beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
216.239.32.21301 Moved Permanently 267 B URL User Request GET HTTP/2 beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
IP 216.239.32.21:443
Certificate IssuerGoogle Trust Services LLC
Subjectberuang.club
Fingerprint07:10:29:B7:6E:CC:79:B7:1E:35:F4:D1:F4:FD:6B:27:2D:3C:ED:5F
ValidityWed, 13 Sep 2023 04:35:45 GMT - Tue, 12 Dec 2023 05:07:25 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash c2ba91751f636e35df8e10ddd813ef5e
a2ae21a9b6e7a95d2db47ef084d63c8ef36f27bc
0a1be74714bd32ae90e8800f554619bb05f3b3dd21f5540ce2c444be6119843a
GET /2022/10/sedot-susu-besar-sambil-di-kocok.html HTTP/1.1
Host: beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
date: Wed, 29 Nov 2023 10:34:40 GMT
content-type: text/html; charset=UTF-8
server: ghs
content-length: 267
x-xss-protection: 0
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
142.250.74.115200 OK 36 kB URL User Request GET HTTP/2 www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
IP 142.250.74.115:443
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6817)
Hash 9e67f51dba7a91984d2add88ff503018
4e0a0b1eafa57d93244f957cff731637abc0a540
b1b764b0c589d5e89107c9c5f15f3ba5753fa30020b6bd24429cd81a9f39be84
GET /2022/10/sedot-susu-besar-sambil-di-kocok.html HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests
content-security-policy-report-only: default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; report-to blogspot; report-uri https://www.blogger.com/cspreport
report-to: {"group":"blogspot","max_age":2592000,"endpoints":[{"url":"https://www.blogger.com/cspreport"}]}
content-type: text/html; charset=UTF-8
expires: Wed, 29 Nov 2023 10:34:41 GMT
date: Wed, 29 Nov 2023 10:34:41 GMT
cache-control: private, max-age=0
last-modified: Tue, 28 Nov 2023 06:20:37 GMT
etag: W/"93908ef5f8729e6f6c76cdebb5d4a79425ecf24f0834c509419d7ee0ccdf93d7"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 35825
server: GSE
X-Firefox-Spdy: h2
www.beruang.club/js/cookienotice.js
142.250.74.115200 OK 2.0 kB URL GET HTTP/2 www.beruang.club/js/cookienotice.js
IP 142.250.74.115:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Wed, 29 Nov 2023 10:34:41 GMT
expires: Wed, 06 Dec 2023 10:34:41 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2023 07:57:28 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
142.250.74.105200 OK 6.6 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP 142.250.74.105:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Nov 2023 21:54:26 GMT
expires: Thu, 21 Nov 2024 21:54:26 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 22 Nov 2023 16:58:22 GMT
content-type: text/css
vary: Accept-Encoding
age: 564015
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/325989852-widgets.js
142.250.74.105200 OK 59 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/325989852-widgets.js
IP 142.250.74.105:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (2258)
Hash 2aaaea7286ee481cbc12cfd76e10c0cf
6e8576cb84ac125faa0bc0a5fe5508166cc4eed8
4bfa00cdbc7a40f5dad3dfc3a21dada224e61e358e78d7b262bab098bccbc580
GET /static/v1/widgets/325989852-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 59316
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 02:00:08 GMT
expires: Fri, 22 Nov 2024 02:00:08 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 23 Nov 2023 00:54:48 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 549273
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
142.250.74.170200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP 142.250.74.170:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32180)
Hash 32015dd42e9582a80a84736f5d9a44d7
41b4bfbaa96be6d1440db6e78004ade1c134e276
8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29707
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 28 Nov 2023 19:08:08 GMT
expires: Wed, 27 Nov 2024 19:08:08 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 55593
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-170186304-2
142.250.74.168200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-170186304-2
IP 142.250.74.168:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash 22882eb01d738471970b0a4a00c2f474
ab5c009dd99fcf839fb118b2aafca3ad01352934
75b60a2f430935a8d4a20d66ea7a693ab424f26326466a1a2508efaaf2d40984
GET /gtag/js?id=UA-170186304-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 29 Nov 2023 10:34:41 GMT
expires: Wed, 29 Nov 2023 10:34:41 GMT
cache-control: private, max-age=900
last-modified: Wed, 29 Nov 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68715
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-XM2YCT0PTM
142.250.74.168200 OK 90 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-XM2YCT0PTM
IP 142.250.74.168:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3651)
Hash cf0a410b97c9af1ad01449955130a35d
3a755988e6c9f6fbb85796ce1c421687e2e1cc0d
3bfac892aec6974f82101c404e0c61999cc7121a983e4b77d67c4a6c5e6030bc
GET /gtag/js?id=G-XM2YCT0PTM HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 29 Nov 2023 10:34:41 GMT
expires: Wed, 29 Nov 2023 10:34:41 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89663
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
poweredby.jads.co/js/jads.js
185.94.237.64301 Moved Permanently 178 B URL GET HTTP/1.1 poweredby.jads.co/js/jads.js
IP 185.94.237.64:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 29 Nov 2023 10:34:41 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
cdn.jwplayer.com/libraries/Wg1rABIO.js
54.230.111.3200 OK 45 kB URL GET HTTP/2 cdn.jwplayer.com/libraries/Wg1rABIO.js
IP 54.230.111.3:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerAmazon
Subjectjwplayer.com
Fingerprint1E:36:B3:05:8C:13:3B:38:7D:97:0E:97:1E:60:3F:62:06:F3:A6:33
ValidityFri, 27 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65143)
Hash 2c792231921cf6e428805f28b8989f17
cdc6852172194c63c0f8dc827d274c4a0224fbc4
bf8ee2f1ec413ccb8b4a2c9e908c855d01e7a8ce7ebffcb9a7dcfbe61e86e441
GET /libraries/Wg1rABIO.js HTTP/1.1
Host: cdn.jwplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 44857
access-control-allow-origin: *
cache-control: max-age=180
content-encoding: gzip
date: Wed, 29 Nov 2023 10:34:41 GMT
server: openresty
x-robots-tag: noindex, indexifembedded
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zzjziya_qxMhKWI1VzsWuV7vFwrPuX99nOpSQ_9z4yjHI6bdtdaBVA==
X-Firefox-Spdy: h2
www.beruang.club/2022/10/path/to/font-awesome/css/font-awesome.min.css
142.250.74.115404 Not Found 27 kB URL GET HTTP/2 www.beruang.club/2022/10/path/to/font-awesome/css/font-awesome.min.css
IP 142.250.74.115:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6817)
Hash 3190b8029b9999d6d0fb607a1a9afbe3
baa3f01513b0c001aa9f30c9a2deb9a4bcd8d2f2
e8706de4dc1c7c116a8ceca8fad80be0c580c83016c9b703af0392ec0f6e090d
GET /2022/10/path/to/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 29 Nov 2023 10:34:41 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 27104
server: GSE
X-Firefox-Spdy: h2
www.beruang.club/feeds/posts/default/-/BLG?alt=json-in-script&callback=relpostimgcuplik&max-results=50
142.250.74.115200 OK 29 kB URL GET HTTP/2 www.beruang.club/feeds/posts/default/-/BLG?alt=json-in-script&callback=relpostimgcuplik&max-results=50
IP 142.250.74.115:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type ASCII text, with very long lines (65520)
Hash 0486d5fc2680924eb984fd8a061c87ee
6d7adfe141281bb51e2b60e24f7edcf756cb6a5f
4897f0656593565c0456e77b4aa90038c3aab1bda400fa1691471e8510020744
GET /feeds/posts/default/-/BLG?alt=json-in-script&callback=relpostimgcuplik&max-results=50 HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"c4deecb04b2b2dec5c378f6edc5200f34b24f1fdd89521ac5ce2f511f89c2e7b"
date: Wed, 29 Nov 2023 10:34:41 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Wed, 29 Nov 2023 10:34:42 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 28 Nov 2023 06:20:37 GMT
content-encoding: gzip
content-length: 28882
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
poweredby.jads.co/js/jads2.js
185.94.237.64200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP 185.94.237.64:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.beruang.club/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 10:34:41 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip
unpkg.com/videojs-contrib-hls/dist/videojs-contrib-hls.js
104.16.125.175302 Found 48 kB URL GET HTTP/2 unpkg.com/videojs-contrib-hls/dist/videojs-contrib-hls.js
IP 104.16.125.175:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash 45e52ce80ce860f39658e0eceb009c0e
3a5ae70add0e0911d8be46cbb287be128670f449
c6e912247566be82e464eb239686c585fe1f750f9dd62616dd8c966dc1c16571
GET /videojs-contrib-hls/dist/videojs-contrib-hls.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 29 Nov 2023 10:34:41 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HGDA773N08TFSR40EZC83R72-arn
cf-cache-status: HIT
age: 102
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82da33198a5f56ab-OSL
X-Firefox-Spdy: h2
bit.ly/3j0NY7K
67.199.248.11301 Moved Permanently 203 B IP 67.199.248.11:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerDigiCert Inc
Subjectbit.ly
FingerprintA2:9E:97:EA:E4:51:06:C6:7B:BF:11:55:77:67:F5:8F:E5:7A:F7:0A
ValidityFri, 12 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 3f6bd12638ef78a75945548a17fac024
ee44ee493b25140b96ef176e800c5970aba91896
934b05d817b8ace22e4c894e744a4c47785082748f589b99dd4a08354b73b205
GET /3j0NY7K HTTP/1.1
Host: bit.ly
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 29 Nov 2023 10:34:42 GMT
content-type: text/html; charset=utf-8
content-length: 203
cache-control: private, max-age=90
content-security-policy: referrer always;
location: https://1.bp.blogspot.com/-fOkWkRoGwMA/YBcJiAH9v2I/AAAAAAAA15A/qcqyjDfdQMsIwUxQrjNgGEoABdQ5cGqVgCNcBGAsYHQ/s0/20.gif
referrer-policy: unsafe-url
set-cookie: _bit=natayG-1eec7c499a8d25d6ca-006; Domain=bit.ly; Expires=Mon, 27 May 2024 10:34:42 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bit.ly/3cevhw2
