www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
142.250.74.147200 OK 38 kB URL User Request GET HTTP/2 www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
IP 142.250.74.147:443
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6817)
Hash b4eddc2253209baf509643ab160819e3
e1c10e69253ff3a9115a291ef80e6d23bd19c0bc
35bdce6d3a7565e2c75e051281d0d862dcaccdbf4bd0bac6423529424fe9c189
GET /2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1 HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Thu, 30 Nov 2023 15:27:58 GMT
date: Thu, 30 Nov 2023 15:27:58 GMT
cache-control: private, max-age=0
last-modified: Thu, 30 Nov 2023 15:07:58 GMT
etag: W/"39a042640e577477d2d3293bba9f95db0d57a99def0a1c7752de81ab88e08546"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 38466
server: GSE
X-Firefox-Spdy: h2
www.beruang.club/js/cookienotice.js
142.250.74.147200 OK 2.0 kB URL GET HTTP/2 www.beruang.club/js/cookienotice.js
IP 142.250.74.147:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Thu, 30 Nov 2023 15:27:59 GMT
expires: Thu, 07 Dec 2023 15:27:59 GMT
cache-control: public, max-age=604800
last-modified: Thu, 30 Nov 2023 12:55:18 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
216.58.207.233200 OK 6.6 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP 216.58.207.233:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:35:32 GMT
expires: Fri, 29 Nov 2024 11:35:32 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 17:00:16 GMT
content-type: text/css
vary: Accept-Encoding
age: 13947
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-170186304-2
142.250.74.168200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-170186304-2
IP 142.250.74.168:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash dbab060ec6273bb6f9514a2b3ab3591b
cf525c6b6cf8b935209f833305fc2920a59c9c63
d30873c96a27fb4696f0b7068ff1f3f4ea52c77dde2c5a4f3d67862aeaf5c0be
GET /gtag/js?id=UA-170186304-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 30 Nov 2023 15:27:59 GMT
expires: Thu, 30 Nov 2023 15:27:59 GMT
cache-control: private, max-age=900
last-modified: Thu, 30 Nov 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68571
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.beruang.club/2023/04/path/to/font-awesome/css/font-awesome.min.css
142.250.74.147404 Not Found 27 kB URL GET HTTP/2 www.beruang.club/2023/04/path/to/font-awesome/css/font-awesome.min.css
IP 142.250.74.147:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6817)
Hash 0d9555455b74c4adf7f56dbbc13ddf4f
f049980648b10bb93ba904b2e3acc077659b5605
71bc64aed2a63bd3b572b7b8565f2beaf56f61ffa4e17abb32bc0a83853939a6
GET /2023/04/path/to/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 15:27:59 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 27105
server: GSE
X-Firefox-Spdy: h2
cdn.jwplayer.com/libraries/Wg1rABIO.js
54.230.111.23200 OK 45 kB URL GET HTTP/2 cdn.jwplayer.com/libraries/Wg1rABIO.js
IP 54.230.111.23:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerAmazon
Subjectjwplayer.com
Fingerprint1E:36:B3:05:8C:13:3B:38:7D:97:0E:97:1E:60:3F:62:06:F3:A6:33
ValidityFri, 27 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65143)
Hash b93451d23959403b449353202487d3b1
cd80e0ea4c6a46467d90f4469db76cbc29ff5238
91ebd99ae7cabe3d7036975e2a50228594d16cf775eb8f089bef7437d6f3d26f
GET /libraries/Wg1rABIO.js HTTP/1.1
Host: cdn.jwplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 44853
access-control-allow-origin: *
cache-control: max-age=180
content-encoding: gzip
date: Thu, 30 Nov 2023 15:27:59 GMT
server: openresty
x-robots-tag: noindex, indexifembedded
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0CbrND8z-xF6cFKL4PkFGvYvy6s3PPMZYpwYt-zFisoIVKZ7rZ0QOQ==
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
142.250.74.106200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP 142.250.74.106:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32180)
Hash 32015dd42e9582a80a84736f5d9a44d7
41b4bfbaa96be6d1440db6e78004ade1c134e276
8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29707
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 09:35:05 GMT
expires: Fri, 29 Nov 2024 09:35:05 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 21174
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-XM2YCT0PTM
142.250.74.168200 OK 90 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-XM2YCT0PTM
IP 142.250.74.168:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3651)
Hash ddefabcf931ec126ff115f7541f9b3e2
01832601d6e5f60384e8cc831db6a6b60af7c565
ee18920eebcf5b739e17e579773a8d7d16b4b8588abd08ede74193738c46d993
GET /gtag/js?id=G-XM2YCT0PTM HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 30 Nov 2023 15:27:59 GMT
expires: Thu, 30 Nov 2023 15:27:59 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89499
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.beruang.club/feeds/posts/default/-/FMN?alt=json-in-script&callback=relpostimgcuplik&max-results=50
142.250.74.147200 OK 34 kB URL GET HTTP/2 www.beruang.club/feeds/posts/default/-/FMN?alt=json-in-script&callback=relpostimgcuplik&max-results=50
IP 142.250.74.147:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type Unicode text, UTF-8 text, with very long lines (65506)
Hash 1226b10565d7d6ad4084724716c0f8ef
c87b592c55c206a8a4a25c5c9a6b672b8504ae93
7ae743b7074b043f5addda469b20aa09b2c5888b8c97297fad503516f06da815
GET /feeds/posts/default/-/FMN?alt=json-in-script&callback=relpostimgcuplik&max-results=50 HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"226426a0313fde02592d1f4d2d83e8163c274f6f5c53c183c01700e90060d4fd"
date: Thu, 30 Nov 2023 15:27:59 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Thu, 30 Nov 2023 15:28:00 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Thu, 30 Nov 2023 15:07:58 GMT
content-encoding: gzip
content-length: 33923
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.beruang.club/2023/04/xxxxx
142.250.74.147404 Not Found 27 kB URL GET HTTP/2 www.beruang.club/2023/04/xxxxx
IP 142.250.74.147:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6817)
Hash 1d0befd1282cd103c9a49ea5ba40521f
d938b84b9be755aa6231f248099c2c7dd5f61688
1538d558aa48d30fa01d0e41ab0d381a36f92d1b764de3a37be2093f0120409f
GET /2023/04/xxxxx HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 15:27:59 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 27092
server: GSE
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/325989852-widgets.js
216.58.207.233200 OK 59 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/325989852-widgets.js
IP 216.58.207.233:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (2258)
Hash 2aaaea7286ee481cbc12cfd76e10c0cf
6e8576cb84ac125faa0bc0a5fe5508166cc4eed8
4bfa00cdbc7a40f5dad3dfc3a21dada224e61e358e78d7b262bab098bccbc580
GET /static/v1/widgets/325989852-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 59316
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 14:08:07 GMT
expires: Fri, 29 Nov 2024 14:08:07 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 05:57:17 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 4792
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bit.ly/3cevhw2
67.199.248.10301 Moved Permanently 207 B IP 67.199.248.10:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerDigiCert Inc
Subjectbit.ly
FingerprintA2:9E:97:EA:E4:51:06:C6:7B:BF:11:55:77:67:F5:8F:E5:7A:F7:0A
ValidityFri, 12 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash d5d7885eee16c2df3538aa928f9c7b0c
3f94fa061ea8dfa96bf34815480ff34316ddb610
5e84a4cba32818f5a7173fdbc7042e068109a235abd1cb1fe152e8d3dbb76e65
GET /3cevhw2 HTTP/1.1
Host: bit.ly
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 30 Nov 2023 15:27:59 GMT
content-type: text/html; charset=utf-8
content-length: 207
cache-control: private, max-age=90
content-security-policy: referrer always;
location: https://1.bp.blogspot.com/-aeYDsOBJLdA/YBAmqSeCOwI/AAAAAAAA1Wo/3wi7RPc8qwUfaD1LwU7QIrCjesx4EGJTwCNcBGAsYHQ/s0/PASANG.gif
referrer-policy: unsafe-url
set-cookie: _bit=naufrX-158aad9c53ed7afa7f-00D; Domain=bit.ly; Expires=Tue, 28 May 2024 15:27:59 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
poweredby.jads.co/js/jads.js
185.94.237.73301 Moved Permanently 178 B URL GET HTTP/1.1 poweredby.jads.co/js/jads.js
IP 185.94.237.73:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 30 Nov 2023 15:27:59 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
pl20230850.toprevenuegate.com/0c/ba/6f/0cba6f1e0cf973621a3090eac4e61908.js
192.243.61.227200 OK 15 kB URL GET HTTP/1.1 pl20230850.toprevenuegate.com/0c/ba/6f/0cba6f1e0cf973621a3090eac4e61908.js
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjecttoprevenuegate.com
Fingerprint7D:44:5C:97:A8:B4:D2:87:5C:7C:4E:B7:DA:3A:38:99:85:00:67:40
ValidityFri, 20 Oct 2023 09:02:00 GMT - Thu, 18 Jan 2024 09:01:59 GMT
File type ASCII text, with very long lines (42799), with no line terminators
Hash ee40eab226cdea228033d993da386a93
ee5413a9d735debc728fa7a6e3975f35fba86b2a
381db70635e31b0f7b20946c43ef9336d9705aae6830adf2fdad7d19a8ca9ed1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0c/ba/6f/0cba6f1e0cf973621a3090eac4e61908.js HTTP/1.1
Host: pl20230850.toprevenuegate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 15:27:59 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ffd08a8bc7b7091fce455a7ca1ab39d6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
104.18.10.207200 OK 67 kB URL GET HTTP/3 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
IP 104.18.10.207:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Hash db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: font/woff2
content-length: 66624
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "db812d8a70a4e88e888744c1c9a27e89"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:48:08
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 1b7f7d322c2c445bafdb11301ee3872f
cdn-cache: HIT
cf-cache-status: HIT
age: 172825
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82e41e217c3db511-OSL
alt-svc: h3=":443"; ma=86400
www.beruang.club/feeds/posts/default/-/J-SUB%20INDO?alt=json-in-script&callback=relpostimgcuplik&max-results=50
142.250.74.147200 OK 34 kB URL GET HTTP/2 www.beruang.club/feeds/posts/default/-/J-SUB%20INDO?alt=json-in-script&callback=relpostimgcuplik&max-results=50
IP 142.250.74.147:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type Unicode text, UTF-8 text, with very long lines (65506)
Hash 1afdae7070fb014cc088984b445054c7
05fd99318b14a62bf86e878888351626f2a313ed
610303701eab9d149d3d604920d3c4eea78afc6637935cdd56aada827b47667c
GET /feeds/posts/default/-/J-SUB%20INDO?alt=json-in-script&callback=relpostimgcuplik&max-results=50 HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"e4a4a2b7a943b8283c76b8f7bd14ad34dcbee6ee95b1ea1046acfb15d5af1ebd"
date: Thu, 30 Nov 2023 15:27:59 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Thu, 30 Nov 2023 15:28:00 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Thu, 30 Nov 2023 15:07:58 GMT
content-encoding: gzip
content-length: 33930
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
unpkg.com/video.js@8.6.1/dist/video.js
104.16.123.175200 OK 600 kB URL GET HTTP/2 unpkg.com/video.js@8.6.1/dist/video.js
IP 104.16.123.175:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (320)
Size 600 kB (600257 bytes)
Hash 37f182b5c434c1abc67570d79ddcf493
a7d30540b475f1ae6e88394d89138f7a20195c3c
25eef97347848412ba1b2be08f087fc27b2e48da8479b64564d1116400953c38
