go.lnkpth.com/aff_c?offer_id=10000&aff_id=70711&url_id=0&aff_sub5=tiktok&click_id=1uhnfs92femk/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=70711&source=70711&aff_sub2=tiktok&click_id=31_70711_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90
172.255.248.119302 Found 394 B URL User Request GET HTTP/1.1 go.lnkpth.com/aff_c?offer_id=10000&aff_id=70711&url_id=0&aff_sub5=tiktok&click_id=1uhnfs92femk/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=70711&source=70711&aff_sub2=tiktok&click_id=31_70711_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90
IP 172.255.248.119:443
Certificate IssuerLet's Encrypt
Subjecttrack.cpamatica.com
Fingerprint55:95:28:6A:EC:1D:DC:9B:AA:33:46:53:FF:B5:17:A0:D5:5F:2F:B4
ValidityTue, 23 Apr 2024 12:38:03 GMT - Mon, 22 Jul 2024 12:38:02 GMT
File type HTML document, ASCII text, with very long lines (394), with no line terminators
Hash da74758ac7208619c360c1abf2c42023
547252aa05f83d71335dc413e7c2ec1d00e14125
eaa96d3719c225ad12981dd408c030473482478c071c11117413ee6a7774c343
GET /aff_c?offer_id=10000&aff_id=70711&url_id=0&aff_sub5=tiktok&click_id=1uhnfs92femk/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=70711&source=70711&aff_sub2=tiktok&click_id=31_70711_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90 HTTP/1.1
Host: go.lnkpth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 10 May 2024 10:28:52 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 394
Connection: keep-alive
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
Set-Cookie: language=en; Domain=go.lnkpth.com; Path=/; Expires=Sun, 09 Jun 2024 10:28:52 GMT
test=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
10000=32_2_10000_7c020f22995f021b096286e3cbb6003e; Domain=go.lnkpth.com; Path=/; Expires=Sun, 09 Jun 2024 10:28:52 GMT; Secure; SameSite=None
op_10000=0; Domain=go.lnkpth.com; Path=/; Expires=Sun, 09 Jun 2024 10:28:52 GMT
user_id=ef70a8f9-0d35-4a17-ae7c-3ca61a210508_d5c8c843613f9c6212cbf9605036eb8d; Domain=go.lnkpth.com; Path=/; Expires=Wed, 09 May 2029 10:28:52 GMT; Secure; SameSite=None
Location: /rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds9%26aff_id%3D2%26aff_sub%3D2%26source%3D2%26aff_sub2%3Dtiktok%26click_id%3D32_2_10000_7c020f22995f021b096286e3cbb6003e
Vary: Accept
Cache-Control: no-store, no-cache
go.lnkpth.com/rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds9%26aff_id%3D2%26aff_sub%3D2%26source%3D2%26aff_sub2%3Dtiktok%26click_id%3D32_2_10000_7c020f22995f021b096286e3cbb6003e
172.255.248.119200 OK 255 B URL User Request GET HTTP/1.1 go.lnkpth.com/rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds9%26aff_id%3D2%26aff_sub%3D2%26source%3D2%26aff_sub2%3Dtiktok%26click_id%3D32_2_10000_7c020f22995f021b096286e3cbb6003e
IP 172.255.248.119:443
Certificate IssuerLet's Encrypt
Subjecttrack.cpamatica.com
Fingerprint55:95:28:6A:EC:1D:DC:9B:AA:33:46:53:FF:B5:17:A0:D5:5F:2F:B4
ValidityTue, 23 Apr 2024 12:38:03 GMT - Mon, 22 Jul 2024 12:38:02 GMT
File type HTML document, ASCII text
Hash d032811d8a01caff2a5ce141a657ca0e
7cfb5ac640b5496f18939ee73dc89cccf77125cc
e2efe220662dd9a54582aa6ab3f6d9fcaf0341710d0b01aa051fc09258ff9e6e
GET /rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds9%26aff_id%3D2%26aff_sub%3D2%26source%3D2%26aff_sub2%3Dtiktok%26click_id%3D32_2_10000_7c020f22995f021b096286e3cbb6003e HTTP/1.1
Host: go.lnkpth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: language=en; 10000=32_2_10000_7c020f22995f021b096286e3cbb6003e; op_10000=0; user_id=ef70a8f9-0d35-4a17-ae7c-3ca61a210508_d5c8c843613f9c6212cbf9605036eb8d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 10:28:52 GMT
Content-Type: text/html
Last-Modified: Fri, 13 Aug 2021 14:56:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61168831-149"
Cache-Control: no-store, no-cache
Content-Encoding: gzip
oacenom.com/ckset
104.21.88.100 117 B IP 104.21.88.100:0
Hash d8e43c6162ebc863fbfbcf209efd56a8
4561ba890d95e51285d06a0e223dc2051f35a804
8e49dc61fe239cda8349e3958e38ddcc0e8190379a4b40835a3e21cdf7fc3c85
POST /ckset HTTP/1.1
Host: oacenom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://queitho.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 201 Created
date: Fri, 10 May 2024 10:28:53 GMT
content-type: application/json; charset=utf-8
content-length: 117
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: mastidencook=9cd8194e-963e-4a74-b950-c210a19868c6_7a99778034a3470a43a8a911be8123d7; Domain=oacenom.com; Path=/; Expires=Wed, 09 May 2029 10:28:53 GMT; Secure; SameSite=None
etag: W/"75-RWG6iQ2V5RKF0GoOIj3CBR81qAQ"
access-control-allow-origin: https://queitho.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4SLW1YQS3MexvxgfHwkzDH8JFkN5QHaHExV5%2FdsnV4fuAHQqiHtMVSm443Fxe5cSzfQTea8Sdn%2BgEzfTGMi11izp9BqwsOatijk9kIShthryL2kFcBrpQtqj6cEiyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88193eb96967b4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
queitho.com/visit?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=s9&p_camp=&bstep=&sid=&efcn=custom-unknown&cntp=custom-unknown&sch=&scw=&vph=&vpw=<=
104.21.79.101 789 B URL queitho.com/visit?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=s9&p_camp=&bstep=&sid=&efcn=custom-unknown&cntp=custom-unknown&sch=&scw=&vph=&vpw=<=
IP 104.21.79.101:0
Hash ac03b5f4e05d47d118e13ca30ec14eb8
7b3b817cb02451dc87fe4d39b77e85f7e9b87898
e17628ef82689d7e07041431b497a7be6623e7d80aab29d7a483779ebb272f07
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /visit?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=s9&p_camp=&bstep=&sid=&efcn=custom-unknown&cntp=custom-unknown&sch=&scw=&vph=&vpw=<= HTTP/1.1
Host: queitho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 392
Origin: https://queitho.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 201 Created
date: Fri, 10 May 2024 10:28:53 GMT
content-type: application/json; charset=utf-8
content-length: 789
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: browserLanguage=en; Domain=queitho.com; Path=/; Expires=Sun, 09 Jun 2024 10:28:53 GMT
userId=5a07bcb9-9bd6-485a-b595-8704163cc574_9eaad9cf6ac6a6c9ea8a1f35b70812e0; Domain=queitho.com; Path=/; Expires=Wed, 09 May 2029 10:28:53 GMT; Secure; SameSite=None
cache-control: no-store, no-store, no-cache
etag: W/"315-ezuBfLAkUdyH/k05t36F9+m4eJg"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ZYBAewHkC44n0vGaq0S7s1EarVJVofosc3JbN1F%2B2K7Knvcs3lRCig3VheKK8z%2Fg0Od27SXEaqOhkY%2FsZsubuYhe8VNAvOtieinh4EdUFypbFrD%2BLhhwfMKe4Y8BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88193eb9ebfb5696-OSL
alt-svc: h3=":443"; ma=86400
queitho.com/fl?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=f14&sl_cid=3594bd6c-c0d1-4e6b-8895-d6cfab53b891_557c7a5cf9f772dcf3706cb329cb04ce&p_camp=&bstep=&sid=s9&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=
104.21.79.101 1.3 kB URL queitho.com/fl?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=f14&sl_cid=3594bd6c-c0d1-4e6b-8895-d6cfab53b891_557c7a5cf9f772dcf3706cb329cb04ce&p_camp=&bstep=&sid=s9&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=
IP 104.21.79.101:0
Hash 91ad453990909b0f8adc891a6bde218c
9232c53a47a24c1d2f0f20665c0a045a53c33265
ec4ea145a59a0971fe21e159a102c1d315cc22c39b6c726d4fc5db2ac802447f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fl?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=f14&sl_cid=3594bd6c-c0d1-4e6b-8895-d6cfab53b891_557c7a5cf9f772dcf3706cb329cb04ce&p_camp=&bstep=&sid=s9&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<= HTTP/1.1
Host: queitho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 398
Origin: https://queitho.com
DNT: 1
Connection: keep-alive
Cookie: browserLanguage=en; userId=5a07bcb9-9bd6-485a-b595-8704163cc574_9eaad9cf6ac6a6c9ea8a1f35b70812e0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 201 Created
date: Fri, 10 May 2024 10:28:53 GMT
content-type: application/json; charset=utf-8
content-length: 1274
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: browserLanguage=en; Domain=queitho.com; Path=/; Expires=Sun, 09 Jun 2024 10:28:53 GMT
cache-control: no-store, no-store, no-cache
