go.lnkpth.com/aff_c?offer_id=10429&aff_id=47188&url_id=0&aff_sub5=member-area&aff_sub={%25cid%25}&source=dopm&click_id=78847179rbg52fe137/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm
302 Found 664 B URL User Request GET HTTP/1.1 go.lnkpth.com/aff_c?offer_id=10429&aff_id=47188&url_id=0&aff_sub5=member-area&aff_sub={%25cid%25}&source=dopm&click_id=78847179rbg52fe137/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm
IP
Certificate IssuerLet's Encrypt
Subjecttrack.cpamatica.com
Fingerprint3A:70:3F:8B:A0:FA:06:0C:02:90:23:AC:D3:4E:E8:F0:16:00:6F:27
ValidityWed, 31 Jan 2024 09:28:37 GMT - Tue, 30 Apr 2024 09:28:36 GMT
File type HTML document, ASCII text, with very long lines (664), with no line terminators
Hash b69c9223ca0f08c71da80916ccc0d6fe
7221adf213442e56dda554f23241ca467adef658
27512d90d1cc6c308581003700cc7638a25abf78335ba9e233f9019e2a3ac78c
GET /aff_c?offer_id=10429&aff_id=47188&url_id=0&aff_sub5=member-area&aff_sub={%25cid%25}&source=dopm&click_id=78847179rbg52fe137/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm/rd.html?go=https://matchjunkie.com/lbc?s1=shma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm HTTP/1.1
Host: go.lnkpth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 17 Apr 2024 13:31:01 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 664
Connection: keep-alive
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
Set-Cookie: language=en; Domain=go.lnkpth.com; Path=/; Expires=Fri, 17 May 2024 13:31:01 GMT
test=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
Location: aff_c?offer_id=9949&aff_id=47188&aff_sub5=member-area&aff_sub=%7B%25cid%25%7D&source=dopm&click_id=78847179rbg52fe137%2Frd.html%3Fgo%3Dhttps%3A%2F%2Fmatchjunkie.com%2Flbc%3Fs1%3Dshma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm&last=3
Vary: Accept
Cache-Control: no-store, no-cache
go.lnkpth.com/aff_c?offer_id=9949&aff_id=47188&aff_sub5=member-area&aff_sub=%7B%25cid%25%7D&source=dopm&click_id=78847179rbg52fe137%2Frd.html%3Fgo%3Dhttps%3A%2F%2Fmatchjunkie.com%2Flbc%3Fs1%3Dshma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm&last=3
302 Found 426 B URL User Request GET HTTP/1.1 go.lnkpth.com/aff_c?offer_id=9949&aff_id=47188&aff_sub5=member-area&aff_sub=%7B%25cid%25%7D&source=dopm&click_id=78847179rbg52fe137%2Frd.html%3Fgo%3Dhttps%3A%2F%2Fmatchjunkie.com%2Flbc%3Fs1%3Dshma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm&last=3
IP
Certificate IssuerLet's Encrypt
Subjecttrack.cpamatica.com
Fingerprint3A:70:3F:8B:A0:FA:06:0C:02:90:23:AC:D3:4E:E8:F0:16:00:6F:27
ValidityWed, 31 Jan 2024 09:28:37 GMT - Tue, 30 Apr 2024 09:28:36 GMT
File type HTML document, ASCII text, with very long lines (426), with no line terminators
Hash e03f235888950f7b0a6171290f698637
d8199fc85172dd1148895198dba10e1be859a97c
8ea1b00401b1ab26aee1bd80454fcd35dea2c53f4450bb14211cc468d1065049
GET /aff_c?offer_id=9949&aff_id=47188&aff_sub5=member-area&aff_sub=%7B%25cid%25%7D&source=dopm&click_id=78847179rbg52fe137%2Frd.html%3Fgo%3Dhttps%3A%2F%2Fmatchjunkie.com%2Flbc%3Fs1%3Dshma_kp1&oid=8368&s3=47188&s2=31_47188_10429_6950aeba4ce50cf58a9b091986074413&s4=dopm&last=3 HTTP/1.1
Host: go.lnkpth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: language=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 17 Apr 2024 13:31:01 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 426
Connection: keep-alive
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
Set-Cookie: language=en; Domain=go.lnkpth.com; Path=/; Expires=Fri, 17 May 2024 13:31:01 GMT
test=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
9949=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9; Domain=go.lnkpth.com; Path=/; Expires=Fri, 17 May 2024 13:31:01 GMT; Secure; SameSite=None
op_9949=0; Domain=go.lnkpth.com; Path=/; Expires=Fri, 17 May 2024 13:31:01 GMT
user_id=3257fd2d-78d3-42f1-987c-cf8312200938_b1f7469330e238ae226d5c741ca2a6f3; Domain=go.lnkpth.com; Path=/; Expires=Mon, 16 Apr 2029 13:31:01 GMT; Secure; SameSite=None
Location: /rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds3%26aff_id%3D2%26aff_sub%3D47188%26source%3D47188%26aff_sub2%3Dmember-area%26click_id%3D32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9
Vary: Accept
Cache-Control: no-store, no-cache
go.lnkpth.com/rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds3%26aff_id%3D2%26aff_sub%3D47188%26source%3D47188%26aff_sub2%3Dmember-area%26click_id%3D32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9
200 OK 255 B URL User Request GET HTTP/1.1 go.lnkpth.com/rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds3%26aff_id%3D2%26aff_sub%3D47188%26source%3D47188%26aff_sub2%3Dmember-area%26click_id%3D32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9
IP
Certificate IssuerLet's Encrypt
Subjecttrack.cpamatica.com
Fingerprint3A:70:3F:8B:A0:FA:06:0C:02:90:23:AC:D3:4E:E8:F0:16:00:6F:27
ValidityWed, 31 Jan 2024 09:28:37 GMT - Tue, 30 Apr 2024 09:28:36 GMT
File type HTML document, ASCII text
Hash d032811d8a01caff2a5ce141a657ca0e
7cfb5ac640b5496f18939ee73dc89cccf77125cc
e2efe220662dd9a54582aa6ab3f6d9fcaf0341710d0b01aa051fc09258ff9e6e
GET /rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds3%26aff_id%3D2%26aff_sub%3D47188%26source%3D47188%26aff_sub2%3Dmember-area%26click_id%3D32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9 HTTP/1.1
Host: go.lnkpth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: language=en; 9949=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9; op_9949=0; user_id=3257fd2d-78d3-42f1-987c-cf8312200938_b1f7469330e238ae226d5c741ca2a6f3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 13:31:01 GMT
Content-Type: text/html
Last-Modified: Fri, 13 Aug 2021 14:56:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61168831-149"
Cache-Control: no-store, no-cache
Content-Encoding: gzip
go.lnkpth.com/favicon.ico
106 B URL go.lnkpth.com/favicon.ico
IP
Certificate IssuerLet's Encrypt
Subjecttrack.cpamatica.com
Fingerprint3A:70:3F:8B:A0:FA:06:0C:02:90:23:AC:D3:4E:E8:F0:16:00:6F:27
ValidityWed, 31 Jan 2024 09:28:37 GMT - Tue, 30 Apr 2024 09:28:36 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /favicon.ico HTTP/1.1
Host: go.lnkpth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.lnkpth.com/rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds3%26aff_id%3D2%26aff_sub%3D47188%26source%3D47188%26aff_sub2%3Dmember-area%26click_id%3D32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9
Cookie: language=en; 9949=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9; op_9949=0; user_id=3257fd2d-78d3-42f1-987c-cf8312200938_b1f7469330e238ae226d5c741ca2a6f3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 17 Apr 2024 13:31:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
oacenom.com/ckset
117 B IP
Hash 7ae71be25e773e984b4b682dbd918321
52d1a20c43bb55776a62f14236f7b4bfba136fda
d2005ef29304e7cf8cb514ef00fb902ff9465761f0bf02218ab5cd576295fef5
POST /ckset HTTP/1.1
Host: oacenom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://queitho.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 201 Created
date: Wed, 17 Apr 2024 13:31:01 GMT
content-type: application/json; charset=utf-8
content-length: 117
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: mastidencook=d5081fef-40e5-4bbc-91f6-2220d093610d_62e0b29a0fef5d2d7a37fc8cc31ef59d; Domain=oacenom.com; Path=/; Expires=Mon, 16 Apr 2029 13:31:01 GMT; Secure; SameSite=None
etag: W/"75-UtGiDEO7VXdqYvFCNve0v7oTb9o"
access-control-allow-origin: https://queitho.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5%2BXYga2Z9tx2w2nTJQc2zWXGR0d1Esd%2BgrOgYZ5SfBBnVidf87yBVH9eAZTR4pb9MwYtHUBcvMeD0qp9TIrh0um6TUBJ4JrkDzL5L%2B0vDVCoXeVlj2nLqNUo59djbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875cc5e83f2f92ec-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
queitho.com/visit?aff_id=2&aff_sub=47188&aff_sub2=member-area&click_id=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9&source=47188&ttype=direct&camp=s3&p_camp=&bstep=&sid=&efcn=custom-unknown&cntp=custom-unknown&sch=&scw=&vph=&vpw=<=
823 B URL queitho.com/visit?aff_id=2&aff_sub=47188&aff_sub2=member-area&click_id=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9&source=47188&ttype=direct&camp=s3&p_camp=&bstep=&sid=&efcn=custom-unknown&cntp=custom-unknown&sch=&scw=&vph=&vpw=<=
IP
Hash 06e5287bb8d3247a9c6844df3d63280b
752b2d6c59d26eae0f191784734625bcad4cdfd0
38e2f4e65d879ff8b20f34d8ddff08769cd374b762dc8307652139a02185b647
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /visit?aff_id=2&aff_sub=47188&aff_sub2=member-area&click_id=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9&source=47188&ttype=direct&camp=s3&p_camp=&bstep=&sid=&efcn=custom-unknown&cntp=custom-unknown&sch=&scw=&vph=&vpw=<= HTTP/1.1