GET /video.js@8.6.1/dist/video.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.beruang.club/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:27:59 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"21f96f-p9MFQLR18a5uiDlNiROPeiAZXDw"
via: 1.1 fly.io
fly-request-id: 01HFTK251R2D40PK0BT94XDTS8-arn
cf-cache-status: HIT
age: 732363
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e41e1b283c56c6-OSL
content-encoding: br
X-Firefox-Spdy: h2
poweredby.jads.co/js/jads2.js
185.94.237.73200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP 185.94.237.73:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.beruang.club/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 15:28:00 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip
unpkg.com/videojs-contrib-hls/dist/videojs-contrib-hls.js
104.16.123.175302 Found 567 kB URL GET HTTP/2 unpkg.com/videojs-contrib-hls/dist/videojs-contrib-hls.js
IP 104.16.123.175:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Size 567 kB (567196 bytes)
Hash d1aa332a660cf87fb46c9b29a25ad630
8a180f81719f2a7879347cbd093c1986484cc46b
a6cdba561d331920396d7333513326b2631013bf878f1b616245e78fc1b5d297
GET /videojs-contrib-hls/dist/videojs-contrib-hls.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 30 Nov 2023 15:27:59 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HGGDDBVX4X3774YYMKCV4AVZ-arn
cf-cache-status: HIT
age: 89
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e41e1adff256c6-OSL
X-Firefox-Spdy: h2
www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog
216.58.207.233302 Found 314 B URL GET HTTP/3 www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog
IP 216.58.207.233:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (426)
Hash be17bbfb84863215f37393cb581493ed
3518fe5a5d65173d34edd21e0ce2dca0075bba69
2cfe8c8dca6d05017d81aff95d791f999285662c1f316563f2e289980aa31dff
GET /blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html%26type%3Dblog%26bpli%3D1&go=true
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Thu, 30 Nov 2023 15:28:00 GMT
expires: Thu, 30 Nov 2023 15:28:00 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 314
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.beruang.club/2023/04/xxxxx
142.250.74.147404 Not Found 27 kB URL GET HTTP/2 www.beruang.club/2023/04/xxxxx
IP 142.250.74.147:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6817)
Hash 1d0befd1282cd103c9a49ea5ba40521f
d938b84b9be755aa6231f248099c2c7dd5f61688
1538d558aa48d30fa01d0e41ab0d381a36f92d1b764de3a37be2093f0120409f
GET /2023/04/xxxxx HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Cookie: faceLike=liked; _ga_XM2YCT0PTM=GS1.1.1701358084.1.0.1701358084.0.0.0; _ga=GA1.1.1442779178.1701358085
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 15:28:00 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 27092
server: GSE
X-Firefox-Spdy: h2
filemoon.sx/css/main.css?v=2
188.114.97.1200 OK 8.9 kB URL GET HTTP/3 filemoon.sx/css/main.css?v=2
IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerLet's Encrypt
Subjectfilemoon.sx
Fingerprint91:D1:3C:E6:F3:0F:0F:C3:1B:E0:13:C4:9D:12:1E:79:0D:85:C2:E0
ValiditySat, 07 Oct 2023 16:00:09 GMT - Fri, 05 Jan 2024 16:00:08 GMT
File type ASCII text, with very long lines (39049), with no line terminators
Hash 3ff1cee031b61154bd628b108495b1ba
921896975849511fbfd83cfddd4cf2ed7c65e293
d54bf20830cbc6afbd1a739156777c40abc1da92eec8a8a43d90405857472197
GET /css/main.css?v=2 HTTP/1.1
Host: filemoon.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/e/kvg5bk6rp5yq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: text/css
cache-control: max-age=2678400
cf-bgj: minify
cf-polished: origSize=49231
etag: W/"6522de18-c04f"
expires: Sat, 02 Dec 2023 06:05:22 GMT
last-modified: Sun, 08 Oct 2023 16:51:36 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 465758
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cvywee%2F8dfvndH%2BOI5zRrtlMzQKvoasg93Sz2SR6a4vdCv5UisjCIpnAO8dCUyREjK4Ci4CyVU3sparUwr6zcLmRs%2FQL3gSz7jbV8%2BbXKQ68YQfN5BQSeqv2zwqq1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e257d09b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
unpkg.com/video.js@8.6.1/dist/video-js.css
104.16.123.175200 OK 13 kB URL GET HTTP/2 unpkg.com/video.js@8.6.1/dist/video-js.css
IP 104.16.123.175:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (7288)
Hash 44e9d576b868846f76a7fe15713d455e
e6deef9c1cbc85dbb1d8c90a3fdcf5be47623955
4398326f7e2725e7813cb5d11c650a7890fe1605a9d56bce34d7454eeb79dcb1
GET /video.js@8.6.1/dist/video-js.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.beruang.club/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:27:59 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"cb63-5t7vnBy8hdux2MkKP9z1vkdiOVU"
via: 1.1 fly.io
fly-request-id: 01HG7H6TMWWYVRW9M64SGNX765-arn
cf-cache-status: HIT
age: 298099
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e41e1b182656c6-OSL
content-encoding: br
X-Firefox-Spdy: h2
mildlunch.com/Yv2-xxpyZ.Wz5A0_ZCGDFE0FY-TH9IyJcKm_lMkNPOTPQ-wRNSDTRUk_YWzXEY0ZZ-WbIcwdZej_RghhYiTjE-1lMmDnVoh_NqDrEs1tN-zvQw3xMyD_lAjBZCTDU-4F
88.85.94.250200 OK 0 B URL POST HTTP/2 mildlunch.com/Yv2-xxpyZ.Wz5A0_ZCGDFE0FY-TH9IyJcKm_lMkNPOTPQ-wRNSDTRUk_YWzXEY0ZZ-WbIcwdZej_RghhYiTjE-1lMmDnVoh_NqDrEs1tN-zvQw3xMyD_lAjBZCTDU-4F
IP 88.85.94.250:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectmildlunch.com
Fingerprint2C:50:55:2A:07:FA:71:63:92:47:2A:4B:B0:B4:A8:C5:8B:B1:B7:BA
ValiditySun, 08 Oct 2023 02:49:07 GMT - Sat, 06 Jan 2024 02:49:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Yv2-xxpyZ.Wz5A0_ZCGDFE0FY-TH9IyJcKm_lMkNPOTPQ-wRNSDTRUk_YWzXEY0ZZ-WbIcwdZej_RghhYiTjE-1lMmDnVoh_NqDrEs1tN-zvQw3xMyD_lAjBZCTDU-4F HTTP/1.1
Host: mildlunch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 101
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 15:28:00 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn.sslph.com/app.js
194.242.11.186200 OK 39 kB IP 194.242.11.186:443
ASN #34989 ServeTheWorld AS
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectcdn.sslph.com
FingerprintE3:C6:74:72:B1:9A:43:90:0A:45:4A:77:C9:D2:11:0C:76:E4:13:FF
ValiditySat, 28 Oct 2023 11:08:31 GMT - Fri, 26 Jan 2024 11:08:30 GMT
File type ASCII text, with very long lines (65381)
Hash 29a189095e22ff77bc462ede3aad9270
04eac5f0387e9ab6015db9ad6b16da5c05b1a36e
f51575c1095e52ee4600a37e8f632b63c9e621f7b49348e460b4c4befcf1f433
GET /app.js HTTP/1.1
Host: cdn.sslph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 244525
cdn-uid: 81f0ee8a-6b19-463e-a8be-46c199377685
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=2592000
etag: W/"6528086f-1b27b"
expires: Thu, 30 Nov 2023 19:17:17 GMT
last-modified: Thu, 12 Oct 2023 14:53:35 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uY4xOv51cpR1Q%2BMOmWdHPnf%2B3Ux9B%2B86xGnX4%2B4Z4L%2BOoH1yxhgFiSvJfwA6DF6cTRgQiz3zBMKvPv2zYMv7j7n7HrNaQ2PKRqwf4dsT%2FteZnfHSg6vDdiABLv8q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 81ee3cbe1a3fb4ed-OSL
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 10/31/2023 19:17:17
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: e623b70c197426584c4ef8f82c325e6f
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
filemoon.sx/js/jquery.cookie.js
188.114.97.1200 OK 1.5 kB URL GET HTTP/3 filemoon.sx/js/jquery.cookie.js
IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerLet's Encrypt
Subjectfilemoon.sx
Fingerprint91:D1:3C:E6:F3:0F:0F:C3:1B:E0:13:C4:9D:12:1E:79:0D:85:C2:E0
ValiditySat, 07 Oct 2023 16:00:09 GMT - Fri, 05 Jan 2024 16:00:08 GMT
Hash ae0c2c5d8f01f7d35bb698bb618a62f7
63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20
75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc
GET /js/jquery.cookie.js HTTP/1.1
Host: filemoon.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/e/kvg5bk6rp5yq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 31 May 2011 12:53:56 GMT
etag: W/"4de4e4e4-10eb"
expires: Mon, 04 Dec 2023 07:46:34 GMT
cache-control: max-age=2678400
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 286886
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fMZA9rigG2cacg7VDNTumWRsaANy1JQBFjlVcu6EwGiEaLe%2FoxgzWk34oAlGseiRWRrmdWYcrwWwYXJ2V1ZhpWxHy%2FziRpOnBpYGmHl8ugJGSVaZoMZo0bFa6tQYUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e257d19b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.r2m03.amazontrust.com/
54.230.218.11 471 B URL ocsp.r2m03.amazontrust.com/
IP 54.230.218.11:0
Hash 5f98417c5efbc404cdc6e1eddca05845
123fef79582954e02a5acbd4b65e5c8c5ba14397
7e4f8947cb87eff6976f88fd49a323f00ec79211df4f468d9c622c91c42de0d1
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Thu, 30 Nov 2023 15:28:01 GMT
Last-Modified: Thu, 30 Nov 2023 15:11:24 GMT
Server: ECAcc (ska/F749)
X-Cache: Miss from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: k7gk26DR7jaJGqwG-h_JBJM8rjQrDn0zUmihfAYiHkzskE9LMETl6g==
Age: 997
mildlunch.com/Yb2-xdpeZ.Wf5g0_ZiGjFk0lY-Tn9oypcqm_lsktPuWvR-hxZyTzNAh_MCjDEE4FO-DHcIwJOKW_ZMmNMO2PI-5ROSTTkU5_NWDXUYzZM-zbZcldZeG_Ug5hMiTjM-2l
88.85.94.250200 OK 0 B URL POST HTTP/2 mildlunch.com/Yb2-xdpeZ.Wf5g0_ZiGjFk0lY-Tn9oypcqm_lsktPuWvR-hxZyTzNAh_MCjDEE4FO-DHcIwJOKW_ZMmNMO2PI-5ROSTTkU5_NWDXUYzZM-zbZcldZeG_Ug5hMiTjM-2l
IP 88.85.94.250:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectmildlunch.com
Fingerprint2C:50:55:2A:07:FA:71:63:92:47:2A:4B:B0:B4:A8:C5:8B:B1:B7:BA
ValiditySun, 08 Oct 2023 02:49:07 GMT - Sat, 06 Jan 2024 02:49:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Yb2-xdpeZ.Wf5g0_ZiGjFk0lY-Tn9oypcqm_lsktPuWvR-hxZyTzNAh_MCjDEE4FO-DHcIwJOKW_ZMmNMO2PI-5ROSTTkU5_NWDXUYzZM-zbZcldZeG_Ug5hMiTjM-2l HTTP/1.1
Host: mildlunch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 101
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 15:28:01 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
18.184.210.76200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP 18.184.210.76:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5377f83873b72159b6d6986efe1af622
fb833eedc721d0e4d0bbebe84db8e37f752dea9d
5aa2696463114aafccba8647f3cd78bc61ce318a3f58b0283e60d3e40d7e53c9
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:28:01 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.beruang.club
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=de045af8-8538-43c5-b85a-6df4042065be:1:1; expires=Sun, 27 Nov 2033 15:28:01 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
mildlunch.com/bCXpVFs.diGwlf0EY/Wyck/jeumL9RuvZsU/lnkbPJTfQh3KO/T_QpzTNtDZERtpNgDEcC5/NvDIM/0mMYgj
88.85.94.250200 OK 14 kB URL GET HTTP/2 mildlunch.com/bCXpVFs.diGwlf0EY/Wyck/jeumL9RuvZsU/lnkbPJTfQh3KO/T_QpzTNtDZERtpNgDEcC5/NvDIM/0mMYgj
IP 88.85.94.250:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectmildlunch.com
Fingerprint2C:50:55:2A:07:FA:71:63:92:47:2A:4B:B0:B4:A8:C5:8B:B1:B7:BA
ValiditySun, 08 Oct 2023 02:49:07 GMT - Sat, 06 Jan 2024 02:49:06 GMT
File type Unicode text, UTF-8 text, with very long lines (21403)
Hash 3098100b4deeaec0a73f95673ab7c1ed
379d44a06a3c1f611c45fb80cf32713b0ceb1f55
9a58cfe962dadfdcfbee49583cb8d7d42a1aac5592de63465fd8ae31e2e2d3b3
GET /bCXpVFs.diGwlf0EY/Wyck/jeumL9RuvZsU/lnkbPJTfQh3KO/T_QpzTNtDZERtpNgDEcC5/NvDIM/0mMYgj HTTP/1.1
Host: mildlunch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: application/javascript
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
access-control-allow-headers: Content-Type
access-control-allow-origin: https://www.beruang.club
access-control-allow-methods: GET
last-modified: Thu, 30 Nov 2023 15:28:00 GMT
access-control-allow-credentials: true
vary: Accept-Encoding, Origin