etag: W/"4fa-kjLFOkeiTB0vDyBmXAoEWlPDMmU"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NNsIRauCmiP%2FiZPPOyH73Qydt%2F8BVsHvExlBAX9K2qqME8z6A4X%2FNNjLT1%2BFZG0j0aLyMlR%2F%2FQEX%2BNQWaw9fDLIWNCZzpTJYguCHWIU%2FB2p8%2Fmf%2Bx%2BV%2FZTP4YLKBEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88193eba4c965696-OSL
alt-svc: h3=":443"; ma=86400
queitho.com/ofp?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=f14&sl_cid=3594bd6c-c0d1-4e6b-8895-d6cfab53b891_557c7a5cf9f772dcf3706cb329cb04ce&p_camp=&bstep=0&sid=s9&ofp_id=111&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=0
104.21.79.101 223 B URL queitho.com/ofp?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=f14&sl_cid=3594bd6c-c0d1-4e6b-8895-d6cfab53b891_557c7a5cf9f772dcf3706cb329cb04ce&p_camp=&bstep=0&sid=s9&ofp_id=111&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=0
IP 104.21.79.101:0
Hash 11a9f1567e3844166db82d034e4db4ba
d6ca412c4dddec26af5f80cb153c35cb6d6638d2
d9e5dbdeb5f88bf8709401a7b3c70cf4138555e98892969d92d1ff877b6ddeb7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /ofp?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=f14&sl_cid=3594bd6c-c0d1-4e6b-8895-d6cfab53b891_557c7a5cf9f772dcf3706cb329cb04ce&p_camp=&bstep=0&sid=s9&ofp_id=111&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=0 HTTP/1.1
Host: queitho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 405
Origin: https://queitho.com
DNT: 1
Connection: keep-alive
Cookie: browserLanguage=en; userId=5a07bcb9-9bd6-485a-b595-8704163cc574_9eaad9cf6ac6a6c9ea8a1f35b70812e0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 201 Created
date: Fri, 10 May 2024 10:28:53 GMT
content-type: application/json; charset=utf-8
content-length: 223
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: browserLanguage=en; Domain=queitho.com; Path=/; Expires=Sun, 09 Jun 2024 10:28:53 GMT
cache-control: no-store, no-store, no-cache
etag: W/"df-1spBLE3d7CavX4DLFTw1y21mONI"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=67QKi7vAdEkPQgYHavsscAcmyjzlqyxybDyDKxx7PlWiwTO3b%2BDgq%2FLFcyq4%2FvozR1ArDX4054G45I2hGBJnpUJr%2FIXeetDxUQ2MtZiOgeJVA2qto1K8%2FbWDRnGPxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88193ebb0dc25696-OSL
alt-svc: h3=":443"; ma=86400
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash 0b534d7c532b40f4dd4a25d391cf810c
e7753d8a7397d5a46f2fac33e3def38a60139ec5
382a77ecf01b7d5dfaf8d1b09bb5ff1b202ef67b6010ca2d4c827d6a0d1c6958
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 10:28:53 GMT
Last-Modified: Fri, 10 May 2024 10:27:04 GMT
Server: ECAcc (ska/F6D2)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KAI8A7iIB6e2GE-CD3pIdiGd906l6DjNa2JFQCguXY0H8EwTuZxW5A==
Age: 109
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash c2c5d1ecf386e2c193ae721fb30ecd85
7d58b6b826a23336343b4cdb7b1fb3883e822439
cae5d7336cfbe8f8faf1a59808e90bc2eab6ca32839a26d506a7470a62bb3b57
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 10:28:54 GMT
Last-Modified: Fri, 10 May 2024 09:38:37 GMT
Server: ECAcc (amb/6B0A)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DiuqkatmoZlRhByDjt0N5ShNIfTTcCiOUe8TNq2kcXIcYAkDenqxtQ==
Age: 3017
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash c2c5d1ecf386e2c193ae721fb30ecd85
7d58b6b826a23336343b4cdb7b1fb3883e822439
cae5d7336cfbe8f8faf1a59808e90bc2eab6ca32839a26d506a7470a62bb3b57
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 10:28:54 GMT
Last-Modified: Fri, 10 May 2024 10:27:05 GMT
Server: ECAcc (amb/6AB2)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: r5Z4ba-gtGI8Q9afaEUU7eWkHKTSmfqwh2ZhLR3IH8tP0w_pA_7bhQ==
Age: 109
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash 0b534d7c532b40f4dd4a25d391cf810c
e7753d8a7397d5a46f2fac33e3def38a60139ec5
382a77ecf01b7d5dfaf8d1b09bb5ff1b202ef67b6010ca2d4c827d6a0d1c6958
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 10:28:54 GMT
Server: ECAcc (amb/6AD6)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2hxvsArtTmvoTgU-lz6epoACVPU3Pm4W_mRh_m2mfopot4XC7-skGQ==
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash 0b534d7c532b40f4dd4a25d391cf810c
e7753d8a7397d5a46f2fac33e3def38a60139ec5
382a77ecf01b7d5dfaf8d1b09bb5ff1b202ef67b6010ca2d4c827d6a0d1c6958
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 10:28:54 GMT
Last-Modified: Fri, 10 May 2024 10:27:06 GMT
Server: ECAcc (ska/F790)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: N9RSAMhRA4v0mpriisbWqsMhcyHm9WT1JEtGy_yVl270k9bmOXWiPw==
Age: 108
secure.cmadclicks000.com/track/MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjAuMC4w?subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
34.232.98.1302 Found 0 B URL User Request GET HTTP/2 secure.cmadclicks000.com/track/MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjAuMC4w?subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
IP 34.232.98.1:443
Certificate IssuerAmazon
Subjectsecure.cmadclicks000.com
Fingerprint67:89:F8:78:81:9E:18:25:7D:50:A1:37:ED:76:C9:B6:66:AE:54:A6
ValidityTue, 06 Feb 2024 00:00:00 GMT - Wed, 05 Mar 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track/MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjAuMC4w?subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7 HTTP/1.1
Host: secure.cmadclicks000.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://empirelayer.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
set-cookie: AWSALB=ocyoPByNd/egl5BqVi+n2IUh68zXg9K4bPeP21PCIms7QdsW+ULKHJ5G7qX9eby92avWIxSQbMEgeTsbY1nCu1bPq2utKEyo2SO+K+T+wj2OP+hIC24L8dbGY7s0; Expires=Fri, 17 May 2024 10:28:55 GMT; Path=/
AWSALBCORS=ocyoPByNd/egl5BqVi+n2IUh68zXg9K4bPeP21PCIms7QdsW+ULKHJ5G7qX9eby92avWIxSQbMEgeTsbY1nCu1bPq2utKEyo2SO+K+T+wj2OP+hIC24L8dbGY7s0; Expires=Fri, 17 May 2024 10:28:55 GMT; Path=/; SameSite=None; Secure
PHPSESSID=k76q4j3gv4ioaui3kkn0rfnfid; path=/
offerit_unique_344_300_1375=MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjE0OTExOTU2LjAuMA; Max-Age=86400; Expires=Saturday, 11 May 2024 10:28:55 UTC; path=/; domain=cmadclicks000.com
ocode_344_1375=MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjE0OTExOTU2LjAuMA; Max-Age=2592000; Expires=Sunday, 09 Jun 2024 10:28:55 UTC; path=/; domain=cmadclicks000.com
ocode_344=MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjE0OTExOTU2LjAuMA; Max-Age=2592000; Expires=Sunday, 09 Jun 2024 10:28:55 UTC; path=/; domain=cmadclicks000.com
offerit_344_1375_cookie=https%3A%2F%2Fempirelayer.club%2F; Max-Age=2592000; Expires=Sunday, 09 Jun 2024 10:28:55 UTC; path=/; domain=cmadclicks000.com
offerit_344_1375=MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjE0OTExOTU2LjAuMA|||2663df6e71e33b7.97489317; Max-Age=2592000; Expires=Sunday, 09 Jun 2024 10:28:55 UTC; path=/; domain=cmadclicks000.com
server: Apache/2.4.41 (Ubuntu)
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl1.png
185.76.9.25200 OK 79 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl1.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 09eeffb13663c54afc75c71f44d28704
5825108b43943c731251838b508c4ff45724eac0
00211a1d076f7ce66dc3f18a509e4b110be7e090d44dc0cda907b2f81746e625
GET /lander/bbw_ppt/images/girl1.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 79397
last-modified: Thu, 09 May 2024 12:44:42 GMT
x-rgw-object-type: Normal
etag: "09eeffb13663c54afc75c71f44d28704"
x-amz-request-id: tx000006ed1ae75d4e48a06-00663cc911-79fc2a4-nyc
x-77-nzt: BLlMCRQ3Nzf/zg8BALlMChM3Nzf/WggAACUTwi43Nzf/rhUAAJySOhdPYu4A
x-77-nzt-ray: af585630ab0d042ce7f63d661ea0a31b
x-accel-expires: @1716296465
x-accel-date: 1715267353
x-77-cache: HIT
x-77-age: 69582
server: CDN77-Turbo
x-cache: HIT
x-age: 69582
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl2.png
185.76.9.25200 OK 68 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl2.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 7385a515f8c12e389a834d774df64bf1
d2cc53db0a754a756bb771176b2b4c8f53cf213e
903a5e26e1fde000517fa899461fe47ac7ea7f21729c4668104de32b08308d69
GET /lander/bbw_ppt/images/girl2.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 68496
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "7385a515f8c12e389a834d774df64bf1"
x-amz-request-id: tx0000042a05e3a529435b3-00663cdea6-85a4f2a-nyc
x-77-nzt: BLlMCRQ3Nzf/zg8BALlMCgE3Nzf/WQgAACUTwjE3Nzf/GgAAAM/T1GY03e4A
x-77-nzt-ray: af585630ab0d042ce7f63d668e9bb21b
x-accel-expires: @1716301990
x-accel-date: 1715267353
x-77-cache: HIT
x-77-age: 69582
server: CDN77-Turbo