Host: queitho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 408
Origin: https://queitho.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 201 Created
date: Wed, 17 Apr 2024 13:31:01 GMT
content-type: application/json; charset=utf-8
content-length: 823
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: browserLanguage=en; Domain=queitho.com; Path=/; Expires=Fri, 17 May 2024 13:31:01 GMT
userId=11f09863-1051-475e-a98e-5da85438e0ff_0dbb895b304eda0e005b7cf9afe33c88; Domain=queitho.com; Path=/; Expires=Mon, 16 Apr 2029 13:31:01 GMT; Secure; SameSite=None
cache-control: no-store, no-store, no-cache
etag: W/"337-dSstbFnSbq4PGReEc0YlvK1M39A"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EOgxwz1TOj3htlT6inzZetmdg84o5w24CZJKraJHhMk444KM7z%2Bh4Pk7Lv28SqRTpham1DsnFr2%2BP8jNKwiC2gVoRiGPaRjbOJTqOVoFhr89xZdE7eeJYFD5AirGjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875cc5e9199910ef-CPH
alt-svc: h3=":443"; ma=86400
queitho.com/fl?aff_id=2&aff_sub=47188&aff_sub2=member-area&click_id=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9&source=47188&ttype=direct&camp=f109&sl_cid=a0bffda4-ede9-4595-906a-df32c38b09c8_16405f0bedbba20a5084c82f62ceed0f&p_camp=&bstep=&sid=s3&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=
1.3 kB URL queitho.com/fl?aff_id=2&aff_sub=47188&aff_sub2=member-area&click_id=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9&source=47188&ttype=direct&camp=f109&sl_cid=a0bffda4-ede9-4595-906a-df32c38b09c8_16405f0bedbba20a5084c82f62ceed0f&p_camp=&bstep=&sid=s3&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=
IP
Hash bb8030f98693c78e3a2db6239120a503
aef2c3fbc360a3fa2381f3f41909eb52930eb20c
e2752692a5228ec59490e2a1352a1011cd95fb46d41f156909f9f9ae6eac17bb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fl?aff_id=2&aff_sub=47188&aff_sub2=member-area&click_id=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9&source=47188&ttype=direct&camp=f109&sl_cid=a0bffda4-ede9-4595-906a-df32c38b09c8_16405f0bedbba20a5084c82f62ceed0f&p_camp=&bstep=&sid=s3&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<= HTTP/1.1
Host: queitho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 415
Origin: https://queitho.com
DNT: 1
Connection: keep-alive
Cookie: browserLanguage=en; userId=11f09863-1051-475e-a98e-5da85438e0ff_0dbb895b304eda0e005b7cf9afe33c88
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 201 Created
date: Wed, 17 Apr 2024 13:31:02 GMT
content-type: application/json; charset=utf-8
content-length: 1325
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: browserLanguage=en; Domain=queitho.com; Path=/; Expires=Fri, 17 May 2024 13:31:02 GMT
cache-control: no-store, no-store, no-cache
etag: W/"52d-rvLD+8Ngo/ojgfP0GQnrUpMOsgw"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yjxxJvjX6h3owVsJOVoKBgu7CL5O%2BSqVmGhj0Ebk8AHr0SHWkZ8anU6JLTfTRTDrtJgM7CSJEtakY%2FSEBl6z%2FA3Lce0PSMIubGff99T4NsgeSOPjGVWtw%2FMLQSZxeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875cc5e99a7510ef-CPH
alt-svc: h3=":443"; ma=86400
queitho.com/ofp?aff_id=2&aff_sub=47188&aff_sub2=member-area&click_id=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9&source=47188&ttype=direct&camp=f109&sl_cid=a0bffda4-ede9-4595-906a-df32c38b09c8_16405f0bedbba20a5084c82f62ceed0f&p_camp=&bstep=0&sid=s3&ofp_id=111&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=0
231 B URL queitho.com/ofp?aff_id=2&aff_sub=47188&aff_sub2=member-area&click_id=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9&source=47188&ttype=direct&camp=f109&sl_cid=a0bffda4-ede9-4595-906a-df32c38b09c8_16405f0bedbba20a5084c82f62ceed0f&p_camp=&bstep=0&sid=s3&ofp_id=111&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=0
IP
Hash c0058a83e31ae5cda4613ec6e72a163f
fb859ffd6b7977576fb0c3e31f7a147bb893f1a6
52bcc9dd7f4e9b7bb3ba8e45c9ff3c0e6b562d874a3d9b88ed8f9fa6c712c263
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /ofp?aff_id=2&aff_sub=47188&aff_sub2=member-area&click_id=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9&source=47188&ttype=direct&camp=f109&sl_cid=a0bffda4-ede9-4595-906a-df32c38b09c8_16405f0bedbba20a5084c82f62ceed0f&p_camp=&bstep=0&sid=s3&ofp_id=111&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=0 HTTP/1.1
Host: queitho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 422
Origin: https://queitho.com
DNT: 1
Connection: keep-alive
Cookie: browserLanguage=en; userId=11f09863-1051-475e-a98e-5da85438e0ff_0dbb895b304eda0e005b7cf9afe33c88
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 201 Created
date: Wed, 17 Apr 2024 13:31:02 GMT
content-type: application/json; charset=utf-8
content-length: 231
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: browserLanguage=en; Domain=queitho.com; Path=/; Expires=Fri, 17 May 2024 13:31:02 GMT
cache-control: no-store, no-store, no-cache
etag: W/"e7-+4Wf/Wt5d1dvsMPjH3oUe7iT8aY"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yTKCUc%2FIS8HOmTpLsU%2B3WbYpIIaRqlf%2F%2F5w%2FFk94GqD1Qux7xT1jHRSOyyx7K%2FMI9gmujW4BO8X%2FM0V9Fn2DleJ8pXdtg%2FtaR%2FkmD7wadLBhVhNFxoYFVswh4YpoCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875cc5ea6bcf10ef-CPH
alt-svc: h3=":443"; ma=86400
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash a4503b0d57c8bfc5dfeac771603c1516
1a37b99ba7b0ca0fde6511365a97613631eb787c
424e18e0ef4024c97ac61e9702d5565d9ccf56bcc19191507c762f8fd030f562
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 13:31:02 GMT
Last-Modified: Wed, 17 Apr 2024 12:02:17 GMT
Server: ECAcc (ska/F6BD)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wlO6KmeRQ3k3H9MoXx7Apx5vQvV10S0LVTM2Tke6Q8nhcDa7ZAnDMA==
Age: 5325
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 7d66ba6f5034a45c27e7a17667b65687
9469f1d355a4e3782a16eedf17976bbb6fe79a4e
6f817c56d1d8c3c62941947ae1d80245c673aaaee9b6864a3e0db935c72ad179
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 13:31:02 GMT
Last-Modified: Wed, 17 Apr 2024 12:12:39 GMT
Server: ECAcc (amb/6B55)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DttnNulWttAMnab_tXhDbwzNDkl7MCll2lR7T_kl9fI2cIdg8lSroA==
Age: 4703
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 7d66ba6f5034a45c27e7a17667b65687
9469f1d355a4e3782a16eedf17976bbb6fe79a4e
6f817c56d1d8c3c62941947ae1d80245c673aaaee9b6864a3e0db935c72ad179
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 13:31:02 GMT
Last-Modified: Wed, 17 Apr 2024 13:14:59 GMT
Server: ECAcc (amb/6BDA)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Vx62OeRbHL0lbkcwR4pU5XS7MaQ-5aA7D8fFmr_2G1_Fo1C3oPXpog==
Age: 963
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash a4503b0d57c8bfc5dfeac771603c1516
1a37b99ba7b0ca0fde6511365a97613631eb787c
424e18e0ef4024c97ac61e9702d5565d9ccf56bcc19191507c762f8fd030f562
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 13:31:02 GMT
Server: ECAcc (amb/6B25)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: w-efsaWIibxzBZbYOhL1KTAkMcbYKDBow3kijPGPU1Ef4WQCdY_Tcw==
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash a4503b0d57c8bfc5dfeac771603c1516
1a37b99ba7b0ca0fde6511365a97613631eb787c
424e18e0ef4024c97ac61e9702d5565d9ccf56bcc19191507c762f8fd030f562
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 13:31:02 GMT
Server: ECAcc (amb/6AE7)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lZaFxsrtN7Ezw3YBcKzqx0_0jsZGb9UV8h_XUwm1YQCtatyG5R6JQg==
secure.cmadclicks000.com/track/MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjAuMC4w?tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
302 Found 0 B URL User Request GET HTTP/2 secure.cmadclicks000.com/track/MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjAuMC4w?tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
IP
Certificate IssuerAmazon
Subjectsecure.cmadclicks000.com
Fingerprint67:89:F8:78:81:9E:18:25:7D:50:A1:37:ED:76:C9:B6:66:AE:54:A6
ValidityTue, 06 Feb 2024 00:00:00 GMT - Wed, 05 Mar 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track/MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjAuMC4w?tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e HTTP/1.1
Host: secure.cmadclicks000.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://empirelayer.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
set-cookie: AWSALB=75KP6aMCQAmZrt43zvHIP/wYEnwMdSWOYHTZqXMyy+h+zuEeXKTQJGo07G1MmgK0PcsoiR0dgXW+3cjSUOIwWVK4z0Wx1xOzpGaMzeC8FA+L1ruHrVTcWSxKIlGs; Expires=Wed, 24 Apr 2024 13:31:03 GMT; Path=/
AWSALBCORS=75KP6aMCQAmZrt43zvHIP/wYEnwMdSWOYHTZqXMyy+h+zuEeXKTQJGo07G1MmgK0PcsoiR0dgXW+3cjSUOIwWVK4z0Wx1xOzpGaMzeC8FA+L1ruHrVTcWSxKIlGs; Expires=Wed, 24 Apr 2024 13:31:03 GMT; Path=/; SameSite=None; Secure
