
File type Unicode text, UTF-8 text, with very long lines (2493), with no line terminators
Hash bb34731dcee02441530ef6acc2edfdfd
ec28870bff1796d323b81c4b3c0e33a4230bb9d3
16980e9a6355e24d81a18a0e2519582269caf245c8a162a76f336e5f7c8079fb
GET /1255589/trc/3/json?tim=1668811527009&data=%7B%22id%22%3A420%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback6%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526806%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A10%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Fri, 18 Nov 2022 22:45:29 GMT
via: 1.1 varnish
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668811529.919140,VS0,VE173
vary: Accept-Encoding
x-vcl-time-ms: 173
X-Firefox-Spdy: h2
trc-events.taboola.com/1255586/log/3/unip?en=pre_d_eng_tb&tos=1613&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528409&vi=1668811526791&ri=64038d26b688885088e788cb5710bd7e&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1255586/log/3/unip?en=pre_d_eng_tb&tos=1613&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528409&vi=1668811526791&ri=64038d26b688885088e788cb5710bd7e&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1255586/log/3/unip?en=pre_d_eng_tb&tos=1613&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528409&vi=1668811526791&ri=64038d26b688885088e788cb5710bd7e&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 18 Nov 2022 22:45:30 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.candleheat.cloud
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1240211/log/3/unip?en=pre_d_eng_tb&tos=1613&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528409&vi=1668811526791&ri=a395241f5fc416a6828d8b9d6f83cdcb&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
204 No Content 87 kB URL HTTP/2 trc-events.taboola.com/1240211/log/3/unip?en=pre_d_eng_tb&tos=1613&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528409&vi=1668811526791&ri=a395241f5fc416a6828d8b9d6f83cdcb&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
ASN #200478 Taboola.com ltd
File type gzip compressed data, from Unix\012- data
Hash 3382c18bfc99ebb9d239a7623e2aae4a
c5fb60ec02429bbddb315efc4b0476fe1c1b3437
9bfb6784559f48cb79aeb5602b73b34990b49c88a0e6bd853ddea6aeff27cdfb
GET /1240211/log/3/unip?en=pre_d_eng_tb&tos=1613&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528409&vi=1668811526791&ri=a395241f5fc416a6828d8b9d6f83cdcb&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 18 Nov 2022 22:45:30 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.candleheat.cloud
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1255587/log/3/unip?en=pre_d_eng_tb&tos=1614&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528410&vi=1668811526791&ri=a21ccf4dd0f25be1e02f414f49afac68&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1255587/log/3/unip?en=pre_d_eng_tb&tos=1614&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528410&vi=1668811526791&ri=a21ccf4dd0f25be1e02f414f49afac68&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1255587/log/3/unip?en=pre_d_eng_tb&tos=1614&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528410&vi=1668811526791&ri=a21ccf4dd0f25be1e02f414f49afac68&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 18 Nov 2022 22:45:30 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.candleheat.cloud
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1255588/log/3/unip?en=pre_d_eng_tb&tos=1615&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528411&vi=1668811526791&ri=83ec4a1511b6ada72570f19cd9bcb803&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1255588/log/3/unip?en=pre_d_eng_tb&tos=1615&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528411&vi=1668811526791&ri=83ec4a1511b6ada72570f19cd9bcb803&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1255588/log/3/unip?en=pre_d_eng_tb&tos=1615&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1668811528411&vi=1668811526791&ri=83ec4a1511b6ada72570f19cd9bcb803&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 18 Nov 2022 22:45:30 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.candleheat.cloud
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
www.candleheat.cloud/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 387 B URL HTTP/1.1 www.candleheat.cloud/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash fe618d908832be3d36da25e0e8a4ccca
dd570ad979e06dda9372c78c7727e2c8abe9032c
46d8dc3504a73d9be37f97b137bbeb07c06dace84a0774f3185d433a2cd3bb5c
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Goog-Visitor-Id: CgtPdkRpdzJncjV6USj_r_aRBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20220323.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1668811526470&flash=0&frm=1&u_tz&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&bc=23&bih=939&biw=1268&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C813%2C457&vis=1&wgl=true&ca_type=image
Content-Length: 2990
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA.htm
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1; _gat_gtag_UA_22484186_3=1; _fbp=fb.1.1668811527101.1743617663