67.199.248.11301 Moved Permanently 207 B IP 67.199.248.11:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerDigiCert Inc
Subjectbit.ly
FingerprintA2:9E:97:EA:E4:51:06:C6:7B:BF:11:55:77:67:F5:8F:E5:7A:F7:0A
ValidityFri, 12 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash d5d7885eee16c2df3538aa928f9c7b0c
3f94fa061ea8dfa96bf34815480ff34316ddb610
5e84a4cba32818f5a7173fdbc7042e068109a235abd1cb1fe152e8d3dbb76e65
GET /3cevhw2 HTTP/1.1
Host: bit.ly
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 29 Nov 2023 10:34:42 GMT
content-type: text/html; charset=utf-8
content-length: 207
cache-control: private, max-age=90
content-security-policy: referrer always;
location: https://1.bp.blogspot.com/-aeYDsOBJLdA/YBAmqSeCOwI/AAAAAAAA1Wo/3wi7RPc8qwUfaD1LwU7QIrCjesx4EGJTwCNcBGAsYHQ/s0/PASANG.gif
referrer-policy: unsafe-url
set-cookie: _bit=natayG-f4c740a670634ec047-00s; Domain=bit.ly; Expires=Mon, 27 May 2024 10:34:42 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.beruang.club/2022/10/xxxxx
142.250.74.115404 Not Found 27 kB URL GET HTTP/2 www.beruang.club/2022/10/xxxxx
IP 142.250.74.115:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6817)
Hash 46877c7c262a631a6e79db81193b97c6
8e5a6b6fc2c7143a8a36a6400840ee26c11edaf8
5ec711753511c9baedaa75b4a7cbac64f2a3250d2c0453b506f00b0519cd20c3
GET /2022/10/xxxxx HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 29 Nov 2023 10:34:42 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 27096
server: GSE
X-Firefox-Spdy: h2
pl20230850.toprevenuegate.com/0c/ba/6f/0cba6f1e0cf973621a3090eac4e61908.js
192.243.59.13200 OK 15 kB URL GET HTTP/1.1 pl20230850.toprevenuegate.com/0c/ba/6f/0cba6f1e0cf973621a3090eac4e61908.js
IP 192.243.59.13:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjecttoprevenuegate.com
Fingerprint7D:44:5C:97:A8:B4:D2:87:5C:7C:4E:B7:DA:3A:38:99:85:00:67:40
ValidityFri, 20 Oct 2023 09:02:00 GMT - Thu, 18 Jan 2024 09:01:59 GMT
File type ASCII text, with very long lines (42787), with no line terminators
Hash c6e3fa8a3c2658173d8e996c16c860fa
d285e9ecc0957460fa703f50a3859d07c8b91ca8
6a106bb5f5cf7818e91a7b351708bcfb9011b5b0583aae0750cf5a440c43cc70
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0c/ba/6f/0cba6f1e0cf973621a3090eac4e61908.js HTTP/1.1
Host: pl20230850.toprevenuegate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 29 Nov 2023 10:34:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: db222089b1f4cb54090ae3329c9137a3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.fluidplayer.com/v3/current/fluidplayer.min.js
185.76.9.26200 OK 101 kB URL GET HTTP/2 cdn.fluidplayer.com/v3/current/fluidplayer.min.js
IP 185.76.9.26:443
ASN #60068 Datacamp Limited
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectfluidplayer.com
FingerprintF7:9C:B4:85:DA:61:E8:2F:F4:BD:0B:E8:14:8A:4D:C1:80:00:1F:DD
ValidityThu, 05 Oct 2023 14:55:10 GMT - Wed, 03 Jan 2024 14:55:09 GMT
File type gzip compressed data, from Unix\012- data
Size 101 kB (100774 bytes)
Hash ff18533f112b25a2cb9f3c2a9a3d9a62
b39c4552cb191340ddd1b140015428eaadae9bc2
d381753b151cf03ce6d2ae484a269d7f14dbd9d8ea67129ea2b1494f51caecc1
GET /v3/current/fluidplayer.min.js HTTP/1.1
Host: cdn.fluidplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:41 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 16 Nov 2023 13:30:47 GMT
etag: W/"65561987-38863"
expires: Sat, 18 Nov 2023 10:16:53 GMT
cache-control: max-age=86400
access-control-allow-origin: *
x-77-nzt: ArlMCRQ3Nzf/qSQAALlMCgE3Nzf/AAAAAA
x-77-nzt-ray: af5856305cd54dc2c11367651245a625
x-accel-expires: @1701331096
x-accel-date: 1701244696
x-77-cache: HIT
x-77-age: 9385
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT
x-age-lb: 9385
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog
142.250.74.105302 Found 315 B URL GET HTTP/3 www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog
IP 142.250.74.105:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (420)
Hash 0350671b44d1f6611bf7e3368031a92a
606cc9da7d9488d9ff3f73380ccc9830b645df05
58a4b87cd870e1c5fa41352339c87dd6996a79d9f855df25b7d7ab23b1b27d94
GET /blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html%26type%3Dblog%26bpli%3D1&go=true
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Wed, 29 Nov 2023 10:34:42 GMT
expires: Wed, 29 Nov 2023 10:34:42 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 315
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
104.18.11.207200 OK 67 kB URL GET HTTP/3 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
IP 104.18.11.207:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Hash db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 29 Nov 2023 10:34:42 GMT
content-type: font/woff2
content-length: 66624
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "db812d8a70a4e88e888744c1c9a27e89"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:48:08
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 1b7f7d322c2c445bafdb11301ee3872f
cdn-cache: HIT
cf-cache-status: HIT
age: 68827
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82da331f8b6c5690-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.227200 OK 48 kB URL GET HTTP/3 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.227:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 05:00:58 GMT
expires: Fri, 22 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 538424
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.beruang.club/feeds/posts/default/-/Jav%20Sub%20Indo?alt=json-in-script&callback=relpostimgcuplik&max-results=50
142.250.74.115200 OK 29 kB URL GET HTTP/2 www.beruang.club/feeds/posts/default/-/Jav%20Sub%20Indo?alt=json-in-script&callback=relpostimgcuplik&max-results=50
IP 142.250.74.115:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type ASCII text, with very long lines (65520)
Hash e4f748ca60bd65e5363498a34d2c3d4c
bfdae074d3004e15c445709454013639956c9623
73baaa25d9aec816facb7e3f2d81688ab75a11e01f40cef682f1475eb2605190
GET /feeds/posts/default/-/Jav%20Sub%20Indo?alt=json-in-script&callback=relpostimgcuplik&max-results=50 HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"79cd8a13b9b62ac815fc392c09c91b3a55c8d7dca76513bdaea1a8ae2b60b348"
date: Wed, 29 Nov 2023 10:34:42 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Wed, 29 Nov 2023 10:34:43 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 28 Nov 2023 06:20:37 GMT
content-encoding: gzip
content-length: 28899
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-EQ87SLSFFF&l=dataLayer&cx=c
142.250.74.168200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-EQ87SLSFFF&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash ee91d45374baec343036388e2289707f
1efea5893a8a3e2b4657cbd3a12b9915d4eac36f
9103162225f1942454b32efd99c570a86f0a6989121a8c818a4968b266221d41
GET /gtag/js?id=G-EQ87SLSFFF&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 29 Nov 2023 10:34:42 GMT
expires: Wed, 29 Nov 2023 10:34:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80941
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-XM2YCT0PTM&l=dataLayer&cx=c
142.250.74.168200 OK 90 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-XM2YCT0PTM&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3651)
Hash 7d0848e805c8d16c75a0e56186613c29
3d037461e1ce2f385898886a8df12fe123353b5e
b9fc20e8e24a6d763c1124dd8b7c3a9aef85333f2df8deb84ba55d5be444308e
GET /gtag/js?id=G-XM2YCT0PTM&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 29 Nov 2023 10:34:42 GMT
expires: Wed, 29 Nov 2023 10:34:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89677
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1.bp.blogspot.com/-aeYDsOBJLdA/YBAmqSeCOwI/AAAAAAAA1Wo/3wi7RPc8qwUfaD1LwU7QIrCjesx4EGJTwCNcBGAsYHQ/s0/PASANG.gif
142.250.74.161200 OK 407 kB URL GET HTTP/2 1.bp.blogspot.com/-aeYDsOBJLdA/YBAmqSeCOwI/AAAAAAAA1Wo/3wi7RPc8qwUfaD1LwU7QIrCjesx4EGJTwCNcBGAsYHQ/s0/PASANG.gif
IP 142.250.74.161:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type GIF image data, version 89a, 480 x 398\012- data
Size 407 kB (406574 bytes)
Hash 23164e2ebd1c1e5ab4c40067dcce799e
0593278823aa880a8d6a39a3b9a4cf91960de196
03160613d9bedb7deeafa077bfb0d95c1bf53207abc511c8fd967730a03ed010
GET /-aeYDsOBJLdA/YBAmqSeCOwI/AAAAAAAA1Wo/3wi7RPc8qwUfaD1LwU7QIrCjesx4EGJTwCNcBGAsYHQ/s0/PASANG.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="PASANG.gif"
x-content-type-options: nosniff
server: fife
content-length: 406574
x-xss-protection: 0
date: Wed, 29 Nov 2023 10:34:42 GMT
expires: Thu, 30 Nov 2023 10:34:42 GMT
cache-control: public, max-age=86400, no-transform
etag: "vd56b"
content-type: image/gif
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html%26type%3Dblog%26bpli%3D1&go=true
142.250.74.13302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html%26type%3Dblog%26bpli%3D1&go=true
IP 142.250.74.13:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html%26type%3Dblog%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.beruang.club/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:vq_3_QcwbAFeYRgr-nsAHNk-ue7B7w:Hfw5FvRqNGuYSFqb; Expires=Fri, 28-Nov-2025 10:34:42 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 29 Nov 2023 10:34:42 GMT
location: https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-QuravamOELd64MatHIrfdA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-fOkWkRoGwMA/YBcJiAH9v2I/AAAAAAAA15A/qcqyjDfdQMsIwUxQrjNgGEoABdQ5cGqVgCNcBGAsYHQ/s0/20.gif
142.250.74.161200 OK 32 kB URL GET HTTP/2 1.bp.blogspot.com/-fOkWkRoGwMA/YBcJiAH9v2I/AAAAAAAA15A/qcqyjDfdQMsIwUxQrjNgGEoABdQ5cGqVgCNcBGAsYHQ/s0/20.gif
IP 142.250.74.161:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type GIF image data, version 89a, 728 x 90\012- data
Hash e15a9ad6be1d3ac875b83dbe7ac305f6
f1b6286c7553ff258b63927a0ef05b708c31caeb
f667adaa66d7cfe6c65a1ae9107e63d35d5bf88ab6bae8ce05584bbb6c81a163
GET /-fOkWkRoGwMA/YBcJiAH9v2I/AAAAAAAA15A/qcqyjDfdQMsIwUxQrjNgGEoABdQ5cGqVgCNcBGAsYHQ/s0/20.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "vd791"
expires: Thu, 30 Nov 2023 10:34:42 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="20.gif"
x-content-type-options: nosniff
date: Wed, 29 Nov 2023 10:34:42 GMT