PHPSESSID=vbe8q8d34j54lt86mq7rkpjij3; path=/
offerit_unique_344_300_1375=MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjE0OTExOTU2LjAuMA; Max-Age=86400; Expires=Thursday, 18 Apr 2024 13:31:03 UTC; path=/; domain=cmadclicks000.com
ocode_344_1375=MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjE0OTExOTU2LjAuMA; Max-Age=2592000; Expires=Friday, 17 May 2024 13:31:03 UTC; path=/; domain=cmadclicks000.com
ocode_344=MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjE0OTExOTU2LjAuMA; Max-Age=2592000; Expires=Friday, 17 May 2024 13:31:03 UTC; path=/; domain=cmadclicks000.com
offerit_344_1375_cookie=https%3A%2F%2Fempirelayer.club%2F; Max-Age=2592000; Expires=Friday, 17 May 2024 13:31:03 UTC; path=/; domain=cmadclicks000.com
offerit_344_1375=MjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjE0OTExOTU2LjAuMA|||0661fcf17664e22.15137558; Max-Age=2592000; Expires=Friday, 17 May 2024 13:31:03 UTC; path=/; domain=cmadclicks000.com
server: Apache/2.4.41 (Ubuntu)
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
luvwhisper.com/lp-external/index.js
200 OK 1.4 kB URL GET HTTP/2 luvwhisper.com/lp-external/index.js
IP
Requested by https://empirelayer.club/tds/interlayer/eb/s/b33326973db7bc4a2216c1da86efed44?__t=1713360662577&__l=3600&__c=4612a72bee973e552a5d7145531a6b5b5037713e&__u=
Certificate IssuerAmazon
Subjectluvwhisper.com
Fingerprint4D:EC:81:10:9E:C3:DA:0D:65:B1:D0:C2:7A:5E:0F:BE:3E:14:88:E3
ValidityTue, 09 Jan 2024 00:00:00 GMT - Thu, 06 Feb 2025 23:59:59 GMT
File type gzip compressed data, from Unix
Hash 9c0b44de5b2aabeebac797a31de4a30c
1327cccf2c0600d03c74849505a6e70ad297f11a
9d4f019731bac5e08b4a2d8d8917427c070a62e3fbb0ca403418ea42f77fc685
GET /lp-external/index.js HTTP/1.1
Host: luvwhisper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://empirelayer.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 13:31:03 GMT
server: nginx
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
x-robots-tag: noindex
accept-ranges: bytes
cache-control: public, max-age=3600
last-modified: Mon, 15 Apr 2024 09:30:50 GMT
etag: W/"8b7-18ee1184d10"
vary: Accept-Encoding
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: PvydO2zBmJvvP7zppdYLCUWuai8mjfUmKgOzghE1JLk16fxr8iEnhA==
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl6.png
200 OK 63 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl6.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash cc2ba36c8d9d193ce259066e407c6489
0bac1b7a226ec222d84c7b14b73e40196edf1cf7
e170e2460fabd9166a41fd6ceee5975334e36f44d29b974a22cf58a7d7a1865e
GET /lander/bbw_ppt/images/girl6.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/png
content-length: 62854
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "cc2ba36c8d9d193ce259066e407c6489"
x-amz-request-id: tx00000b83a22f280b2fbc1-006617a399-5134150-nyc
x-77-nzt: A3l/LVA3NzfvW0gHANRmOBE3Nzf/I+MAAJySOhSy0x0A
x-77-nzt-ray: c1fb9819ea6207e917cf1f662b767f2e
x-accel-expires: @1713862041
x-accel-date: 1712883388
x-77-cache: HIT
x-77-age: 535422
server: CDN77-Turbo
x-cache: HIT
x-age: 477275
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl7.png
200 OK 64 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl7.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 6d285c40dfe0b0703b82e0ae27aa9093
f4035037bd05d4f5dd976b510e515ea3dda7c026
c2e60a4d4c41002fe58af537682859ed89ed0b3692fceb2da58b244627745923
GET /lander/bbw_ppt/images/girl7.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/png
content-length: 63659
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "6d285c40dfe0b0703b82e0ae27aa9093"
x-amz-request-id: tx000001f69c3e433d0ef6c-006617a399-51342fb-nyc
x-77-nzt: A3l/LVA3NzfvW0gHAIrHJcQ3Nzf/I+MAAM/T1GaUV9UA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66a6bc972e
x-accel-expires: @1713862041
x-accel-date: 1712883388
x-77-cache: HIT
x-77-age: 535422
server: CDN77-Turbo
x-cache: HIT
x-age: 477275
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl1.png
200 OK 79 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl1.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 09eeffb13663c54afc75c71f44d28704
5825108b43943c731251838b508c4ff45724eac0
00211a1d076f7ce66dc3f18a509e4b110be7e090d44dc0cda907b2f81746e625
GET /lander/bbw_ppt/images/girl1.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/png
content-length: 79397
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "09eeffb13663c54afc75c71f44d28704"
x-amz-request-id: tx000006afe7077211b1d63-006617a394-9f56a4c-nyc
x-77-nzt: A3l/LVA3NzfvJmYHAIrHJcE3Nzf/XcUAAJySOhRBIHAA
x-77-nzt-ray: c1fb9819ea6207e917cf1f663f37192e
x-accel-expires: @1713862036
x-accel-date: 1712875761
x-77-cache: HIT
x-77-age: 535427
server: CDN77-Turbo
x-cache: HIT
x-age: 484902
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl2.png
200 OK 68 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl2.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 7385a515f8c12e389a834d774df64bf1
d2cc53db0a754a756bb771176b2b4c8f53cf213e
903a5e26e1fde000517fa899461fe47ac7ea7f21729c4668104de32b08308d69
GET /lander/bbw_ppt/images/girl2.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/png
content-length: 68496
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "7385a515f8c12e389a834d774df64bf1"
x-amz-request-id: tx00000c1c7376074ef7900-006617a3c1-85c81e4-nyc
x-77-nzt: A3l/LVA3NzfvcVwHACUTwi43Nzf/5c4AAJySOhcKKAIA
x-77-nzt-ray: c1fb9819ea6207e917cf1f668a08312e
x-accel-expires: @1713862081
x-accel-date: 1712878246
x-77-cache: HIT
x-77-age: 535382
server: CDN77-Turbo
x-cache: HIT
x-age: 482417
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl3.png
200 OK 72 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl3.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash e63402d30b258c1245d6f01defd5d83e
a3da38b5b94c0f23bd84d099ea1563cf5ff66fb5
ee1d409d0ed98a3f9ced126ee70c0f03c2c0ef4e5b4125ead46976ad8395998a
GET /lander/bbw_ppt/images/girl3.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/png
content-length: 71924
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "e63402d30b258c1245d6f01defd5d83e"
x-amz-request-id: tx00000ba8e592bc4ca1744-006617a395-51342fb-nyc
x-77-nzt: A3l/LVA3NzfvW0gHAJySISc3Nzf/J+MAAM/T1GbvY90A
x-77-nzt-ray: c1fb9819ea6207e917cf1f66a8274c2e
x-accel-expires: @1713862037
x-accel-date: 1712883388
x-77-cache: HIT
x-77-age: 535426
server: CDN77-Turbo
x-cache: HIT
x-age: 477275
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl4.png
200 OK 69 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl4.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash cf0ed91d79976126be95d8c2b3cc7536
ee5253364b72feb3fe6dcc569e739aa51efd4428
a270b0be6c768ebb20d33e1e5492374b81d478e206426c6a427f8aff6c042b16
GET /lander/bbw_ppt/images/girl4.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/png
content-length: 68974
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "cf0ed91d79976126be95d8c2b3cc7536"
x-amz-request-id: tx00000d0c2c021009fd329-006617a3c3-85a4f2a-nyc
x-77-nzt: A3l/LVA3NzfvblwHACUTwjQ3Nzf/5s4AAJySOhdRVqQA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66d98a572e
x-accel-expires: @1713862083
x-accel-date: 1712878249
x-77-cache: HIT
x-77-age: 535380
server: CDN77-Turbo
x-cache: HIT
x-age: 482414
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl5.png
200 OK 70 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl5.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 1229be3a97364870f26a789fa10e4bda
408698bf78a8fdfc6741590de7cd10f2dcc62144
7cf8762e60dbf40d1fe6de400f5372ef7798c68d891e679524aca089e831730d
GET /lander/bbw_ppt/images/girl5.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/png
content-length: 70159
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "1229be3a97364870f26a789fa10e4bda"
x-amz-request-id: tx000003e9297d11a10da8a-006617a398-9f56a4c-nyc
x-77-nzt: A3l/LVA3NzfvW0gHANRmOBE3Nzf/JOMAAJySOhT1IbYA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66dc1e652e
x-accel-expires: @1713862040
x-accel-date: 1712883388
x-77-cache: HIT
x-77-age: 535423
server: CDN77-Turbo
x-cache: HIT
x-age: 477275
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl8.png
200 OK 74 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl8.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 5cf880bc5d4c163c1e39befa98758389
95f3fcd1d7fdb6bbae0f72421f1f26af0d6f2914
c8c5fbd2c4b58b15cad866d2ef3748847f79fa68fe8ce824339acffe421f0821
GET /lander/bbw_ppt/images/girl8.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/png
content-length: 73669
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "5cf880bc5d4c163c1e39befa98758389"