x-cache: HIT
x-age: 69582
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl3.png
185.76.9.25200 OK 72 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl3.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash e63402d30b258c1245d6f01defd5d83e
a3da38b5b94c0f23bd84d099ea1563cf5ff66fb5
ee1d409d0ed98a3f9ced126ee70c0f03c2c0ef4e5b4125ead46976ad8395998a
GET /lander/bbw_ppt/images/girl3.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 71924
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "e63402d30b258c1245d6f01defd5d83e"
x-amz-request-id: tx000006509d082ba8abd1a-00663cdea6-51342fb-nyc
x-77-nzt: BLlMCRQ3Nzf/zg8BALlMChM3Nzf/WQgAACUTwjQ3Nzf/GgAAAJySOhTM+zwA
x-77-nzt-ray: af585630ab0d042ce7f63d66271fbe1b
x-accel-expires: @1716301990
x-accel-date: 1715267353
x-77-cache: HIT
x-77-age: 69582
server: CDN77-Turbo
x-cache: HIT
x-age: 69582
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl4.png
185.76.9.25200 OK 69 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl4.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash cf0ed91d79976126be95d8c2b3cc7536
ee5253364b72feb3fe6dcc569e739aa51efd4428
a270b0be6c768ebb20d33e1e5492374b81d478e206426c6a427f8aff6c042b16
GET /lander/bbw_ppt/images/girl4.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 68974
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "cf0ed91d79976126be95d8c2b3cc7536"
x-amz-request-id: tx00000a571e24319b66742-00663cdea6-85a4f2a-nyc
x-77-nzt: BLlMCRQ3Nzf/zg8BALlMCgE3Nzf/WQgAACUTwi43Nzf/GgAAAJySOhcE0x8A
x-77-nzt-ray: af585630ab0d042ce7f63d66681b091c
x-accel-expires: @1716301990
x-accel-date: 1715267353
x-77-cache: HIT
x-77-age: 69582
server: CDN77-Turbo
x-cache: HIT
x-age: 69582
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl6.png
185.76.9.25200 OK 63 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl6.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash cc2ba36c8d9d193ce259066e407c6489
0bac1b7a226ec222d84c7b14b73e40196edf1cf7
e170e2460fabd9166a41fd6ceee5975334e36f44d29b974a22cf58a7d7a1865e
GET /lander/bbw_ppt/images/girl6.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 62854
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "cc2ba36c8d9d193ce259066e407c6489"
x-amz-request-id: tx000000497325f327b72d1-00663cdea6-5134150-nyc
x-77-nzt: BLlMCRQ3Nzf/yg8BALlMCgw3Nzf/XQgAACUTwi43Nzf/GQAAAJySOhRE0qMA
x-77-nzt-ray: af585630ab0d042ce7f63d6655c94f1c
x-accel-expires: @1716301991
x-accel-date: 1715267357
x-77-cache: HIT
x-77-age: 69578
server: CDN77-Turbo
x-cache: HIT
x-age: 69578
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl5.png
185.76.9.25200 OK 70 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl5.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 1229be3a97364870f26a789fa10e4bda
408698bf78a8fdfc6741590de7cd10f2dcc62144
7cf8762e60dbf40d1fe6de400f5372ef7798c68d891e679524aca089e831730d
GET /lander/bbw_ppt/images/girl5.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 70159
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "1229be3a97364870f26a789fa10e4bda"
x-amz-request-id: tx000007b10542e6dcde76a-00663cdea6-9f56a4c-nyc
x-77-nzt: BLlMCRQ3Nzf/vQ8BALlMCgk3Nzf/aggAANRmOBE3Nzf/GgAAAJySOhdsTaEA
x-77-nzt-ray: af585630ab0d042ce7f63d66ca893a1c
x-accel-expires: @1716301990
x-accel-date: 1715267370
x-77-cache: HIT
x-77-age: 69565
server: CDN77-Turbo
x-cache: HIT
x-age: 69565
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl7.png
185.76.9.25200 OK 64 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl7.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 6d285c40dfe0b0703b82e0ae27aa9093
f4035037bd05d4f5dd976b510e515ea3dda7c026
c2e60a4d4c41002fe58af537682859ed89ed0b3692fceb2da58b244627745923
GET /lander/bbw_ppt/images/girl7.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 63659
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "6d285c40dfe0b0703b82e0ae27aa9093"
x-amz-request-id: tx00000101e9879d0ded373-00663cdea6-51342fb-nyc
x-77-nzt: BLlMCRQ3Nzf/yg8BALlMCgE3Nzf/XQgAAJySISc3Nzf/GgAAAJySOhTCkIIA
x-77-nzt-ray: af585630ab0d042ce7f63d667e00931c
x-accel-expires: @1716301990
x-accel-date: 1715267357
x-77-cache: HIT
x-77-age: 69578
server: CDN77-Turbo
x-cache: HIT
x-age: 69578
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl8.png
185.76.9.25200 OK 74 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl8.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 5cf880bc5d4c163c1e39befa98758389
95f3fcd1d7fdb6bbae0f72421f1f26af0d6f2914
c8c5fbd2c4b58b15cad866d2ef3748847f79fa68fe8ce824339acffe421f0821
GET /lander/bbw_ppt/images/girl8.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 73669
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "5cf880bc5d4c163c1e39befa98758389"
x-amz-request-id: tx000009e1d177d17707081-00663cdea6-79fc2a4-nyc
x-77-nzt: BLlMCRQ3Nzf/yg8BALlMCgk3Nzf/XQgAACUTwjE3Nzf/GQAAAJySOhQX+jMA
x-77-nzt-ray: af585630ab0d042ce7f63d66f3ecbb1c
x-accel-expires: @1716301991
x-accel-date: 1715267357
x-77-cache: HIT
x-77-age: 69578
server: CDN77-Turbo
x-cache: HIT
x-age: 69578
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl9.png
185.76.9.25200 OK 71 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl9.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 6ff9b04758605055ce447f66cd9b3cf8
c49d4980a667e927ea7c332b74d2cd15ff80e3d8
e0a36faef34476f168e2d33d7ac8638f62cb79f3f162e31a0bdcb4b3e1d170a2
GET /lander/bbw_ppt/images/girl9.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 70865
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "6ff9b04758605055ce447f66cd9b3cf8"
x-amz-request-id: tx000004c7df2810f817158-00663cdea6-85c8189-nyc
x-77-nzt: BLlMCRQ3Nzf/yg8BALlMCgk3Nzf/XQgAANRmOBE3Nzf/GgAAAM/T1GYhpN0A
x-77-nzt-ray: af585630ab0d042ce7f63d66c03b691d
x-accel-expires: @1716301990
x-accel-date: 1715267357
x-77-cache: HIT
x-77-age: 69578
server: CDN77-Turbo
x-cache: HIT
x-age: 69578
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl10.png
185.76.9.25200 OK 68 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl10.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 1741f5afab80a567abe77f3f6da763b3
a7c4f717d2eb85826a997133b9840f0cace83b5a
a56a97e18fb21f4a0ce1152473cb1113cb8e7a2c376b97a41630ae463c211d7c
GET /lander/bbw_ppt/images/girl10.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 68332
last-modified: Thu, 09 May 2024 12:44:42 GMT
x-rgw-object-type: Normal
etag: "1741f5afab80a567abe77f3f6da763b3"
x-amz-request-id: tx0000057e8b78fff352064-00663cc910-85a4f2a-nyc
x-77-nzt: BLlMCRQ3Nzf/yg8BALlMCgE3Nzf/XQgAACUTwi43Nzf/sBUAAJySOhfdUGMA
x-77-nzt-ray: af585630ab0d042ce7f63d664974711d
x-accel-expires: @1716296464
x-accel-date: 1715267357
x-77-cache: HIT
x-77-age: 69578
server: CDN77-Turbo
x-cache: HIT
x-age: 69578
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl.png
185.76.9.25200 OK 218 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 440 x 440, 8-bit/color RGBA, non-interlaced
Size 218 kB (217974 bytes)
Hash a507d5ac5235639cae09a64af0138442
f8e5bd282fbcf3d6ef2082321135271bb9727bcb
ed205b1ef4bf328996cc0d6d52d94d9c12cc05466a6b860e71e30a58ba4aa268
GET /lander/bbw_ppt/images/girl.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 217974
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "a507d5ac5235639cae09a64af0138442"
x-amz-request-id: tx000000d817e67ab1dcfeb-00663cdea6-85c8189-nyc
x-77-nzt: BLlMCRQ3Nzf/yQ8BALlMChM3Nzf/XggAACUTwi43Nzf/GgAAAJySOhTJZ2cA
x-77-nzt-ray: af585630ab0d042ce7f63d66ec18781d
x-accel-expires: @1716301990
x-accel-date: 1715267358
x-77-cache: HIT
x-77-age: 69577
server: CDN77-Turbo
x-cache: HIT
x-age: 69577
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_vendor/jquery-2.2.4.min.js
185.76.9.25200 OK 33 kB URL GET HTTP/2 hello.bbwsexdates.club/_vendor/jquery-2.2.4.min.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type gzip compressed data, from Unix
Hash 5911824ceeed7e03c80525b8338aede6
33ea8a8ad1bcb6b167193ee6352a2f759a18c9bb
83f6f844710192e414fc4e936c35105af9643694946c3ae24fbb80006c735fee
GET /_vendor/jquery-2.2.4.min.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:48 GMT
x-rgw-object-type: Normal
etag: W/"b354cc9d56a1da6b0c77604d1b153850"
x-amz-request-id: tx00000c26579219e548012-00663cdea6-85c8182-nyc
x-77-nzt: BLlMCRQ3Nzf/eg8BALlMCgk3Nzf/rggAACUTwjQ3Nzf/GQAAAJySOhR5mnsA