server: fife
content-length: 32115
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
poweredby.jads.co/adshow.php?adzone=1040084
185.94.237.64200 OK 1.5 kB URL GET HTTP/1.1 poweredby.jads.co/adshow.php?adzone=1040084
IP 185.94.237.64:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (412), with CRLF, LF line terminators
Hash 396d2eabcd282c9da189dd6310f67bf2
1b205ced9e9f63fd62ebfe644c65fef3e5c1fbc7
50cb92fb9efe7ceb096e9a9b7a87a3a9379a6d94e4752007310301b9de93d4e3
GET /adshow.php?adzone=1040084 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 10:34:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=ab05c9d5fc757cedfccd8779bff063b6; expires=Thu, 28-Nov-2024 10:34:42 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps42805=1; expires=Thu, 30-Nov-2023 10:34:42 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjExODA0MDY7aToxNzAxNTEzMjgyO30%3D; expires=Sat, 02-Dec-2023 10:34:42 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sat, 02-Dec-2023 10:34:42 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
216.58.207.227200 OK 50 kB URL GET HTTP/3 fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP 216.58.207.227:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 50368, version 1.0\012- data
Hash 4facfd6ff39e147b7e39c4b1abe4117d
0f7c0d978c209d21eb3f55950fc43e77c196ec3b
a246c4de8a0f1f1fdb6ee52565018dc341063aa9efe8481034bc3ef7d697e334
GET /s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 50368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:48:09 GMT
expires: Fri, 22 Nov 2024 04:48:09 GMT
cache-control: public, max-age=31536000
age: 539194
last-modified: Thu, 14 Sep 2023 01:04:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/video.g?token=AD6v5dyJu51eYI-E1f-a1XLYSfjvPbkiG-_djS-ljaueUK3pg_cT6lYcqdMcJB_mpQNJ65tAK-VgW5z8UbRSFZZsNki_rVofG6opy2kb_GUxjjcid90UWA8o1HIfS_g3ZugLSsXwqiPj
142.250.74.105200 OK 1.3 kB URL GET HTTP/3 www.blogger.com/video.g?token=AD6v5dyJu51eYI-E1f-a1XLYSfjvPbkiG-_djS-ljaueUK3pg_cT6lYcqdMcJB_mpQNJ65tAK-VgW5z8UbRSFZZsNki_rVofG6opy2kb_GUxjjcid90UWA8o1HIfS_g3ZugLSsXwqiPj
IP 142.250.74.105:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (946)
Hash 796bb1bcb0b0ff3e92993c0fd580e9be
d64efa1597bab7e010cc00b88bafa035b93036f4
be84761610cd6b0f2480d4f40de7bcba5f35e0e08a17ee2cf4dfcff4a691a574
GET /video.g?token=AD6v5dyJu51eYI-E1f-a1XLYSfjvPbkiG-_djS-ljaueUK3pg_cT6lYcqdMcJB_mpQNJ65tAK-VgW5z8UbRSFZZsNki_rVofG6opy2kb_GUxjjcid90UWA8o1HIfS_g3ZugLSsXwqiPj HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: private, max-age=25200
pragma: no-cache
expires: Wed, 29 Nov 2023 10:34:43 GMT
date: Wed, 29 Nov 2023 10:34:43 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1262
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/cspreport
142.250.74.105 0 B URL www.blogger.com/cspreport
IP 142.250.74.105:0
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cspreport HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 541
Origin: https://www.beruang.club
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
date: Wed, 29 Nov 2023 10:34:43 GMT
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/1308184192-video_compiled.js
142.250.74.105200 OK 14 kB URL GET HTTP/3 www.blogger.com/static/v1/jsbin/1308184192-video_compiled.js
IP 142.250.74.105:443
Requested by https://www.blogger.com/video.g?token=AD6v5dyJu51eYI-E1f-a1XLYSfjvPbkiG-_djS-ljaueUK3pg_cT6lYcqdMcJB_mpQNJ65tAK-VgW5z8UbRSFZZsNki_rVofG6opy2kb_GUxjjcid90UWA8o1HIfS_g3ZugLSsXwqiPj
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (2185)
Hash 5804580cedca380a411189bd11c86a08
ca213273d9c019cbb573a1e1de1d0f10035057b0
f0616cedea7a4640641ee06d093dacd648133057d7081223e72d2189bdbe3960
GET /static/v1/jsbin/1308184192-video_compiled.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/video.g?token=AD6v5dyJu51eYI-E1f-a1XLYSfjvPbkiG-_djS-ljaueUK3pg_cT6lYcqdMcJB_mpQNJ65tAK-VgW5z8UbRSFZZsNki_rVofG6opy2kb_GUxjjcid90UWA8o1HIfS_g3ZugLSsXwqiPj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 14272
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Nov 2023 21:49:07 GMT
expires: Thu, 21 Nov 2024 21:49:07 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 22 Nov 2023 20:53:59 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 564336
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.sslph.com/app.js
194.242.11.186200 OK 40 kB IP 194.242.11.186:443
ASN #34989 ServeTheWorld AS
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectcdn.sslph.com
FingerprintE3:C6:74:72:B1:9A:43:90:0A:45:4A:77:C9:D2:11:0C:76:E4:13:FF
ValiditySat, 28 Oct 2023 11:08:31 GMT - Fri, 26 Jan 2024 11:08:30 GMT
File type ASCII text, with very long lines (65381)
Hash 29a189095e22ff77bc462ede3aad9270
04eac5f0387e9ab6015db9ad6b16da5c05b1a36e
f51575c1095e52ee4600a37e8f632b63c9e621f7b49348e460b4c4befcf1f433
GET /app.js HTTP/1.1
Host: cdn.sslph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:43 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 244525
cdn-uid: 81f0ee8a-6b19-463e-a8be-46c199377685
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=2592000
etag: W/"6528086f-1b27b"
expires: Thu, 30 Nov 2023 19:17:17 GMT
last-modified: Thu, 12 Oct 2023 14:53:35 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uY4xOv51cpR1Q%2BMOmWdHPnf%2B3Ux9B%2B86xGnX4%2B4Z4L%2BOoH1yxhgFiSvJfwA6DF6cTRgQiz3zBMKvPv2zYMv7j7n7HrNaQ2PKRqwf4dsT%2FteZnfHSg6vDdiABLv8q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 81ee3cbe1a3fb4ed-OSL
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 10/31/2023 19:17:17
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 8cfb969bc71cf70bc91fac264cab6457
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.gstatic.com/images/icons/material/system/1x/play_arrow_white_48dp.png
142.250.74.35200 OK 220 B URL GET HTTP/2 www.gstatic.com/images/icons/material/system/1x/play_arrow_white_48dp.png
IP 142.250.74.35:443
Requested by https://www.blogger.com/video.g?token=AD6v5dyJu51eYI-E1f-a1XLYSfjvPbkiG-_djS-ljaueUK3pg_cT6lYcqdMcJB_mpQNJ65tAK-VgW5z8UbRSFZZsNki_rVofG6opy2kb_GUxjjcid90UWA8o1HIfS_g3ZugLSsXwqiPj
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash bbea220e3d4187feca59742dd22e2b27
800f7aea14ae6bb26b4d178af19e2b5fb6700d8a
b0c543456be59cd54e3b13f2fbc2071c25c6f79a6bb45957bbc12e033b55cf06
GET /images/icons/material/system/1x/play_arrow_white_48dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 220
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:50:00 GMT
expires: Fri, 22 Nov 2024 04:50:00 GMT
cache-control: public, max-age=31536000
age: 539083
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
landings-cdn.adsterratech.com/referralBanners/gif/160x600_adsterra_reff.gif
142.0.204.220200 OK 698 kB URL GET HTTP/1.1 landings-cdn.adsterratech.com/referralBanners/gif/160x600_adsterra_reff.gif
IP 142.0.204.220:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectlandings-cdn.adsterratech.com
Fingerprint34:E2:60:38:6D:32:91:0B:18:A5:B0:C5:0A:2D:79:09:A4:A3:92:C6
ValidityTue, 31 Oct 2023 06:40:27 GMT - Mon, 29 Jan 2024 06:40:26 GMT
File type GIF image data, version 89a, 160 x 600\012- data
Size 698 kB (697936 bytes)
Hash bda553f9457a554d1d515b5668a6a2ff
9459398d2b490f3434094a026deef18ec2fc827d
fdf4c535a1404142be0c34aa5353c28ddf30a7be86a66d990e49bfd503ac62e2
GET /referralBanners/gif/160x600_adsterra_reff.gif HTTP/1.1
Host: landings-cdn.adsterratech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 29 Nov 2023 10:34:42 GMT
Content-Type: image/gif
Content-Length: 697936
Last-Modified: Wed, 02 Feb 2022 00:50:10 GMT
Connection: keep-alive
ETag: "61f9d542-aa650"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Date
Cache-Control: max-age=315360000, public
Accept-Ranges: bytes
mildlunch.com/bCXpVFs.diGwlf0EY/Wyck/jeumL9RuvZsU/lnkbPJTfQh3KO/T_QpzTNtDZERtpNgDEcC5/NvDIM/0mMYgj
88.85.94.250200 OK 24 kB URL GET HTTP/2 mildlunch.com/bCXpVFs.diGwlf0EY/Wyck/jeumL9RuvZsU/lnkbPJTfQh3KO/T_QpzTNtDZERtpNgDEcC5/NvDIM/0mMYgj
IP 88.85.94.250:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectmildlunch.com
Fingerprint2C:50:55:2A:07:FA:71:63:92:47:2A:4B:B0:B4:A8:C5:8B:B1:B7:BA
ValiditySun, 08 Oct 2023 02:49:07 GMT - Sat, 06 Jan 2024 02:49:06 GMT
File type Unicode text, UTF-8 text, with very long lines (21403)
Hash 949e82ee69e232645ec2a1c708126833
28a48c329d99588a30ad8178b523810c9223bee1
dbdd2b400723f1f964cbfa65e053650c9dcdae20bca76b194d10bc405c898d29
GET /bCXpVFs.diGwlf0EY/Wyck/jeumL9RuvZsU/lnkbPJTfQh3KO/T_QpzTNtDZERtpNgDEcC5/NvDIM/0mMYgj HTTP/1.1
Host: mildlunch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 29 Nov 2023 10:34:43 GMT
content-type: application/javascript
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
last-modified: Wed, 29 Nov 2023 10:34:43 GMT
access-control-allow-credentials: true
vary: Accept-Encoding, Origin
access-control-allow-origin: https://www.beruang.club
set-cookie: kadSlcJ=eyJ0aW1lU3RhbXAiOjE3MDExODUyNTYsInpvbmVzIjp7IjQzODM2MDAiOls0MzgzNjAwLDEsMTcwMTE5NDQ2M10sIjQ1MTMwMzgiOls0NTEzMDM4LDEsMTcwMTIyMDI0M10sIjQ1NTI1MzgiOls0NTUyNTM4LDEsMTcwMTIwNDQzN10sIjQ2MzY2MjciOls0NjM2NjI3LDEsMTcwMTE3NjcwNV0sIjQ3MTAyODMiOls0NzEwMjgzLDEsMTcwMTE3NzY1NV0sIjQ3OTQzNDEiOls0Nzk0MzQxLDIsMTcwMTE4NTI1Nl0sIjQ4MTg0MjkiOls0ODE4NDI5LDEsMTcwMTI0OTUzM10sIjQ5MDQzNDciOls0OTA0MzQ3LDEsMTcwMTIyMzkyMl19fQ==; max-age=1732790083; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
www.beruang.club/2022/10/xxxxx
142.250.74.115404 Not Found 12 kB URL GET HTTP/2 www.beruang.club/2022/10/xxxxx
IP 142.250.74.115:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type gzip compressed data\012- data
Hash 7db55b02e21d60474dbf819cf07d6f38
7789b120981e336c89b093613dee05f965bb0d0f
c0ee024b3c1b2fc5afdb15eb2b83470f206841b68d08c6bb93b83e94cdcd70df
GET /2022/10/xxxxx HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Cookie: faceLike=liked; _ga_EQ87SLSFFF=GS1.1.1701254087.1.0.1701254087.0.0.0; _ga=GA1.1.509077307.1701254087; _ga_XM2YCT0PTM=GS1.1.1701254087.1.0.1701254087.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 29 Nov 2023 10:34:43 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 27096
server: GSE
X-Firefox-Spdy: h2