x-amz-request-id: tx0000041289cd09dfd4f33-006617a3c3-85c8189-nyc
x-77-nzt: A3l/LVA3NzfvZFwHACUTwi43Nzf/8M4AAM/T1Gb8qRYA
x-77-nzt-ray: c1fb9819ea6207e917cf1f665888ae2e
x-accel-expires: @1713862083
x-accel-date: 1712878259
x-77-cache: HIT
x-77-age: 535380
server: CDN77-Turbo
x-cache: HIT
x-age: 482404
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl9.png
200 OK 71 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl9.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 6ff9b04758605055ce447f66cd9b3cf8
c49d4980a667e927ea7c332b74d2cd15ff80e3d8
e0a36faef34476f168e2d33d7ac8638f62cb79f3f162e31a0bdcb4b3e1d170a2
GET /lander/bbw_ppt/images/girl9.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/png
content-length: 70865
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "6ff9b04758605055ce447f66cd9b3cf8"
x-amz-request-id: tx0000015ca068aadbf5d2e-006617a399-85c8189-nyc
x-77-nzt: A3l/LVA3NzfvW0gHAJySIR83Nzf/I+MAAM/T1GbpK4kA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66d902c92e
x-accel-expires: @1713862041
x-accel-date: 1712883388
x-77-cache: HIT
x-77-age: 535422
server: CDN77-Turbo
x-cache: HIT
x-age: 477275
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl10.png
200 OK 68 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl10.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Hash 1741f5afab80a567abe77f3f6da763b3
a7c4f717d2eb85826a997133b9840f0cace83b5a
a56a97e18fb21f4a0ce1152473cb1113cb8e7a2c376b97a41630ae463c211d7c
GET /lander/bbw_ppt/images/girl10.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/png
content-length: 68332
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "1741f5afab80a567abe77f3f6da763b3"
x-amz-request-id: tx0000042177f922113e097-006617a399-9f26f94-nyc
x-77-nzt: A3l/LVA3NzfvXlwHAIrHJcQ3Nzf/IM8AAJySOhdIAOYA
x-77-nzt-ray: c1fb9819ea6207e917cf1f666c9ce92e
x-accel-expires: @1713862041
x-accel-date: 1712878265
x-77-cache: HIT
x-77-age: 535422
server: CDN77-Turbo
x-cache: HIT
x-age: 482398
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/girl.png
200 OK 218 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/girl.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 440 x 440, 8-bit/color RGBA, non-interlaced
Size 218 kB (217974 bytes)
Hash a507d5ac5235639cae09a64af0138442
f8e5bd282fbcf3d6ef2082321135271bb9727bcb
ed205b1ef4bf328996cc0d6d52d94d9c12cc05466a6b860e71e30a58ba4aa268
GET /lander/bbw_ppt/images/girl.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/png
content-length: 217974
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "a507d5ac5235639cae09a64af0138442"
x-amz-request-id: tx00000565d4550316f99f4-006617a399-85c8189-nyc
x-77-nzt: A3l/LVA3NzfvW0gHAIrHJcE3Nzf/I+MAAJySOhRLxksA
x-77-nzt-ray: c1fb9819ea6207e917cf1f669213ed2e
x-accel-expires: @1713862041
x-accel-date: 1712883388
x-77-cache: HIT
x-77-age: 535422
server: CDN77-Turbo
x-cache: HIT
x-age: 477275
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
empirelayer.club/tds/interlayer?handler=ExternalBackofferEvent&urlIn=https%3A%2F%2Fempirelayer.club%2Ftds%2Finterlayer%2Feb%2Fs%2Fb33326973db7bc4a2216c1da86efed44%3F__t%3D1713360662577%26__l%3D3600%26__c%3D4612a72bee973e552a5d7145531a6b5b5037713e%26__u%3D&urlOut=https%3A%2F%2Fsecure.cmadclicks000.com%2Ftrack%2FMjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjAuMC4w%3Ftds_cid%3D4612a72bee973e552a5d7145531a6b5b5037713e%26subaff%3Dsml_e1f18e7f%26_ocid%3D4612a72bee973e552a5d7145531a6b5b5037713e&altQs=utm_campaign%3De1f18e7f%26utm_source%3Dint%26utm_content%3Ddit1016%26data2%3Da0bffda4-ede9-4595-906a-df32c38b09c8%26s1%3Dps%26s3%3DNDcxODhfZGl0MTAxNg%253D%253D%26tds_campaign%3Db7637pos%26tds_id%3Db7637pos_lp_a_1575477620507_bbwsexdates%26tds_oid%3D63fb536d%26tds_cid%3D4612a72bee973e552a5d7145531a6b5b5037713e%26tds_ac_id%3Ds5428sto%26p_tds_cid%3D93ddae4a0433a6eca1ba126753715fe465fa5d41%26tds_host%3Dluvwhisper.com%26tds_path%3D%252Ftds%252Fae%26dci%3D053673e719228420990f11220f3c289d298e20f3%26tds_ps%3Da&tdsCid=4612a72bee973e552a5d7145531a6b5b5037713e&reason=beacon&visitsCount=1&ts=1713360663062
200 OK 3.8 kB URL POST HTTP/3 empirelayer.club/tds/interlayer?handler=ExternalBackofferEvent&urlIn=https%3A%2F%2Fempirelayer.club%2Ftds%2Finterlayer%2Feb%2Fs%2Fb33326973db7bc4a2216c1da86efed44%3F__t%3D1713360662577%26__l%3D3600%26__c%3D4612a72bee973e552a5d7145531a6b5b5037713e%26__u%3D&urlOut=https%3A%2F%2Fsecure.cmadclicks000.com%2Ftrack%2FMjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjAuMC4w%3Ftds_cid%3D4612a72bee973e552a5d7145531a6b5b5037713e%26subaff%3Dsml_e1f18e7f%26_ocid%3D4612a72bee973e552a5d7145531a6b5b5037713e&altQs=utm_campaign%3De1f18e7f%26utm_source%3Dint%26utm_content%3Ddit1016%26data2%3Da0bffda4-ede9-4595-906a-df32c38b09c8%26s1%3Dps%26s3%3DNDcxODhfZGl0MTAxNg%253D%253D%26tds_campaign%3Db7637pos%26tds_id%3Db7637pos_lp_a_1575477620507_bbwsexdates%26tds_oid%3D63fb536d%26tds_cid%3D4612a72bee973e552a5d7145531a6b5b5037713e%26tds_ac_id%3Ds5428sto%26p_tds_cid%3D93ddae4a0433a6eca1ba126753715fe465fa5d41%26tds_host%3Dluvwhisper.com%26tds_path%3D%252Ftds%252Fae%26dci%3D053673e719228420990f11220f3c289d298e20f3%26tds_ps%3Da&tdsCid=4612a72bee973e552a5d7145531a6b5b5037713e&reason=beacon&visitsCount=1&ts=1713360663062
IP
Requested by https://empirelayer.club/tds/interlayer/eb/s/b33326973db7bc4a2216c1da86efed44?__t=1713360662577&__l=3600&__c=4612a72bee973e552a5d7145531a6b5b5037713e&__u=
Certificate IssuerAmazon
Subjectempirelayer.club
FingerprintD0:9A:6A:E3:BC:1C:59:10:F7:F8:FD:8F:63:D3:56:1C:43:2C:75:EF
ValidityThu, 02 Nov 2023 00:00:00 GMT - Sat, 30 Nov 2024 23:59:59 GMT
File type gzip compressed data, from Unix
Hash f80bcef4031b3c97fbc3ba70bd2cc806
aba398ccc9c4d0bba6e57ef76c51131765bb1ee5
3efb26704d2da59ee268b0c0de0e627ca99c2004aef260b0b46aad5cf1c00638
POST /tds/interlayer?handler=ExternalBackofferEvent&urlIn=https%3A%2F%2Fempirelayer.club%2Ftds%2Finterlayer%2Feb%2Fs%2Fb33326973db7bc4a2216c1da86efed44%3F__t%3D1713360662577%26__l%3D3600%26__c%3D4612a72bee973e552a5d7145531a6b5b5037713e%26__u%3D&urlOut=https%3A%2F%2Fsecure.cmadclicks000.com%2Ftrack%2FMjM3OC41MzcxNjguMzAwLjEzNzUuMC4wLjAuMC4wLjAuMC4w%3Ftds_cid%3D4612a72bee973e552a5d7145531a6b5b5037713e%26subaff%3Dsml_e1f18e7f%26_ocid%3D4612a72bee973e552a5d7145531a6b5b5037713e&altQs=utm_campaign%3De1f18e7f%26utm_source%3Dint%26utm_content%3Ddit1016%26data2%3Da0bffda4-ede9-4595-906a-df32c38b09c8%26s1%3Dps%26s3%3DNDcxODhfZGl0MTAxNg%253D%253D%26tds_campaign%3Db7637pos%26tds_id%3Db7637pos_lp_a_1575477620507_bbwsexdates%26tds_oid%3D63fb536d%26tds_cid%3D4612a72bee973e552a5d7145531a6b5b5037713e%26tds_ac_id%3Ds5428sto%26p_tds_cid%3D93ddae4a0433a6eca1ba126753715fe465fa5d41%26tds_host%3Dluvwhisper.com%26tds_path%3D%252Ftds%252Fae%26dci%3D053673e719228420990f11220f3c289d298e20f3%26tds_ps%3Da&tdsCid=4612a72bee973e552a5d7145531a6b5b5037713e&reason=beacon&visitsCount=1&ts=1713360663062 HTTP/1.1
Host: empirelayer.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://empirelayer.club
DNT: 1
Connection: keep-alive
Referer: https://empirelayer.club/tds/interlayer/eb/s/b33326973db7bc4a2216c1da86efed44?__t=1713360662577&__l=3600&__c=4612a72bee973e552a5d7145531a6b5b5037713e&__u=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/3 200 OK
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
date: Wed, 17 Apr 2024 13:31:03 GMT
server: nginx
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform, Sec-CH-UA-Wow64, Sec-CH-UA
x-cache: Miss from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-id: Lnn1Ssu0T0mGapGcIRxMWHAjHcxkYccdD2UosM_8St5Q6rpX_xtCog==
www.googletagmanager.com/gtag/js?id=G-VSC39DNY4C
200 OK 93 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-VSC39DNY4C
IP
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D
ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File type JavaScript source, ASCII text, with very long lines (3034)
Hash bf50d74aa87b5c3afc5d504302016307
1b8f88e358308f3aa66351966568583a92f99668
02f79e914fec8b539d777fbfd534867078453862dc6b93cbff1a9e87b2f8f9d1
GET /gtag/js?id=G-VSC39DNY4C HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 13:31:04 GMT
expires: Wed, 17 Apr 2024 13:31:04 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93141
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_webpack/bundle.js
200 OK 4.2 kB URL GET HTTP/2 hello.bbwsexdates.club/_webpack/bundle.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type gzip compressed data, from Unix
Hash 2eaaa5ef95acba43ec3e634e52853ae4
a75788295f0b7181168f686e2b4a08c9940575d0
eccf2f430fe361ef20255520d637368d66fff1e447d284af260b2a4faf0d7624
GET /_webpack/bundle.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:03 GMT