set-cookie: kadSlcJ=eyJ0aW1lU3RhbXAiOjE3MDEzMTI5NzgsInpvbmVzIjp7IjQ0MTg1MjIiOls0NDE4NTIyLDEsMTcwMTMxMjk3OF0sIjQ1MTMwMzgiOls0NTEzMDM4LDEsMTcwMTMxNjQwOV0sIjQ1OTQ3NjQiOls0NTk0NzY0LDEsMTcwMTMzNjQ4NV0sIjQ2MDk1MzEiOls0NjA5NTMxLDEsMTcwMTM0Njc4MF0sIjQ3OTQzNDEiOls0Nzk0MzQxLDEsMTcwMTM1ODA4MF0sIjQ4MzA1NzciOls0ODMwNTc3LDEsMTcwMTM0NTY3MF0sIjQ4MzU1NDEiOls0ODM1NTQxLDEsMTcwMTM0NTY3MF0sIjQ5NTIwOTIiOls0OTUyMDkyLDUsMTcwMTMzNjQ4NV0sIjc0NzQ4OSI6Wzc0NzQ4OSwxLDE3MDEzMjYzNDBdfX0=; max-age=1732894080; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
www.brief-tank.pro/dea777/088ac63535b7.js
67.216.91.5200 OK 27 kB URL GET HTTP/2 www.brief-tank.pro/dea777/088ac63535b7.js
IP 67.216.91.5:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectwww.brief-tank.pro
FingerprintEC:D0:42:A1:BE:3C:40:4A:C1:60:47:35:8A:63:F4:8E:5C:DD:F6:16
ValidityTue, 28 Nov 2023 07:07:28 GMT - Mon, 26 Feb 2024 07:07:27 GMT
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash a37ec4eb7579c96bfec19c479455a6bf
95e65d1347943fa591ea827b84c3e458d8e4f0d5
a2bde8ab819b719b6da6e46a711c78e0e3b0749d9c416b3e2043ca69215850d8
GET /dea777/088ac63535b7.js HTTP/1.1
Host: www.brief-tank.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ucdn/1.24.0
date: Thu, 30 Nov 2023 15:28:01 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315160791, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsqzmAdmqk/B6ooG0EIWoxnf5jngzO4v15H/4XOXMHf5kBdesHq2ojvvXowTQOwGQ5U=
x-served-from: l1
x-vhostid: 169, 21575
content-encoding: br
X-Firefox-Spdy: h2
apis.google.com/js/plusone.js
142.250.74.78200 OK 22 kB URL GET HTTP/2 apis.google.com/js/plusone.js
IP 142.250.74.78:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
Fingerprint06:87:C0:63:02:21:98:02:BD:FC:A0:11:93:E9:3A:9F:51:21:06:D8
ValidityMon, 23 Oct 2023 11:25:10 GMT - Mon, 15 Jan 2024 11:25:09 GMT
File type ASCII text, with very long lines (2664)
Hash 12476fdc6b8599d03eac729748337611
7a15dc04ad6e77026bf45927b78247411e3e0466
c5be6532f19ca90fb5966ed89be694f2bc2cded1e443d3489467cb28cd69af43
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 21930
date: Thu, 30 Nov 2023 15:28:01 GMT
expires: Thu, 30 Nov 2023 15:28:01 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "b82ec1e6cb6f99ed"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=hTNBH9AIddUkZtDPtRXAUKElSoNM2JS3eVkwad3mflO9Qslrbq_UITbVNKkLzJIHGv9IUrFL6vez0JsbpDSlMv2WzDOLOPJpXuWzWHEYPawbD-DCcQA-5Zl9EIhXkWKWlC7FPq1HKrk5tDFnq42V8JATpxyyY-avMvV9R-6pHb8; expires=Fri, 31-May-2024 15:28:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
216.58.207.233200 OK 40 kB URL GET HTTP/3 www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
IP 216.58.207.233:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32573)
Hash ddcd7bad2aeb4df88cc2394e3e3bd031
222d9d0ab92f48fdc93ddfbd8af647f0cc95c0fb
308a304199140cb4f0195c9351630bf133962515b31813d15a604710d4e2d073
GET /blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.beruang.club/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 15:28:01 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 39624
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/static/v1/v-css/2223071481-static_pages.css
216.58.207.233200 OK 1.4 kB URL GET HTTP/3 www.blogger.com/static/v1/v-css/2223071481-static_pages.css
IP 216.58.207.233:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (3841)
Hash abd7446453ccdc733ba0a08169aff6c9
5c6954a63f01d55721edaa6236c5815087635333
bc75b808f349e4fcec454de341b7f80ff44fccd902b0e1109e18d5b3a35b7de3
GET /static/v1/v-css/2223071481-static_pages.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1393
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 22:35:06 GMT
expires: Thu, 28 Nov 2024 22:35:06 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 05:57:17 GMT
content-type: text/css
vary: Accept-Encoding
age: 60775
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/static/v1/jsbin/671481879-analytics_autotrack.js
216.58.207.233200 OK 8.1 kB URL GET HTTP/3 www.blogger.com/static/v1/jsbin/671481879-analytics_autotrack.js
IP 216.58.207.233:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (524)
Hash 1c4256076fac77893331db4f22a9a41a
eb8a7de989615278406bee51533b6f4f6a71c841
57f24a99b10ad3f6431e857b33b26015c29c4cccced30375d222a35f0c4f9bb1
GET /static/v1/jsbin/671481879-analytics_autotrack.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 8121
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 12:58:12 GMT
expires: Thu, 28 Nov 2024 12:58:12 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 28 Nov 2023 14:56:43 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 95389
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.227200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.227:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 37623
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.227200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.227:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 37623
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
216.58.207.227200 OK 50 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP 216.58.207.227:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 50368, version 1.0\012- data
Hash 4facfd6ff39e147b7e39c4b1abe4117d
0f7c0d978c209d21eb3f55950fc43e77c196ec3b
a246c4de8a0f1f1fdb6ee52565018dc341063aa9efe8481034bc3ef7d697e334
GET /s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 50368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:48:09 GMT
expires: Fri, 29 Nov 2024 04:48:09 GMT
cache-control: public, max-age=31536000
age: 38392
last-modified: Thu, 14 Sep 2023 01:04:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.227200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.227:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 37623
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.beruang.club/favicon.ico
142.250.74.147200 OK 412 B URL GET HTTP/2 www.beruang.club/favicon.ico
IP 142.250.74.147:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
GET /favicon.ico HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Cookie: _ga_XM2YCT0PTM=GS1.1.1701358084.1.0.1701358084.0.0.0; _ga=GA1.1.1442779178.1701358085; _ga_EQ87SLSFFF=GS1.1.1701358085.1.0.1701358085.0.0.0; popup_facebook_box42=yes; popup_facebook_boxa44=no; popup_facebook_box4=no; popup_facebook_box856=no; popup_facebook_box56=no; popup_facebook_box75=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Thu, 30 Nov 2023 15:28:01 GMT
date: Thu, 30 Nov 2023 15:28:01 GMT
cache-control: private, max-age=86400
last-modified: Thu, 30 Nov 2023 15:07:58 GMT
etag: W/"39a042640e577477d2d3293bba9f95db0d57a99def0a1c7752de81ab88e08546"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
X-Firefox-Spdy: h2
www.google.com/css/maia.css
142.250.74.132200 OK 12 kB URL GET HTTP/2 www.google.com/css/maia.css
IP 142.250.74.132:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type Unicode text, UTF-8 text, with very long lines (43499), with no line terminators
Hash 9e914fd11c5238c50eba741a873f0896
950316ffef900ceecca4cf847c9a8c14231271da
8684a32d1a10d050a26fc33192edf427a5f0c6874c590a68d77ae6e0d186bd8a
GET /css/maia.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 12181
date: Thu, 30 Nov 2023 15:28:01 GMT
expires: Thu, 30 Nov 2023 15:28:01 GMT
cache-control: private, max-age=0
last-modified: Mon, 25 May 2020 08:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
142.250.74.78200 OK 56 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP 142.250.74.78:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1505)
Hash 4a256001cbbe7af37c71afbd89ba1656
4760f1dee9f6ff6db6f33eeee3dc7ec76155f7dd
5b683a525a2a814b27fc09152ee8030b6d542cd24a61de371bbe5e8815e9d0b1
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 55751
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:12:01 GMT
expires: Fri, 29 Nov 2024 04:12:01 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 40560
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/dyn-css/authorization.css?targetBlogID=1931155852275062931&zx=0cb4232a-f5ba-474d-8b11-aecf57fe472d
216.58.207.233200 OK 21 B URL GET HTTP/3 www.blogger.com/dyn-css/authorization.css?targetBlogID=1931155852275062931&zx=0cb4232a-f5ba-474d-8b11-aecf57fe472d
IP 216.58.207.233:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=1931155852275062931&zx=0cb4232a-f5ba-474d-8b11-aecf57fe472d HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 15:28:01 GMT
last-modified: Thu, 30 Nov 2023 15:28:01 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.blogger.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 37828
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2
216.58.207.227200 OK 19 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2
IP 216.58.207.227:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 18656, version 1.0\012- data
Hash 2bf19e2e53e85d0308ac3a906565f915
462500c7fcf76cf3dcee0348aa13297bd532ff58
e88f421b2498fd4ff75eeb6df1d0e8b5e1f038007350ad968d4f258cbe50a02c
GET /s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.blogger.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18656
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:21:51 GMT
expires: Fri, 22 Nov 2024 23:21:51 GMT
cache-control: public, max-age=31536000
age: 576371
last-modified: Wed, 13 Sep 2023 23:30:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
curryoxygencheaper.com/sbar.json?key=0cba6f1e0cf973621a3090eac4e61908
173.233.137.36200 OK 3.3 kB URL GET HTTP/1.1 curryoxygencheaper.com/sbar.json?key=0cba6f1e0cf973621a3090eac4e61908
IP 173.233.137.36:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectcurryoxygencheaper.com
FingerprintF2:DD:AF:D4:3D:96:F2:C2:C1:37:D0:07:73:80:BA:7B:02:75:3E:DC
ValidityTue, 28 Nov 2023 08:20:34 GMT - Mon, 26 Feb 2024 08:20:33 GMT
File type JSON data\012- , ASCII text, with very long lines (5827), with no line terminators
Hash 4e53207fa27028cf83724f390e649f14
2f451b4cc8706ce7aca2d55c0be4079a5bedbd59
a8b2438da92176c6cee957a9531f03ab90c743b307e14eecf30fcfbe103e1b4d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=0cba6f1e0cf973621a3090eac4e61908 HTTP/1.1
Host: curryoxygencheaper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 15:28:02 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.beruang.club
Access-Control-Allow-Origin: https://www.beruang.club
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=20130351; expires=Fri, 01 Dec 2023 15:28:01 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 01 Dec 2023 15:28:02 GMT; secure; SameSite=None
uncs=1; expires=Fri, 01 Dec 2023 15:28:02 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 01 Dec 2023 15:28:02 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 01 Dec 2023 15:28:02 GMT; secure; SameSite=None
slec0cba6f1e0cf973621a3090eac4e61908=[4690994]; expires=Thu, 30 Nov 2023 15:28:07 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7508c3f8c966ea0c641b47cbdf8481f7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
104.18.10.207200 OK 53 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP 104.18.10.207:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (27303)
Hash 4fbd15cb6047af93373f4f895639c8bf
12d6861075de8e293265ff6ff03b1f3adcb44c76
ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5
GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:27:59 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4fbd15cb6047af93373f4f895639c8bf"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:58:32
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1047
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 25754c75fb460a03a208e88579fbc0b3