mildlunch.com/Yv2-xxpyZ.Wz5A0_ZCGDFE0FY-TH9IyJcKm_lMkNPOTPd-hRNSjTJUj_ZWjXNYkZM-TbYcxdZeT_kg4hNi2jR-hlOmWnRok_NqTrFsitM-GvNwixMyj_YA3BMCTDE-1F
88.85.94.250200 OK 0 B URL POST HTTP/2 mildlunch.com/Yv2-xxpyZ.Wz5A0_ZCGDFE0FY-TH9IyJcKm_lMkNPOTPd-hRNSjTJUj_ZWjXNYkZM-TbYcxdZeT_kg4hNi2jR-hlOmWnRok_NqTrFsitM-GvNwixMyj_YA3BMCTDE-1F
IP 88.85.94.250:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectmildlunch.com
Fingerprint2C:50:55:2A:07:FA:71:63:92:47:2A:4B:B0:B4:A8:C5:8B:B1:B7:BA
ValiditySun, 08 Oct 2023 02:49:07 GMT - Sat, 06 Jan 2024 02:49:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Yv2-xxpyZ.Wz5A0_ZCGDFE0FY-TH9IyJcKm_lMkNPOTPd-hRNSjTJUj_ZWjXNYkZM-TbYcxdZeT_kg4hNi2jR-hlOmWnRok_NqTrFsitM-GvNwixMyj_YA3BMCTDE-1F HTTP/1.1
Host: mildlunch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 90
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 29 Nov 2023 10:34:43 GMT
content-length: 0
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
18.185.201.157200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP 18.185.201.157:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash ff15a8f8fc8b2d0d0e1e1fe9ce2de64b
662aced55b9fb2b9f9ee555dd6eff7668d3f630e
579c58fce3d542a6fadb5a214dbfa1cf3f67ede86b882743e8d9ab6091b883e8
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:43 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.beruang.club
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=77ed5603-7b74-4c1f-9da6-7500b4794678:1:1; expires=Sat, 26 Nov 2033 10:34:43 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
mildlunch.com/YCm_xEvFY.2GtHl-cJnKNLDMa_GOVPjQaR2-VTyUPV2Wl_jYPZXaBbz-Jdme9f0gP_UiNjnkSlk-9nUoepEql_KsWtWu5vK-dxlylzXAU_mClDZEVFz-VHrISJ2Kl_CMaN1OpPq-RRTSJTZUe_kWEX0YTZV-dbNcedUe5_UgThXidjO-allmknxoT_kqdrFsdt1-pvXwWxmyl_PARBGCxDp-TF0GRHjIM_kK1LXMRNX-dPPQRRESR_EUcVDWVX5-cZkaJbqca_XeNfxgUhV-ZjJkRlVmE_toLpSqZry-ctmulvkwP_TydzhANBj-JDjEZFjGN_kIMJTKYLx-ZNTOkP4QN_2SRThUOVW-RXkYNZTaF_icMdGeNfi-MhjiYj3kM_TmEn1oJpn-Zr0sPtTuE_3wMxDyEzy-NBTCQDwEO_DGMHtIMJT-gL1MNNTOA_1QMRDSBTj-MVGWMX1YZ_maZbmcZdm-ZfigZhjiU_4kMlmmMn1-Np2qUr3sZ_Ducv1wMxj-EzmAeBmC9_uEZFWGlHk-PJTKQL3MO_TOQPzQNRD-ET?b=5
88.85.94.250200 OK 0 B URL GET HTTP/2 mildlunch.com/YCm_xEvFY.2GtHl-cJnKNLDMa_GOVPjQaR2-VTyUPV2Wl_jYPZXaBbz-Jdme9f0gP_UiNjnkSlk-9nUoepEql_KsWtWu5vK-dxlylzXAU_mClDZEVFz-VHrISJ2Kl_CMaN1OpPq-RRTSJTZUe_kWEX0YTZV-dbNcedUe5_UgThXidjO-allmknxoT_kqdrFsdt1-pvXwWxmyl_PARBGCxDp-TF0GRHjIM_kK1LXMRNX-dPPQRRESR_EUcVDWVX5-cZkaJbqca_XeNfxgUhV-ZjJkRlVmE_toLpSqZry-ctmulvkwP_TydzhANBj-JDjEZFjGN_kIMJTKYLx-ZNTOkP4QN_2SRThUOVW-RXkYNZTaF_icMdGeNfi-MhjiYj3kM_TmEn1oJpn-Zr0sPtTuE_3wMxDyEzy-NBTCQDwEO_DGMHtIMJT-gL1MNNTOA_1QMRDSBTj-MVGWMX1YZ_maZbmcZdm-ZfigZhjiU_4kMlmmMn1-Np2qUr3sZ_Ducv1wMxj-EzmAeBmC9_uEZFWGlHk-PJTKQL3MO_TOQPzQNRD-ET?b=5
IP 88.85.94.250:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectmildlunch.com
Fingerprint2C:50:55:2A:07:FA:71:63:92:47:2A:4B:B0:B4:A8:C5:8B:B1:B7:BA
ValiditySun, 08 Oct 2023 02:49:07 GMT - Sat, 06 Jan 2024 02:49:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /YCm_xEvFY.2GtHl-cJnKNLDMa_GOVPjQaR2-VTyUPV2Wl_jYPZXaBbz-Jdme9f0gP_UiNjnkSlk-9nUoepEql_KsWtWu5vK-dxlylzXAU_mClDZEVFz-VHrISJ2Kl_CMaN1OpPq-RRTSJTZUe_kWEX0YTZV-dbNcedUe5_UgThXidjO-allmknxoT_kqdrFsdt1-pvXwWxmyl_PARBGCxDp-TF0GRHjIM_kK1LXMRNX-dPPQRRESR_EUcVDWVX5-cZkaJbqca_XeNfxgUhV-ZjJkRlVmE_toLpSqZry-ctmulvkwP_TydzhANBj-JDjEZFjGN_kIMJTKYLx-ZNTOkP4QN_2SRThUOVW-RXkYNZTaF_icMdGeNfi-MhjiYj3kM_TmEn1oJpn-Zr0sPtTuE_3wMxDyEzy-NBTCQDwEO_DGMHtIMJT-gL1MNNTOA_1QMRDSBTj-MVGWMX1YZ_maZbmcZdm-ZfigZhjiU_4kMlmmMn1-Np2qUr3sZ_Ducv1wMxj-EzmAeBmC9_uEZFWGlHk-PJTKQL3MO_TOQPzQNRD-ET?b=5 HTTP/1.1
Host: mildlunch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 29 Nov 2023 10:34:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
142.250.74.105200 OK 40 kB URL GET HTTP/3 www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
IP 142.250.74.105:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32573)
Hash 7849f1ee53e4f865129c20373721bd98
7c137175fedf7663b502360e04942689a2aa59aa
48353ca586fc7c5a4a534c3ab6dd09e6d952011fd41df6ad56c4c587559f585a
GET /blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.beruang.club/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 29 Nov 2023 10:34:43 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 39626
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/static/v1/v-css/2223071481-static_pages.css
142.250.74.105200 OK 1.4 kB URL GET HTTP/3 www.blogger.com/static/v1/v-css/2223071481-static_pages.css
IP 142.250.74.105:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (3841)
Hash abd7446453ccdc733ba0a08169aff6c9
5c6954a63f01d55721edaa6236c5815087635333
bc75b808f349e4fcec454de341b7f80ff44fccd902b0e1109e18d5b3a35b7de3
GET /static/v1/v-css/2223071481-static_pages.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1393
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 02:13:46 GMT
expires: Thu, 28 Nov 2024 02:13:46 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 28 Nov 2023 23:59:06 GMT
content-type: text/css
vary: Accept-Encoding
age: 30057
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/static/v1/jsbin/671481879-analytics_autotrack.js
142.250.74.105200 OK 8.1 kB URL GET HTTP/3 www.blogger.com/static/v1/jsbin/671481879-analytics_autotrack.js
IP 142.250.74.105:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (524)
Hash 1c4256076fac77893331db4f22a9a41a
eb8a7de989615278406bee51533b6f4f6a71c841
57f24a99b10ad3f6431e857b33b26015c29c4cccced30375d222a35f0c4f9bb1
GET /static/v1/jsbin/671481879-analytics_autotrack.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 8121
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 02:13:46 GMT
expires: Thu, 28 Nov 2024 02:13:46 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 28 Nov 2023 09:59:20 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 30057
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.googleapis.com/css?family=Open+Sans:300
142.250.74.106200 OK 1.1 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Open+Sans:300
IP 142.250.74.106:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash f90cfcf97e1021d853cfeeb65df731f5
0d124fd187d788a0e37ea96a9b2a707af2f4c5b8
9014f92ffc2dfc242085ea5bebab644263f8c403bcac3a4222165eeb81604f79
GET /css?family=Open+Sans:300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 29 Nov 2023 10:34:43 GMT
date: Wed, 29 Nov 2023 10:34:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
p.sslph.com/dcba/
35.170.104.65404 Not Found 19 B IP 35.170.104.65:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectp.sslph.com
FingerprintA3:5B:3A:5E:13:F7:49:A9:7E:AB:2B:3D:14:A9:5E:9A:B0:4A:26:CA
ValidityMon, 27 Nov 2023 10:26:15 GMT - Sun, 25 Feb 2024 10:26:14 GMT
Hash 595e88012a6521aae3e12cbebe76eb9e
da3968197e7bf67aa45a77515b52ba2710c5fc34
b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793
GET /dcba/ HTTP/1.1
Host: p.sslph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Wed, 29 Nov 2023 10:34:43 GMT
content-type: text/plain; charset=utf-8
content-length: 19
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.blogger.com/cspreport
142.250.74.105 0 B URL www.blogger.com/cspreport
IP 142.250.74.105:0
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cspreport HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 392
Origin: https://www.beruang.club
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
date: Wed, 29 Nov 2023 10:34:43 GMT
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/css/maia.css
142.250.74.132200 OK 12 kB URL GET HTTP/2 www.google.com/css/maia.css
IP 142.250.74.132:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type Unicode text, UTF-8 text, with very long lines (43499), with no line terminators
Hash 9e914fd11c5238c50eba741a873f0896
950316ffef900ceecca4cf847c9a8c14231271da
8684a32d1a10d050a26fc33192edf427a5f0c6874c590a68d77ae6e0d186bd8a
GET /css/maia.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 12181
date: Wed, 29 Nov 2023 10:34:43 GMT
expires: Wed, 29 Nov 2023 10:34:43 GMT
cache-control: private, max-age=0
last-modified: Mon, 25 May 2020 08:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/plusone.js
172.217.21.174200 OK 22 kB URL GET HTTP/2 apis.google.com/js/plusone.js
IP 172.217.21.174:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
Fingerprint06:87:C0:63:02:21:98:02:BD:FC:A0:11:93:E9:3A:9F:51:21:06:D8
ValidityMon, 23 Oct 2023 11:25:10 GMT - Mon, 15 Jan 2024 11:25:09 GMT
File type ASCII text, with very long lines (2664)
Hash 12476fdc6b8599d03eac729748337611
7a15dc04ad6e77026bf45927b78247411e3e0466
c5be6532f19ca90fb5966ed89be694f2bc2cded1e443d3489467cb28cd69af43
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 21930
date: Wed, 29 Nov 2023 10:34:43 GMT
expires: Wed, 29 Nov 2023 10:34:43 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "03bc362460c416a1"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=XmXR8fuT0JpgHnofYKnUs7mbn1fO3lf8O5mKr4jNpfrRxvZOEkj3KO85NUPBX1dOZvF-P2EcYfEx-j2RcSCXtJr9TYDgL0tHcKtMcLFJqnzWINRrfYyjGIyPImXQkaHiTU88qP87SLnriIkDePbzkKvkK1zi7S2YVXmRPv5I3QU; expires=Thu, 30-May-2024 10:34:43 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/dyn-css/authorization.css?targetBlogID=1931155852275062931&zx=f36f6eb8-3fc3-426d-808e-4b5edb5f6132
142.250.74.105200 OK 21 B URL GET HTTP/3 www.blogger.com/dyn-css/authorization.css?targetBlogID=1931155852275062931&zx=f36f6eb8-3fc3-426d-808e-4b5edb5f6132
IP 142.250.74.105:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=1931155852275062931&zx=f36f6eb8-3fc3-426d-808e-4b5edb5f6132 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 29 Nov 2023 10:34:43 GMT
last-modified: Wed, 29 Nov 2023 10:34:43 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.blogger.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:57:34 GMT
expires: Fri, 22 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 538629
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2
216.58.207.227200 OK 19 kB URL GET HTTP/3 fonts.gstatic.com/s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2
IP 216.58.207.227:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 18656, version 1.0\012- data