x-rgw-object-type: Normal
etag: W/"05ec202ab4853ac6b72032a63846c9bb"
x-amz-request-id: tx0000036131cb7e9392ff3-006617a394-a04f75b-nyc
x-77-nzt: A3l/LVA3NzfvLWAHANRmOBE3Nzf/VssAAJySOhQGKgUA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66bc6dad2d
content-encoding: gzip
x-accel-expires: @1713862036
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535427
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_vendor/fetch.js
200 OK 4.2 kB URL GET HTTP/2 hello.bbwsexdates.club/_vendor/fetch.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type gzip compressed data, from Unix
Hash afd5a30940614cf6e5fb10ccfab0cb10
8ce6811ddbcab6285de184114876a779d85a391a
07d1b7d8dd96a317011c1e4153ad66a30ca8c61287bd52532dd0375fb05589e9
GET /_vendor/fetch.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:03 GMT
x-rgw-object-type: Normal
etag: W/"0c21273fa3d230f74868a77a92473379"
x-amz-request-id: tx000000e26f4c50683e01c-006617a394-79fc2a4-nyc
x-77-nzt: A3l/LVA3NzfvLWAHANRmOBE3Nzf/VssAAM/T1GY0PqgA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66d295b02d
content-encoding: gzip
x-accel-expires: @1713862036
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535427
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_vendor/promise.js
200 OK 4.3 kB URL GET HTTP/2 hello.bbwsexdates.club/_vendor/promise.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type gzip compressed data, from Unix
Hash ae1f316b29a46ccece2535cc76c3f7f7
affc12c620aeff7f97164c824a901ed77ebf03db
3b21d98a217f84892e9fb886a44786d6cf5e7f04ca7c3be18c83046a7d31b527
GET /_vendor/promise.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:03 GMT
x-rgw-object-type: Normal
etag: W/"d24ef61e324e3e4166f164a86eb0405e"
x-amz-request-id: tx0000015ae3dfd6e16fbaa-006617a394-79fc2a4-nyc
x-77-nzt: A3l/LVA3NzfvLWAHAIrHJcE3Nzf/VssAAJySOhTXOekA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66b207af2d
content-encoding: gzip
x-accel-expires: @1713862036
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535427
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /lander/bbw_ppt/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/assets/fonts/font-awesome.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:04 GMT
content-type: font/woff2
content-length: 77160
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "af7ae505a9eed503f8b8e6982036873e"
x-amz-request-id: tx00000d0695c7028c56ea3-006617a39b-5134150-nyc
x-77-nzt: A3l/LVA3NzfvRD8HAJySIR83Nzf/OewAAJySOhTdxgMA
x-77-nzt-ray: c1fb9819ea6207e918cf1f665069f214
x-accel-expires: @1713862043
x-accel-date: 1712885716
x-77-cache: HIT
x-77-age: 535421
server: CDN77-Turbo
x-cache: HIT
x-age: 474948
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/favicon.svg
200 OK 44 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/favicon.svg
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type gzip compressed data, from Unix
Hash 76dfa9f261b6f05fccfbb1bf0d801151
c057279f3d8708f7ee9c35b1501fc38780e341aa
75d6a6a6ebb3962de279a40743c5d48cd723be4d18f591d2e3c7504f15a47dce
GET /lander/bbw_ppt/images/favicon.svg HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:04 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"571c02062078ac86a999710ccfff89be"
x-amz-request-id: tx000001dcbedd277a5d68f-006617a39b-79fc2a4-nyc
x-77-nzt: A3l/LVA3Nzfv0o8GAIrHJcQ3Nzf/q5sBAM/T1GZ4vWAA
x-77-nzt-ray: c1fb9819ea6207e918cf1f6655e93706
content-encoding: gzip
x-accel-expires: @1713862043
x-accel-date: 1712930630
x-77-cache: HIT
x-77-age: 535421
server: CDN77-Turbo
x-cache: HIT
x-age: 430034
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/js/api-form-mapper.js
200 OK 353 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/js/api-form-mapper.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type gzip compressed data, from Unix
Size 353 kB (353172 bytes)
Hash a133c5715cc4845491ed53f5bf346904
ec664e8f39bef05841c16d354c9ba14774045522
7b01a4023cbf8503d507240541caedd4536a3dbd7c3a8bf25b30c36fe335cc88
GET /lander/bbw_ppt/assets/js/api-form-mapper.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"01242bc9de8c3d92892803c25e35c040"
x-amz-request-id: tx0000057b62bcf1314f766-006617a3b9-9f56a4c-nyc
x-77-nzt: A3l/LVA3NzfvLWAHACUTwjE3Nzf/McsAAJySOhScMDoA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66cf0d232d
content-encoding: gzip
x-accel-expires: @1713862073
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535390
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/css/loginForm.css
200 OK 10 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/css/loginForm.css
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type gzip compressed data, from Unix
Hash ba9295e2ccc6e49bde53dd1e1da7bdaa
ab087b37526ef1dd5c8199b8fecf7579b076f50f
22c52706e7cca2c0ed393391df725690df42e0c754fe7394d047b4b87b4d2350
GET /lander/bbw_ppt/assets/css/loginForm.css HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"43011728c0dce0398c5fd40cbe59f209"
x-amz-request-id: tx00000fc9ee3ced4849c18-006617a3c3-85c8189-nyc
x-77-nzt: A3l/LVA3NzfveVwHACUTwjE3Nzf/284AAM/T1GYDe3MA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66dc1fa32c
content-encoding: gzip
x-accel-expires: @1713862083
x-accel-date: 1712878238
x-77-cache: HIT
x-77-age: 535380
server: CDN77-Turbo
x-cache: HIT
x-age: 482425
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_vendor/jquery-2.2.4.min.js
200 OK 86 kB URL GET HTTP/2 hello.bbwsexdates.club/_vendor/jquery-2.2.4.min.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type JavaScript source, ASCII text, with very long lines (32065)
Hash b354cc9d56a1da6b0c77604d1b153850
a3d8479f4d4e39b131bc9a53bbf53d1fbaa23732
fdce77a6d0053f32d231518a84a71bcab5c86045ed52369da00b89d4284aef46
GET /_vendor/jquery-2.2.4.min.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:03 GMT
x-rgw-object-type: Normal
etag: W/"b354cc9d56a1da6b0c77604d1b153850"
x-amz-request-id: tx000001c87aaafab8fc5ca-006617a393-85c8182-nyc
x-77-nzt: A3l/LVA3NzfvLWAHAJySIR83Nzf/V8sAAM/T1Gb4HsYA
x-77-nzt-ray: c1fb9819ea6207e917cf1f661cd8112d
content-encoding: gzip
x-accel-expires: @1713862035
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535428
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/js/Config.js
200 OK 113 B URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/js/Config.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type ASCII text, with no line terminators
Hash eaddceb23d99a9dd4b7b3b7e8b763bab
ed5a5a29b8d3924e54a3f8d66cf1d3aba6e2a6da
32c5b3bc9a0195d15d5f2e81026f8d817d701ac5c9192e3b5585bca8af3b1f06
GET /lander/bbw_ppt/assets/js/Config.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"9a818bc58832121e6e5df23a2536c51d"
x-amz-request-id: tx000004bdb74c5ba3225fe-006617a3b9-5134150-nyc
x-77-nzt: A3l/LVA3NzfvLWAHACUTwjE3Nzf/McsAAM/T1GYVRGMA
x-77-nzt-ray: c1fb9819ea6207e917cf1f6658b5ab2d
content-encoding: gzip
x-accel-expires: @1713862073
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535390
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_scripts/close-button-redirect.js
200 OK 617 B URL GET HTTP/2 hello.bbwsexdates.club/_scripts/close-button-redirect.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type JavaScript source, ASCII text, with very long lines (733), with no line terminators
Hash 42782c46d408dea29ab1087491554688
14d2e4b5bd43ed41a5eef723df93b34b76d87078
5dd94533a121fd11d2097f62123a7606280b8986313aca47eacfe0ab6baf0419
GET /_scripts/close-button-redirect.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:03 GMT
x-rgw-object-type: Normal
etag: W/"c19a24ce6bc9b5a5821f4d1749075edb"
x-amz-request-id: tx00000641e710284a2a129-006617a3c3-85a4f2a-nyc
x-77-nzt: A3l/LVA3NzfvLWAHACUTwjQ3Nzf/J8sAAM/T1Gb0cIIA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66b782d52f
content-encoding: gzip
x-accel-expires: @1713862083
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535380
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
200 OK 12 kB URL User Request GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
IP
ASN #60068 Datacamp Limited
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type HTML document, ASCII text, with very long lines (302)
Hash ef0311aa81a1083e38878b0234622e1d
a57e3c191e766d5f58ba50ac33f9eda2b916095c
072d02fb19f8c48537dfba648164b5b8f72c8cbb0cd7b01610ea687cb77c57d5
GET /lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://empirelayer.club/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"ef0311aa81a1083e38878b0234622e1d"
x-amz-request-id: tx00000ae80662b2568499c-006617a396-9f56a4c-nyc
x-77-nzt: A3l/LVA3Nzf/mB0IAJySISc3Nzf/6A0AAJySOhfeoREA
x-77-nzt-ray: c1fb9819ea6207e917cf1f660742ef23
content-encoding: gzip