cdn-cache: HIT
cf-cache-status: HIT
age: 461724
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82e41e1fec5b56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.gstatic.com/og/_/ss/k=og.qtm.FKNNYuAlZs4.L.F4.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTvR4-G9PyJJu0m7h64H8oOCLYCsyQ
142.250.74.35200 OK 669 B URL GET HTTP/2 www.gstatic.com/og/_/ss/k=og.qtm.FKNNYuAlZs4.L.F4.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTvR4-G9PyJJu0m7h64H8oOCLYCsyQ
IP 142.250.74.35:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1722), with no line terminators
Hash 3777ec01def0c49334f9e6071faf5e61
f2b21ca2e2de38a966ffd95fa41309f2d0aa2977
baef7154ddbd4c35e989534bfb275e1bbb3e722dc9c3eafb5be315ee6dddd687
GET /og/_/ss/k=og.qtm.FKNNYuAlZs4.L.F4.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTvR4-G9PyJJu0m7h64H8oOCLYCsyQ HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="one-google-eng"
report-to: {"group":"one-google-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/one-google-eng"}]}
content-length: 669
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:12:17 GMT
expires: Fri, 29 Nov 2024 04:12:17 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 23 Nov 2023 02:30:00 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding, Origin
age: 40545
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/img/blogger-logotype-color-black-1x.png
216.58.207.233200 OK 1.2 kB URL GET HTTP/3 www.blogger.com/img/blogger-logotype-color-black-1x.png
IP 216.58.207.233:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type PNG image data, 112 x 27, 8-bit colormap, non-interlaced\012- data
Hash a9d652846aeacdf8da5401f6e4d4a409
6127321cafe0be999bc0c9d952715ede2b9dd83d
cbad27c35fbc84e2da4280476adeb197566db2750b8b4a79eb7e872db8d8acb7
GET /img/blogger-logotype-color-black-1x.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1155
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 13:06:03 GMT
expires: Wed, 06 Dec 2023 13:06:03 GMT
cache-control: public, max-age=604800
last-modified: Tue, 28 Nov 2023 13:55:34 GMT
content-type: image/png
age: 94919
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
142.250.74.35200 OK 663 B URL GET HTTP/2 www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
IP 142.250.74.35:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1660), with no line terminators
Hash 554640f465eb3ed903b543dae0a1bcac
e0e6e2c8939008217eb76a3b3282ca75f3dc401a
99bf4aa403643a6d41c028e5db29c79c17cbc815b3e10cd5c6b8f90567a03e52
GET /images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 663
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 19:54:32 GMT
expires: Thu, 28 Nov 2024 19:54:32 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Dec 2021 12:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin
age: 70410
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/og/_/js/k=og.qtm.en_US.ypE8V67UKTU.2019.O/rt=j/m=q_dnp,q_pc,qmd,qcwid,qapid,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvJokvtG8N6jN8YSW2ganpY-9G4eQ
142.250.74.35200 OK 59 kB URL GET HTTP/2 www.gstatic.com/og/_/js/k=og.qtm.en_US.ypE8V67UKTU.2019.O/rt=j/m=q_dnp,q_pc,qmd,qcwid,qapid,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvJokvtG8N6jN8YSW2ganpY-9G4eQ
IP 142.250.74.35:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1551)
Hash 98746de73f3bdbf728aaca79dcdbc893
2a9ef615c36585c80881c02d4a1bb735e264b957
3ea34857d8a3fe8f82781b1ecc49f032d28a01e5860c17c3ad988fb7a742a3a2
GET /og/_/js/k=og.qtm.en_US.ypE8V67UKTU.2019.O/rt=j/m=q_dnp,q_pc,qmd,qcwid,qapid,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvJokvtG8N6jN8YSW2ganpY-9G4eQ HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="one-google-eng"
report-to: {"group":"one-google-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/one-google-eng"}]}
content-length: 58829
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 01:53:23 GMT
expires: Fri, 29 Nov 2024 01:53:23 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 27 Nov 2023 02:34:55 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding, Origin
age: 48879
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?lang=no&family=Product+Sans|Roboto:400,700
142.250.74.106200 OK 42 kB URL GET HTTP/3 fonts.googleapis.com/css?lang=no&family=Product+Sans|Roboto:400,700
IP 142.250.74.106:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1505)
Hash 41481b44b68eff0102169180cbff443a
a30af72a8d1224ebd76cff3b61e03af2d835d8e1
b617ef103d28c334590958d0a62b21099f76e352f581085d899e66ff49616ab4
GET /css?lang=no&family=Product+Sans|Roboto:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 30 Nov 2023 15:28:01 GMT
date: Thu, 30 Nov 2023 15:28:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
filemoon.sx/player/jw8/provider.hlsjs.js?v=2
188.114.97.1200 OK 129 kB URL GET HTTP/3 filemoon.sx/player/jw8/provider.hlsjs.js?v=2
IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerLet's Encrypt
Subjectfilemoon.sx
Fingerprint91:D1:3C:E6:F3:0F:0F:C3:1B:E0:13:C4:9D:12:1E:79:0D:85:C2:E0
ValiditySat, 07 Oct 2023 16:00:09 GMT - Fri, 05 Jan 2024 16:00:08 GMT
File type ASCII text, with very long lines (65143)
Size 129 kB (128992 bytes)
Hash 8f83ca2c10d261b1a6292f27c0a7f746
0576dc5c064be6b1e2cdad0a1dffc2d75465222a
70244156bb529999851576fbf0431e64aa5045db0943edd3609e1ff0bac6513d
GET /player/jw8/provider.hlsjs.js?v=2 HTTP/1.1
Host: filemoon.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/e/kvg5bk6rp5yq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:01 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 05 Mar 2023 15:25:08 GMT
etag: W/"6404b454-5b576"
expires: Mon, 04 Dec 2023 05:37:10 GMT
cache-control: max-age=2678400
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 294651
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=slBA9Ld7sKg7AwWb%2FDwdbvhy90ddnlbo0GOBecbi8%2FyPOzqF%2FEDsyGeadi2Iw94tteHBO3le78dugYRR3ecgwWPpLRuU79cpRXrtTJJnQmfvXjUTpTZUpl861RrvSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e274f9ab4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
curryoxygencheaper.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitXiMIsqLBgx6EuamrzHTPj0zGPexuXLMGYxJ3V3LwslXV1ZMy1V1NVff0JKdgQNbbBBYUvPS8yQ9dg7h%2FgOwy0YMOCBkPEtDgxYsnQdiTB5nJQNgPur%2Bv6r3De%2B%2BrT7vpKfGQ0pOV9%2FWmVIqWakW38NqqjHyd2cLS7YLnFt3LhVUZzVQvF9qjn2m95bm1ovt64Ybg67pUdj3X9VyvMC%2BNCHS7NEYh48OGV2y4xWq56NWqaJsnzzZ1YKkDv3VKpiH94dNrPz2A5H1E4XfXhV1PdPzmO2GqaKINWv7Bh9F6pLMI4fkYGAdBdDBhQ9shIV9cgI4OJg6gW7sjB2BySJzfPLDoYCITrLV3ppQpiAjMfxZZqw%2Bh%2BpC0D663If1jAnAfS8uIwv0lbTK6cYbSETokU4%2F%2FhcyGZOqPFxGF384p2S7c0ipNpI4s2kEO2e5DNvuI0yMkmw5kdgSefALp%2F0JKjxcRhbvLVmlIPx%2B7l7IPGfShRAfUOkhHn3SQBg7S2EHonxRorRG4bj1gQaUyW%2BWcVyqc12Zn%2FJpfqc4GLlI%2BktdBEnfAVQfcbCE2W1iXO8e1aZj0EexaDus7sMmQOB9soeXnyARBZgkySpBJgiwhyFr5nq9s2eb7vrIp8ya9POmVvKeTZpfu6aQpIgJqOt34lLwwisepXCphXZwUXM7oTOAJlweNemWm7NGK23AF5VUx4zXcWViZQ9oLY8ebckjeuPgcYjkkU5f%2BA6NHsOoIXD4Pmr4CmvXqZRd0rVeddbEZHTJhUho1i1ylDL7OESdTSDacrjolL4%2FXdONeGYIPrr70Y%2FfnR9vT4CZHbHJ8LH8gaKq7vZs6I7s3dWbJg%2BU4kaHcpKMV3kpoIqbuvyc2Mm38heu28%2FU1PgJG4%2BFtYZNFGvkyalryzZz0fWHmteGCfL9gVwVbSe3aXGqiNF5ceXt%2BIYyNsFbqqA8qj%2B88BJdDcnG%2FNH6cr34VQpo%2BTJojTAdkUpD6CDzego0HV5%2F56861z%2BqLsJrAqHMOix1kad4zZXZ%2BqeSQvPvRn1BicGXn83u%2Ff9n6G5TlsOI8BiYGD%2F8543ftXTSNA5psIwpztEyOlspBVQc2faqXxGZw5dfKuMCU02PKOLtMGbVzFq%2BVJwVRC9xAuGXBggYL6tT1G0G1wWjDE3VWox4SOxRr953%2FAQAA%2F%2F8BAAD%2F%2F2exZ6F4BAAA
173.233.137.36200 OK 7 B URL GET HTTP/1.1 curryoxygencheaper.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitXiMIsqLBgx6EuamrzHTPj0zGPexuXLMGYxJ3V3LwslXV1ZMy1V1NVff0JKdgQNbbBBYUvPS8yQ9dg7h%2FgOwy0YMOCBkPEtDgxYsnQdiTB5nJQNgPur%2Bv6r3De%2B%2BrT7vpKfGQ0pOV9%2FWmVIqWakW38NqqjHyd2cLS7YLnFt3LhVUZzVQvF9qjn2m95bm1ovt64Ybg67pUdj3X9VyvMC%2BNCHS7NEYh48OGV2y4xWq56NWqaJsnzzZ1YKkDv3VKpiH94dNrPz2A5H1E4XfXhV1PdPzmO2GqaKINWv7Bh9F6pLMI4fkYGAdBdDBhQ9shIV9cgI4OJg6gW7sjB2BySJzfPLDoYCITrLV3ppQpiAjMfxZZqw%2Bh%2BpC0D663If1jAnAfS8uIwv0lbTK6cYbSETokU4%2F%2FhcyGZOqPFxGF384p2S7c0ipNpI4s2kEO2e5DNvuI0yMkmw5kdgSefALp%2F0JKjxcRhbvLVmlIPx%2B7l7IPGfShRAfUOkhHn3SQBg7S2EHonxRorRG4bj1gQaUyW%2BWcVyqc12Zn%2FJpfqc4GLlI%2BktdBEnfAVQfcbCE2W1iXO8e1aZj0EexaDus7sMmQOB9soeXnyARBZgkySpBJgiwhyFr5nq9s2eb7vrIp8ya9POmVvKeTZpfu6aQpIgJqOt34lLwwisepXCphXZwUXM7oTOAJlweNemWm7NGK23AF5VUx4zXcWViZQ9oLY8ebckjeuPgcYjkkU5f%2BA6NHsOoIXD4Pmr4CmvXqZRd0rVeddbEZHTJhUho1i1ylDL7OESdTSDacrjolL4%2FXdONeGYIPrr70Y%2FfnR9vT4CZHbHJ8LH8gaKq7vZs6I7s3dWbJg%2BU4kaHcpKMV3kpoIqbuvyc2Mm38heu28%2FU1PgJG4%2BFtYZNFGvkyalryzZz0fWHmteGCfL9gVwVbSe3aXGqiNF5ceXt%2BIYyNsFbqqA8qj%2B88BJdDcnG%2FNH6cr34VQpo%2BTJojTAdkUpD6CDzego0HV5%2F56861z%2BqLsJrAqHMOix1kad4zZXZ%2BqeSQvPvRn1BicGXn83u%2Ff9n6G5TlsOI8BiYGD%2F8543ftXTSNA5psIwpztEyOlspBVQc2faqXxGZw5dfKuMCU02PKOLtMGbVzFq%2BVJwVRC9xAuGXBggYL6tT1G0G1wWjDE3VWox4SOxRr953%2FAQAA%2F%2F8BAAD%2F%2F2exZ6F4BAAA
IP 173.233.137.36:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectcurryoxygencheaper.com
FingerprintF2:DD:AF:D4:3D:96:F2:C2:C1:37:D0:07:73:80:BA:7B:02:75:3E:DC
ValidityTue, 28 Nov 2023 08:20:34 GMT - Mon, 26 Feb 2024 08:20:33 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitXiMIsqLBgx6EuamrzHTPj0zGPexuXLMGYxJ3V3LwslXV1ZMy1V1NVff0JKdgQNbbBBYUvPS8yQ9dg7h%2FgOwy0YMOCBkPEtDgxYsnQdiTB5nJQNgPur%2Bv6r3De%2B%2BrT7vpKfGQ0pOV9%2FWmVIqWakW38NqqjHyd2cLS7YLnFt3LhVUZzVQvF9qjn2m95bm1ovt64Ybg67pUdj3X9VyvMC%2BNCHS7NEYh48OGV2y4xWq56NWqaJsnzzZ1YKkDv3VKpiH94dNrPz2A5H1E4XfXhV1PdPzmO2GqaKINWv7Bh9F6pLMI4fkYGAdBdDBhQ9shIV9cgI4OJg6gW7sjB2BySJzfPLDoYCITrLV3ppQpiAjMfxZZqw%2Bh%2BpC0D663If1jAnAfS8uIwv0lbTK6cYbSETokU4%2F%2FhcyGZOqPFxGF384p2S7c0ipNpI4s2kEO2e5DNvuI0yMkmw5kdgSefALp%2F0JKjxcRhbvLVmlIPx%2B7l7IPGfShRAfUOkhHn3SQBg7S2EHonxRorRG4bj1gQaUyW%2BWcVyqc12Zn%2FJpfqc4GLlI%2BktdBEnfAVQfcbCE2W1iXO8e1aZj0EexaDus7sMmQOB9soeXnyARBZgkySpBJgiwhyFr5nq9s2eb7vrIp8ya9POmVvKeTZpfu6aQpIgJqOt34lLwwisepXCphXZwUXM7oTOAJlweNemWm7NGK23AF5VUx4zXcWViZQ9oLY8ebckjeuPgcYjkkU5f%2BA6NHsOoIXD4Pmr4CmvXqZRd0rVeddbEZHTJhUho1i1ylDL7OESdTSDacrjolL4%2FXdONeGYIPrr70Y%2FfnR9vT4CZHbHJ8LH8gaKq7vZs6I7s3dWbJg%2BU4kaHcpKMV3kpoIqbuvyc2Mm38heu28%2FU1PgJG4%2BFtYZNFGvkyalryzZz0fWHmteGCfL9gVwVbSe3aXGqiNF5ceXt%2BIYyNsFbqqA8qj%2B88BJdDcnG%2FNH6cr34VQpo%2BTJojTAdkUpD6CDzego0HV5%2F56861z%2BqLsJrAqHMOix1kad4zZXZ%2BqeSQvPvRn1BicGXn83u%2Ff9n6G5TlsOI8BiYGD%2F8543ftXTSNA5psIwpztEyOlspBVQc2faqXxGZw5dfKuMCU02PKOLtMGbVzFq%2BVJwVRC9xAuGXBggYL6tT1G0G1wWjDE3VWox4SOxRr953%2FAQAA%2F%2F8BAAD%2F%2F2exZ6F4BAAA HTTP/1.1
Host: curryoxygencheaper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Cookie: u_pl=20130351; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 15:28:03 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ac02dbe4555323acf9c8d3b7220b7ee8
Strict-Transport-Security: max-age=0; includeSubdomains
play.google.com/log?format=json&hasfast=true
64.233.164.101200 OK 131 B URL POST HTTP/2 play.google.com/log?format=json&hasfast=true
IP 64.233.164.101:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 789
Origin: https://www.blogger.com
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Thu, 30 Nov 2023 15:28:03 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+340; expires=Sat, 29-Nov-2025 15:28:03 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 30 Nov 2023 15:28:03 GMT
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/button.png
172.64.109.10200 OK 9.9 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/button.png
IP 172.64.109.10:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 374 x 158, 8-bit colormap, non-interlaced\012- data
Hash 820ad88853e09bfa31ecc6dfd93c07ec
c8d408a8618a825a5111c51a6fe2e30f4d53098c