Hash 2bf19e2e53e85d0308ac3a906565f915
462500c7fcf76cf3dcee0348aa13297bd532ff58
e88f421b2498fd4ff75eeb6df1d0e8b5e1f038007350ad968d4f258cbe50a02c
GET /s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.blogger.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18656
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:21:51 GMT
expires: Fri, 22 Nov 2024 23:21:51 GMT
cache-control: public, max-age=31536000
age: 472372
last-modified: Wed, 13 Sep 2023 23:30:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/og/_/ss/k=og.qtm.FKNNYuAlZs4.L.F4.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTvR4-G9PyJJu0m7h64H8oOCLYCsyQ
142.250.74.35200 OK 669 B URL GET HTTP/3 www.gstatic.com/og/_/ss/k=og.qtm.FKNNYuAlZs4.L.F4.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTvR4-G9PyJJu0m7h64H8oOCLYCsyQ
IP 142.250.74.35:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1722), with no line terminators
Hash 3777ec01def0c49334f9e6071faf5e61
f2b21ca2e2de38a966ffd95fa41309f2d0aa2977
baef7154ddbd4c35e989534bfb275e1bbb3e722dc9c3eafb5be315ee6dddd687
GET /og/_/ss/k=og.qtm.FKNNYuAlZs4.L.F4.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTvR4-G9PyJJu0m7h64H8oOCLYCsyQ HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="one-google-eng"
report-to: {"group":"one-google-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/one-google-eng"}]}
content-length: 669
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 28 Nov 2023 09:39:36 GMT
expires: Wed, 27 Nov 2024 09:39:36 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 23 Nov 2023 02:30:00 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding, Origin
age: 89707
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
142.250.74.35200 OK 663 B URL GET HTTP/3 www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
IP 142.250.74.35:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1660), with no line terminators
Hash 554640f465eb3ed903b543dae0a1bcac
e0e6e2c8939008217eb76a3b3282ca75f3dc401a
99bf4aa403643a6d41c028e5db29c79c17cbc815b3e10cd5c6b8f90567a03e52
GET /images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 663
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:52:42 GMT
expires: Fri, 22 Nov 2024 04:52:42 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Dec 2021 12:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin
age: 538921
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/img/blogger-logotype-color-black-1x.png
142.250.74.105200 OK 1.2 kB URL GET HTTP/3 www.blogger.com/img/blogger-logotype-color-black-1x.png
IP 142.250.74.105:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type PNG image data, 112 x 27, 8-bit colormap, non-interlaced\012- data
Hash a9d652846aeacdf8da5401f6e4d4a409
6127321cafe0be999bc0c9d952715ede2b9dd83d
cbad27c35fbc84e2da4280476adeb197566db2750b8b4a79eb7e872db8d8acb7
GET /img/blogger-logotype-color-black-1x.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1155
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:54:47 GMT
expires: Thu, 30 Nov 2023 04:54:47 GMT
cache-control: public, max-age=604800
last-modified: Wed, 22 Nov 2023 19:55:27 GMT
content-type: image/png
age: 538796
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.googleapis.com/css?lang=no&family=Product+Sans|Roboto:400,700
142.250.74.106200 OK 60 kB URL GET HTTP/3 fonts.googleapis.com/css?lang=no&family=Product+Sans|Roboto:400,700
IP 142.250.74.106:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1448)
Hash dcbfe7870dceb51096b5351850511ef3
52d30db743af83fb769767a5aac720ac017fe87b
e9817fbcb8245f6ed053bd00bc3a5700faa84355458e14ba4a6faa642de2394f
GET /css?lang=no&family=Product+Sans|Roboto:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 29 Nov 2023 10:34:43 GMT
date: Wed, 29 Nov 2023 10:34:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.CzrNRWo3AFk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8xPbrtpW2bPUIcgU2adGqIEpV82Q/cb=gapi.loaded_0
172.217.21.174200 OK 41 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.CzrNRWo3AFk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8xPbrtpW2bPUIcgU2adGqIEpV82Q/cb=gapi.loaded_0
IP 172.217.21.174:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1505)
Hash 1ccd95d83b05996630e52aa8dae42f06
027c31f9399bfae7d6ffc8b8d7299b3a9e8e9080
9d4e56038dcccd960ea62bd2ee6925469001254602dfb54b740f1a1adaf0d7b2
GET /_/scs/abc-static/_/js/k=gapi.gapi.en.CzrNRWo3AFk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8xPbrtpW2bPUIcgU2adGqIEpV82Q/cb=gapi.loaded_0 HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 40799
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 28 Nov 2023 21:39:19 GMT
expires: Wed, 27 Nov 2024 21:39:19 GMT
cache-control: public, max-age=31536000
age: 46525
last-modified: Tue, 03 Oct 2023 15:15:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
172.217.21.174200 OK 56 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP 172.217.21.174:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1505)
Hash 4a256001cbbe7af37c71afbd89ba1656
4760f1dee9f6ff6db6f33eeee3dc7ec76155f7dd
5b683a525a2a814b27fc09152ee8030b6d542cd24a61de371bbe5e8815e9d0b1
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 55751
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Nov 2023 19:22:41 GMT
expires: Tue, 26 Nov 2024 19:22:41 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 141123
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.beruang.club/favicon.ico
142.250.74.115200 OK 412 B URL GET HTTP/2 www.beruang.club/favicon.ico
IP 142.250.74.115:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectwww.beruang.club
FingerprintCD:D9:B4:18:7C:E4:4D:7A:FF:C8:51:12:CF:93:EF:41:DA:A1:8E:AA
ValiditySat, 11 Nov 2023 12:47:06 GMT - Fri, 09 Feb 2024 13:32:35 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
GET /favicon.ico HTTP/1.1
Host: www.beruang.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Cookie: _ga_EQ87SLSFFF=GS1.1.1701254087.1.0.1701254087.0.0.0; _ga=GA1.1.509077307.1701254087; _ga_XM2YCT0PTM=GS1.1.1701254087.1.0.1701254087.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
expires: Wed, 29 Nov 2023 10:34:44 GMT
date: Wed, 29 Nov 2023 10:34:44 GMT
cache-control: private, max-age=86400
last-modified: Tue, 28 Nov 2023 06:20:37 GMT
etag: W/"93908ef5f8729e6f6c76cdebb5d4a79425ecf24f0834c509419d7ee0ccdf93d7"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
X-Firefox-Spdy: h2
rollerstrayprawn.com/sbar.json?key=0cba6f1e0cf973621a3090eac4e61908
173.233.137.52200 OK 3.3 kB URL GET HTTP/1.1 rollerstrayprawn.com/sbar.json?key=0cba6f1e0cf973621a3090eac4e61908
IP 173.233.137.52:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectrollerstrayprawn.com
Fingerprint9E:74:D1:93:DF:47:C6:06:84:EA:02:9E:E8:F3:B5:CF:52:D3:9F:D0
ValidityTue, 28 Nov 2023 10:59:19 GMT - Mon, 26 Feb 2024 10:59:18 GMT
File type JSON data\012- , ASCII text, with very long lines (5755), with no line terminators
Hash 2fae98fd623a695a16ebb507b394e252
023d4506c9d54f63aab2f7d10731c27c151fbe83
413078195dddec4286f63ea1a2cce96cdb2953f852adf97c8a00132c4f5d6458
GET /sbar.json?key=0cba6f1e0cf973621a3090eac4e61908 HTTP/1.1
Host: rollerstrayprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 29 Nov 2023 10:34:44 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.beruang.club
Access-Control-Allow-Origin: https://www.beruang.club
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=20130351; expires=Thu, 30 Nov 2023 10:34:44 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 30 Nov 2023 10:34:44 GMT; secure; SameSite=None
uncs=1; expires=Thu, 30 Nov 2023 10:34:44 GMT; secure; SameSite=None
pdhtkv29=true; expires=Thu, 30 Nov 2023 10:34:44 GMT; secure; SameSite=None
uncs29=1; expires=Thu, 30 Nov 2023 10:34:44 GMT; secure; SameSite=None
slec0cba6f1e0cf973621a3090eac4e61908=[4690994]; expires=Wed, 29 Nov 2023 10:34:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cbfaf85bce95f899ed91503489ccc4a7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.brief-tank.pro/dea777/088ac63535b7.js
67.216.91.19200 OK 54 kB URL GET HTTP/2 www.brief-tank.pro/dea777/088ac63535b7.js
IP 67.216.91.19:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectwww.brief-tank.pro
FingerprintEC:D0:42:A1:BE:3C:40:4A:C1:60:47:35:8A:63:F4:8E:5C:DD:F6:16
ValidityTue, 28 Nov 2023 07:07:28 GMT - Mon, 26 Feb 2024 07:07:27 GMT
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash a37ec4eb7579c96bfec19c479455a6bf
95e65d1347943fa591ea827b84c3e458d8e4f0d5
a2bde8ab819b719b6da6e46a711c78e0e3b0749d9c416b3e2043ca69215850d8
GET /dea777/088ac63535b7.js HTTP/1.1
Host: www.brief-tank.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ucdn/1.24.0
date: Wed, 29 Nov 2023 10:34:43 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315264789, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsog41fW3hOd965Uj5PfSqLO5jngzO4v15H/4XOXMHf5kBdesHq2ojvvXowTQOwGQ5U=
x-served-from: l1
x-vhostid: 237, 21931
content-encoding: br
X-Firefox-Spdy: h2
www.blogger.com/static/v1/v-css/3268905543-lightbox_bundle.css
142.250.74.105200 OK 6.5 kB URL GET HTTP/3 www.blogger.com/static/v1/v-css/3268905543-lightbox_bundle.css
IP 142.250.74.105:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (35889), with no line terminators
Hash e287450e0a5c5a5625f7ba3716c1b0cf
3287eee808b2a77f7e4ea16b148f4cd173cddb66
5ee6fb081a76cfc34678b67e894a1fa91ed96857c4d94710cb1a8cea5ea1d76b
GET /static/v1/v-css/3268905543-lightbox_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6501
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 26 Nov 2023 22:00:05 GMT
expires: Mon, 25 Nov 2024 22:00:05 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 26 Nov 2023 11:53:59 GMT
content-type: text/css
vary: Accept-Encoding
age: 218080
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
proftrafficcounter.com/stats
18.185.201.157200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP 18.185.201.157:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash ff15a8f8fc8b2d0d0e1e1fe9ce2de64b
662aced55b9fb2b9f9ee555dd6eff7668d3f630e
579c58fce3d542a6fadb5a214dbfa1cf3f67ede86b882743e8d9ab6091b883e8