x-accel-expires: @1713862039
x-accel-date: 1712828799
x-77-cache: HIT
x-77-age: 535424
server: CDN77-Turbo
x-cache: HIT
x-age: 531864
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_fuckbook/loader.css
200 OK 698 B URL GET HTTP/2 hello.bbwsexdates.club/_fuckbook/loader.css
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type ASCII text, with very long lines (729), with no line terminators
Hash f114fa4ebe48ca18cee2222a8e8240f5
72a9f6ded59377933b766baee00e8d5956173022
8a41445a8df48cf5978e1c24f717208815992a0f390a696551b52c73aee4720b
GET /_fuckbook/loader.css HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:03 GMT
x-rgw-object-type: Normal
etag: W/"09ba2784bd529ab5d4e172564ae92b66"
x-amz-request-id: tx00000c6fc0932fd931e56-006617a3c3-5134150-nyc
x-77-nzt: A3l/LVA3NzfveVwHACUTwjQ3Nzf/284AAM/T1GbbJ5EA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66cf56e02c
content-encoding: gzip
x-accel-expires: @1713862083
x-accel-date: 1712878238
x-77-cache: HIT
x-77-age: 535380
server: CDN77-Turbo
x-cache: HIT
x-age: 482425
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_scripts/general.js
200 OK 776 B URL GET HTTP/2 hello.bbwsexdates.club/_scripts/general.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type ASCII text, with very long lines (850), with no line terminators
Hash 27241a23b643493200558c163c2c2670
2692a3cec0b7c7f8ea76df915308f0dc95f0ddee
87f15b09777b76f12ce21f9e821e812e92754e7cd315a1b1fc440e420a2b7ba5
GET /_scripts/general.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:03 GMT
x-rgw-object-type: Normal
etag: W/"600b6d5416f9f96975c6429e90e2465c"
x-amz-request-id: tx000006dfb2db4d3008e60-006617a395-79fc2a4-nyc
x-77-nzt: A3l/LVA3NzfvLWAHAJySISc3Nzf/VcsAAM/T1GbglFQA
x-77-nzt-ray: c1fb9819ea6207e917cf1f668a35462f
content-encoding: gzip
x-accel-expires: @1713862037
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535426
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_scripts/second-offer.js
200 OK 607 B URL GET HTTP/2 hello.bbwsexdates.club/_scripts/second-offer.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type ASCII text, with very long lines (645), with no line terminators
Hash 1af2cd31d6c48de91b789a7d78ef00f0
dfff00eb2823091e2c8aadf9a1e69ddfeca6f334
18978a847e81e842e7cfec0147de7221efd7c5cc2cba4a11b28eac0f2ed9af2c
GET /_scripts/second-offer.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:03 GMT
x-rgw-object-type: Normal
etag: W/"7735e6151b0ba053320e29b675b55752"
x-amz-request-id: tx0000089d459e281633be4-006617a3c3-85a4f2a-nyc
x-77-nzt: A3l/LVA3NzfvLWAHACUTwi43Nzf/J8sAAM/T1GbT3IUA
x-77-nzt-ray: c1fb9819ea6207e917cf1f665e9a562f
content-encoding: gzip
x-accel-expires: @1713862083
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535380
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_scripts/back-button-gsm.js
200 OK 2.1 kB URL GET HTTP/2 hello.bbwsexdates.club/_scripts/back-button-gsm.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type JavaScript source, ASCII text, with very long lines (2133), with no line terminators
Hash 9e0a9f5cfb3b8c358dc980e88a91be67
71694b67f8537224ba485deb631ae546dc56ea4d
c982c8de70dd14d83057818589ea42dbd5347e622b1a6891e6c1091b0e1278df
GET /_scripts/back-button-gsm.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:03 GMT
x-rgw-object-type: Normal
etag: W/"fc3d28ea9f05cce532e7e376e02788e3"
x-amz-request-id: tx00000178e5c8f288489cb-006617a3c3-85c81e4-nyc
x-77-nzt: A3l/LVA3NzfvLWAHACUTwjQ3Nzf/J8sAAM/T1GbAyScA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66b9088d2f
content-encoding: gzip
x-accel-expires: @1713862083
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535380
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/access_block_d.png
200 OK 41 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/access_block_d.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 1800 x 510, 8-bit/color RGBA, non-interlaced
Hash 0c06dd518a2bd46e831f73852d16b8e7
66d9131dfb6a025e968cd72484f80d338145fa5d
00ba3eb257134b16ac61ce0cb45bb0dee22b2029c383387c80e4ea7612d8003a
GET /lander/bbw_ppt/images/access_block_d.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/assets/css/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:04 GMT
content-type: image/png
content-length: 41229
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "0c06dd518a2bd46e831f73852d16b8e7"
x-amz-request-id: tx00000e8026a42cd167ed6-006617a3d8-9f56a4c-nyc
x-77-nzt: A3l/LVA3NzehnJIhJzc3N/9AKwgAz9PUZovjlAA
x-77-nzt-ray: c1fb9819ea6207e918cf1f66c3495914
x-accel-expires: @1713862104
x-accel-date: 1712825304
x-77-cache: HIT
x-77-age: 535360
server: CDN77-Turbo
x-cache: MISS
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/logo-monochrome.svg
200 OK 8.1 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/logo-monochrome.svg
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type SVG Scalable Vector Graphics image
Hash c92d73a31bfcca1ef3d7c2afd2c343d2
b77c1a0cb9eb2ca85b08b027964eb4894956b85f
c0097cc18adf663b09e4915683c366cb74ce055edeb84cc5a99672ae3d1801da
GET /lander/bbw_ppt/images/logo-monochrome.svg HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"b9f2de55df11c7e53439bc427c4796fd"
x-amz-request-id: tx0000017898d55b11636a7-006617a3bb-51342fb-nyc
x-77-nzt: A3l/LVA3NzfvdVwHACUTwjE3Nzf/584AAJySOhTSyFUA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66c73df32d
content-encoding: gzip
x-accel-expires: @1713862075
x-accel-date: 1712878242
x-77-cache: HIT
x-77-age: 535388
server: CDN77-Turbo
x-cache: HIT
x-age: 482421
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/fonts/font-awesome.min.css
200 OK 37 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/fonts/font-awesome.min.css
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type troff or preprocessor input, ASCII text, with very long lines (336)
Hash 36d99ac1e5f28e6268b6880a88cb04bb
e02894eb6b3412f75db4d5e6dd9d615e90fc0229
cf10083ba6b3d7d61b8649fc68ca97c5a47c4b8b77fcdd545314ebf86ccab774
GET /lander/bbw_ppt/assets/fonts/font-awesome.min.css HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"36d99ac1e5f28e6268b6880a88cb04bb"
x-amz-request-id: tx000004efac1f5a5be0912-006617a393-51342fb-nyc
x-77-nzt: A3l/LVA3NzfveVwHAJySISc3Nzf/C88AAJySOhcm6z4A
x-77-nzt-ray: c1fb9819ea6207e917cf1f663f57ba2c
content-encoding: gzip
x-accel-expires: @1713862035
x-accel-date: 1712878238
x-77-cache: HIT
x-77-age: 535428
server: CDN77-Turbo
x-cache: HIT
x-age: 482425
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_fuckbook/CommonMapper.js
200 OK 390 B URL GET HTTP/2 hello.bbwsexdates.club/_fuckbook/CommonMapper.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type ASCII text, with very long lines (406), with no line terminators
Hash 07ec1675f869920decc082fc05a55498
d11e906d39afe132fe51229c7b8b1f650d73773d
1eb7ed0726f4bb9856cefc83b47f536ca68d34d37ddde322e6aee37e1e80fd28
GET /_fuckbook/CommonMapper.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:03 GMT
x-rgw-object-type: Normal
etag: W/"828fa6212948b55b3460bbce578ea6d5"
x-amz-request-id: tx00000f155bff7a408edb9-006617a393-79fc2a4-nyc
x-77-nzt: A3l/LVA3NzfvLWAHANRmOBE3Nzf/VssAAM/T1GYATaIA
x-77-nzt-ray: c1fb9819ea6207e917cf1f665ca73f2d
content-encoding: gzip
x-accel-expires: @1713862036
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535427
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/js/jquery-ui.effects_min.js
200 OK 25 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/js/jquery-ui.effects_min.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type JavaScript source, ASCII text, with very long lines (24498)
Hash b4d4f1d045bf11023f0debc29c76e01f
bea411f05b975d294ab068019f8f34f5e5e6e4c0
ee8f6966cc5af322e27eb42fb1eb0fb7e6660a9b09925a5d27abb3de7da8f4f2
GET /lander/bbw_ppt/assets/js/jquery-ui.effects_min.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"b4d4f1d045bf11023f0debc29c76e01f"
x-amz-request-id: tx00000342048b5168a5c15-006617a3b9-85c8182-nyc
x-77-nzt: A3l/LVA3NzfvLWAHACUTwjE3Nzf/McsAAJySOheSckkA
x-77-nzt-ray: c1fb9819ea6207e917cf1f667159332d
content-encoding: gzip
x-accel-expires: @1713862073
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535390
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_fuckbook/Api.js
200 OK 1.5 kB URL GET HTTP/2 hello.bbwsexdates.club/_fuckbook/Api.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type JavaScript source, ASCII text, with very long lines (1597), with no line terminators
Hash 2dd584483c65aa9a6e9c57d5ffc402f7
ba4843d39cbd20dd3c507710d59a2e0f059bff4e
4b11ba925479e77dfe54b227c6d7121759d1cd842ee8e1e2ad71ba94416ff1cd
GET /_fuckbook/Api.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:02 GMT