x-77-nzt-ray: af585630ab0d042ce7f63d662f66d71a
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267437
x-77-cache: HIT
x-77-age: 69498
server: CDN77-Turbo
x-cache: HIT
x-age: 69498
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-VSC39DNY4C
142.250.74.168200 OK 95 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-VSC39DNY4C
IP 142.250.74.168:443
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (4242)
Hash c6de19c0f657c7f37249dc8e197d748b
2e6f8559149c9c06cb87fe5b13c025e06728ba0e
5e129770ed3a3286db0cf9bfaa076ca7a5f0feb65731c4c8d1d787153cdf0d58
GET /gtag/js?id=G-VSC39DNY4C HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 10:28:55 GMT
expires: Fri, 10 May 2024 10:28:55 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 95211
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/js/script.js
185.76.9.25200 OK 24 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/js/script.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type gzip compressed data, from Unix
Hash 85a831888fa7175ca9534f0da2355565
0c5cafa822f2f3ed2850ce973fa45e8b40b8938a
25b1f4cd3324df40e4f09f9272b7f55065c23fc11f42f1b6b826d921c9a04c9e
GET /lander/bbw_ppt/assets/js/script.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"8fece2e2691cf17781d24ad8b93400b8"
x-amz-request-id: tx00000bcabdd9c7c17f374-00663cdea6-9f26f94-nyc
x-77-nzt: BLlMCRQ3Nzf/uw8BALlMCgk3Nzf/bAgAACUTwi43Nzf/GgAAAM/T1GZa83EA
x-77-nzt-ray: af585630ab0d042ce7f63d660f11e323
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267372
x-77-cache: HIT
x-77-age: 69563
server: CDN77-Turbo
x-cache: HIT
x-age: 69563
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/css/glider.min.css
185.76.9.25200 OK 1.1 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/css/glider.min.css
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type gzip compressed data, from Unix
Hash ca335745b7fbddcfa5e4200dfb51a649
10beb17775998b124fec0353bc92ff848ee9cba8
5fa707c5ef83c505022c1e2e6b690c73fe9dc6bd54299e3f82cf33d614a3bfc7
GET /lander/bbw_ppt/assets/css/glider.min.css HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"9facae4703e0b0021ec37cec7b305bf6"
x-amz-request-id: tx00000f9a9464fc9ed1559-00663cdea6-9f26f94-nyc
x-77-nzt: BLlMCRQ3Nzf/zw8BALlMChM3Nzf/WQgAACUTwjE3Nzf/GQAAAM/T1GakRLIA
x-77-nzt-ray: af585630ab0d042ce7f63d66fa99c71a
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267352
x-77-cache: HIT
x-77-age: 69583
server: CDN77-Turbo
x-cache: HIT
x-age: 69583
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/background_d.png
185.76.9.25200 OK 352 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/background_d.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 1800 x 712, 8-bit/color RGBA, non-interlaced
Size 352 kB (352423 bytes)
Hash 273e5a1e1aa0bb181dc0242bcddfaaf0
27ef7263b0e0a6c55b6c8eef5c06efd0bd0bc955
e4e32252e9859e6c3b3dfe078e49f648a6c782d68e19705aaf99558745aa6cb1
GET /lander/bbw_ppt/images/background_d.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/assets/css/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 352423
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "273e5a1e1aa0bb181dc0242bcddfaaf0"
x-amz-request-id: tx000006a8a09efeefe64e6-00663cdf0b-79fc2a4-nyc
x-77-nzt: BLlMCRQ3Nzf/IgsAALlMCgw3Nzf/mAoBAJySISc3Nzf/IgIAAJySOhRm+lUA
x-77-nzt-ray: af585630ab0d042ce7f63d660bce3135
x-accel-expires: @1716302091
x-accel-date: 1715334085
x-77-cache: HIT
x-77-age: 2850
server: CDN77-Turbo
x-cache: HIT
x-age: 2850
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/css/styles.css
185.76.9.25200 OK 4.8 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/css/styles.css
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type gzip compressed data, from Unix
Hash 04c8440434bb3f8372ea8941c1d69ec9
822217ecde8eeeb17a08fc4408c8fb4425ab60f9
da10f34c870e4ed97f94850a5fa314ab67fda1233c7be4109c33f4be64b02d75
GET /lander/bbw_ppt/assets/css/styles.css HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"854d8efbc935c6b71ccddc3dd9bef790"
x-amz-request-id: tx00000fa26ab8498f6762c-00663cdea6-85c8182-nyc
x-77-nzt: BLlMCRQ3Nzf/vQ8BALlMChM3Nzf/awgAAJySISc3Nzf/GQAAAJySOhc/SboA
x-77-nzt-ray: af585630ab0d042ce7f63d663076b51a
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267370
x-77-cache: HIT
x-77-age: 69565
server: CDN77-Turbo
x-cache: HIT
x-age: 69565
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/css/loginForm.css
185.76.9.25200 OK 42 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/css/loginForm.css
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type gzip compressed data, from Unix
Hash efa9d639aa2060d4a5b28804dd57a044
dbd0c70c3d17f6423f3dfb5959af65da8ea79677
1e9eb3181ddcca130dabefe5de3c564b38a1379a855fd97b70b87a6d5233f150
GET /lander/bbw_ppt/assets/css/loginForm.css HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"43011728c0dce0398c5fd40cbe59f209"
x-amz-request-id: tx0000092c839076311b4c5-00663cdea6-85c8189-nyc
x-77-nzt: BLlMCRQ3Nzf/vg8BALlMCgE3Nzf/aggAAIrHJcQ3Nzf/GQAAAJySOhQ/efcA
x-77-nzt-ray: af585630ab0d042ce7f63d661929a31a
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267369
x-77-cache: HIT
x-77-age: 69566
server: CDN77-Turbo
x-cache: HIT
x-age: 69566
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
185.76.9.25200 OK 77 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /lander/bbw_ppt/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/assets/fonts/font-awesome.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: font/woff2
content-length: 77160
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "af7ae505a9eed503f8b8e6982036873e"
x-amz-request-id: tx00000d7a2928305fad08a-00663cdea8-5134150-nyc
x-77-nzt: BLlMCRQ3Nzf/tw8BALlMChM3Nzf/bggAANRmOBE3Nzf/GgAAAJySOhSEDjoA
x-77-nzt-ray: af585630ab0d042ce7f63d66a343a839
x-accel-expires: @1716301992
x-accel-date: 1715267376
x-77-cache: HIT
x-77-age: 69559
server: CDN77-Turbo
x-cache: HIT
x-age: 69559
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
luvwhisper.com/lp-external/index.js
54.230.111.9200 OK 2.2 kB URL GET HTTP/2 luvwhisper.com/lp-external/index.js
IP 54.230.111.9:443
Requested by https://empirelayer.club/tds/interlayer/eb/s/607a0f2d07dddb3b425901bdbc84df53?__t=1715336933967&__l=3600&__c=a9504e5f779b71a730d152d41bc6b37dd6d562a7&__u=
Certificate IssuerAmazon
Subjectluvwhisper.com
Fingerprint4D:EC:81:10:9E:C3:DA:0D:65:B1:D0:C2:7A:5E:0F:BE:3E:14:88:E3
ValidityTue, 09 Jan 2024 00:00:00 GMT - Thu, 06 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (2304), with no line terminators
Hash 6581cb890b9497166c13fa1122c88947
4632208a24f59f3b44a68ca77b130f4b6a661ded
19f631eaad330a3adac93c919803b30bc262991bb7db396bc9a4fbbae6cd5d3b
GET /lp-external/index.js HTTP/1.1
Host: luvwhisper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://empirelayer.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Fri, 10 May 2024 10:28:54 GMT
server: nginx
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
x-robots-tag: noindex
accept-ranges: bytes
cache-control: public, max-age=3600
last-modified: Thu, 09 May 2024 13:15:55 GMT
etag: W/"8b7-18f5d7efef8"
vary: Accept-Encoding
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: TtbQUr1TXVlUx4YLEtBY-xnB3l1prMRDs46MQ6HKalK1SkOxJaXuaA==
X-Firefox-Spdy: h2
empirelayer.club/tds/interlayer?handler=ExternalBackofferEvent&urlIn=https%3A%2F%2Fempirelayer.club%2Ftds%2Finterlayer%2Feb%2Fs%2F607a0f2d07dddb3b425901bdbc84df53%3F__t%3D1715336933967%26__l%3D3600%26__c%3Da9504e5f779b71a730d152d41bc6b37dd6d562a7%26__u%3D&urlOut=https%3A%2F%2Fsecure.cmadclicks000.com%2Ftrack%2FMjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjAuMC4w%3Fsubaff%3Dsml_e1f18e7f%26tds_cid%3Da9504e5f779b71a730d152d41bc6b37dd6d562a7%26_ocid%3Da9504e5f779b71a730d152d41bc6b37dd6d562a7&altQs=utm_campaign%3De1f18e7f%26utm_source%3Dint%26utm_content%3Ddit1120%26data2%3D3594bd6c-c0d1-4e6b-8895-d6cfab53b891%26s1%3Dps%26s3%3DMl9kaXQxMTIw%26tds_campaign%3Db7637pos%26tds_id%3Db7637pos_lp_a_1575477620507_bbwsexdates%26tds_oid%3D63fb536d%26tds_cid%3Da9504e5f779b71a730d152d41bc6b37dd6d562a7%26tds_ac_id%3Ds5428sto%26p_tds_cid%3D988f9aa68d9d97ae1c0b425fcf6580ac09368820%26tds_host%3Dluvwhisper.com%26tds_path%3D%252Ftds%252Fae%26dci%3Db794d81688f15dfecad8a003be0cb7e710533009%26tds_ps%3Da&tdsCid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&reason=beacon&visitsCount=1&ts=1715336934389