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Cookie: uid_id2=77ed5603-7b74-4c1f-9da6-7500b4794678:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:45 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.beruang.club
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
rollerstrayprawn.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3l9%2BXmTFXfXgQZibuspM9XxkMu5hP1x3CcYk7q7kulXV1ZMy1V1NVff0JHgILsh6m4AHj51n8uFHkOwfICuTvciAmBGUHMzNoyAIe%2FIgMxkIvlD1vlXPW%2FA8z1ufbWenhCJjJ8sfmA2lNas0yrT0xoqKA5O70uL9kk%2FL9GppRcWz9aul7niznXd82ijTN0t3pFgzlSr1KfWpX7qtrAxNtzJBoZKDll9u0XK9WvYbdXTtf88u8%2BCYh6BzSi5DBaP%2Fr%2F74GEoMEEeHt6RbS03y9ntRpllqLDrB%2FkfxWmzyGNF5GVoPYbw%2F7YZxI0K%2BvAAT708VwHR2xgrA1Yh4v%2Fng8f6UJnhn94wp15AxePA88s4AUg%2Bg2ADCPIQKjgkgAiwuIY72Fo3N2foZysboiMw8%2BxsqH5GZ319GHH13U6tu6Z7RWapM7NANC6juAKo9QJIdId3woPIjiPRTqOAnUnm2gDjaWXLaQAXFRL1SA6hwAC17YM5DNl7KQxZ6yBIPUXBSYo1WSGkz5GGtNlcXQtRqQjTmZoNGUKvPhRSZGNPrIU16ELoHYTeR2E2sqa3jxmXY7Ae41QIu8ODSEfE%2B3EQnKJBLgtwR5IwgVwR5SpB3it1Au6or9gLtMu5Pc3Waa0XfpO1ttmvStozJdnJKLo2t8WpXKliTJyUqOJsNfUlF2GrWZqs%2Bq9EWlUzU5azfonNwqoByFyZqN9SIvHXxBSRqRGau%2FAPOjuD0EYR6ESx7DSzvN6sUbLVfn6PYiA%2B4tBmL22WhM47AFEjSGaTr3rY%2BJa9ORnTniyqkGF5%2F5ZM%2Ft1btIYQtkNgCH6unBG39qH%2FX5GTnrskdebyUpCpSG2w8vnspS%2BXMN%2B%2FL9dzYYP6W6319Q4yBcXlwX7p0gcWBituOfHtTBYG0t40Vknw%2F71YkX87c6s3MxlmysPzu7fkosdI5ZeIBmDp%2B8ARCjcjFvcrkY77%2BVQRlB7BZgSgbkmlAmSOIZBMuGV5%2F7uc%2FHtz4vAlnCKw%2B7%2BGJhzwr%2BrbKzy%2B1GpHypV%2Bh5fDa4eTdAhgv4OS5DVwOn%2Fx11r%2FtHqFtPbD0IeKoQMcW6OgCTPfgsv%2F108QOr%2F1SmwS49vpcW2%2BHa6u3zux16qQkGyENJa1KHrZ42GQ0aIX1FmctXzZ5g%2FlI3Ui2X3r6LwAAAP%2F%2FAQAA%2F%2F9ZKR%2BOdAQAAA%3D%3D
173.233.137.52200 OK 7 B URL GET HTTP/1.1 rollerstrayprawn.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3l9%2BXmTFXfXgQZibuspM9XxkMu5hP1x3CcYk7q7kulXV1ZMy1V1NVff0JHgILsh6m4AHj51n8uFHkOwfICuTvciAmBGUHMzNoyAIe%2FIgMxkIvlD1vlXPW%2FA8z1ufbWenhCJjJ8sfmA2lNas0yrT0xoqKA5O70uL9kk%2FL9GppRcWz9aul7niznXd82ijTN0t3pFgzlSr1KfWpX7qtrAxNtzJBoZKDll9u0XK9WvYbdXTtf88u8%2BCYh6BzSi5DBaP%2Fr%2F74GEoMEEeHt6RbS03y9ntRpllqLDrB%2FkfxWmzyGNF5GVoPYbw%2F7YZxI0K%2BvAAT708VwHR2xgrA1Yh4v%2Fng8f6UJnhn94wp15AxePA88s4AUg%2Bg2ADCPIQKjgkgAiwuIY72Fo3N2foZysboiMw8%2BxsqH5GZ319GHH13U6tu6Z7RWapM7NANC6juAKo9QJIdId3woPIjiPRTqOAnUnm2gDjaWXLaQAXFRL1SA6hwAC17YM5DNl7KQxZ6yBIPUXBSYo1WSGkz5GGtNlcXQtRqQjTmZoNGUKvPhRSZGNPrIU16ELoHYTeR2E2sqa3jxmXY7Ae41QIu8ODSEfE%2B3EQnKJBLgtwR5IwgVwR5SpB3it1Au6or9gLtMu5Pc3Waa0XfpO1ttmvStozJdnJKLo2t8WpXKliTJyUqOJsNfUlF2GrWZqs%2Bq9EWlUzU5azfonNwqoByFyZqN9SIvHXxBSRqRGau%2FAPOjuD0EYR6ESx7DSzvN6sUbLVfn6PYiA%2B4tBmL22WhM47AFEjSGaTr3rY%2BJa9ORnTniyqkGF5%2F5ZM%2Ft1btIYQtkNgCH6unBG39qH%2FX5GTnrskdebyUpCpSG2w8vnspS%2BXMN%2B%2FL9dzYYP6W6319Q4yBcXlwX7p0gcWBituOfHtTBYG0t40Vknw%2F71YkX87c6s3MxlmysPzu7fkosdI5ZeIBmDp%2B8ARCjcjFvcrkY77%2BVQRlB7BZgSgbkmlAmSOIZBMuGV5%2F7uc%2FHtz4vAlnCKw%2B7%2BGJhzwr%2BrbKzy%2B1GpHypV%2Bh5fDa4eTdAhgv4OS5DVwOn%2Fx11r%2FtHqFtPbD0IeKoQMcW6OgCTPfgsv%2F108QOr%2F1SmwS49vpcW2%2BHa6u3zux16qQkGyENJa1KHrZ42GQ0aIX1FmctXzZ5g%2FlI3Ui2X3r6LwAAAP%2F%2FAQAA%2F%2F9ZKR%2BOdAQAAA%3D%3D
IP 173.233.137.52:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectrollerstrayprawn.com
Fingerprint9E:74:D1:93:DF:47:C6:06:84:EA:02:9E:E8:F3:B5:CF:52:D3:9F:D0
ValidityTue, 28 Nov 2023 10:59:19 GMT - Mon, 26 Feb 2024 10:59:18 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3l9%2BXmTFXfXgQZibuspM9XxkMu5hP1x3CcYk7q7kulXV1ZMy1V1NVff0JHgILsh6m4AHj51n8uFHkOwfICuTvciAmBGUHMzNoyAIe%2FIgMxkIvlD1vlXPW%2FA8z1ufbWenhCJjJ8sfmA2lNas0yrT0xoqKA5O70uL9kk%2FL9GppRcWz9aul7niznXd82ijTN0t3pFgzlSr1KfWpX7qtrAxNtzJBoZKDll9u0XK9WvYbdXTtf88u8%2BCYh6BzSi5DBaP%2Fr%2F74GEoMEEeHt6RbS03y9ntRpllqLDrB%2FkfxWmzyGNF5GVoPYbw%2F7YZxI0K%2BvAAT708VwHR2xgrA1Yh4v%2Fng8f6UJnhn94wp15AxePA88s4AUg%2Bg2ADCPIQKjgkgAiwuIY72Fo3N2foZysboiMw8%2BxsqH5GZ319GHH13U6tu6Z7RWapM7NANC6juAKo9QJIdId3woPIjiPRTqOAnUnm2gDjaWXLaQAXFRL1SA6hwAC17YM5DNl7KQxZ6yBIPUXBSYo1WSGkz5GGtNlcXQtRqQjTmZoNGUKvPhRSZGNPrIU16ELoHYTeR2E2sqa3jxmXY7Ae41QIu8ODSEfE%2B3EQnKJBLgtwR5IwgVwR5SpB3it1Au6or9gLtMu5Pc3Waa0XfpO1ttmvStozJdnJKLo2t8WpXKliTJyUqOJsNfUlF2GrWZqs%2Bq9EWlUzU5azfonNwqoByFyZqN9SIvHXxBSRqRGau%2FAPOjuD0EYR6ESx7DSzvN6sUbLVfn6PYiA%2B4tBmL22WhM47AFEjSGaTr3rY%2BJa9ORnTniyqkGF5%2F5ZM%2Ft1btIYQtkNgCH6unBG39qH%2FX5GTnrskdebyUpCpSG2w8vnspS%2BXMN%2B%2FL9dzYYP6W6319Q4yBcXlwX7p0gcWBituOfHtTBYG0t40Vknw%2F71YkX87c6s3MxlmysPzu7fkosdI5ZeIBmDp%2B8ARCjcjFvcrkY77%2BVQRlB7BZgSgbkmlAmSOIZBMuGV5%2F7uc%2FHtz4vAlnCKw%2B7%2BGJhzwr%2BrbKzy%2B1GpHypV%2Bh5fDa4eTdAhgv4OS5DVwOn%2Fx11r%2FtHqFtPbD0IeKoQMcW6OgCTPfgsv%2F108QOr%2F1SmwS49vpcW2%2BHa6u3zux16qQkGyENJa1KHrZ42GQ0aIX1FmctXzZ5g%2FlI3Ui2X3r6LwAAAP%2F%2FAQAA%2F%2F9ZKR%2BOdAQAAA%3D%3D HTTP/1.1
Host: rollerstrayprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Cookie: u_pl=20130351; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 29 Nov 2023 10:34:45 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f732abce185ab9a033b99c6cab29ce25
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.yourwebbars.com/sb/interstitial/games/hentai-heroes/main/8/index.html
104.26.7.19200 OK 124 kB URL GET HTTP/2 cdn.yourwebbars.com/sb/interstitial/games/hentai-heroes/main/8/index.html
IP 104.26.7.19:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint84:82:6E:35:03:D4:C4:FC:BA:08:CD:C8:E6:A3:97:A9:20:2F:F5:49
ValiditySun, 23 Jul 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File type HTML document text\012- HTML document, ASCII text
Size 124 kB (124212 bytes)
Hash 3ba8c6ee4184fd58396eb4ca22879c0d
3a299ade06247933036e312785d51449d429786d
ae8af8d3ded72e9a7568fa4e7281c9f28e13921a307972a68ff71aee18bc6423
GET /sb/interstitial/games/hentai-heroes/main/8/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:45 GMT
content-type: text/html
last-modified: Thu, 19 Oct 2023 16:12:54 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 68824
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JuwuceQCAMCvVO%2B5dQYTcOXWKUlOMSx2vO5DI7as00EdhCrJ3eIDroFOLT0njtDjgeRvGkzChYkZVqTf38zoYq8FJ%2FASooZRRB23qlpAoAMVu%2BJMv8n6h5WuuJEn4QphalTx7dg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82da332fcc980afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/button.png
172.64.109.10200 OK 9.9 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/button.png
IP 172.64.109.10:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 374 x 158, 8-bit colormap, non-interlaced\012- data
Hash 820ad88853e09bfa31ecc6dfd93c07ec
c8d408a8618a825a5111c51a6fe2e30f4d53098c
948bc0c4bd13d058c1c64f903453f928ecfdcd87686eebe6f9a73618e24d4bbd
GET /sb/interstitial/games/hentai-heroes/main/8/img/button.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:45 GMT
content-type: image/png
content-length: 9865
last-modified: Thu, 19 Oct 2023 16:12:57 GMT
etag: "65315589-2689"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 13158
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O9dmHRI%2BUKTN91UuV9wwZeyllS028W8LlerpaFl8j9zOafCB8tzi8Oww6Lw6Cz%2F%2F7FESeG8yIsIe5433pCA3v5gIu6epyPedaoa41xB193wV31RgdltiyEZVI4Gdj3vD7IQ%2B0sHHbtwS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82da33315a3d240f-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rollerstrayprawn.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3l9%2BXmTFXfXgQZibuspM9%2FRMZsY97G5cswRjEndXct3qqupJmequpqp7ehI8BBdkvU3Ag8fOM%2FnwI0j2D5CVyV5kQMwISg7m5lEQhD15kJkMBF%2Boet%2Bq5y14nuetz3ayM%2BIio6crH%2BhNqRSt1Mtu6Y1VGXOd29LS%2FZLnlt3rpVUZz9aul7rjzXTe8dx62X2zdEewdV2pup7req5XmpdGhLpbmaCQyWHLK7fccq1a9uo1dM1%2FzzZzYKkD3jkjVyH56P9rPz6GZAPE0dFtYddTnbz9XpQpmmqDDj%2F4KF6PdR4juihD4yCMD6bd0HZEyJeXoOODqQLozu5YAQI5Is5vHoL4YEoTQWfvnGmgIGIE%2FHnknQGEGkDSAZh%2BCMlPCMA4lpYRR%2FtL2uR04xylY3REZp79DZmPyMzvLyOOvptTslu6p1WWSh1bdMMCsjuAbA%2BQZMdINx3I%2FBgs%2FRSS%2F0QqzxYRR7vLVmlIXkzUSzmADAdQogdqHWTjJR1koYMscRDx0xKtt0LXbYRB6PvNGmPM9xmrN2d5nfu1ZugiY2N6PaRJD0z1wMwWErOFdbl9Ur8Kk%2F0Au1bAcgc2HRHnwy10eIFcEOSWIKcEuSTIU4K8U%2BxxZau22OfKZoE3zdVp9ou%2BTts7dE%2BnbRGTneSMXBlb4%2FjXKlgXpyWXBXQ29ITLwlbDn6161HdbrqCsJma9ltuElQWkvTRRuylH5K3LLyCRIzJz7R8E9BhWHYPJF0Gz10DzfqPqgq71a00Xm%2FFhIExG43aZqSwA1wWSdAbphrOjzsirkxHd%2BaIKwYY3X%2Fnkz%2B01cwRmCiSmwMfyKUFbPerf1TnZvatzSx4vJ6mM5CYdj%2B9eSlMx8837YiPXhi%2Fctr2vb7ExMC4P7wubLtKYy7htybdzknNh5rVhgny%2FYFdFsJLZtbnMxFmyuPLu%2FEKUGGGt1PEAVJ48eAImR%2BTyfmXyMV%2F%2FKoI0A5isQJQNyTQg9TFYsgWbDG8%2B9%2FMfD2593oDVBEZd9ASJgzwr%2BqYaXFwqOSLlK79CieGNo8m7RdCggBUXNgRi%2BOSv8%2F4d%2Bwht44CmDxFHBTqmQEcVoKoHm%2F2vnyZmeOMXfxIIlNMPlHF2A2XU9rm9Vp6W6l5NNINmg3EeCMa9RtVv%2Bq5b5bzWaAmvhdSORPulp%2F8CAAD%2F%2FwEAAP%2F%2FTSGRaHQEAAA%3D
173.233.137.52200 OK 7 B URL GET HTTP/1.1 rollerstrayprawn.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3l9%2BXmTFXfXgQZibuspM9%2FRMZsY97G5cswRjEndXct3qqupJmequpqp7ehI8BBdkvU3Ag8fOM%2FnwI0j2D5CVyV5kQMwISg7m5lEQhD15kJkMBF%2Boet%2Bq5y14nuetz3ayM%2BIio6crH%2BhNqRSt1Mtu6Y1VGXOd29LS%2FZLnlt3rpVUZz9aul7rjzXTe8dx62X2zdEewdV2pup7req5XmpdGhLpbmaCQyWHLK7fccq1a9uo1dM1%2FzzZzYKkD3jkjVyH56P9rPz6GZAPE0dFtYddTnbz9XpQpmmqDDj%2F4KF6PdR4juihD4yCMD6bd0HZEyJeXoOODqQLozu5YAQI5Is5vHoL4YEoTQWfvnGmgIGIE%2FHnknQGEGkDSAZh%2BCMlPCMA4lpYRR%2FtL2uR04xylY3REZp79DZmPyMzvLyOOvptTslu6p1WWSh1bdMMCsjuAbA%2BQZMdINx3I%2FBgs%2FRSS%2F0QqzxYRR7vLVmlIXkzUSzmADAdQogdqHWTjJR1koYMscRDx0xKtt0LXbYRB6PvNGmPM9xmrN2d5nfu1ZugiY2N6PaRJD0z1wMwWErOFdbl9Ur8Kk%2F0Au1bAcgc2HRHnwy10eIFcEOSWIKcEuSTIU4K8U%2BxxZau22OfKZoE3zdVp9ou%2BTts7dE%2BnbRGTneSMXBlb4%2FjXKlgXpyWXBXQ29ITLwlbDn6161HdbrqCsJma9ltuElQWkvTRRuylH5K3LLyCRIzJz7R8E9BhWHYPJF0Gz10DzfqPqgq71a00Xm%2FFhIExG43aZqSwA1wWSdAbphrOjzsirkxHd%2BaIKwYY3X%2Fnkz%2B01cwRmCiSmwMfyKUFbPerf1TnZvatzSx4vJ6mM5CYdj%2B9eSlMx8837YiPXhi%2Fctr2vb7ExMC4P7wubLtKYy7htybdzknNh5rVhgny%2FYFdFsJLZtbnMxFmyuPLu%2FEKUGGGt1PEAVJ48eAImR%2BTyfmXyMV%2F%2FKoI0A5isQJQNyTQg9TFYsgWbDG8%2B9%2FMfD2593oDVBEZd9ASJgzwr%2BqYaXFwqOSLlK79CieGNo8m7RdCggBUXNgRi%2BOSv8%2F4d%2Bwht44CmDxFHBTqmQEcVoKoHm%2F2vnyZmeOMXfxIIlNMPlHF2A2XU9rm9Vp6W6l5NNINmg3EeCMa9RtVv%2Bq5b5bzWaAmvhdSORPulp%2F8CAAD%2F%2FwEAAP%2F%2FTSGRaHQEAAA%3D
IP 173.233.137.52:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectrollerstrayprawn.com
Fingerprint9E:74:D1:93:DF:47:C6:06:84:EA:02:9E:E8:F3:B5:CF:52:D3:9F:D0