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3IEY7%2FkPnXtAlkeTSantCe9tUTt%2FIm8LfzRVaNiAcY4eVGmSu04vo2KRMS2aI1TVILSmPGqgypZHvSOS9EeyWyPmyTDeuFgnXuR5bG5XpV%2FN7YMJlemD3XfXKjHnoCfN%2BCA0LD956Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76c43ca16b7206d5-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-163444056-1&cid=986689732.1668811526&jid=322507135&gjid=1595430948&_gid=218417465.1668811526&_u=KEBAAEAAEAAAAC~&z=189700248
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-163444056-1&cid=986689732.1668811526&jid=322507135&gjid=1595430948&_gid=218417465.1668811526&_u=KEBAAEAAEAAAAC~&z=189700248
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-163444056-1&cid=986689732.1668811526&jid=322507135&gjid=1595430948&_gid=218417465.1668811526&_u=KEBAAEAAEAAAAC~&z=189700248 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.candleheat.cloud
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 18 Nov 2022 22:45:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-22484186-3&cid=986689732.1668811526&jid=628636742&gjid=907070289&_gid=218417465.1668811526&_u=aEDAAUABEAAAAC~&z=714713214
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-22484186-3&cid=986689732.1668811526&jid=628636742&gjid=907070289&_gid=218417465.1668811526&_u=aEDAAUABEAAAAC~&z=714713214
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-22484186-3&cid=986689732.1668811526&jid=628636742&gjid=907070289&_gid=218417465.1668811526&_u=aEDAAUABEAAAAC~&z=714713214 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.candleheat.cloud
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 18 Nov 2022 22:45:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
trc-events.taboola.com/1240201/log/3/unip?en=pre_d_eng_tb&tos=4617&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531413&vi=1668811526791&ri=fa4121dc4a485978ae5aaa4bcef1ee4b&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1240201/log/3/unip?en=pre_d_eng_tb&tos=4617&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531413&vi=1668811526791&ri=fa4121dc4a485978ae5aaa4bcef1ee4b&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1240201/log/3/unip?en=pre_d_eng_tb&tos=4617&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531413&vi=1668811526791&ri=fa4121dc4a485978ae5aaa4bcef1ee4b&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 18 Nov 2022 22:45:33 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.candleheat.cloud
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1240208/log/3/unip?en=pre_d_eng_tb&tos=4618&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531414&vi=1668811526791&ri=98bb944c933337c22c06705d9c18c8f1&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1240208/log/3/unip?en=pre_d_eng_tb&tos=4618&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531414&vi=1668811526791&ri=98bb944c933337c22c06705d9c18c8f1&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1240208/log/3/unip?en=pre_d_eng_tb&tos=4618&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531414&vi=1668811526791&ri=98bb944c933337c22c06705d9c18c8f1&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 18 Nov 2022 22:45:33 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.candleheat.cloud
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1240211/log/3/unip?en=pre_d_eng_tb&tos=4618&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531414&vi=1668811526791&ri=a395241f5fc416a6828d8b9d6f83cdcb&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1240211/log/3/unip?en=pre_d_eng_tb&tos=4618&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531414&vi=1668811526791&ri=a395241f5fc416a6828d8b9d6f83cdcb&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1240211/log/3/unip?en=pre_d_eng_tb&tos=4618&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531414&vi=1668811526791&ri=a395241f5fc416a6828d8b9d6f83cdcb&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 18 Nov 2022 22:45:33 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.candleheat.cloud
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1255586/log/3/unip?en=pre_d_eng_tb&tos=4618&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531414&vi=1668811526791&ri=64038d26b688885088e788cb5710bd7e&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1255586/log/3/unip?en=pre_d_eng_tb&tos=4618&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531414&vi=1668811526791&ri=64038d26b688885088e788cb5710bd7e&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1255586/log/3/unip?en=pre_d_eng_tb&tos=4618&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531414&vi=1668811526791&ri=64038d26b688885088e788cb5710bd7e&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 18 Nov 2022 22:45:33 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.candleheat.cloud
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1255587/log/3/unip?en=pre_d_eng_tb&tos=4619&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531415&vi=1668811526791&ri=a21ccf4dd0f25be1e02f414f49afac68&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1255587/log/3/unip?en=pre_d_eng_tb&tos=4619&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531415&vi=1668811526791&ri=a21ccf4dd0f25be1e02f414f49afac68&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1255587/log/3/unip?en=pre_d_eng_tb&tos=4619&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531415&vi=1668811526791&ri=a21ccf4dd0f25be1e02f414f49afac68&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 18 Nov 2022 22:45:33 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.candleheat.cloud