52.85.243.78200 OK 0 B URL POST HTTP/3 empirelayer.club/tds/interlayer?handler=ExternalBackofferEvent&urlIn=https%3A%2F%2Fempirelayer.club%2Ftds%2Finterlayer%2Feb%2Fs%2F607a0f2d07dddb3b425901bdbc84df53%3F__t%3D1715336933967%26__l%3D3600%26__c%3Da9504e5f779b71a730d152d41bc6b37dd6d562a7%26__u%3D&urlOut=https%3A%2F%2Fsecure.cmadclicks000.com%2Ftrack%2FMjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjAuMC4w%3Fsubaff%3Dsml_e1f18e7f%26tds_cid%3Da9504e5f779b71a730d152d41bc6b37dd6d562a7%26_ocid%3Da9504e5f779b71a730d152d41bc6b37dd6d562a7&altQs=utm_campaign%3De1f18e7f%26utm_source%3Dint%26utm_content%3Ddit1120%26data2%3D3594bd6c-c0d1-4e6b-8895-d6cfab53b891%26s1%3Dps%26s3%3DMl9kaXQxMTIw%26tds_campaign%3Db7637pos%26tds_id%3Db7637pos_lp_a_1575477620507_bbwsexdates%26tds_oid%3D63fb536d%26tds_cid%3Da9504e5f779b71a730d152d41bc6b37dd6d562a7%26tds_ac_id%3Ds5428sto%26p_tds_cid%3D988f9aa68d9d97ae1c0b425fcf6580ac09368820%26tds_host%3Dluvwhisper.com%26tds_path%3D%252Ftds%252Fae%26dci%3Db794d81688f15dfecad8a003be0cb7e710533009%26tds_ps%3Da&tdsCid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&reason=beacon&visitsCount=1&ts=1715336934389
IP 52.85.243.78:443
Requested by https://empirelayer.club/tds/interlayer/eb/s/607a0f2d07dddb3b425901bdbc84df53?__t=1715336933967&__l=3600&__c=a9504e5f779b71a730d152d41bc6b37dd6d562a7&__u=
Certificate IssuerAmazon
Subjectempirelayer.club
FingerprintD0:9A:6A:E3:BC:1C:59:10:F7:F8:FD:8F:63:D3:56:1C:43:2C:75:EF
ValidityThu, 02 Nov 2023 00:00:00 GMT - Sat, 30 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /tds/interlayer?handler=ExternalBackofferEvent&urlIn=https%3A%2F%2Fempirelayer.club%2Ftds%2Finterlayer%2Feb%2Fs%2F607a0f2d07dddb3b425901bdbc84df53%3F__t%3D1715336933967%26__l%3D3600%26__c%3Da9504e5f779b71a730d152d41bc6b37dd6d562a7%26__u%3D&urlOut=https%3A%2F%2Fsecure.cmadclicks000.com%2Ftrack%2FMjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjAuMC4w%3Fsubaff%3Dsml_e1f18e7f%26tds_cid%3Da9504e5f779b71a730d152d41bc6b37dd6d562a7%26_ocid%3Da9504e5f779b71a730d152d41bc6b37dd6d562a7&altQs=utm_campaign%3De1f18e7f%26utm_source%3Dint%26utm_content%3Ddit1120%26data2%3D3594bd6c-c0d1-4e6b-8895-d6cfab53b891%26s1%3Dps%26s3%3DMl9kaXQxMTIw%26tds_campaign%3Db7637pos%26tds_id%3Db7637pos_lp_a_1575477620507_bbwsexdates%26tds_oid%3D63fb536d%26tds_cid%3Da9504e5f779b71a730d152d41bc6b37dd6d562a7%26tds_ac_id%3Ds5428sto%26p_tds_cid%3D988f9aa68d9d97ae1c0b425fcf6580ac09368820%26tds_host%3Dluvwhisper.com%26tds_path%3D%252Ftds%252Fae%26dci%3Db794d81688f15dfecad8a003be0cb7e710533009%26tds_ps%3Da&tdsCid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&reason=beacon&visitsCount=1&ts=1715336934389 HTTP/1.1
Host: empirelayer.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://empirelayer.club
DNT: 1
Connection: keep-alive
Referer: https://empirelayer.club/tds/interlayer/eb/s/607a0f2d07dddb3b425901bdbc84df53?__t=1715336933967&__l=3600&__c=a9504e5f779b71a730d152d41bc6b37dd6d562a7&__u=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
HTTP/3 200 OK
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: ARN1-C1
date: Fri, 10 May 2024 10:28:54 GMT
server: nginx
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform, Sec-CH-UA-Wow64, Sec-CH-UA
x-cache: Miss from cloudfront
via: 1.1 67d9c6999f4bc9c9c60e1e5f24b316e8.cloudfront.net (CloudFront)
x-amz-cf-id: lxMZ9C9mZvjz0IC4aA8DqySRtJNak9nuI5smALYY5y32g7pK1-MUhg==
hello.bbwsexdates.club/lander/bbw_ppt/images/find_people_block.png
185.76.9.25200 OK 2.3 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/find_people_block.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 375 x 130, 8-bit/color RGBA, non-interlaced
Hash 60b5d318a761bc086a9271ce1fa9f332
f0a7b2345d18060662a38c4fc29e532ce27df232
a5b62d5120d7210c27c5f5c91dbc98ac04c9c00bb70cff8d75e89eb9344f0636
GET /lander/bbw_ppt/images/find_people_block.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/assets/css/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 2280
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "60b5d318a761bc086a9271ce1fa9f332"
x-amz-request-id: tx0000042e88704544f5e61-00663cdeb4-9f56a4c-nyc
x-77-nzt: BLlMCRQ3Nzf/kA4BALlMCgE3Nzf/lQkAAJySIR83Nzf/DgAAAJySOhT0whsA
x-77-nzt-ray: af585630ab0d042ce7f63d6620d07835
x-accel-expires: @1716302004
x-accel-date: 1715267671
x-77-cache: HIT
x-77-age: 69264
server: CDN77-Turbo
x-cache: HIT
x-age: 69264
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_vendor/promise.js
185.76.9.25200 OK 6.2 kB URL GET HTTP/2 hello.bbwsexdates.club/_vendor/promise.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type JavaScript source, ASCII text, with very long lines (6468), with no line terminators
Hash b21125a876e3905085ce92b5dd3dcbeb
dd55fcad84de28f8f4e9e3bf5280dbb779567ca9
7994fd99301572d501f56ef06e9818e92710692cf5019f44b6a7142b92c04b57
GET /_vendor/promise.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:48 GMT
x-rgw-object-type: Normal
etag: W/"d24ef61e324e3e4166f164a86eb0405e"
x-amz-request-id: tx000009ac0cd4ce4cc2989-00663cdeb4-79fc2a4-nyc
x-77-nzt: BLlMCRQ3Nzf/vQ8BALlMChM3Nzf/awgAAJySIR83Nzf/CwAAAJySOhRzul4A
x-77-nzt-ray: af585630ab0d042ce7f63d66c073571b
content-encoding: gzip
x-accel-expires: @1716302004
x-accel-date: 1715267370
x-77-cache: HIT
x-77-age: 69565
server: CDN77-Turbo
x-cache: HIT
x-age: 69565
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_scripts/second-offer.js
185.76.9.25200 OK 607 B URL GET HTTP/2 hello.bbwsexdates.club/_scripts/second-offer.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type ASCII text, with very long lines (645), with no line terminators
Hash 1af2cd31d6c48de91b789a7d78ef00f0
dfff00eb2823091e2c8aadf9a1e69ddfeca6f334
18978a847e81e842e7cfec0147de7221efd7c5cc2cba4a11b28eac0f2ed9af2c
GET /_scripts/second-offer.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:48 GMT
x-rgw-object-type: Normal
etag: W/"7735e6151b0ba053320e29b675b55752"
x-amz-request-id: tx0000054a313b46a3a6d16-00663cdea6-85a4f2a-nyc
x-77-nzt: BLlMCRQ3Nzf/vA8BALlMCgw3Nzf/aggAAIrHJcQ3Nzf/GwAAAJySOhTmHzYA
x-77-nzt-ray: af585630ab0d042ce7f63d66e9c7cd1e
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267371
x-77-cache: HIT
x-77-age: 69564
server: CDN77-Turbo
x-cache: HIT
x-age: 69564
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/js/jquery-ui.effects_min.js
185.76.9.25200 OK 25 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/js/jquery-ui.effects_min.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type JavaScript source, ASCII text, with very long lines (24498)
Hash b4d4f1d045bf11023f0debc29c76e01f
bea411f05b975d294ab068019f8f34f5e5e6e4c0
ee8f6966cc5af322e27eb42fb1eb0fb7e6660a9b09925a5d27abb3de7da8f4f2
GET /lander/bbw_ppt/assets/js/jquery-ui.effects_min.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"b4d4f1d045bf11023f0debc29c76e01f"
x-amz-request-id: tx00000b0adb9e7785bf5d5-00663cdea6-9f26f94-nyc
x-77-nzt: BLlMCRQ3Nzf/vQ8BALlMCgw3Nzf/awgAANRmOBE3Nzf/GQAAAM/T1GYvRXIA
x-77-nzt-ray: af585630ab0d042ce7f63d66507cec1a
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267370
x-77-cache: HIT
x-77-age: 69565
server: CDN77-Turbo
x-cache: HIT
x-age: 69565
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_fuckbook/CommonMapper.js
185.76.9.25200 OK 390 B URL GET HTTP/2 hello.bbwsexdates.club/_fuckbook/CommonMapper.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type ASCII text, with very long lines (406), with no line terminators
Hash 07ec1675f869920decc082fc05a55498
d11e906d39afe132fe51229c7b8b1f650d73773d
1eb7ed0726f4bb9856cefc83b47f536ca68d34d37ddde322e6aee37e1e80fd28
GET /_fuckbook/CommonMapper.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:48 GMT
x-rgw-object-type: Normal
etag: W/"828fa6212948b55b3460bbce578ea6d5"
x-amz-request-id: tx000007ef525d12538ed87-00663cdeb4-79fc2a4-nyc
x-77-nzt: BLlMCRQ3Nzf/vQ8BALlMChM3Nzf/awgAAJySIR83Nzf/CwAAAM/T1GacZh4A
x-77-nzt-ray: af585630ab0d042ce7f63d661909f41a
content-encoding: gzip
x-accel-expires: @1716302004
x-accel-date: 1715267370
x-77-cache: HIT
x-77-age: 69565
server: CDN77-Turbo
x-cache: HIT
x-age: 69565
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/js/loginForm.js