948bc0c4bd13d058c1c64f903453f928ecfdcd87686eebe6f9a73618e24d4bbd
GET /sb/interstitial/games/hentai-heroes/main/8/img/button.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:28:03 GMT
content-type: image/png
content-length: 9865
last-modified: Thu, 19 Oct 2023 16:12:57 GMT
etag: "65315589-2689"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1947815
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4JR013ej9pdfFRq%2FH%2BKAn3%2FDB3nXzmwSQgRvNBCsa6LlilKcqxjJAu1LvschRptxGTnManKpATDLWYtdnTpokswkaK1z8lZsXkTxKy7zQHvRW9kdsKCmIVuzsE1b6mXRiY4YGOzpBH7f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e3679556359-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/animate.css
172.64.109.10200 OK 4.9 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/animate.css
IP 172.64.109.10:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash e1d8acd5ee9d1a90ea09313cbd8f2b02
8a8327b115d1356715e63270d1ce6d46124c7b1a
3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/interstitial/games/hentai-heroes/main/8/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:28:03 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2023 16:12:56 GMT
etag: W/"65315588-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nNQLxZGosD%2B9P6I7QaTP43bADnhwl2G3pKq7pGpGRSRwZJn31a2eY229A7eXF8hhY0sFyTJG1k%2B0o4oACN0m2Q88Eo%2FGgll5hSytGI9CrIcNm2bdOyFIkehLWtRYF9xteltiGqua0uUZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e36693f6359-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
filemoon.sx/js/jquery.js
188.114.97.1200 OK 32 kB IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerLet's Encrypt
Subjectfilemoon.sx
Fingerprint91:D1:3C:E6:F3:0F:0F:C3:1B:E0:13:C4:9D:12:1E:79:0D:85:C2:E0
ValiditySat, 07 Oct 2023 16:00:09 GMT - Fri, 05 Jan 2024 16:00:08 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /js/jquery.js HTTP/1.1
Host: filemoon.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/e/kvg5bk6rp5yq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
etag: W/"603e8adc-15d9d"
expires: Tue, 05 Dec 2023 02:35:22 GMT
cache-control: max-age=2678400
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 219158
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z3UYibHAPtHrRLS1h4UR%2Bs2E5ulpShmFh7db81LO3MlYvLZ5rgtqJjNWfyyOge22zNILo%2FxM2FvntqMV13qVBW3EhaL0AVGltiO8KDeEtVzgcfrhnh5JXfq9NqLehw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e257d0bb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/bg.jpg
172.64.109.10200 OK 376 kB URL GET HTTP/3 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/bg.jpg
IP 172.64.109.10:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 376 kB (375458 bytes)
Hash 65b98e31f2a22bfc2ae827300f514b93
8d66b3140eaabf1eff5990961d013af5e948df5a
6ea2b64aa9ed05099682f877c6f257d5ebc03814c5910a9dc91a3eae94bf6879
GET /sb/interstitial/games/hentai-heroes/main/8/img/bg.jpg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:05 GMT
content-type: image/jpeg
content-length: 375458
last-modified: Thu, 19 Oct 2023 16:13:01 GMT
etag: "6531558d-5baa2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1777423
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eu4VtU2boYdQ%2BTLhx3xFX6ITDZOVXTyvX3AW2YJJnzP8lCiKuSTep0%2B7X83gXwv%2BAORRhMmOUGZ8Berv9TyR9SyW0qqzIDDPp7z8%2BDLdyroJU9sqFEQB2K116zvlTIyY8hMnzVfZjxYP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e3f5f5966c4-AMS
alt-svc: h3=":443"; ma=86400
img-place.com/kvg5bk6rp5yq.jpg
188.114.97.1504 Gateway Timeout 6.3 kB URL GET HTTP/2 img-place.com/kvg5bk6rp5yq.jpg
IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerGoogle Trust Services LLC
Subjectimg-place.com
FingerprintD8:09:E7:1A:D0:EC:43:42:F1:F9:74:99:0A:A1:11:12:8B:20:6C:82
ValiditySat, 14 Oct 2023 12:12:41 GMT - Fri, 12 Jan 2024 12:12:40 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (394)
Hash 4a925faa423e2be5bf45dfd0b2a868cb
574f80ae24393f21501e416dad20783d55b9be0e
0a61030973c038c5c3c3839d9748e87dd76dbe26685cd8385d69bef4a7356a3e
GET /kvg5bk6rp5yq.jpg HTTP/1.1
Host: img-place.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 504 Gateway Timeout
date: Thu, 30 Nov 2023 15:28:11 GMT
content-type: text/html; charset=UTF-8
content-length: 6329
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0eduAFMWQcuqT64Sya9mmTgfnq309ysfDllwLtzER2pJ6fDZq%2FFgR%2FwkXr7MqPd3wZpx35OK64PkP3PbLQJwIDBCGMnMjGNOfrgy18CnV437OYT3OokPYPgUH8hL8IUa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 82e41e29e943b509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
be4235.rcr32.ams02.cdn112.com/hls2/01/03806/kvg5bk6rp5yq_h/master.m3u8?t=kkUrd2dZ-GrW9e0QWVOcTdOnyGvGaxlB4AjwTqP3k4Y&s=1701358080&e=43200&f=19034000&srv=24&asn=50304&sp=2000
194.31.157.33 342 B URL GET be4235.rcr32.ams02.cdn112.com/hls2/01/03806/kvg5bk6rp5yq_h/master.m3u8?t=kkUrd2dZ-GrW9e0QWVOcTdOnyGvGaxlB4AjwTqP3k4Y&s=1701358080&e=43200&f=19034000&srv=24&asn=50304&sp=2000
IP 194.31.157.33:0
ASN #209652 Federal State Budgetary Institution N.N. Blokhin National Medical Research Center of Oncolo
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Hash 7212ce0817b293fdd09fc425e7108fd8
1e21adfbd82ffae64cb864917574f5d9714c7a64
c8a1882e7658324f6b0cd758bf0875c787a5201fd85460835ac2a6bff95f98a6
GET /hls2/01/03806/kvg5bk6rp5yq_h/master.m3u8?t=kkUrd2dZ-GrW9e0QWVOcTdOnyGvGaxlB4AjwTqP3k4Y&s=1701358080&e=43200&f=19034000&srv=24&asn=50304&sp=2000 HTTP/1.1
Host: be4235.rcr32.ams02.cdn112.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://filemoon.sx
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 15:28:14 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Thu, 30 Nov 2023 15:28:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 03 Dec 2023 15:28:14 GMT
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: MISS
Content-Encoding: gzip
be4235.rcr32.ams02.cdn112.com/hls2/01/03806/kvg5bk6rp5yq_h/index-v1-a1.m3u8?t=kkUrd2dZ-GrW9e0QWVOcTdOnyGvGaxlB4AjwTqP3k4Y&s=1701358080&e=43200&f=19034000&srv=24&asn=50304&sp=2000
194.31.157.33 2.7 kB URL be4235.rcr32.ams02.cdn112.com/hls2/01/03806/kvg5bk6rp5yq_h/index-v1-a1.m3u8?t=kkUrd2dZ-GrW9e0QWVOcTdOnyGvGaxlB4AjwTqP3k4Y&s=1701358080&e=43200&f=19034000&srv=24&asn=50304&sp=2000
IP 194.31.157.33:0
ASN #209652 Federal State Budgetary Institution N.N. Blokhin National Medical Research Center of Oncolo
Hash 6e949e2a231b5b5425584055366c50d1
5673b89ccd3e7ab102e83b894b336cd81337d9c3
cb2b4664a068c16974896a839ba6c28dff904f67e6c0a5923dcaf00e9f764e34
GET /hls2/01/03806/kvg5bk6rp5yq_h/index-v1-a1.m3u8?t=kkUrd2dZ-GrW9e0QWVOcTdOnyGvGaxlB4AjwTqP3k4Y&s=1701358080&e=43200&f=19034000&srv=24&asn=50304&sp=2000 HTTP/1.1
Host: be4235.rcr32.ams02.cdn112.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://filemoon.sx
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 15:28:14 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Thu, 30 Nov 2023 15:28:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 03 Dec 2023 15:28:14 GMT
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: MISS
Content-Encoding: gzip
be4235.rcr32.ams02.cdn112.com/hls2/01/03806/kvg5bk6rp5yq_h/seg-1-v1-a1.ts?t=kkUrd2dZ-GrW9e0QWVOcTdOnyGvGaxlB4AjwTqP3k4Y&s=1701358080&e=43200&f=19034000&srv=24&asn=50304&sp=2000
194.31.157.33 1.6 MB URL be4235.rcr32.ams02.cdn112.com/hls2/01/03806/kvg5bk6rp5yq_h/seg-1-v1-a1.ts?t=kkUrd2dZ-GrW9e0QWVOcTdOnyGvGaxlB4AjwTqP3k4Y&s=1701358080&e=43200&f=19034000&srv=24&asn=50304&sp=2000
IP 194.31.157.33:0
ASN #209652 Federal State Budgetary Institution N.N. Blokhin National Medical Research Center of Oncolo
File type MPEG transport stream data\012- data
Size 1.6 MB (1642744 bytes)
Hash ba36cbe0c0168b6b5550466aa4ba1ee2
114f4ce5192c01eac645958c1a7f5bfb56ce8426
a9c08011c3f24720621fda7423ed21a1fd7ee1738d7aa9bcccb04db736e92d9d
GET /hls2/01/03806/kvg5bk6rp5yq_h/seg-1-v1-a1.ts?t=kkUrd2dZ-GrW9e0QWVOcTdOnyGvGaxlB4AjwTqP3k4Y&s=1701358080&e=43200&f=19034000&srv=24&asn=50304&sp=2000 HTTP/1.1
Host: be4235.rcr32.ams02.cdn112.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://filemoon.sx
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 15:28:15 GMT
Content-Type: video/MP2T
Content-Length: 1642744
Connection: keep-alive
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Expires: Sun, 03 Dec 2023 15:28:15 GMT
ETag: "5f693e80-1910f8"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: MISS
be4235.rcr32.ams02.cdn112.com/hls2/01/03806/kvg5bk6rp5yq_h/seg-2-v1-a1.ts?t=kkUrd2dZ-GrW9e0QWVOcTdOnyGvGaxlB4AjwTqP3k4Y&s=1701358080&e=43200&f=19034000&srv=24&asn=50304&sp=2000
194.31.157.33 2.4 MB URL be4235.rcr32.ams02.cdn112.com/hls2/01/03806/kvg5bk6rp5yq_h/seg-2-v1-a1.ts?t=kkUrd2dZ-GrW9e0QWVOcTdOnyGvGaxlB4AjwTqP3k4Y&s=1701358080&e=43200&f=19034000&srv=24&asn=50304&sp=2000
IP 194.31.157.33:0
ASN #209652 Federal State Budgetary Institution N.N. Blokhin National Medical Research Center of Oncolo
File type MPEG transport stream data\012- TeX font metric data (\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377)\012- data
Size 2.4 MB (2385720 bytes)
Hash e7496217564b3d2dabe851876ff36877
f9bddcae215936116a7630069b9ce8999099191c
6a75a00aaa0b30b3392a786732003d26e5f0bb84aba217878d23e40bc2929025
GET /hls2/01/03806/kvg5bk6rp5yq_h/seg-2-v1-a1.ts?t=kkUrd2dZ-GrW9e0QWVOcTdOnyGvGaxlB4AjwTqP3k4Y&s=1701358080&e=43200&f=19034000&srv=24&asn=50304&sp=2000 HTTP/1.1
Host: be4235.rcr32.ams02.cdn112.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://filemoon.sx
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 15:28:17 GMT
Content-Type: video/MP2T
Content-Length: 2385720
Connection: keep-alive
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Expires: Sun, 03 Dec 2023 15:28:17 GMT
ETag: "5f693e80-246738"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: MISS
poweredby.jads.co/adshow.php?adzone=1030099
185.94.237.73 1.5 kB URL GET poweredby.jads.co/adshow.php?adzone=1030099
IP 185.94.237.73:0
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (407), with CRLF, LF line terminators
Hash 6bead7f72d70d2c0f543f409708c8df6
d0cf0c7506166e3e703cd98b2de786be429f903c
5f89ad9a0a42863a92708a57ac0c5725fa6048d902e47b31fa1dd11620422221
GET /adshow.php?adzone=1030099 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 15:28:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=2cb098328389c29d145e0b67cb74c46c; expires=Fri, 29-Nov-2024 15:28:00 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps78=1; expires=Fri, 01-Dec-2023 15:28:19 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjEzMDgzMzU7aToxNzAxNjE3MjgwO30%3D; expires=Sun, 03-Dec-2023 15:28:00 GMT; Max-Age=259181; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sun, 03-Dec-2023 15:28:00 GMT; Max-Age=259181; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
i.jads.co/network/user1037/78-1639151697-0324899001639151697.jpg
205.185.216.42 36 kB URL i.jads.co/network/user1037/78-1639151697-0324899001639151697.jpg
IP 205.185.216.42:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x250, components 3\012- data
Hash 2aeab316e738140feea3d8e6e841aafa
d9505c0a4f803d9e18f7dee02dd8ad5f6b65745e
dd1ec02cb97c9bed95bda4931284f16a6e4997bb35f9ef6ac266a052e9d93dd1
GET /network/user1037/78-1639151697-0324899001639151697.jpg HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=2cb098328389c29d145e0b67cb74c46c; imps78=1; juicy_data_1=YToxOntpOjEzMDgzMzU7aToxNzAxNjE3MjgwO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 15:28:20 GMT
Connection: Keep-Alive
ETag: "1639151697"
Cache-Control: max-age=3817453
Content-Length: 36542
Content-Type: image/jpeg
Last-Modified: Fri, 10 Dec 2021 15:54:57 GMT
Accept-Ranges: bytes