ValidityTue, 28 Nov 2023 10:59:19 GMT - Mon, 26 Feb 2024 10:59:18 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3l9%2BXmTFXfXgQZibuspM9%2FRMZsY97G5cswRjEndXct3qqupJmequpqp7ehI8BBdkvU3Ag8fOM%2FnwI0j2D5CVyV5kQMwISg7m5lEQhD15kJkMBF%2Boet%2Bq5y14nuetz3ayM%2BIio6crH%2BhNqRSt1Mtu6Y1VGXOd29LS%2FZLnlt3rpVUZz9aul7rjzXTe8dx62X2zdEewdV2pup7req5XmpdGhLpbmaCQyWHLK7fccq1a9uo1dM1%2FzzZzYKkD3jkjVyH56P9rPz6GZAPE0dFtYddTnbz9XpQpmmqDDj%2F4KF6PdR4juihD4yCMD6bd0HZEyJeXoOODqQLozu5YAQI5Is5vHoL4YEoTQWfvnGmgIGIE%2FHnknQGEGkDSAZh%2BCMlPCMA4lpYRR%2FtL2uR04xylY3REZp79DZmPyMzvLyOOvptTslu6p1WWSh1bdMMCsjuAbA%2BQZMdINx3I%2FBgs%2FRSS%2F0QqzxYRR7vLVmlIXkzUSzmADAdQogdqHWTjJR1koYMscRDx0xKtt0LXbYRB6PvNGmPM9xmrN2d5nfu1ZugiY2N6PaRJD0z1wMwWErOFdbl9Ur8Kk%2F0Au1bAcgc2HRHnwy10eIFcEOSWIKcEuSTIU4K8U%2BxxZau22OfKZoE3zdVp9ou%2BTts7dE%2BnbRGTneSMXBlb4%2FjXKlgXpyWXBXQ29ITLwlbDn6161HdbrqCsJma9ltuElQWkvTRRuylH5K3LLyCRIzJz7R8E9BhWHYPJF0Gz10DzfqPqgq71a00Xm%2FFhIExG43aZqSwA1wWSdAbphrOjzsirkxHd%2BaIKwYY3X%2Fnkz%2B01cwRmCiSmwMfyKUFbPerf1TnZvatzSx4vJ6mM5CYdj%2B9eSlMx8837YiPXhi%2Fctr2vb7ExMC4P7wubLtKYy7htybdzknNh5rVhgny%2FYFdFsJLZtbnMxFmyuPLu%2FEKUGGGt1PEAVJ48eAImR%2BTyfmXyMV%2F%2FKoI0A5isQJQNyTQg9TFYsgWbDG8%2B9%2FMfD2593oDVBEZd9ASJgzwr%2BqYaXFwqOSLlK79CieGNo8m7RdCggBUXNgRi%2BOSv8%2F4d%2Bwht44CmDxFHBTqmQEcVoKoHm%2F2vnyZmeOMXfxIIlNMPlHF2A2XU9rm9Vp6W6l5NNINmg3EeCMa9RtVv%2Bq5b5bzWaAmvhdSORPulp%2F8CAAD%2F%2FwEAAP%2F%2FTSGRaHQEAAA%3D HTTP/1.1
Host: rollerstrayprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Cookie: u_pl=20130351; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 29 Nov 2023 10:34:45 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0fa29f9419a094a419c1d07ebb4d342b
Strict-Transport-Security: max-age=0; includeSubdomains
rollerstrayprawn.com/pixel/sbs?c=1
192.243.61.225200 OK 0 B URL GET HTTP/1.1 rollerstrayprawn.com/pixel/sbs?c=1
IP 192.243.61.225:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectrollerstrayprawn.com
Fingerprint9E:74:D1:93:DF:47:C6:06:84:EA:02:9E:E8:F3:B5:CF:52:D3:9F:D0
ValidityTue, 28 Nov 2023 10:59:19 GMT - Mon, 26 Feb 2024 10:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbs?c=1 HTTP/1.1
Host: rollerstrayprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Cookie: u_pl=20130351; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 29 Nov 2023 10:34:46 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
unseenreport.com/pxf.gif?uuid=77ed5603-7b74-4c1f-9da6-7500b4794678&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=0cba6f1e0cf973621a3090eac4e61908&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=10
192.243.59.20200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=77ed5603-7b74-4c1f-9da6-7500b4794678&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=0cba6f1e0cf973621a3090eac4e61908&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=10
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=77ed5603-7b74-4c1f-9da6-7500b4794678&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=0cba6f1e0cf973621a3090eac4e61908&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=10 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 29 Nov 2023 10:34:46 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c207f8b29bbd865bd3dd5e7f4443cd44
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/bg.jpg
172.64.109.10200 OK 376 kB URL GET HTTP/3 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/bg.jpg
IP 172.64.109.10:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 376 kB (375458 bytes)
Hash 65b98e31f2a22bfc2ae827300f514b93
8d66b3140eaabf1eff5990961d013af5e948df5a
6ea2b64aa9ed05099682f877c6f257d5ebc03814c5910a9dc91a3eae94bf6879
GET /sb/interstitial/games/hentai-heroes/main/8/img/bg.jpg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 29 Nov 2023 10:34:45 GMT
content-type: image/jpeg
content-length: 375458
last-modified: Thu, 19 Oct 2023 16:13:01 GMT
etag: "6531558d-5baa2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2363000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F%2FFL3Qj7KvK5KcU626o%2BQ8HrSn5q2xEoUfSVEh4bkmdMtkvZ2KXdZL8jzHrn4xsJ8wMsdWdCaquEnDWIonNv2c2cSsDbjqp1TMNmnXLmfG0s8sqLTCuz%2ByrNZ0lh1%2B9Kc%2FQAfqWcXmYO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82da3333aa996100-LHR
alt-svc: h3=":443"; ma=86400
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
104.18.11.207200 OK 28 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP 104.18.11.207:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (27303)
Hash 4fbd15cb6047af93373f4f895639c8bf
12d6861075de8e293265ff6ff03b1f3adcb44c76
ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5
GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4fbd15cb6047af93373f4f895639c8bf"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:58:32
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1047
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 25754c75fb460a03a208e88579fbc0b3
cdn-cache: HIT
cf-cache-status: HIT
age: 357726
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82da331bae9456a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800
142.250.74.106200 OK 28 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800
IP 142.250.74.106:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 3e3f262b81699cff226ddfd43e81c0bf
60f993b3a4d1f6f31c191e981951d0117f15600e
b13d4ba577f8a1e50ca84576732bd47c5608583931791b476d06bf7bed513585
GET /css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 29 Nov 2023 10:34:41 GMT
date: Wed, 29 Nov 2023 10:34:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.staticaly.com/gh/dedewap/googlecode/8ed25926/autoloadpostdedelk21.js
0.0.0.0 0 B URL GET cdn.staticaly.com/gh/dedewap/googlecode/8ed25926/autoloadpostdedelk21.js
IP 0.0.0.0:0
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gh/dedewap/googlecode/8ed25926/autoloadpostdedelk21.js HTTP/1.1
Host: cdn.staticaly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
unpkg.com/video.js/dist/video.js
104.16.125.175302 Found 2.2 MB URL GET HTTP/2 unpkg.com/video.js/dist/video.js
IP 104.16.125.175:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Size 2.2 MB (2226543 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video.js/dist/video.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 29 Nov 2023 10:34:41 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /video.js@8.6.1/dist/video.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HGDA3CP4TAMP5MMANY8QR0YV-arn
cf-cache-status: HIT
age: 227
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82da33198a5956ab-OSL
X-Firefox-Spdy: h2
mildlunch.com/Y.2-xTpUZVWW5_0YZZGaFb0-YdTe9fygc_miljkkPlT-Qn3oYpTqY_wsZtjuAvw-MxTyIz2AN_zCED2EOFT-FHjINJjKd_mMYNzOYP2-NRWSRThUN_TWQXzYMZT-Rbjc
88.85.94.250200 OK 0 B URL POST HTTP/2 mildlunch.com/Y.2-xTpUZVWW5_0YZZGaFb0-YdTe9fygc_miljkkPlT-Qn3oYpTqY_wsZtjuAvw-MxTyIz2AN_zCED2EOFT-FHjINJjKd_mMYNzOYP2-NRWSRThUN_TWQXzYMZT-Rbjc
IP 88.85.94.250:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerLet's Encrypt
Subjectmildlunch.com
Fingerprint2C:50:55:2A:07:FA:71:63:92:47:2A:4B:B0:B4:A8:C5:8B:B1:B7:BA
ValiditySun, 08 Oct 2023 02:49:07 GMT - Sat, 06 Jan 2024 02:49:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Y.2-xTpUZVWW5_0YZZGaFb0-YdTe9fygc_miljkkPlT-Qn3oYpTqY_wsZtjuAvw-MxTyIz2AN_zCED2EOFT-FHjINJjKd_mMYNzOYP2-NRWSRThUN_TWQXzYMZT-Rbjc HTTP/1.1
Host: mildlunch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 90
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 29 Nov 2023 10:34:43 GMT
content-length: 0
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2
i9.ytimg.com/vi_blogger/qSvUXDK3UkA/1.jpg?sqp=CMOnnKsGGPDEAfqGspsBBgjAAhC0AQ&rs=AMzJL3kFuhP6MYegQ3WAlWkWlCwc8T8-5A
142.250.74.174200 OK 10 kB URL GET HTTP/2 i9.ytimg.com/vi_blogger/qSvUXDK3UkA/1.jpg?sqp=CMOnnKsGGPDEAfqGspsBBgjAAhC0AQ&rs=AMzJL3kFuhP6MYegQ3WAlWkWlCwc8T8-5A
IP 142.250.74.174:443
Requested by https://www.blogger.com/video.g?token=AD6v5dyJu51eYI-E1f-a1XLYSfjvPbkiG-_djS-ljaueUK3pg_cT6lYcqdMcJB_mpQNJ65tAK-VgW5z8UbRSFZZsNki_rVofG6opy2kb_GUxjjcid90UWA8o1HIfS_g3ZugLSsXwqiPj
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3\012- data
Hash 8e6ec9e33261ad8bb4f473e8043d5348
6dcb48c5c9dcd9d5829144ab984d794bb27fce57
34ac9fb4e0a93f4e95db8a5ca49b360b7896a687e9e9dc321a2f81b39535c4b5
GET /vi_blogger/qSvUXDK3UkA/1.jpg?sqp=CMOnnKsGGPDEAfqGspsBBgjAAhC0AQ&rs=AMzJL3kFuhP6MYegQ3WAlWkWlCwc8T8-5A HTTP/1.1
Host: i9.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 10019
date: Wed, 29 Nov 2023 10:34:43 GMT
expires: Wed, 29 Nov 2023 10:34:43 GMT
cache-control: private, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
unpkg.com/video.js@8.6.1/dist/video-js.css
104.16.125.175200 OK 52 kB URL GET HTTP/2 unpkg.com/video.js@8.6.1/dist/video-js.css
IP 104.16.125.175:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (7288)
Hash 44e9d576b868846f76a7fe15713d455e
e6deef9c1cbc85dbb1d8c90a3fdcf5be47623955
4398326f7e2725e7813cb5d11c650a7890fe1605a9d56bce34d7454eeb79dcb1
GET /video.js@8.6.1/dist/video-js.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.beruang.club/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:41 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"cb63-5t7vnBy8hdux2MkKP9z1vkdiOVU"
via: 1.1 fly.io
fly-request-id: 01HG7H6TMWWYVRW9M64SGNX765-arn
cf-cache-status: HIT
age: 194101
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82da331b6c2a56ab-OSL
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/video.js@8.6.1/dist/video.js
104.16.125.175200 OK 2.2 MB URL GET HTTP/2 unpkg.com/video.js@8.6.1/dist/video.js
IP 104.16.125.175:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Size 2.2 MB (2226543 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video.js@8.6.1/dist/video.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.beruang.club/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:41 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"21f96f-p9MFQLR18a5uiDlNiROPeiAZXDw"
via: 1.1 fly.io
fly-request-id: 01HFTK251R2D40PK0BT94XDTS8-arn
cf-cache-status: HIT
age: 628365
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82da331b6c2856ab-OSL
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js
104.16.125.175200 OK 717 kB URL GET HTTP/2 unpkg.com/videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js