185.76.9.25200 OK 1.3 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/js/loginForm.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type JavaScript source, ASCII text, with very long lines (1560), with no line terminators
Hash 0b9dc57ab794bd150d97980063d6aadd
ae31186383603e9709d046e112065b2941b75a6b
bf840136c47db68aebb93a05667ccc4608def51564d548869f0222f1c7f01cca
GET /lander/bbw_ppt/assets/js/loginForm.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"f892e39d2c36439a9f9204feb85e6aba"
x-amz-request-id: tx0000050f9142fdd55bf87-00663cdea6-85c8182-nyc
x-77-nzt: BLlMCRQ3Nzf/uw8BALlMCgw3Nzf/awgAAIrHJcQ3Nzf/GwAAAJySOhe6HPsA
x-77-nzt-ray: af585630ab0d042ce7f63d661b785a23
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267372
x-77-cache: HIT
x-77-age: 69563
server: CDN77-Turbo
x-cache: HIT
x-age: 69563
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/js/glider.min.js
185.76.9.25200 OK 7.7 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/js/glider.min.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type JavaScript source, ASCII text, with very long lines (7861), with no line terminators
Hash 19c55b8922ace39472f25c111619da03
41d6b4505738206b45c28da6dec4139f2cf270b2
ed35c737442a3a4273755e7cf37b2b448d93bb38e10aab039cef14d4045cf4f4
GET /lander/bbw_ppt/assets/js/glider.min.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"180f981683eef7b9618d364d7df6db13"
x-amz-request-id: tx00000ba5de0dde9376686-00663cdea6-85c8182-nyc
x-77-nzt: BLlMCRQ3Nzf/uw8BALlMCgk3Nzf/awgAAIrHJcQ3Nzf/GgAAAJySOhT/U5IA
x-77-nzt-ray: af585630ab0d042ce7f63d66b201ae24
content-encoding: gzip
x-accel-expires: @1716301991
x-accel-date: 1715267372
x-77-cache: HIT
x-77-age: 69563
server: CDN77-Turbo
x-cache: HIT
x-age: 69563
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_webpack/bundle.js
185.76.9.25200 OK 9.7 kB URL GET HTTP/2 hello.bbwsexdates.club/_webpack/bundle.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type JavaScript source, ASCII text, with very long lines (9891), with no line terminators
Hash 0a442dd08758424d481adcbd58e5dbe6
a71be8df086935bba563230e6f1dd4f51315520d
980b9c57dbe7c1644d9089146f2460a78925dfff737f0d41854e687df73758b2
GET /_webpack/bundle.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:48 GMT
x-rgw-object-type: Normal
etag: W/"05ec202ab4853ac6b72032a63846c9bb"
x-amz-request-id: tx00000bf1e755454daf927-00663cdea6-85a4f2a-nyc
x-77-nzt: BLlMCRQ3Nzf/vQ8BALlMChM3Nzf/awgAACUTwjQ3Nzf/GQAAAJySOheMusEA
x-77-nzt-ray: af585630ab0d042ce7f63d6629d3231b
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267370
x-77-cache: HIT
x-77-age: 69565
server: CDN77-Turbo
x-cache: HIT
x-age: 69565
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/discreete.svg
185.76.9.25200 OK 858 B URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/discreete.svg
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type SVG Scalable Vector Graphics image
Hash 5e351e168d89b580d3db9bb4f054253a
5b452b75ad226520e294347028e2e527398e98db
565b9ce46acbd5ab744ba7abfbe74c7d79b62ad52a315599d0cf73a9a2eb9216
GET /lander/bbw_ppt/images/discreete.svg HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"2991e6dc86dde822e598d00587b22ffc"
x-amz-request-id: tx000001aefb6e273e12240-00663cdea6-85c8189-nyc
x-77-nzt: BLlMCRQ3Nzf/yA8BALlMCgk3Nzf/XggAAJySISc3Nzf/GwAAAJySOhf1iisA
x-77-nzt-ray: af585630ab0d042ce7f63d660ae6311e
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267359
x-77-cache: HIT
x-77-age: 69576
server: CDN77-Turbo
x-cache: HIT
x-age: 69576
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_scripts/back-button-gsm.js
185.76.9.25200 OK 2.1 kB URL GET HTTP/2 hello.bbwsexdates.club/_scripts/back-button-gsm.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type JavaScript source, ASCII text, with very long lines (2133), with no line terminators
Hash 9e0a9f5cfb3b8c358dc980e88a91be67
71694b67f8537224ba485deb631ae546dc56ea4d
c982c8de70dd14d83057818589ea42dbd5347e622b1a6891e6c1091b0e1278df
GET /_scripts/back-button-gsm.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:48 GMT
x-rgw-object-type: Normal
etag: W/"fc3d28ea9f05cce532e7e376e02788e3"
x-amz-request-id: tx00000e5f6eaafd37b633f-00663cdeb4-85c81e4-nyc
x-77-nzt: BLlMCRQ3Nzf/vA8BALlMChM3Nzf/aggAAJySIR83Nzf/DQAAAJySOhdbjeoA
x-77-nzt-ray: af585630ab0d042ce7f63d662e195022
content-encoding: gzip
x-accel-expires: @1716302004
x-accel-date: 1715267371
x-77-cache: HIT
x-77-age: 69564
server: CDN77-Turbo
x-cache: HIT
x-age: 69564
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
empirelayer.club/favicon.ico
0.0.0.0 0 B URL GET empirelayer.club/favicon.ico
IP 0.0.0.0:0
Requested by https://empirelayer.club/tds/interlayer/eb/s/607a0f2d07dddb3b425901bdbc84df53?__t=1715336933967&__l=3600&__c=a9504e5f779b71a730d152d41bc6b37dd6d562a7&__u=
Certificate IssuerAmazon
Subjectempirelayer.club
FingerprintD0:9A:6A:E3:BC:1C:59:10:F7:F8:FD:8F:63:D3:56:1C:43:2C:75:EF
ValidityThu, 02 Nov 2023 00:00:00 GMT - Sat, 30 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: empirelayer.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://empirelayer.club/tds/interlayer/eb/s/607a0f2d07dddb3b425901bdbc84df53?__t=1715336933967&__l=3600&__c=a9504e5f779b71a730d152d41bc6b37dd6d562a7&__u=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
185.76.9.25200 OK 12 kB URL User Request GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type HTML document, ASCII text, with very long lines (302)
Hash ef0311aa81a1083e38878b0234622e1d
a57e3c191e766d5f58ba50ac33f9eda2b916095c
072d02fb19f8c48537dfba648164b5b8f72c8cbb0cd7b01610ea687cb77c57d5
GET /lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7 HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://empirelayer.club/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"ef0311aa81a1083e38878b0234622e1d"
x-amz-request-id: tx0000056370f0f18a0665d-00663cdeb3-85a4f2a-nyc
x-77-nzt: BLlMCRQ3Nzf/KQwBALlMCgk3Nzf//wsAAJySIR83Nzf/DAAAAJySOhe5b1UA
x-77-nzt-ray: af585630ab0d042ce7f63d669238350e
content-encoding: gzip
x-accel-expires: @1716302003
x-accel-date: 1715268286
x-77-cache: HIT
x-77-age: 68649
server: CDN77-Turbo
x-cache: HIT
x-age: 68649
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/chat.svg
185.76.9.25200 OK 1.4 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/chat.svg
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type SVG Scalable Vector Graphics image
Hash 6fab005aa7eb374fe3d5bc1eb9481775
26f979d8e14db37fbc49435c29ce8a90e17f286e
aa3271acb7872aa2da821552cb5a501ed6427c696f8c859a5d9359f65a6dd225
GET /lander/bbw_ppt/images/chat.svg HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"28a5a862e66eabee4f67ea622f14c523"
x-amz-request-id: tx0000012ecdd36adab2a50-00663cdea6-85c8189-nyc
x-77-nzt: BLlMCRQ3Nzf/yQ8BALlMCgE3Nzf/XQgAANRmOBE3Nzf/GwAAAM/T1Gb1QOEA
x-77-nzt-ray: af585630ab0d042ce7f63d66ec312a1e
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267358
x-77-cache: HIT
x-77-age: 69577
server: CDN77-Turbo
x-cache: HIT
x-age: 69577
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_scripts/general.js
185.76.9.25200 OK 776 B URL GET HTTP/2 hello.bbwsexdates.club/_scripts/general.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type ASCII text, with very long lines (850), with no line terminators
Hash 27241a23b643493200558c163c2c2670
2692a3cec0b7c7f8ea76df915308f0dc95f0ddee
87f15b09777b76f12ce21f9e821e812e92754e7cd315a1b1fc440e420a2b7ba5
GET /_scripts/general.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:48 GMT
x-rgw-object-type: Normal
etag: W/"600b6d5416f9f96975c6429e90e2465c"
x-amz-request-id: tx000007c1df0c8b2e03ca8-00663cdea6-79fc2a4-nyc
x-77-nzt: BLlMCRQ3Nzf/vA8BALlMCgw3Nzf/aggAACUTwjE3Nzf/GwAAAJySOhT+HLQA
x-77-nzt-ray: af585630ab0d042ce7f63d66b9413c1e
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267371
x-77-cache: HIT
x-77-age: 69564
server: CDN77-Turbo
x-cache: HIT
x-age: 69564
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_fuckbook/Api.js
185.76.9.25200 OK 2.6 kB URL GET HTTP/2 hello.bbwsexdates.club/_fuckbook/Api.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type JavaScript source, ASCII text, with very long lines (2667), with no line terminators
Hash 780ff9e50e34a32a590ce3b48261d04a
20b161aef21885b8511817ebdf3ce2248ad24053