X-HW: 1701358099.dop216.sk1.t,1701358100.cds255.sk1.shn,1701358100.dop216.sk1.t,1701358100.cds219.sk1.c
1.bp.blogspot.com/-aeYDsOBJLdA/YBAmqSeCOwI/AAAAAAAA1Wo/3wi7RPc8qwUfaD1LwU7QIrCjesx4EGJTwCNcBGAsYHQ/s0/PASANG.gif
142.250.74.161200 OK 407 kB URL GET HTTP/2 1.bp.blogspot.com/-aeYDsOBJLdA/YBAmqSeCOwI/AAAAAAAA1Wo/3wi7RPc8qwUfaD1LwU7QIrCjesx4EGJTwCNcBGAsYHQ/s0/PASANG.gif
IP 142.250.74.161:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type GIF image data, version 89a, 480 x 398\012- data
Size 407 kB (406574 bytes)
Hash 23164e2ebd1c1e5ab4c40067dcce799e
0593278823aa880a8d6a39a3b9a4cf91960de196
03160613d9bedb7deeafa077bfb0d95c1bf53207abc511c8fd967730a03ed010
GET /-aeYDsOBJLdA/YBAmqSeCOwI/AAAAAAAA1Wo/3wi7RPc8qwUfaD1LwU7QIrCjesx4EGJTwCNcBGAsYHQ/s0/PASANG.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "vd56b"
expires: Fri, 01 Dec 2023 15:28:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="PASANG.gif"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 15:28:00 GMT
server: fife
content-length: 406574
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
coinblocktyrusmiram.com/js/jquery.chartan.js
188.114.97.1200 OK 90 kB URL GET HTTP/2 coinblocktyrusmiram.com/js/jquery.chartan.js
IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerGoogle Trust Services LLC
Subjectcoinblocktyrusmiram.com
Fingerprint8E:04:3A:86:71:99:9A:67:22:2A:8B:DF:58:16:31:37:63:D5:9E:D4
ValiditySat, 14 Oct 2023 23:30:13 GMT - Fri, 12 Jan 2024 23:30:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/jquery.chartan.js HTTP/1.1
Host: coinblocktyrusmiram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 18 Jun 2023 17:35:46 GMT
etag: W/"648f4072-16036"
expires: Fri, 01 Dec 2023 06:15:31 GMT
cache-control: max-age=2678400
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 551549
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=urOKWgktb05SqUKgGNr%2B9lN4x0kn3Jp9GMUPN2Llh52TTk87Kp%2FTO1eudbms9Ftx7ZH%2F36Bc%2FfPNhmCkS2vW2vzyt7YmyGm5E0gWc12APodwkv6BlBjhAJIjQxoJd1rnd8hHbW136PpjZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e26288d712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800
142.250.74.106200 OK 28 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800
IP 142.250.74.106:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 3e3f262b81699cff226ddfd43e81c0bf
60f993b3a4d1f6f31c191e981951d0117f15600e
b13d4ba577f8a1e50ca84576732bd47c5608583931791b476d06bf7bed513585
GET /css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 30 Nov 2023 15:28:01 GMT
date: Thu, 30 Nov 2023 15:28:01 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
unpkg.com/video.js/dist/video-js.css
104.16.123.175302 Found 52 kB URL GET HTTP/2 unpkg.com/video.js/dist/video-js.css
IP 104.16.123.175:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video.js/dist/video-js.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 30 Nov 2023 15:27:59 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /video.js@8.6.1/dist/video-js.css
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HGGDD3CP1BZAWZ9W26M2DR6P-arn
cf-cache-status: HIT
age: 98
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e41e1acfe956c6-OSL
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
172.64.197.8200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP 172.64.197.8:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:28:01 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 52300c0d9345b4ba8420a8fefcc570c9
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 30 Nov 2023 15:28:00 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TNPB9YcsrC2Kn2HAd1MhVbkQl00LdyVhLBBf8NCvRsvTgXntg2W72oimmgH3vd0e9ruveZjWBapnP%2B3iJ%2F7Ck2AeJiNIfzMnLTUC%2FkPmFJBCo8lvQ9yeDaeeOuW4uDp3kcTXghA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e268c936561-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.fluidplayer.com/v3/current/fluidplayer.min.js
185.76.9.21200 OK 232 kB URL GET HTTP/2 cdn.fluidplayer.com/v3/current/fluidplayer.min.js
IP 185.76.9.21:443
ASN #60068 Datacamp Limited
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectfluidplayer.com
FingerprintF7:9C:B4:85:DA:61:E8:2F:F4:BD:0B:E8:14:8A:4D:C1:80:00:1F:DD
ValidityThu, 05 Oct 2023 14:55:10 GMT - Wed, 03 Jan 2024 14:55:09 GMT
File type ASCII text, with very long lines (65463)
Size 232 kB (231523 bytes)
Hash f02f9e57c3c7c751cd90ca44e7bf36c3
b346195e9cffe5e764d347515ee5819f857de8c4
f7ad8846f2a92a33cc0f24462ca94ea3f52164dce1a64a1937be6487596bb616
GET /v3/current/fluidplayer.min.js HTTP/1.1
Host: cdn.fluidplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:27:59 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 16 Nov 2023 13:30:47 GMT
etag: W/"65561987-38863"
expires: Sat, 18 Nov 2023 10:16:53 GMT
cache-control: max-age=86400
access-control-allow-origin: *
x-77-nzt: ArlMCRQ3Nzf/ZmkAALlMCgE3Nzf/AAAAAA
x-77-nzt-ray: af5856304666f876ffa96865b067cb17
x-accel-expires: @1701417497
x-accel-date: 1701331097
x-77-cache: HIT
x-77-age: 26982
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT
x-age-lb: 26982
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
mildlunch.com/YQmRx-v.YT2UtVlWc_nYNZDaabG-Vdjeaf2gV_yiPj2kllj-PnXoBpzqJ_ms9t0uPvU-NxnySzkA9_UCeDEElFK-WHWI5JKKd_lMlNXOUPm-lRZSVTzUV_rWSX2YlZC-ab1cpdqeR_TgJhZiejk-El0mTnVod_NqerUs5tU-TvXwdxOya_lAkBxCTDk-dFFGdH1Ip_XKWLmMlNP-RPGQxRpST_0URVjWMXk-1ZXaRbXcd_PeRfEgNhB-MjUktlLmc_koJpqqarU-st5uQvVwE_tyJznAJBy-aDWEQF9GZ_GIFJlKML2-ENyOMPTQg_4SNTzUAV5-ZXmYYZzaY_jckd5eOfT-kh0iNjTkM_zmNnmoVpk-ZrTsktxuM_zwYxmydzn-QB9CMDTEc_wGMHTIMJ1-OLDMAN4OM_CQ1RjSOTT-gVwWYXmYJ_iaNbzcMdx-YfjgYh2iO_TkIl1mMnz-Up5qZrTsY_1uZvmwIx2-MzWANBkCM_GEVFjGMHi-ZJ6KbL2M5_lOaPWQQR9-NTDUcV5WN_DYMZ0aMbQ-?b=5
88.85.94.250200 OK 0 B URL GET HTTP/2 mildlunch.com/YQmRx-v.YT2UtVlWc_nYNZDaabG-Vdjeaf2gV_yiPj2kllj-PnXoBpzqJ_ms9t0uPvU-NxnySzkA9_UCeDEElFK-WHWI5JKKd_lMlNXOUPm-lRZSVTzUV_rWSX2YlZC-ab1cpdqeR_TgJhZiejk-El0mTnVod_NqerUs5tU-TvXwdxOya_lAkBxCTDk-dFFGdH1Ip_XKWLmMlNP-RPGQxRpST_0URVjWMXk-1ZXaRbXcd_PeRfEgNhB-MjUktlLmc_koJpqqarU-st5uQvVwE_tyJznAJBy-aDWEQF9GZ_GIFJlKML2-ENyOMPTQg_4SNTzUAV5-ZXmYYZzaY_jckd5eOfT-kh0iNjTkM_zmNnmoVpk-ZrTsktxuM_zwYxmydzn-QB9CMDTEc_wGMHTIMJ1-OLDMAN4OM_CQ1RjSOTT-gVwWYXmYJ_iaNbzcMdx-YfjgYh2iO_TkIl1mMnz-Up5qZrTsY_1uZvmwIx2-MzWANBkCM_GEVFjGMHi-ZJ6KbL2M5_lOaPWQQR9-NTDUcV5WN_DYMZ0aMbQ-?b=5
IP 88.85.94.250:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectmildlunch.com
Fingerprint2C:50:55:2A:07:FA:71:63:92:47:2A:4B:B0:B4:A8:C5:8B:B1:B7:BA
ValiditySun, 08 Oct 2023 02:49:07 GMT - Sat, 06 Jan 2024 02:49:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /YQmRx-v.YT2UtVlWc_nYNZDaabG-Vdjeaf2gV_yiPj2kllj-PnXoBpzqJ_ms9t0uPvU-NxnySzkA9_UCeDEElFK-WHWI5JKKd_lMlNXOUPm-lRZSVTzUV_rWSX2YlZC-ab1cpdqeR_TgJhZiejk-El0mTnVod_NqerUs5tU-TvXwdxOya_lAkBxCTDk-dFFGdH1Ip_XKWLmMlNP-RPGQxRpST_0URVjWMXk-1ZXaRbXcd_PeRfEgNhB-MjUktlLmc_koJpqqarU-st5uQvVwE_tyJznAJBy-aDWEQF9GZ_GIFJlKML2-ENyOMPTQg_4SNTzUAV5-ZXmYYZzaY_jckd5eOfT-kh0iNjTkM_zmNnmoVpk-ZrTsktxuM_zwYxmydzn-QB9CMDTEc_wGMHTIMJ1-OLDMAN4OM_CQ1RjSOTT-gVwWYXmYJ_iaNbzcMdx-YfjgYh2iO_TkIl1mMnz-Up5qZrTsY_1uZvmwIx2-MzWANBkCM_GEVFjGMHi-ZJ6KbL2M5_lOaPWQQR9-NTDUcV5WN_DYMZ0aMbQ-?b=5 HTTP/1.1
Host: mildlunch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-content-type-options: nosniff
X-Firefox-Spdy: h2
filemoon.sx/images/dl.svg
188.114.97.1200 OK 520 B URL GET HTTP/3 filemoon.sx/images/dl.svg
IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerLet's Encrypt
Subjectfilemoon.sx
Fingerprint91:D1:3C:E6:F3:0F:0F:C3:1B:E0:13:C4:9D:12:1E:79:0D:85:C2:E0
ValiditySat, 07 Oct 2023 16:00:09 GMT - Fri, 05 Jan 2024 16:00:08 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (568), with no line terminators
Hash f9d813a458393ccc4c8b9c7c453f6ff9
938d7b333bb8a22ec37835b00b4ffa6e3391b5be
c121106f7f0e4f4c69494801442dd6f12b29ed4bcacf129c8e646bb46c7ec962
GET /images/dl.svg HTTP/1.1
Host: filemoon.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/e/kvg5bk6rp5yq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:01 GMT
content-type: image/svg+xml
last-modified: Mon, 26 Sep 2022 20:08:57 GMT
etag: W/"633206d9-208"
expires: Sat, 02 Dec 2023 07:13:34 GMT
cache-control: max-age=2678400
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 461667
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SuCLzeLDa3sqRDOiND%2FPMETTU%2Br2TMtetwiNREeJ3FhDU41zUmcDvtuIWrBSDoJL3KxoQUURhXzhu17rQPjC140oWlmpqkkbwMUp2532q8mWIv%2FVVQtJ8XKdwPlVtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e29fbcfb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
filemoon.sx/js/xupload.js
188.114.97.1200 OK 11 kB URL GET HTTP/3 filemoon.sx/js/xupload.js
IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerLet's Encrypt
Subjectfilemoon.sx
Fingerprint91:D1:3C:E6:F3:0F:0F:C3:1B:E0:13:C4:9D:12:1E:79:0D:85:C2:E0
ValiditySat, 07 Oct 2023 16:00:09 GMT - Fri, 05 Jan 2024 16:00:08 GMT
Hash 2609e3a9490dcfe748407d3af317c472
af55b2b16e9190e09407f67ffae4ca705ea6f112
c3c7c3de97ef15965def93fc9317e82854b979aa1a7980fde49b873a04aab85d
GET /js/xupload.js HTTP/1.1
Host: filemoon.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/e/kvg5bk6rp5yq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 04 Aug 2021 13:41:52 GMT
etag: W/"610a9920-2a73"
expires: Sun, 03 Dec 2023 07:44:22 GMT
cache-control: max-age=2678400
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 373417
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nQB30iPdXvaWgW%2BCSQyVwy%2Bjh0iLq%2B3Js5NmVZ4hRJ0IxlezsbNCiqpViL%2BJ5eIvknEU9OULYymARmnCCF2yQjsnU6AMoVlBiJCZT%2FapZWrnLv7B2ZBj8281uEZH%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e257d17b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
poweredby.jads.co/adshow.php?adzone=1040084
0.0.0.0 0 B URL GET poweredby.jads.co/adshow.php?adzone=1040084
IP 0.0.0.0:0
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adshow.php?adzone=1040084 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
filemoon.sx/player/jw8/jwplayer.core.controls.js?v=2
188.114.97.1200 OK 320 kB URL GET HTTP/3 filemoon.sx/player/jw8/jwplayer.core.controls.js?v=2
IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerLet's Encrypt
Subjectfilemoon.sx
Fingerprint91:D1:3C:E6:F3:0F:0F:C3:1B:E0:13:C4:9D:12:1E:79:0D:85:C2:E0
ValiditySat, 07 Oct 2023 16:00:09 GMT - Fri, 05 Jan 2024 16:00:08 GMT
Size 320 kB (320409 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /player/jw8/jwplayer.core.controls.js?v=2 HTTP/1.1
Host: filemoon.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/e/kvg5bk6rp5yq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:01 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Sep 2022 10:14:05 GMT
etag: W/"6319c06d-4e399"
expires: Thu, 07 Dec 2023 08:53:04 GMT
cache-control: max-age=2678400
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 23697
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FyNhbqU36dorReJYre7PhmcerBJzZ32%2FIUOPQQ0eoiJ%2BNxWmWV5bk1jFh7aBtCSnJbOK2Lnvbm6Qj%2FsnHizoUhG6Ni1GVvx1%2F2%2FtcBRM3jsyTIWj0pUleG8t9rRpoA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e273f80b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAc_Lg91QW1GdEqsHKYzc3YoIqxMb61hgKqt9zrsE6F0ucTS1JWOnFz_27pe_liN0sNFKs8B54KA2Rc53PTKviL4pFBdSZoMEZIJ1mEZXAvSTMdJGF5Eoa_Vilg0I94UtoBM7Q1mcdwphkCcpWtlbovXU9IRfhJ3EJe2skyRtQLWON0H5vNkKclRHm/s1600/4BLYlNu.gif
142.250.74.97200 OK 11 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAc_Lg91QW1GdEqsHKYzc3YoIqxMb61hgKqt9zrsE6F0ucTS1JWOnFz_27pe_liN0sNFKs8B54KA2Rc53PTKviL4pFBdSZoMEZIJ1mEZXAvSTMdJGF5Eoa_Vilg0I94UtoBM7Q1mcdwphkCcpWtlbovXU9IRfhJ3EJe2skyRtQLWON0H5vNkKclRHm/s1600/4BLYlNu.gif