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1255588/log/3/unip?en=pre_d_eng_tb&tos=4619&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531415&vi=1668811526791&ri=83ec4a1511b6ada72570f19cd9bcb803&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1255588/log/3/unip?en=pre_d_eng_tb&tos=4619&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531415&vi=1668811526791&ri=83ec4a1511b6ada72570f19cd9bcb803&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1255588/log/3/unip?en=pre_d_eng_tb&tos=4619&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531415&vi=1668811526791&ri=83ec4a1511b6ada72570f19cd9bcb803&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 18 Nov 2022 22:45:33 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.candleheat.cloud
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1255589/log/3/unip?en=pre_d_eng_tb&tos=4620&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531416&vi=1668811526791&ri=9acff7210e77b3ac053d9e4cc17079ef&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1255589/log/3/unip?en=pre_d_eng_tb&tos=4620&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531416&vi=1668811526791&ri=9acff7210e77b3ac053d9e4cc17079ef&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1255589/log/3/unip?en=pre_d_eng_tb&tos=4620&scd=13&ssd=1&est=1668811526794&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1668811531416&vi=1668811526791&ri=9acff7210e77b3ac053d9e4cc17079ef&ref=null&cv=20221113-4-RELEASE&item-url=http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.candleheat.cloud
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 18 Nov 2022 22:45:33 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.candleheat.cloud
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc.taboola.com/1240211/trc/3/json?tim=1668811527000&data=%7B%22id%22%3A596%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback2%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526804%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A9%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1240211/trc/3/json?tim=1668811527000&data=%7B%22id%22%3A596%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback2%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526804%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A9%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1240211/trc/3/json?tim=1668811527000&data=%7B%22id%22%3A596%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback2%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526804%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A9%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Fri, 18 Nov 2022 22:45:29 GMT
via: 1.1 varnish
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668811529.909450,VS0,VE95
vary: Accept-Encoding
x-vcl-time-ms: 95
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=66dff31435
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=66dff31435
IP
GET /releases/v5.15.4/css/free.min.css?token=66dff31435 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.candleheat.cloud/
Origin: http://www.candleheat.cloud
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 18 Nov 2022 22:45:27 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c416f79611bca57dde019f04fe3cc36e.cloudfront.net (CloudFront)
x-amz-cf-pop: DUB2-C1
x-amz-cf-id: CkJF-KieiO1AQtlNfYCOCYF6ifmkYDv-u90Cas_ZIM3y1ZOylhBm2w==
age: 3054
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=opbr2rQicMjesPOsJBNeKT6%2FRJ%2Bi2rMrjMmnFoXtO86cszn%2Bz9RW52gqLx%2FdQKShckTdfsmQq4%2BItaJofF4RLPtQfqMiwqOnDW%2Bm6hkdskPkHogiQrnHXKqSwL2wIiGDOPNvDPhzUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76c43c8f2cfe7539-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA_data/base.js
200 OK 0 B URL HTTP/1.1 www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA_data/base.js
IP
GET /clicks/SleepConnection_files/0hhQzuJFAxA_data/base.js HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.candleheat.cloud/clicks/SleepConnection_files/0hhQzuJFAxA.htm
Cookie: _ga=GA1.2.986689732.1668811526; _gid=GA1.2.218417465.1668811526; _gat=1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 22:45:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:23 GMT
ETag: W/"6369f3fb-1cbb31"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2971
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GG1ebfxxkzEflGnG9Wmn6PQZo4TXDn7pEkrW4QRpgn62GkaIttlG8GYVAlreclTXRzyTI71Lj8gUmNjoQeY5u84K%2BXIi28cw2V8IiD1RzQjTkHukQoB%2FMLVJ8UuGJ6c10npdP7kzzg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c43c911fd506d5-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