4328bfd18ee5277320fa95b6ece7344990682c3739673770bac30ec59dd3b2be
GET /_fuckbook/Api.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:47 GMT
x-rgw-object-type: Normal
etag: W/"c1d2dbc9ecbc5d3daf20fae8db494380"
x-amz-request-id: tx00000aa62a20e3972be01-00663cdea6-9f26f94-nyc
x-77-nzt: BLlMCRQ3Nzf/vQ8BALlMChM3Nzf/awgAACUTwjQ3Nzf/GQAAAJySOhf/0kUA
x-77-nzt-ray: af585630ab0d042ce7f63d661af6fd1a
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267370
x-77-cache: HIT
x-77-age: 69565
server: CDN77-Turbo
x-cache: HIT
x-age: 69565
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/free.svg
185.76.9.25200 OK 2.1 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/free.svg
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type SVG Scalable Vector Graphics image
Hash 956f8644a93aec061e1628f7c0414bd7
419dce4dcd7d88b27f655fe1c178507a774854a2
376e9373062f25e4f2ba6a1959de21419b4409918ea89d9f56e6386ad231f891
GET /lander/bbw_ppt/images/free.svg HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 12:44:42 GMT
x-rgw-object-type: Normal
etag: W/"c7003d031d71564be848a005a7589a3b"
x-amz-request-id: tx00000967ce8f7eb54a597-00663cc910-79fc2a4-nyc
x-77-nzt: BLlMCRQ3Nzf/xw8BALlMCgE3Nzf/XwgAACUTwi43Nzf/sRUAAJySOhfpDDEA
x-77-nzt-ray: af585630ab0d042ce7f63d6672b3361e
content-encoding: gzip
x-accel-expires: @1716296464
x-accel-date: 1715267360
x-77-cache: HIT
x-77-age: 69575
server: CDN77-Turbo
x-cache: HIT
x-age: 69575
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/fonts/font-awesome.min.css
185.76.9.25200 OK 37 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/fonts/font-awesome.min.css
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type troff or preprocessor input, ASCII text, with very long lines (336)
Hash 36d99ac1e5f28e6268b6880a88cb04bb
e02894eb6b3412f75db4d5e6dd9d615e90fc0229
cf10083ba6b3d7d61b8649fc68ca97c5a47c4b8b77fcdd545314ebf86ccab774
GET /lander/bbw_ppt/assets/fonts/font-awesome.min.css HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"36d99ac1e5f28e6268b6880a88cb04bb"
x-amz-request-id: tx000004315d1d50eaff1fa-00663cdeb4-51342fb-nyc
x-77-nzt: BLlMCRQ3Nzf/vg8BALlMCgk3Nzf/aggAAJySIR83Nzf/CwAAAJySOhQEDcYA
x-77-nzt-ray: af585630ab0d042ce7f63d669d10ac1a
content-encoding: gzip
x-accel-expires: @1716302004
x-accel-date: 1715267369
x-77-cache: HIT
x-77-age: 69566
server: CDN77-Turbo
x-cache: HIT
x-age: 69566
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/js/api-form-mapper.js
185.76.9.25200 OK 2.1 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/js/api-form-mapper.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type ASCII text, with very long lines (2171), with no line terminators
Hash 0a433c06618b885311b415084a98c566
f8e6dc519a84c08bc71e120644d6244b550ea37c
f09cc3208c0da1066797e02cb4595290b5749bd80468553febfb2ff39acd4e28
GET /lander/bbw_ppt/assets/js/api-form-mapper.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"01242bc9de8c3d92892803c25e35c040"
x-amz-request-id: tx00000a1556735d682e8a3-00663cdea6-9f56a4c-nyc
x-77-nzt: BLlMCRQ3Nzf/vQ8BALlMCgw3Nzf/awgAANRmOBE3Nzf/GQAAAM/T1GYnyuQA
x-77-nzt-ray: af585630ab0d042ce7f63d66a953de1a
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267370
x-77-cache: HIT
x-77-age: 69565
server: CDN77-Turbo
x-cache: HIT
x-age: 69565
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_scripts/close-button-redirect.js
185.76.9.25200 OK 617 B URL GET HTTP/2 hello.bbwsexdates.club/_scripts/close-button-redirect.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type JavaScript source, ASCII text, with very long lines (733), with no line terminators
Hash 42782c46d408dea29ab1087491554688
14d2e4b5bd43ed41a5eef723df93b34b76d87078
5dd94533a121fd11d2097f62123a7606280b8986313aca47eacfe0ab6baf0419
GET /_scripts/close-button-redirect.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:48 GMT
x-rgw-object-type: Normal
etag: W/"c19a24ce6bc9b5a5821f4d1749075edb"
x-amz-request-id: tx0000047f95f42e9d622ca-00663cdea6-85a4f2a-nyc
x-77-nzt: BLlMCRQ3Nzf/uw8BALlMChM3Nzf/aggAACUTwi43Nzf/GwAAAM/T1Gb8n0wA
x-77-nzt-ray: af585630ab0d042ce7f63d66fc635523
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267372
x-77-cache: HIT
x-77-age: 69563
server: CDN77-Turbo
x-cache: HIT
x-age: 69563
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/access_block_d.png
185.76.9.25200 OK 41 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/access_block_d.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 1800 x 510, 8-bit/color RGBA, non-interlaced
Hash 0c06dd518a2bd46e831f73852d16b8e7
66d9131dfb6a025e968cd72484f80d338145fa5d
00ba3eb257134b16ac61ce0cb45bb0dee22b2029c383387c80e4ea7612d8003a
GET /lander/bbw_ppt/images/access_block_d.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/assets/css/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 41229
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "0c06dd518a2bd46e831f73852d16b8e7"
x-amz-request-id: tx000000fd9fb5b20a28b36-00663cdf0b-9f26f94-nyc
x-77-nzt: BLlMCRQ3Nzf/IgsAALlMChM3Nzf/mAoBAJySISc3Nzf/IgIAAM/T1GYPosQA
x-77-nzt-ray: af585630ab0d042ce7f63d660cab9d35
x-accel-expires: @1716302091
x-accel-date: 1715334085
x-77-cache: HIT
x-77-age: 2850
server: CDN77-Turbo
x-cache: HIT
x-age: 2850
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_vendor/fetch.js
185.76.9.25200 OK 13 kB URL GET HTTP/2 hello.bbwsexdates.club/_vendor/fetch.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type JavaScript source, ASCII text
Hash 0c21273fa3d230f74868a77a92473379
f36932e6c959a975ed5dbbc12bb1e5c90efd49e9
569412044c38c2bea3e7fe86b0adf72eb004e84abafbf4eadc951b7026a4e976
GET /_vendor/fetch.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:48 GMT
x-rgw-object-type: Normal
etag: W/"0c21273fa3d230f74868a77a92473379"
x-amz-request-id: tx00000f235f4fb9ff94dc7-00663cdea6-79fc2a4-nyc
x-77-nzt: BLlMCRQ3Nzf/vQ8BALlMCgk3Nzf/awgAAJySISc3Nzf/GQAAAM/T1GZecy4A
x-77-nzt-ray: af585630ab0d042ce7f63d6632c45c1b
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267370
x-77-cache: HIT
x-77-age: 69565
server: CDN77-Turbo
x-cache: HIT
x-age: 69565
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/select_arrow.png
185.76.9.25200 OK 333 B URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/select_arrow.png
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type PNG image data, 20 x 25, 8-bit colormap, non-interlaced
Hash 97a24785ade35879118991770a448225
a20b25bc6ae26b197dea05cd4dbde1951c5baaa4
54ac019d976973c998eb1d8a2af8619badc07e2ad8f5ffce668446fa1c49b65a
GET /lander/bbw_ppt/images/select_arrow.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/assets/css/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/png
content-length: 333
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: "97a24785ade35879118991770a448225"
x-amz-request-id: tx000000c9173200ff4f5ca-00663cdea8-85c8189-nyc
x-77-nzt: BLlMCRQ3Nzf/tw8BALlMCgk3Nzf/bggAAJySISc3Nzf/GgAAAJySOheQDgQA
x-77-nzt-ray: af585630ab0d042ce7f63d669a0c4435
x-accel-expires: @1716301992
x-accel-date: 1715267376
x-77-cache: HIT
x-77-age: 69559
server: CDN77-Turbo
x-cache: HIT
x-age: 69559
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e
104.21.79.101200 OK 6.1 kB URL User Request GET HTTP/2 queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e
IP 104.21.79.101:443
Certificate IssuerLet's Encrypt
Subjectqueitho.com
FingerprintF1:05:3E:9D:7A:6D:B6:57:58:D4:D8:E8:6E:81:69:2A:D3:2B:5C:D9
ValidityTue, 12 Mar 2024 19:42:25 GMT - Mon, 10 Jun 2024 19:42:24 GMT
File type JavaScript source, ASCII text, with very long lines (6152), with no line terminators
Hash 82dc643749d5f119d9d49571c700e73a
2478cadfe379b7cc5e2027321bfad1d9cb36f779
eb490af0f35ac752108c1d63e4f9f9ea88826577d52dfae7fe8946aadb4a6f16
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e HTTP/1.1
Host: queitho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.lnkpth.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:53 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: default-src 'self' https://oacenom.com https://openfpcdn.io/fingerprintjs/v4; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://oacenom.com https://openfpcdn.io/fingerprintjs/v4