x-rgw-object-type: Normal
etag: W/"aa4f0cc24730b84039e42dd08ad528e6"
x-amz-request-id: tx00000649b315bff200808-006617a394-a04f75b-nyc
x-77-nzt: A3l/LVA3NzfvLWAHAJySISc3Nzf/VssAAM/T1GYha98A
x-77-nzt-ray: c1fb9819ea6207e917cf1f6606234f2d
content-encoding: gzip
x-accel-expires: @1713862036
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535427
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
empirelayer.club/tds/interlayer/eb/s/b33326973db7bc4a2216c1da86efed44?__t=1713360662577&__l=3600&__c=4612a72bee973e552a5d7145531a6b5b5037713e&__u=
200 OK 1.2 kB URL User Request GET HTTP/2 empirelayer.club/tds/interlayer/eb/s/b33326973db7bc4a2216c1da86efed44?__t=1713360662577&__l=3600&__c=4612a72bee973e552a5d7145531a6b5b5037713e&__u=
IP
Certificate IssuerAmazon
Subjectempirelayer.club
FingerprintD0:9A:6A:E3:BC:1C:59:10:F7:F8:FD:8F:63:D3:56:1C:43:2C:75:EF
ValidityThu, 02 Nov 2023 00:00:00 GMT - Sat, 30 Nov 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (1200), with no line terminators
Hash bd12e7a2be73f2780ba2d91a1663f6d0
d6954eaf1e58e1ca545a504c54ba37cc09297a74
571987031e8d19bb6f382c5cb5cc827ef2b77f0ac4a5e5487576ef8bb0f3698a
GET /tds/interlayer/eb/s/b33326973db7bc4a2216c1da86efed44?__t=1713360662577&__l=3600&__c=4612a72bee973e552a5d7145531a6b5b5037713e&__u= HTTP/1.1
Host: empirelayer.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
date: Wed, 17 Apr 2024 13:31:02 GMT
server: nginx
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform, Sec-CH-UA-Wow64, Sec-CH-UA
vary: Accept-Encoding
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: XeHxL0SM8f5vwc0IrpoEMvRXiOrBeIFzOzXJIS_X8fMnj2DpOP80Ow==
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/css/glider.min.css
200 OK 1.8 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/css/glider.min.css
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type ASCII text, with very long lines (1847), with no line terminators
Hash aa3166faaf061c3e3a1eead737f38a83
53779a79875a229cac19e358c8f5953a406e567d
5f01cc99d949faf296242d6abdb185487316125f665320c1379915dd289bbe77
GET /lander/bbw_ppt/assets/css/glider.min.css HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"9facae4703e0b0021ec37cec7b305bf6"
x-amz-request-id: tx000000d7dd769cb9bd221-006617a3c3-a04f75b-nyc
x-77-nzt: A3l/LVA3NzfveVwHACUTwjQ3Nzf/284AAJySOhRsKjMA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66021bed2c
content-encoding: gzip
x-accel-expires: @1713862083
x-accel-date: 1712878238
x-77-cache: HIT
x-77-age: 535380
server: CDN77-Turbo
x-cache: HIT
x-age: 482425
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/js/script.js
200 OK 57 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/js/script.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lander/bbw_ppt/assets/js/script.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"8fece2e2691cf17781d24ad8b93400b8"
x-amz-request-id: tx0000001ee3e5878c592b6-006617a396-9f26f94-nyc
x-77-nzt: A3l/LVA3NzfvLWAHAIrHJcE3Nzf/VMsAAJySOhRx2i8A
x-77-nzt-ray: c1fb9819ea6207e917cf1f66ff81f02f
content-encoding: gzip
x-accel-expires: @1713862038
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535425
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
queitho.com/client?camp=s3&aff_id=2&aff_sub=47188&source=47188&aff_sub2=member-area&click_id=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9
200 OK 6.1 kB URL User Request GET HTTP/2 queitho.com/client?camp=s3&aff_id=2&aff_sub=47188&source=47188&aff_sub2=member-area&click_id=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9
IP
Certificate IssuerLet's Encrypt
Subjectqueitho.com
FingerprintF1:05:3E:9D:7A:6D:B6:57:58:D4:D8:E8:6E:81:69:2A:D3:2B:5C:D9
ValidityTue, 12 Mar 2024 19:42:25 GMT - Mon, 10 Jun 2024 19:42:24 GMT
File type JavaScript source, ASCII text, with very long lines (6168), with no line terminators
Hash f8996f154286c7a9a124ab0544a17bb5
f3e20138f5aa2ae565dafcf51b1ecf669d2d804c
7969ec9b37e9d05e76d9954c423c13827d4b4c15cd17d31a5e30f52d4ddb7e93
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /client?camp=s3&aff_id=2&aff_sub=47188&source=47188&aff_sub2=member-area&click_id=32_47188_9949_5cf5f11d94dc8f1175e4004185cc79b9 HTTP/1.1
Host: queitho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.lnkpth.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:01 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: default-src 'self' https://oacenom.com https://openfpcdn.io/fingerprintjs/v4; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://oacenom.com https://openfpcdn.io/fingerprintjs/v4
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cache-control: no-store, no-store, no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hov%2BbX%2B31ZZoDTX84PuCyTJsusgZXUygQVFY4COrwBrIQJNsOsHxePCAT1x4JzeU%2BMTbmrSTTA12GUbckLastZ8rr4LE1ofL%2FIQCTLjJlxLwdUtamqFUiLJO3VWEsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875cc5e6884c8f59-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/discreete.svg
200 OK 858 B URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/discreete.svg
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type SVG Scalable Vector Graphics image
Hash 5e351e168d89b580d3db9bb4f054253a
5b452b75ad226520e294347028e2e527398e98db
565b9ce46acbd5ab744ba7abfbe74c7d79b62ad52a315599d0cf73a9a2eb9216
GET /lander/bbw_ppt/images/discreete.svg HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"2991e6dc86dde822e598d00587b22ffc"
x-amz-request-id: tx0000000dabf36af146bc7-006617a3c3-85c8189-nyc
x-77-nzt: A3l/LVA3NzfvW0gHACUTwi43Nzf/+eIAAJySOhdtUggA
x-77-nzt-ray: c1fb9819ea6207e917cf1f665121042f
content-encoding: gzip
x-accel-expires: @1713862083
x-accel-date: 1712883388
x-77-cache: HIT
x-77-age: 535380
server: CDN77-Turbo
x-cache: HIT
x-age: 477275
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
empirelayer.club/favicon.ico
0 B URL GET empirelayer.club/favicon.ico
IP
Requested by https://empirelayer.club/tds/interlayer/eb/s/b33326973db7bc4a2216c1da86efed44?__t=1713360662577&__l=3600&__c=4612a72bee973e552a5d7145531a6b5b5037713e&__u=
Certificate IssuerAmazon
Subjectempirelayer.club
FingerprintD0:9A:6A:E3:BC:1C:59:10:F7:F8:FD:8F:63:D3:56:1C:43:2C:75:EF
ValidityThu, 02 Nov 2023 00:00:00 GMT - Sat, 30 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: empirelayer.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://empirelayer.club/tds/interlayer/eb/s/b33326973db7bc4a2216c1da86efed44?__t=1713360662577&__l=3600&__c=4612a72bee973e552a5d7145531a6b5b5037713e&__u=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
hello.bbwsexdates.club/lander/bbw_ppt/assets/js/glider.min.js
200 OK 7.7 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/js/glider.min.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type JavaScript source, ASCII text, with very long lines (7861), with no line terminators
Hash 19c55b8922ace39472f25c111619da03
41d6b4505738206b45c28da6dec4139f2cf270b2
ed35c737442a3a4273755e7cf37b2b448d93bb38e10aab039cef14d4045cf4f4
GET /lander/bbw_ppt/assets/js/glider.min.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"180f981683eef7b9618d364d7df6db13"
x-amz-request-id: tx0000086925252466e1747-006617a396-a04f75b-nyc
x-77-nzt: A3l/LVA3NzfvLWAHAJySISc3Nzf/VMsAAJySOhT49ugA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66d1140730
content-encoding: gzip
x-accel-expires: @1713862038
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535425
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/find_people_block.png
200 OK 2.3 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/find_people_block.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 375 x 130, 8-bit/color RGBA, non-interlaced
Hash 60b5d318a761bc086a9271ce1fa9f332
f0a7b2345d18060662a38c4fc29e532ce27df232
a5b62d5120d7210c27c5f5c91dbc98ac04c9c00bb70cff8d75e89eb9344f0636
GET /lander/bbw_ppt/images/find_people_block.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/assets/css/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:04 GMT
content-type: image/png
content-length: 2280
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "60b5d318a761bc086a9271ce1fa9f332"
x-amz-request-id: tx000001c6e382b9e9b1f88-006617a3cb-85c81e4-nyc
x-77-nzt: A3l/LVA3NzfvRD8HACUTwjE3Nzf/CewAAJySOhRSJWYA
x-77-nzt-ray: c1fb9819ea6207e918cf1f6658c93014
x-accel-expires: @1713862091
x-accel-date: 1712885716
x-77-cache: HIT
x-77-age: 535373
server: CDN77-Turbo
x-cache: HIT
x-age: 474948
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/background_d.png
200 OK 352 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/background_d.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 1800 x 712, 8-bit/color RGBA, non-interlaced