IP 142.250.74.97:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type GIF image data, version 89a, 750 x 85\012- data
Hash 0f9d35b07035ca061350a50ebe1080b8
d2fcd5a6032b14278565d072c0e85147b1572c27
4c902ab147ade0d68a45f8ca03bb434df261acb1f38b42f2ef2c6c1dcc545332
GET /img/b/R29vZ2xl/AVvXsEjAc_Lg91QW1GdEqsHKYzc3YoIqxMb61hgKqt9zrsE6F0ucTS1JWOnFz_27pe_liN0sNFKs8B54KA2Rc53PTKviL4pFBdSZoMEZIJ1mEZXAvSTMdJGF5Eoa_Vilg0I94UtoBM7Q1mcdwphkCcpWtlbovXU9IRfhJ3EJe2skyRtQLWON0H5vNkKclRHm/s1600/4BLYlNu.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "vfb6d"
expires: Fri, 01 Dec 2023 15:28:02 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="4BLYlNu.gif"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 15:28:02 GMT
server: fife
content-length: 11367
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvHQPQubL2IUqJQCPz8grfYQTgT1wOLCTEAmiuEGLQjvolYxO1NjhkzVazFnAqZxE-3oSZ988P40bDS5RTwis5I6caoklilw3VislZwxE5A77Xe_LbANIi9L_UdG8GIVg48CKoD93M49z50FQxk9TZzGyjiqPE0gp5LLO2ortSuscezaHV00ggXTv6/s320/1.jpg
142.250.74.97200 OK 19 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvHQPQubL2IUqJQCPz8grfYQTgT1wOLCTEAmiuEGLQjvolYxO1NjhkzVazFnAqZxE-3oSZ988P40bDS5RTwis5I6caoklilw3VislZwxE5A77Xe_LbANIi9L_UdG8GIVg48CKoD93M49z50FQxk9TZzGyjiqPE0gp5LLO2ortSuscezaHV00ggXTv6/s320/1.jpg
IP 142.250.74.97:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 170x255, components 3\012- data
Hash 17bcec27a4d04e6c4b86d6fdec041fe5
07b72b208f7a1d7a3ecd6c97c553bcd06200b701
17d40f94405dbf044754c30a4a1e17cbf798fc109e15da476e6753a612c9573b
GET /img/b/R29vZ2xl/AVvXsEhvHQPQubL2IUqJQCPz8grfYQTgT1wOLCTEAmiuEGLQjvolYxO1NjhkzVazFnAqZxE-3oSZ988P40bDS5RTwis5I6caoklilw3VislZwxE5A77Xe_LbANIi9L_UdG8GIVg48CKoD93M49z50FQxk9TZzGyjiqPE0gp5LLO2ortSuscezaHV00ggXTv6/s320/1.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v1195f"
expires: Fri, 01 Dec 2023 15:28:02 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1.jpg"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 15:28:02 GMT
server: fife
content-length: 18608
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html%26type%3Dblog%26bpli%3D1&go=true
64.233.161.84302 Found 126 kB URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html%26type%3Dblog%26bpli%3D1&go=true
IP 64.233.161.84:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Size 126 kB (126506 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html%26type%3Dblog%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.beruang.club/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:kgla6p-gR_ZHx9Vfd7SwUzBQGirUyg:7YQA5381vVI-tenE; Expires=Sat, 29-Nov-2025 15:28:00 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 15:28:00 GMT
location: https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-yOtz0F1d_qnXamQ2LEBqRw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
filemoon.sx/js/dnsads.js?dfp=1&ad_code=2&adsrc=3
188.114.97.1200 OK 38 B URL GET HTTP/3 filemoon.sx/js/dnsads.js?dfp=1&ad_code=2&adsrc=3
IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerLet's Encrypt
Subjectfilemoon.sx
Fingerprint91:D1:3C:E6:F3:0F:0F:C3:1B:E0:13:C4:9D:12:1E:79:0D:85:C2:E0
ValiditySat, 07 Oct 2023 16:00:09 GMT - Fri, 05 Jan 2024 16:00:08 GMT
File type ASCII text, with no line terminators
Hash d23662ee1251b9918b938629a6b2ed32
53b7c230569335c8ff5a1fc2158f49827d7a5e65
02f7674053ee078505ea4ebdbf2f1adf94cf761bbcbf54c4e09538656f6559a5
GET /js/dnsads.js?dfp=1&ad_code=2&adsrc=3 HTTP/1.1
Host: filemoon.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/e/kvg5bk6rp5yq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 38
last-modified: Mon, 13 Sep 2021 15:50:14 GMT
etag: "613f7336-26"
expires: Thu, 07 Dec 2023 07:51:28 GMT
cache-control: max-age=2678400
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 27392
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EZ%2FI6TL85TfT5TpHVlZ58lN6kqkN03MKgnTEw0PITdoaWUOE2XP4ysfc94ssy4OG3%2BJvv1QpbeyNnbLa90dCJfXt3VsxNunbRxmwroqhwjukJpLUgO3y8VIFZ86K0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e257d20b4ee-OSL
alt-svc: h3=":443"; ma=86400
filemoon.sx/e/kvg5bk6rp5yq
188.114.97.1200 OK 24 kB URL GET HTTP/2 filemoon.sx/e/kvg5bk6rp5yq
IP 188.114.97.1:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectfilemoon.sx
Fingerprint91:D1:3C:E6:F3:0F:0F:C3:1B:E0:13:C4:9D:12:1E:79:0D:85:C2:E0
ValiditySat, 07 Oct 2023 16:00:09 GMT - Fri, 05 Jan 2024 16:00:08 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6607), with CRLF, LF line terminators
Hash 625b23ba2f04878056ec2363d599fa15
e2e08009425c54de8d967de3451b53c12a41674b
444b5d871d199652c787cc3a6f843f40b78ad8dcae77f42943ba8ab241daaf34
GET /e/kvg5bk6rp5yq HTTP/1.1
Host: filemoon.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 29 Nov 2023 15:28:00 GMT
set-cookie: lang=1; domain=.filemoon.sx; path=/; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=psCWE9GUSvWQ6f8Oukke7LsEtp1UTHd4p4A2sGCCyuJB6kFOPAal2LazMgUrTbuC2Ml8uENzpMxRqNfyHyUe3lpoU329e3JZoZZBZMBr0BtAemLgvUgQIetHGxhh3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e41e210cca568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/close.svg
172.64.109.10200 OK 1.2 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/close.svg
IP 172.64.109.10:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (1275), with no line terminators
Hash ee9084e5f63b44e99321603aeadcf5b3
7ad5af3b9bd4f16852d7491fa0d2d27208318d10
780911a80399262efd3de45d684bb03fc965406402d3b60720d3dcfe7a4a3fc0
GET /sb/interstitial/games/hentai-heroes/main/8/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:28:03 GMT
content-type: image/svg+xml
last-modified: Thu, 19 Oct 2023 16:12:58 GMT
etag: W/"6531558a-49d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1341929
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LbLjY8IlLkt5XdU4dgyxbMppoO11TGA0yAIawZPndCtNuvtMBrWrB14KmOoRFmWowY0boaQYETERAp9ELDYO7iYSLO1XLOPsp6kx%2Bos%2FBFHck3rJdZM5OlM8wJJp2W3od4Vu9qoFwQCD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e3669506359-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
filemoon.sx/js/baf.js
188.114.97.1200 OK 14 kB IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerLet's Encrypt
Subjectfilemoon.sx
Fingerprint91:D1:3C:E6:F3:0F:0F:C3:1B:E0:13:C4:9D:12:1E:79:0D:85:C2:E0
ValiditySat, 07 Oct 2023 16:00:09 GMT - Fri, 05 Jan 2024 16:00:08 GMT
File type ASCII text, with CRLF line terminators
Hash 6ceffeaf7dcbc6552b17072b5ef19514
12392baa602c10684d71a9be3ee69f3954922cf2
98459741b8c345246ff82cebfd243001ccea33d37d2f101d8dc8903170b68069
GET /js/baf.js HTTP/1.1
Host: filemoon.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/e/kvg5bk6rp5yq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sat, 17 Sep 2022 19:49:40 GMT
etag: W/"632624d4-358c"
expires: Thu, 07 Dec 2023 07:52:07 GMT
cache-control: max-age=2678400
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 27353
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GjYlk7aRtYah6seuYYsw4T%2FGx3PB8cEBvqdGG9vDX5QVISDgyQ%2BPMCGCDOi9nukbeARqUuYZkPTl26cmh5sGvs81DfcUN28KOZlamNLF1sxXGFW7DGLJm%2F2gWTXdOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e257d1cb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=G-EQ87SLSFFF&l=dataLayer&cx=c
142.250.74.168200 OK 229 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-EQ87SLSFFF&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Size 229 kB (228730 bytes)
Hash b712160edc2f806a6dab59b1ecf1a5c4
c597b599e177bcaf58d7a417093893825abe2852
0903382218ae33f161e5b68cef07a004a9e079e72f16006a738c7f3ef4af1d9f
GET /gtag/js?id=G-EQ87SLSFFF&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 30 Nov 2023 15:28:00 GMT
expires: Thu, 30 Nov 2023 15:28:00 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80895
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
filemoon.sx/js/ls.js
188.114.97.1200 OK 2.1 kB IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerLet's Encrypt
Subjectfilemoon.sx
Fingerprint91:D1:3C:E6:F3:0F:0F:C3:1B:E0:13:C4:9D:12:1E:79:0D:85:C2:E0
ValiditySat, 07 Oct 2023 16:00:09 GMT - Fri, 05 Jan 2024 16:00:08 GMT
File type ASCII text, with very long lines (2079), with no line terminators
Hash 66b63b5fefbe179c0fd09e63c11b7e12
e657b7d46921bec0bcbd746339ccc03ef4690036
52eb05218aa889bcc3b78062d496c747a04db5126648bd3a57cf8c43e3039bf2
GET /js/ls.js HTTP/1.1
Host: filemoon.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/e/kvg5bk6rp5yq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Feb 2023 11:28:54 GMT
etag: W/"63eb7076-80f"
expires: Thu, 07 Dec 2023 07:51:28 GMT
cache-control: max-age=2678400
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 27392
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4CWdq%2FVfjPhIg6CIgmTAdfYFZLTOtsP7IaykUDnUI0Rm5%2F9l7WfWwbQjgTFUu%2BAoIOosz3YLzkxEKr2Jgo212DMJMBDj75PmqZDumzIHcEku%2BG6Y%2BnSWB06EAyHXLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e257d1ab4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
filemoon.sx/player/jw8/jwplayer.js?v=4
188.114.97.1200 OK 119 kB URL GET HTTP/3 filemoon.sx/player/jw8/jwplayer.js?v=4
IP 188.114.97.1:443
Requested by https://filemoon.sx/e/kvg5bk6rp5yq
Certificate IssuerLet's Encrypt
Subjectfilemoon.sx
Fingerprint91:D1:3C:E6:F3:0F:0F:C3:1B:E0:13:C4:9D:12:1E:79:0D:85:C2:E0
ValiditySat, 07 Oct 2023 16:00:09 GMT - Fri, 05 Jan 2024 16:00:08 GMT
Size 119 kB (118741 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /player/jw8/jwplayer.js?v=4 HTTP/1.1
Host: filemoon.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filemoon.sx/e/kvg5bk6rp5yq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 15:28:00 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 05 Mar 2023 15:27:04 GMT
etag: W/"6404b4c8-1cfd5"
expires: Wed, 06 Dec 2023 04:06:30 GMT
cache-control: max-age=2678400
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 127290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xfUh4ud1vqsYwaDDh%2Bt7wVRVETu7AZTBEGQKuIVkajYWjxzcGQTHAuW5dtU1pY84GaZwWtoBpOW%2FIqOm2NPhjddFwPL%2BgMCdsPhrCWFVN%2FTQ6mOZ6y5js9YByoId8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e257d1eb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
unpkg.com/videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js
104.16.123.175200 OK 717 kB URL GET HTTP/2 unpkg.com/videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js
IP 104.16.123.175:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Size 717 kB (717184 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.beruang.club/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:27:59 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"af180-yddBL+N7CRgyB07pxWVoSeh+9Bw"
via: 1.1 fly.io
fly-request-id: 01HFTCM2M15W2XX1XCMRKBJ1CQ-arn
cf-cache-status: HIT
age: 739116
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e41e1b283456c6-OSL
content-encoding: br
X-Firefox-Spdy: h2
p.sslph.com/dcba/
54.158.113.215404 Not Found 19 B IP 54.158.113.215:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectp.sslph.com
FingerprintA3:5B:3A:5E:13:F7:49:A9:7E:AB:2B:3D:14:A9:5E:9A:B0:4A:26:CA
ValidityMon, 27 Nov 2023 10:26:15 GMT - Sun, 25 Feb 2024 10:26:14 GMT
File type ASCII text, with no line terminators
Hash f59690a90eae5c14a87521d70441bf83
253944e2769a927cdb522a8ca0fa9da5028729bb
77ef0c0b261a6ce967e3f335a86c939f9d88a25dabec86f0b19993a438b9d081
GET /dcba/ HTTP/1.1
Host: p.sslph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Thu, 30 Nov 2023 15:28:01 GMT
content-type: text/plain; charset=utf-8
content-length: 19
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/style.css
172.64.109.10200 OK 2.4 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/style.css