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cache-control: no-store, no-store, no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C%2BXGBaqe4IPhejh1BKZfsrMEA1OL36AbGdbJ04Q48RS0Pl%2BBG1EOqTTQck0DCJGib3qLk%2FWC7MW2PgJStPHlW2Z5t%2Fy0JaE1T8qmT4T7COXIBDhgptv2ffoZ46Rf4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88193eb7d8515696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
luvwhisper.com/tds/ae?tdsId=s5428sto_r&tds_campaign=s5428sto&s1=ps&utm_source=int&utm_sub=opnfnl&affid=e1f18e7f&subid=dit1120&subid2=Ml9kaXQxMTIw&clickid=3594bd6c-c0d1-4e6b-8895-d6cfab53b891
54.230.111.9302 Found 1.2 kB URL User Request GET HTTP/2 luvwhisper.com/tds/ae?tdsId=s5428sto_r&tds_campaign=s5428sto&s1=ps&utm_source=int&utm_sub=opnfnl&affid=e1f18e7f&subid=dit1120&subid2=Ml9kaXQxMTIw&clickid=3594bd6c-c0d1-4e6b-8895-d6cfab53b891
IP 54.230.111.9:443
Certificate IssuerAmazon
Subjectluvwhisper.com
Fingerprint4D:EC:81:10:9E:C3:DA:0D:65:B1:D0:C2:7A:5E:0F:BE:3E:14:88:E3
ValidityTue, 09 Jan 2024 00:00:00 GMT - Thu, 06 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds/ae?tdsId=s5428sto_r&tds_campaign=s5428sto&s1=ps&utm_source=int&utm_sub=opnfnl&affid=e1f18e7f&subid=dit1120&subid2=Ml9kaXQxMTIw&clickid=3594bd6c-c0d1-4e6b-8895-d6cfab53b891 HTTP/1.1
Host: luvwhisper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://empirelayer.club/tds/interlayer/eb/s/607a0f2d07dddb3b425901bdbc84df53?__t=1715336933967&__l=3600&__c=a9504e5f779b71a730d152d41bc6b37dd6d562a7&__u=
date: Fri, 10 May 2024 10:28:53 GMT
server: nginx
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform, Sec-CH-UA-Wow64, Sec-CH-UA
set-cookie: dci=b794d81688f15dfecad8a003be0cb7e710533009; Max-Age=31536000; Domain=.luvwhisper.com; Path=/; Expires=Sat, 10 May 2025 10:28:53 GMT; Secure; SameSite=None
dm=fe450dd0d1dadc615429144d33241f42; Max-Age=432000; Path=/; Expires=Wed, 15 May 2024 10:28:53 GMT
x-cache: Miss from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: wcK_uxnAB-iTm-3BwBBJ4wPMVC0LVu7euP043rJ_m5FF09R0d3Mtow==
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_vendor/ga4.js
185.76.9.25200 OK 144 B URL GET HTTP/2 hello.bbwsexdates.club/_vendor/ga4.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type ASCII text, with no line terminators
Hash 0c07441dc71f1d176a57ae0903c71081
1271227bedf66d51968435d01bf520e19b163c91
bfb2fd877ba9af76d0fcbadf719d23a1a120306a87eb41d2f46ec31d13b348a1
GET /_vendor/ga4.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:48 GMT
x-rgw-object-type: Normal
etag: W/"7b6383d75bac1dd5daa766c750e5ed02"
x-amz-request-id: tx000004b4b28a8b9894e08-00663cdea6-9f26f94-nyc
x-77-nzt: BLlMCRQ3Nzf/vQ8BALlMCgw3Nzf/awgAANRmOBE3Nzf/GQAAAJySOhRKJpoA
x-77-nzt-ray: af585630ab0d042ce7f63d66ae0c791b
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267370
x-77-cache: HIT
x-77-age: 69565
server: CDN77-Turbo
x-cache: HIT
x-age: 69565
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/logo-monochrome.svg
185.76.9.25200 OK 8.1 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/logo-monochrome.svg
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type SVG Scalable Vector Graphics image
Hash c92d73a31bfcca1ef3d7c2afd2c343d2
b77c1a0cb9eb2ca85b08b027964eb4894956b85f
c0097cc18adf663b09e4915683c366cb74ce055edeb84cc5a99672ae3d1801da
GET /lander/bbw_ppt/images/logo-monochrome.svg HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"b9f2de55df11c7e53439bc427c4796fd"
x-amz-request-id: tx000002de21528742e8991-00663cdea6-51342fb-nyc
x-77-nzt: BLlMCRQ3Nzf/zg8BALlMCgw3Nzf/WggAACUTwi43Nzf/GQAAAM/T1GbAmTYA
x-77-nzt-ray: af585630ab0d042ce7f63d6606609a1b
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267353
x-77-cache: HIT
x-77-age: 69582
server: CDN77-Turbo
x-cache: HIT
x-age: 69582
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/js/Config.js
185.76.9.25200 OK 113 B URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/js/Config.js
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type ASCII text, with no line terminators
Hash eaddceb23d99a9dd4b7b3b7e8b763bab
ed5a5a29b8d3924e54a3f8d66cf1d3aba6e2a6da
32c5b3bc9a0195d15d5f2e81026f8d817d701ac5c9192e3b5585bca8af3b1f06
GET /lander/bbw_ppt/assets/js/Config.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"9a818bc58832121e6e5df23a2536c51d"
x-amz-request-id: tx0000047e6c656e034e8d9-00663cdea6-79fc2a4-nyc
x-77-nzt: BLlMCRQ3Nzf/vQ8BALlMCgk3Nzf/awgAACUTwjE3Nzf/GQAAAM/T1GZRCiEA
x-77-nzt-ray: af585630ab0d042ce7f63d66252b0e1b
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267370
x-77-cache: HIT
x-77-age: 69565
server: CDN77-Turbo
x-cache: HIT
x-age: 69565
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_fuckbook/loader.css
185.76.9.25200 OK 698 B URL GET HTTP/2 hello.bbwsexdates.club/_fuckbook/loader.css
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type ASCII text, with very long lines (729), with no line terminators
Hash f114fa4ebe48ca18cee2222a8e8240f5
72a9f6ded59377933b766baee00e8d5956173022
8a41445a8df48cf5978e1c24f717208815992a0f390a696551b52c73aee4720b
GET /_fuckbook/loader.css HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:48 GMT
x-rgw-object-type: Normal
etag: W/"09ba2784bd529ab5d4e172564ae92b66"
x-amz-request-id: tx000004bcf9e422800d96f-00663cdea6-5134150-nyc
x-77-nzt: BLlMCRQ3Nzf/zw8BALlMCgE3Nzf/WQgAAIrHJcQ3Nzf/GQAAAJySOhReca4A
x-77-nzt-ray: af585630ab0d042ce7f63d662b03be1a
content-encoding: gzip
x-accel-expires: @1716301990
x-accel-date: 1715267352
x-77-cache: HIT
x-77-age: 69583
server: CDN77-Turbo
x-cache: HIT
x-age: 69583
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/favicon.svg
185.76.9.25200 OK 6.6 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/favicon.svg
IP 185.76.9.25:443
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
Fingerprint74:B0:2D:E5:6B:F7:39:C5:88:ED:7A:31:B9:18:20:94:1A:22:D4:D4
ValidityWed, 01 May 2024 18:35:15 GMT - Tue, 30 Jul 2024 18:35:14 GMT
File type SVG Scalable Vector Graphics image
Hash 863f9afd6e3bb049b20015b3dfe89f05
b26861ebd0880bf153e8f1927cc8b5757b9f52c3
7b58c77929f405adaac02a8fe187bdb65f1416f33127382cbb3e0337bd6afc18
GET /lander/bbw_ppt/images/favicon.svg HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=2663df6e71e33b7.97489317&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&subaff=sml_e1f18e7f&tds_cid=a9504e5f779b71a730d152d41bc6b37dd6d562a7&_ocid=a9504e5f779b71a730d152d41bc6b37dd6d562a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:28:55 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 09 May 2024 14:16:55 GMT
x-rgw-object-type: Normal
etag: W/"571c02062078ac86a999710ccfff89be"
x-amz-request-id: tx000007b58e019a25fdc48-00663cdeb4-79fc2a4-nyc
x-77-nzt: BLlMCRQ3Nzf/kA4BALlMChM3Nzf/TwkAACUTwjE3Nzf/VAAAAM/T1GbnqrMA
x-77-nzt-ray: af585630ab0d042ce7f63d66dc64e330
content-encoding: gzip
x-accel-expires: @1716302004
x-accel-date: 1715267671
x-77-cache: HIT
x-77-age: 69264
server: CDN77-Turbo
x-cache: HIT
x-age: 69264
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
empirelayer.club/tds/interlayer/eb/s/607a0f2d07dddb3b425901bdbc84df53?__t=1715336933967&__l=3600&__c=a9504e5f779b71a730d152d41bc6b37dd6d562a7&__u=
52.85.243.78200 OK 1.2 kB URL User Request GET HTTP/2 empirelayer.club/tds/interlayer/eb/s/607a0f2d07dddb3b425901bdbc84df53?__t=1715336933967&__l=3600&__c=a9504e5f779b71a730d152d41bc6b37dd6d562a7&__u=
IP 52.85.243.78:443
Certificate IssuerAmazon
Subjectempirelayer.club
FingerprintD0:9A:6A:E3:BC:1C:59:10:F7:F8:FD:8F:63:D3:56:1C:43:2C:75:EF
ValidityThu, 02 Nov 2023 00:00:00 GMT - Sat, 30 Nov 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (1188), with no line terminators
Hash dae5f5774fed6aa5655f1ce8fdee87ad
c268fb42249c8c5bb669ed5afe3e9f111c734514
857d696104179b9f2e852915e4e35c5a34c0423cf751f688a844fc635b9e37e1
GET /tds/interlayer/eb/s/607a0f2d07dddb3b425901bdbc84df53?__t=1715336933967&__l=3600&__c=a9504e5f779b71a730d152d41bc6b37dd6d562a7&__u= HTTP/1.1
Host: empirelayer.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
date: Fri, 10 May 2024 10:28:54 GMT
server: nginx
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform, Sec-CH-UA-Wow64, Sec-CH-UA
vary: Accept-Encoding
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 9b9ff06545217fe747384bd8b8509aa4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: C5TulauORfup9ZkQpk32eMpKmj6Mw5c5rWWgRx40lATvtbAwcGmymg==
X-Firefox-Spdy: h2