trc.taboola.com/1255588/trc/3/json?tim=1668811527006&data=%7B%22id%22%3A298%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback5%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526805%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A10%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1255588/trc/3/json?tim=1668811527006&data=%7B%22id%22%3A298%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback5%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526805%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A10%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1255588/trc/3/json?tim=1668811527006&data=%7B%22id%22%3A298%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback5%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526805%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A10%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Fri, 18 Nov 2022 22:45:29 GMT
via: 1.1 varnish
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668811529.916104,VS0,VE94
vary: Accept-Encoding
x-vcl-time-ms: 94
X-Firefox-Spdy: h2
trc.taboola.com/1255587/trc/3/json?tim=1668811527004&data=%7B%22id%22%3A285%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback4%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526805%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A9%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1255587/trc/3/json?tim=1668811527004&data=%7B%22id%22%3A285%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback4%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526805%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A9%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1255587/trc/3/json?tim=1668811527004&data=%7B%22id%22%3A285%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback4%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526805%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A9%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Fri, 18 Nov 2022 22:45:29 GMT
via: 1.1 varnish
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668811529.914775,VS0,VE97
vary: Accept-Encoding
x-vcl-time-ms: 97
X-Firefox-Spdy: h2
www.candleheat.cloud/offer.php?id=388&sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
200 OK 0 B URL HTTP/2 www.candleheat.cloud/offer.php?id=388&sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0
IP
GET /offer.php?id=388&sid=998999&h=ZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U/sgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0 HTTP/1.1
Host: www.candleheat.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 18 Nov 2022 22:45:26 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iwQCLV%2FRpFZwddPh9LIYPuoA7cRwkCdzU51TvM5c3ipyLTBdQCYuOt0O%2BP0qnvqr9kRGz3%2Bzn22j5vdfIqzZsZDK0cbyPY7m8zewLMWXtJ3bB40ZXzUA4A293ImaaMKRm0uEbbs72w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76c43c877bf40702-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=66dff31435
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=66dff31435
IP
GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=66dff31435 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.candleheat.cloud/
Origin: http://www.candleheat.cloud
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 18 Nov 2022 22:45:27 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9e6e5fbce5eba1297db3dd3ea30c382.cloudfront.net (CloudFront)
x-amz-cf-pop: QRO50-C1
x-amz-cf-id: 52xir_XYNTm_g8YiRw-jA_4w0SseuvtJBoZOljOpKSOww4A94RA0AA==
age: 3054
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nOAV%2B3pbk%2FO2LYTer1WJGWHU3MQXv7aPJvBlW0TkJ0vEB5%2Bh8%2BcCXPlEnI9oSTs%2FC7RJIKd%2Bsz4m8l1si0dwyVgsNkDjqvpGPXvsua3IloS7O5AioePhb%2B3TWR4O8EwIS3ADK6xFGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76c43c8f2d007539-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
trc.taboola.com/1240201/trc/3/json?tim=1668811526801&data=%7B%22id%22%3A167%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526801%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A5%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1240201/trc/3/json?tim=1668811526801&data=%7B%22id%22%3A167%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526801%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A5%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1240201/trc/3/json?tim=1668811526801&data=%7B%22id%22%3A167%2C%22ii%22%3A%22%2Fsleepconnection%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1668811526791%2C%22cv%22%3A%2220221113-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.snorestopper-watch.com%2Fsleepconnection%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-35-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1668811526801%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.candleheat.cloud%2Fclicks%2FSleepConnection.php%3Fsid%3D998999%26h%3DZJbsAICNsCw9HHuOYgoeTBiFRDFDFznApydgBhhIs1U%2FsgOxlkBYmC15G1SpJJ-EPRZo5FY2w_so1QgVr5LyCXDvVK3m8Ov4PrQc3ogKjjqqfttGLx7fqiEa9ed-S8xRx7KwrxaEaEi5ZFCNOxeaMWVxXt5_TIcH3fN146sRHiIcEZAyPEHxuZN4NUbm-1mEBph2GB6nwV2Bfaj8A5BRNf0%22%2C%22tos%22%3A5%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.candleheat.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Fri, 18 Nov 2022 22:45:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668811529.784402,VS0,VE91
vary: Accept-Encoding
x-vcl-time-ms: 91
X-Firefox-Spdy: h2
172.64.140.3
104.21.50.151
31.13.72.36
141.226.228.48
93.184.220.29
23.36.76.226