Size 352 kB (352423 bytes)
Hash 273e5a1e1aa0bb181dc0242bcddfaaf0
27ef7263b0e0a6c55b6c8eef5c06efd0bd0bc955
e4e32252e9859e6c3b3dfe078e49f648a6c782d68e19705aaf99558745aa6cb1
GET /lander/bbw_ppt/images/background_d.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/assets/css/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:04 GMT
content-type: image/png
content-length: 352423
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "273e5a1e1aa0bb181dc0242bcddfaaf0"
x-amz-request-id: tx000002a05b3819081d655-006617a3da-85c8189-nyc
x-77-nzt: A3l/LVA3NzehJRPCLjc3N/8+KwgAnJI6F/bdtAA
x-77-nzt-ray: c1fb9819ea6207e918cf1f661bb91214
x-accel-expires: @1713862106
x-accel-date: 1712825306
x-77-cache: HIT
x-77-age: 535358
server: CDN77-Turbo
x-cache: MISS
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
luvwhisper.com/tds/ae?tdsId=s5428sto_r&tds_campaign=s5428sto&s1=ps&utm_source=int&utm_sub=opnfnl&affid=e1f18e7f&subid=dit1016&subid2=NDcxODhfZGl0MTAxNg==&clickid=a0bffda4-ede9-4595-906a-df32c38b09c8
302 Found 1.2 kB URL User Request GET HTTP/2 luvwhisper.com/tds/ae?tdsId=s5428sto_r&tds_campaign=s5428sto&s1=ps&utm_source=int&utm_sub=opnfnl&affid=e1f18e7f&subid=dit1016&subid2=NDcxODhfZGl0MTAxNg==&clickid=a0bffda4-ede9-4595-906a-df32c38b09c8
IP
Certificate IssuerAmazon
Subjectluvwhisper.com
Fingerprint4D:EC:81:10:9E:C3:DA:0D:65:B1:D0:C2:7A:5E:0F:BE:3E:14:88:E3
ValidityTue, 09 Jan 2024 00:00:00 GMT - Thu, 06 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds/ae?tdsId=s5428sto_r&tds_campaign=s5428sto&s1=ps&utm_source=int&utm_sub=opnfnl&affid=e1f18e7f&subid=dit1016&subid2=NDcxODhfZGl0MTAxNg==&clickid=a0bffda4-ede9-4595-906a-df32c38b09c8 HTTP/1.1
Host: luvwhisper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://empirelayer.club/tds/interlayer/eb/s/b33326973db7bc4a2216c1da86efed44?__t=1713360662577&__l=3600&__c=4612a72bee973e552a5d7145531a6b5b5037713e&__u=
date: Wed, 17 Apr 2024 13:31:02 GMT
server: nginx
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform, Sec-CH-UA-Wow64, Sec-CH-UA
set-cookie: dci=053673e719228420990f11220f3c289d298e20f3; Max-Age=31536000; Domain=.luvwhisper.com; Path=/; Expires=Thu, 17 Apr 2025 13:31:02 GMT; Secure; SameSite=None
dm=fe450dd0d1dadc615429144d33241f42; Max-Age=432000; Path=/; Expires=Mon, 22 Apr 2024 13:31:02 GMT
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: q-pgNcLzDW6v9AC-q89KeqRDlmbTHL50YoBDSuqJoV__5GvvhlSDwQ==
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/css/styles.css
200 OK 12 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/css/styles.css
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
Hash 854d8efbc935c6b71ccddc3dd9bef790
5cdaffd928c6a89847df16babf2c37301ddd2425
a7772b58aa6b85b30c72ebfaab42054ee776d5d8b936362eea2ec62b9ca06f65
GET /lander/bbw_ppt/assets/css/styles.css HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"854d8efbc935c6b71ccddc3dd9bef790"
x-amz-request-id: tx00000f9d28a3a739bb6cc-006617a393-85c8182-nyc
x-77-nzt: A3l/LVA3NzfveVwHAIrHJcE3Nzf/C88AAJySOhSxT+kA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66216ece2c
content-encoding: gzip
x-accel-expires: @1713862035
x-accel-date: 1712878238
x-77-cache: HIT
x-77-age: 535428
server: CDN77-Turbo
x-cache: HIT
x-age: 482425
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/free.svg
200 OK 2.1 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/free.svg
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type SVG Scalable Vector Graphics image
Hash 956f8644a93aec061e1628f7c0414bd7
419dce4dcd7d88b27f655fe1c178507a774854a2
376e9373062f25e4f2ba6a1959de21419b4409918ea89d9f56e6386ad231f891
GET /lander/bbw_ppt/images/free.svg HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"c7003d031d71564be848a005a7589a3b"
x-amz-request-id: tx0000002c8d11291092b5a-006617a399-9f26f94-nyc
x-77-nzt: A3l/LVA3NzfvW0gHAJySIR83Nzf/IuMAAJySOhScOUYA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66d32c2c2f
content-encoding: gzip
x-accel-expires: @1713862042
x-accel-date: 1712883388
x-77-cache: HIT
x-77-age: 535421
server: CDN77-Turbo
x-cache: HIT
x-age: 477275
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/assets/js/loginForm.js
200 OK 1.3 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/assets/js/loginForm.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type JavaScript source, ASCII text, with very long lines (1560), with no line terminators
Hash 0b9dc57ab794bd150d97980063d6aadd
ae31186383603e9709d046e112065b2941b75a6b
bf840136c47db68aebb93a05667ccc4608def51564d548869f0222f1c7f01cca
GET /lander/bbw_ppt/assets/js/loginForm.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"f892e39d2c36439a9f9204feb85e6aba"
x-amz-request-id: tx00000567a012eede0c3e2-006617a3c3-85c8182-nyc
x-77-nzt: A3l/LVA3NzfvLWAHACUTwi43Nzf/J8sAAJySOhfZI+UA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66990bd92f
content-encoding: gzip
x-accel-expires: @1713862083
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535380
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/chat.svg
200 OK 1.4 kB URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/chat.svg
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type SVG Scalable Vector Graphics image
Hash 6fab005aa7eb374fe3d5bc1eb9481775
26f979d8e14db37fbc49435c29ce8a90e17f286e
aa3271acb7872aa2da821552cb5a501ed6427c696f8c859a5d9359f65a6dd225
GET /lander/bbw_ppt/images/chat.svg HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: W/"28a5a862e66eabee4f67ea622f14c523"
x-amz-request-id: tx000005088fef462122961-006617a399-85c8189-nyc
x-77-nzt: A3l/LVA3NzfvW0gHANRmOBE3Nzf/IuMAAJySOhQnxSMA
x-77-nzt-ray: c1fb9819ea6207e917cf1f666415f92e
content-encoding: gzip
x-accel-expires: @1713862042
x-accel-date: 1712883388
x-77-cache: HIT
x-77-age: 535421
server: CDN77-Turbo
x-cache: HIT
x-age: 477275
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
hello.bbwsexdates.club/lander/bbw_ppt/images/select_arrow.png
200 OK 333 B URL GET HTTP/2 hello.bbwsexdates.club/lander/bbw_ppt/images/select_arrow.png
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type PNG image data, 20 x 25, 8-bit colormap, non-interlaced
Hash 97a24785ade35879118991770a448225
a20b25bc6ae26b197dea05cd4dbde1951c5baaa4
54ac019d976973c998eb1d8a2af8619badc07e2ad8f5ffce668446fa1c49b65a
GET /lander/bbw_ppt/images/select_arrow.png HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/assets/css/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:04 GMT
content-type: image/png
content-length: 333
last-modified: Thu, 11 Apr 2024 08:36:09 GMT
x-rgw-object-type: Normal
etag: "97a24785ade35879118991770a448225"
x-amz-request-id: tx00000233e5ebd9a8302b9-006617a39b-85c8189-nyc
x-77-nzt: A3l/LVA3NzfvRD8HANRmOBE3Nzf/OewAAM/T1GaiFZ0A
x-77-nzt-ray: c1fb9819ea6207e918cf1f66e1382514
x-accel-expires: @1713862043
x-accel-date: 1712885716
x-77-cache: HIT
x-77-age: 535421
server: CDN77-Turbo
x-cache: HIT
x-age: 474948
x-77-pop: copenhagenDK
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.bbwsexdates.club/_vendor/ga4.js
200 OK 144 B URL GET HTTP/2 hello.bbwsexdates.club/_vendor/ga4.js
IP
ASN #60068 Datacamp Limited
Requested by https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Certificate IssuerLet's Encrypt
Subject1624448582.rsc.cdn77.org
FingerprintCF:33:F9:91:D0:3F:3E:E1:1F:A8:58:46:D6:48:03:7A:74:57:00:AE
ValidityWed, 21 Feb 2024 14:36:13 GMT - Tue, 21 May 2024 14:36:12 GMT
File type ASCII text, with no line terminators
Hash 0c07441dc71f1d176a57ae0903c71081
1271227bedf66d51968435d01bf520e19b163c91
bfb2fd877ba9af76d0fcbadf719d23a1a120306a87eb41d2f46ec31d13b348a1
GET /_vendor/ga4.js HTTP/1.1
Host: hello.bbwsexdates.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hello.bbwsexdates.club/lander/bbw_ppt/?af=2378&af_source=offerit&oid=0661fcf17664e22.15137558&utm_source=2378&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&tds_cid=4612a72bee973e552a5d7145531a6b5b5037713e&subaff=sml_e1f18e7f&_ocid=4612a72bee973e552a5d7145531a6b5b5037713e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 13:31:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 11 Apr 2024 08:36:03 GMT
x-rgw-object-type: Normal
etag: W/"7b6383d75bac1dd5daa766c750e5ed02"
x-amz-request-id: tx00000f1d7d2cbd9451d2c-006617a394-9f26f94-nyc
x-77-nzt: A3l/LVA3NzfvLWAHAJySISc3Nzf/VssAAJySOhQe8iAA
x-77-nzt-ray: c1fb9819ea6207e917cf1f66b329dc2d
content-encoding: gzip
x-accel-expires: @1713862036
x-accel-date: 1712877290
x-77-cache: HIT
x-77-age: 535427
server: CDN77-Turbo
x-cache: HIT
x-age: 483373
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
172.255.248.119
54.230.111.47
104.21.79.101
188.114.96.1
121.127.45.81