IP 172.64.109.10:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (2534), with no line terminators
Hash 565a828cd09907e234598f78c4672ae1
bf30c71fa149d82e10c405cc2dd22d5415af3514
45caa990dabda92c96faa8da3208494707ca28e9fb1090a370b40da63ede95a1
GET /sb/interstitial/games/hentai-heroes/main/8/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:28:03 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2023 16:12:56 GMT
etag: W/"65315588-958"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sy%2Fe86ENjvn5dqdm%2Bk%2FrYKxl4J442AK3EAWBXN6RNOGYX7d4ikggTn7m4M7VokFdtnyTGLdafN%2BoTO16lrWccGg1wvT2tGs9e8pAnpd7R7XIsa137yF0RG7QFe2dihECBbHdriswXvZu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e36795a6359-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.staticaly.com/gh/dedewap/googlecode/8ed25926/autoloadpostdedelk21.js
0.0.0.0 0 B URL GET cdn.staticaly.com/gh/dedewap/googlecode/8ed25926/autoloadpostdedelk21.js
IP 0.0.0.0:0
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gh/dedewap/googlecode/8ed25926/autoloadpostdedelk21.js HTTP/1.1
Host: cdn.staticaly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
unpkg.com/video.js/dist/video.js
104.16.123.175302 Found 2.2 MB URL GET HTTP/2 unpkg.com/video.js/dist/video.js
IP 104.16.123.175:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Size 2.2 MB (2226543 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video.js/dist/video.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 30 Nov 2023 15:27:59 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /video.js@8.6.1/dist/video.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HGGDDBV8G6Q4R0YYHGA161AX-arn
cf-cache-status: HIT
age: 89
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e41e1adff556c6-OSL
X-Firefox-Spdy: h2
curryoxygencheaper.com/pixel/sbs?c=1
173.233.137.36200 OK 0 B URL GET HTTP/1.1 curryoxygencheaper.com/pixel/sbs?c=1
IP 173.233.137.36:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectcurryoxygencheaper.com
FingerprintF2:DD:AF:D4:3D:96:F2:C2:C1:37:D0:07:73:80:BA:7B:02:75:3E:DC
ValidityTue, 28 Nov 2023 08:20:34 GMT - Mon, 26 Feb 2024 08:20:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: curryoxygencheaper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Cookie: u_pl=20130351; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 15:28:05 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
poweredby.jads.co/adshow.php?adzone=1030560
0.0.0.0 0 B URL GET poweredby.jads.co/adshow.php?adzone=1030560
IP 0.0.0.0:0
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adshow.php?adzone=1030560 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
curryoxygencheaper.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scxR%2Btzne%2FIEhEgwc9CHNTo8x0T8%2FszJhDfhgTg2t2TSJ78JLqqurZcqu7mqru6dk9LS5IvM1CQMFLz5v9oXER8wdIwqwedEDY8SALunjx4kkQcvIgMzuw%2BIHuz6fqvcN771Mf97Nj4iGjR0vv6nWpFK3Uy27plWUZc53b0s07Jc8tuxdKyzKer10odSc%2F03nDc%2Btl99XSdcFWdaXqeq7ruV7pmjQi1N3KFIVM9lteueWWa9WyV6%2Bha%2F57tpkDSx3wzjE5B8nH%2F1%2F54SEkGyKOvrkq7Gqqk9ffijJFU23Q4Xvvx6uxzmNEp2NoHITx3owNbceEfHYGOt6bOYDubE8cIJBj4vziIYj3ZjIRdHZOlAYKIkbAn0beGUKoISQdgulNSH5IAMZxcxFxtHtTm5yunaB0go7J3JO%2FIfMxmfvtecTR11eU7JZua5WlUscW3bCA7A4h20Mk2QHSdQcyPwBLP4LkP5HKkwXE0faiVRqSF1P3Ug4hwyGU6IFaB9nkkw6y0EGWOIj4UYnWW6HrNsIg9P1mjTHm%2B4zVm%2FO8zv1aM3SRsYm8HtKkB6Z6YGYDidnAqtw6rJ%2BDyR7DrhSw3IFNx8R5bwMdXiAXBLklyClBLgnylCDvFDtc2aotdrmyWeDNenXW%2FWKg03af7ui0LWICanr95Jg8N4nH8c9XsCqOSi4L6HzoCZeFrYY%2FX%2FWo77ZcQVlNzHsttwkrC0h7Zup4XY7Ja2efQSLHZO78PwjoAaw6AJPPgmYvgeaDRtUFXRnUmi7W4%2F1AmIzG7TJTWQCuCyTpHNI1p6%2BOyYvTNV2%2FX4Vgo0svfN%2F%2F8fHmOTBTIDEFPpTfEbTVvcEtnZPtWzq35OFikspIrtPJCm%2BnNBVzD94Ra7k2%2FMZV2%2FvyMpsAk3H%2FjrDpAo25jNuWfHVFci7MNW2YIN%2FesMsiWMrsypXMxFmysPTmtRtRYoS1UsdDUHl49xGYHJOzu5Xp43z5iwjSDGGyAlE2IrOC1AdgyQZsMrr01B93L3%2FSWIDVBEadcoLEQZ4VA1MNTi%2BVHJO3P%2FgdSowubn16%2F9fPO3%2BCBgWsOI0hEKNHf53w%2B%2FYe2sYBTTcRRwU6pkBHFaCqB5v9b5AmZnTxZ39aCJQzCJRxtgNl1NZJvFYelepeTTSDZoNxHgjGvUbVb%2FquW%2BW81mgJr4XUjsXKA%2BdfAAAA%2F%2F8BAAD%2F%2F3O56Ud4BAAA
173.233.137.36200 OK 0 B URL GET HTTP/1.1 curryoxygencheaper.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scxR%2Btzne%2FIEhEgwc9CHNTo8x0T8%2FszJhDfhgTg2t2TSJ78JLqqurZcqu7mqru6dk9LS5IvM1CQMFLz5v9oXER8wdIwqwedEDY8SALunjx4kkQcvIgMzuw%2BIHuz6fqvcN771Mf97Nj4iGjR0vv6nWpFK3Uy27plWUZc53b0s07Jc8tuxdKyzKer10odSc%2F03nDc%2Btl99XSdcFWdaXqeq7ruV7pmjQi1N3KFIVM9lteueWWa9WyV6%2Bha%2F57tpkDSx3wzjE5B8nH%2F1%2F54SEkGyKOvrkq7Gqqk9ffijJFU23Q4Xvvx6uxzmNEp2NoHITx3owNbceEfHYGOt6bOYDubE8cIJBj4vziIYj3ZjIRdHZOlAYKIkbAn0beGUKoISQdgulNSH5IAMZxcxFxtHtTm5yunaB0go7J3JO%2FIfMxmfvtecTR11eU7JZua5WlUscW3bCA7A4h20Mk2QHSdQcyPwBLP4LkP5HKkwXE0faiVRqSF1P3Ug4hwyGU6IFaB9nkkw6y0EGWOIj4UYnWW6HrNsIg9P1mjTHm%2B4zVm%2FO8zv1aM3SRsYm8HtKkB6Z6YGYDidnAqtw6rJ%2BDyR7DrhSw3IFNx8R5bwMdXiAXBLklyClBLgnylCDvFDtc2aotdrmyWeDNenXW%2FWKg03af7ui0LWICanr95Jg8N4nH8c9XsCqOSi4L6HzoCZeFrYY%2FX%2FWo77ZcQVlNzHsttwkrC0h7Zup4XY7Ja2efQSLHZO78PwjoAaw6AJPPgmYvgeaDRtUFXRnUmi7W4%2F1AmIzG7TJTWQCuCyTpHNI1p6%2BOyYvTNV2%2FX4Vgo0svfN%2F%2F8fHmOTBTIDEFPpTfEbTVvcEtnZPtWzq35OFikspIrtPJCm%2BnNBVzD94Ra7k2%2FMZV2%2FvyMpsAk3H%2FjrDpAo25jNuWfHVFci7MNW2YIN%2FesMsiWMrsypXMxFmysPTmtRtRYoS1UsdDUHl49xGYHJOzu5Xp43z5iwjSDGGyAlE2IrOC1AdgyQZsMrr01B93L3%2FSWIDVBEadcoLEQZ4VA1MNTi%2BVHJO3P%2FgdSowubn16%2F9fPO3%2BCBgWsOI0hEKNHf53w%2B%2FYe2sYBTTcRRwU6pkBHFaCqB5v9b5AmZnTxZ39aCJQzCJRxtgNl1NZJvFYelepeTTSDZoNxHgjGvUbVb%2FquW%2BW81mgJr4XUjsXKA%2BdfAAAA%2F%2F8BAAD%2F%2F3O56Ud4BAAA
IP 173.233.137.36:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerLet's Encrypt
Subjectcurryoxygencheaper.com
FingerprintF2:DD:AF:D4:3D:96:F2:C2:C1:37:D0:07:73:80:BA:7B:02:75:3E:DC
ValidityTue, 28 Nov 2023 08:20:34 GMT - Mon, 26 Feb 2024 08:20:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scxR%2Btzne%2FIEhEgwc9CHNTo8x0T8%2FszJhDfhgTg2t2TSJ78JLqqurZcqu7mqru6dk9LS5IvM1CQMFLz5v9oXER8wdIwqwedEDY8SALunjx4kkQcvIgMzuw%2BIHuz6fqvcN771Mf97Nj4iGjR0vv6nWpFK3Uy27plWUZc53b0s07Jc8tuxdKyzKer10odSc%2F03nDc%2Btl99XSdcFWdaXqeq7ruV7pmjQi1N3KFIVM9lteueWWa9WyV6%2Bha%2F57tpkDSx3wzjE5B8nH%2F1%2F54SEkGyKOvrkq7Gqqk9ffijJFU23Q4Xvvx6uxzmNEp2NoHITx3owNbceEfHYGOt6bOYDubE8cIJBj4vziIYj3ZjIRdHZOlAYKIkbAn0beGUKoISQdgulNSH5IAMZxcxFxtHtTm5yunaB0go7J3JO%2FIfMxmfvtecTR11eU7JZua5WlUscW3bCA7A4h20Mk2QHSdQcyPwBLP4LkP5HKkwXE0faiVRqSF1P3Ug4hwyGU6IFaB9nkkw6y0EGWOIj4UYnWW6HrNsIg9P1mjTHm%2B4zVm%2FO8zv1aM3SRsYm8HtKkB6Z6YGYDidnAqtw6rJ%2BDyR7DrhSw3IFNx8R5bwMdXiAXBLklyClBLgnylCDvFDtc2aotdrmyWeDNenXW%2FWKg03af7ui0LWICanr95Jg8N4nH8c9XsCqOSi4L6HzoCZeFrYY%2FX%2FWo77ZcQVlNzHsttwkrC0h7Zup4XY7Ja2efQSLHZO78PwjoAaw6AJPPgmYvgeaDRtUFXRnUmi7W4%2F1AmIzG7TJTWQCuCyTpHNI1p6%2BOyYvTNV2%2FX4Vgo0svfN%2F%2F8fHmOTBTIDEFPpTfEbTVvcEtnZPtWzq35OFikspIrtPJCm%2BnNBVzD94Ra7k2%2FMZV2%2FvyMpsAk3H%2FjrDpAo25jNuWfHVFci7MNW2YIN%2FesMsiWMrsypXMxFmysPTmtRtRYoS1UsdDUHl49xGYHJOzu5Xp43z5iwjSDGGyAlE2IrOC1AdgyQZsMrr01B93L3%2FSWIDVBEadcoLEQZ4VA1MNTi%2BVHJO3P%2FgdSowubn16%2F9fPO3%2BCBgWsOI0hEKNHf53w%2B%2FYe2sYBTTcRRwU6pkBHFaCqB5v9b5AmZnTxZ39aCJQzCJRxtgNl1NZJvFYelepeTTSDZoNxHgjGvUbVb%2FquW%2BW81mgJr4XUjsXKA%2BdfAAAA%2F%2F8BAAD%2F%2F3O56Ud4BAAA HTTP/1.1
Host: curryoxygencheaper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Cookie: u_pl=20130351; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 15:28:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 76e6271737cf59f9aca9081e4ef6ebcb
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/js/script.js
172.64.109.10200 OK 3.9 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/js/script.js
IP 172.64.109.10:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type Unicode text, UTF-8 text, with very long lines (4043), with no line terminators
Hash f2001508a1433d69f73ae313da8090c3
1ec17bee2988ff2a70745692a4b0bc9d8bf0ee8a
a390ae0f0d236c036d3fae3e793f1d1dfd2c7879ad2215f15c5cadcb7a0a7244
GET /sb/interstitial/games/hentai-heroes/main/8/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:28:03 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2023 16:13:00 GMT
etag: W/"6531558c-f3f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i%2BLefrfN80emUWFDcei5GcVg8zTpca68VO4hPI71APTP57LGZGuhc3RbkD6VCEZYFoOEBRvbyFvJHCSlMpXTqKGgxDa%2F5v%2BGlXX30AfeAuo2yhUSZ%2BQ4ZyI1PJ9s0V2K1VPgGwHUnLfy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e36694b6359-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.yourwebbars.com/sb/interstitial/games/hentai-heroes/main/8/index.html
104.26.6.19200 OK 1.2 kB URL GET HTTP/2 cdn.yourwebbars.com/sb/interstitial/games/hentai-heroes/main/8/index.html
IP 104.26.6.19:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint84:82:6E:35:03:D4:C4:FC:BA:08:CD:C8:E6:A3:97:A9:20:2F:F5:49
ValiditySun, 23 Jul 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (1310), with no line terminators
Hash e3b4395490a66f24e4461eea7481e495
18a3479d01e1a5dec50eb78d998fbad56a8b72ee
88718b8db2865c0e2f96730d4e2925b79005f0e68ceed052120b356655e69f99
GET /sb/interstitial/games/hentai-heroes/main/8/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 15:28:03 GMT
content-type: text/html
last-modified: Thu, 19 Oct 2023 16:12:54 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 172822
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iA4hUJwlOXekbay9YijRb1tCR6GvB8y%2BUhEMBbTf5jukvwOX4smP%2FmO1PpTvypAYViH7tBjVG0M0kt53gXpqsJFmr0ehQff1DU%2F2uXwmHbSLhd8dAJz%2BAWgzFxsTmhJCnBqyQ8M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e41e34db987128-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300
142.250.74.106200 OK 2.9 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Open+Sans:300
IP 142.250.74.106:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (2967), with no line terminators
Hash 80813f4f3e2e87ae1537b70663ba3399
e2d1a0120591483e9b7947cf780ffc1fe87e2d3c
ccfdc20a84580cca4432b1de5e2d47b8f05bd3b7b406b905f9200830a03df2ca
GET /css?family=Open+Sans:300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 30 Nov 2023 15:28:01 GMT
date: Thu, 30 Nov 2023 15:28:01 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.q86ihocu0HA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9gC2cqySYcBh8kT9LMyuiwdwIYGQ/cb=gapi.loaded_0
142.250.74.78200 OK 122 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.q86ihocu0HA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9gC2cqySYcBh8kT9LMyuiwdwIYGQ/cb=gapi.loaded_0
IP 142.250.74.78:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1505)
Size 122 kB (121508 bytes)
Hash 3898b5ce3092170b3be4c6d959f4490b
65cd0e7ee8b2d8fca66c5c8836234f16700b098b
3e14a8c1b9a0bb7b7b36cd163d168074b385572518dbe6cbc66115880c701996
GET /_/scs/abc-static/_/js/k=gapi.gapi.en.q86ihocu0HA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9gC2cqySYcBh8kT9LMyuiwdwIYGQ/cb=gapi.loaded_0 HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 40994
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 14:08:06 GMT
expires: Fri, 29 Nov 2024 14:08:06 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 21:49:34 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 4796
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
142.250.74.106200 OK 6.8 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP 142.250.74.106:443
Requested by https://www.beruang.club/2023/04/wanita-panggilan-dan-bertemu-mantan.html?m=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (7013), with no line terminators
Hash 49475c425d6c00477bb339179326c49b
bd97deeb753f44f43a21feafa92d98239fa511bd
598841a98ad357d2896d2f093ea3e4e1d44e24b3351268ffd45e61ff8c1d0e09
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 30 Nov 2023 15:28:03 GMT
date: Thu, 30 Nov 2023 15:28:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000