IP 104.16.125.175:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Size 717 kB (717184 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.beruang.club/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:41 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"af180-yddBL+N7CRgyB07pxWVoSeh+9Bw"
via: 1.1 fly.io
fly-request-id: 01HFTCM2M15W2XX1XCMRKBJ1CQ-arn
cf-cache-status: HIT
age: 635118
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82da331b7c4356ab-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/js/script.js
172.64.109.10200 OK 3.9 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/js/script.js
IP 172.64.109.10:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type Unicode text, UTF-8 text, with very long lines (4043), with no line terminators
Hash f2001508a1433d69f73ae313da8090c3
1ec17bee2988ff2a70745692a4b0bc9d8bf0ee8a
a390ae0f0d236c036d3fae3e793f1d1dfd2c7879ad2215f15c5cadcb7a0a7244
GET /sb/interstitial/games/hentai-heroes/main/8/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:45 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2023 16:13:00 GMT
etag: W/"6531558c-f3f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Iku1vWOLTnV9j4nbl4xIk5irXUPUflMnjIM7zcZQofTL0TWvH479ysUU3HLEmIQ3NGw%2BvkEeypP9DtVOnljH4P3lMTe3ZM%2Bm0qN7qo7oqVFKQtb3hgogrjdVfbwvvdyY1Du%2Fq%2BXNj6%2B8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82da333109f0240f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.gstatic.com/og/_/js/k=og.qtm.en_US.ypE8V67UKTU.2019.O/rt=j/m=q_dnp,q_pc,qmd,qcwid,qapid,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvJokvtG8N6jN8YSW2ganpY-9G4eQ
142.250.74.35200 OK 160 kB URL GET HTTP/3 www.gstatic.com/og/_/js/k=og.qtm.en_US.ypE8V67UKTU.2019.O/rt=j/m=q_dnp,q_pc,qmd,qcwid,qapid,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvJokvtG8N6jN8YSW2ganpY-9G4eQ
IP 142.250.74.35:443
Requested by https://www.blogger.com/blogin.g?blogspotURL=https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html&type=blog&bpli=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1551)
Size 160 kB (159670 bytes)
Hash 98746de73f3bdbf728aaca79dcdbc893
2a9ef615c36585c80881c02d4a1bb735e264b957
3ea34857d8a3fe8f82781b1ecc49f032d28a01e5860c17c3ad988fb7a742a3a2
GET /og/_/js/k=og.qtm.en_US.ypE8V67UKTU.2019.O/rt=j/m=q_dnp,q_pc,qmd,qcwid,qapid,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvJokvtG8N6jN8YSW2ganpY-9G4eQ HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="one-google-eng"
report-to: {"group":"one-google-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/one-google-eng"}]}
content-length: 58829
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 28 Nov 2023 11:00:46 GMT
expires: Wed, 27 Nov 2024 11:00:46 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 27 Nov 2023 02:34:55 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding, Origin
age: 84837
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/style.css
172.64.109.10200 OK 2.4 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/style.css
IP 172.64.109.10:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (2534), with no line terminators
Hash 565a828cd09907e234598f78c4672ae1
bf30c71fa149d82e10c405cc2dd22d5415af3514
45caa990dabda92c96faa8da3208494707ca28e9fb1090a370b40da63ede95a1
GET /sb/interstitial/games/hentai-heroes/main/8/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:45 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2023 16:12:56 GMT
etag: W/"65315588-958"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G0Eb%2F3jIWOpOcwFX0r82nA5K2pG6tvmqKSWVGpNBaXHjKQjVkZ9bJcTKtKBoQsfuwAf2DH7k1zPV0vRsfaUJdO%2BhuDEjYlJIqjp2DuGtgIC5C6%2FhUCwnxHnjF0QUVlVjQvdfoHDx%2BOuK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82da333109f6240f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
unpkg.com/video.js/dist/video-js.css
104.16.125.175302 Found 52 kB URL GET HTTP/2 unpkg.com/video.js/dist/video-js.css
IP 104.16.125.175:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video.js/dist/video-js.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 29 Nov 2023 10:34:41 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /video.js@8.6.1/dist/video-js.css
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HGDA1GK3YYCMFGM0DW594DN5-arn
cf-cache-status: HIT
age: 289
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82da33198a5a56ab-OSL
X-Firefox-Spdy: h2
i.jads.co/network/user500/33261-1617884182-0301469001617884182.png
205.185.216.42200 OK 1.5 kB URL GET HTTP/1.1 i.jads.co/network/user500/33261-1617884182-0301469001617884182.png
IP 205.185.216.42:443
Requested by https://poweredby.jads.co/adshow.php?adzone=1040084
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type PNG image data, 300 x 100, 8-bit colormap, non-interlaced\012- data
Hash a71c6a691a71340bd0749dc1fa6f67f2
93aab673319770c9a9f4db3d59636dc91fbf1227
f9e5e435e5aa5877bbe306abb79af87ebbabf89e2eb52dd4b3122c2af281c9d5
GET /network/user500/33261-1617884182-0301469001617884182.png HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=ab05c9d5fc757cedfccd8779bff063b6; imps42805=1; juicy_data_1=YToxOntpOjExODA0MDY7aToxNzAxNTEzMjgyO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 Nov 2023 10:34:43 GMT
Connection: Keep-Alive
ETag: "1617884182"
Cache-Control: max-age=15855796
Content-Length: 1470
Content-Type: image/png
Last-Modified: Thu, 08 Apr 2021 12:16:22 GMT
Accept-Ranges: bytes
X-HW: 1701254083.dop014.sk1.t,1701254083.cds249.sk1.shn,1701254083.dop014.sk1.t,1701254083.cds012.sk1.c
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFgc08LpVFSs2gu3XI69lVjm8zi9pC1-LxRWJmt0Qn2obh0cIIspxX6nZG5d-SsZAk_n4CznS7xXG_X_zmUW1M8qvUUj8MozAdbwyGWUaN_Yat_5ytPJ2XLMHl1s_6viWqhID3QMr5sufiQtcjlfnVhc713_zuiKUO-hFlW6P2u602sKBJVftLyFFT/s320/1.jpg
142.250.74.97200 OK 28 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFgc08LpVFSs2gu3XI69lVjm8zi9pC1-LxRWJmt0Qn2obh0cIIspxX6nZG5d-SsZAk_n4CznS7xXG_X_zmUW1M8qvUUj8MozAdbwyGWUaN_Yat_5ytPJ2XLMHl1s_6viWqhID3QMr5sufiQtcjlfnVhc713_zuiKUO-hFlW6P2u602sKBJVftLyFFT/s320/1.jpg
IP 142.250.74.97:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 227x320, components 3\012- data
Hash c4c12e13dfcd7910f45055e4cf98e204
27a7ca060cc43dfbd225bb247ff0be7a84bc0221
0de0eec804cb1a85eb0a40e7811cbe3a027cc3fc1608f496dab6443e1efdb9d7
GET /img/b/R29vZ2xl/AVvXsEgFgc08LpVFSs2gu3XI69lVjm8zi9pC1-LxRWJmt0Qn2obh0cIIspxX6nZG5d-SsZAk_n4CznS7xXG_X_zmUW1M8qvUUj8MozAdbwyGWUaN_Yat_5ytPJ2XLMHl1s_6viWqhID3QMr5sufiQtcjlfnVhc713_zuiKUO-hFlW6P2u602sKBJVftLyFFT/s320/1.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v100fb"
expires: Thu, 30 Nov 2023 10:34:44 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1.jpg"
x-content-type-options: nosniff
date: Wed, 29 Nov 2023 10:34:44 GMT
server: fife
content-length: 27554
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
142.250.74.106200 OK 6.8 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP 142.250.74.106:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (7013), with no line terminators
Hash 49475c425d6c00477bb339179326c49b
bd97deeb753f44f43a21feafa92d98239fa511bd
598841a98ad357d2896d2f093ea3e4e1d44e24b3351268ffd45e61ff8c1d0e09
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 29 Nov 2023 10:34:45 GMT
date: Wed, 29 Nov 2023 10:34:45 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
friendshipmale.com/sfp.js
104.21.234.33200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP 104.21.234.33:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:43 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: bc73cf0c8e29e0d45ea39543b64679aa
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 29 Nov 2023 10:34:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cUAKWcvCGj88szDaLkUH%2FeyoUPK7HJG%2BRVjkLB67NDbEuIDOzzalVAWrxXKzBa81PFRGrQbfcq54YiocgWxel2rhYrYUXPZJ1PshtriMOCLpolpHCuu5LS0xDI9QUBz903RNpmo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82da33254b120b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/animate.css
172.64.109.10200 OK 79 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/animate.css
IP 172.64.109.10:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash e1d8acd5ee9d1a90ea09313cbd8f2b02
8a8327b115d1356715e63270d1ce6d46124c7b1a
3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/interstitial/games/hentai-heroes/main/8/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.beruang.club
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:45 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2023 16:12:56 GMT
etag: W/"65315588-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=09Onvj14Fi0tzjMo5adQLgVdCtTCkB0YEZCWfhSJisbc4LsJ6bamOj2AgIPsPG%2B67TwmGnGgR8RrnZc8%2FVNi4s3y%2BfZKGdGYhjRFK%2BsQ77zWyIYK88EasaZ%2BsJSC7fCR4klYXnTvJBES"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82da3330f9e6240f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/1045450614-lbx.js
142.250.74.105200 OK 386 kB URL GET HTTP/3 www.blogger.com/static/v1/jsbin/1045450614-lbx.js
IP 142.250.74.105:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type HTML document, ASCII text, with very long lines (1414)
Size 386 kB (386101 bytes)
Hash 8d14c202bfbdc05c3e33daec3159284c
c3b89fd4108c2e01370f3582b97f1a515104ea2e
06ec867c31d041a1d38006c537aeab203064724f64b21813c00cb891e791c7b9
GET /static/v1/jsbin/1045450614-lbx.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.beruang.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 123884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 02:37:59 GMT
expires: Fri, 22 Nov 2024 02:37:59 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 23 Nov 2023 00:54:48 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 547006
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/close.svg
172.64.109.10200 OK 1.2 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/close.svg
IP 172.64.109.10:443
Requested by https://www.beruang.club/2022/10/sedot-susu-besar-sambil-di-kocok.html
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (1275), with no line terminators
Hash ee9084e5f63b44e99321603aeadcf5b3
7ad5af3b9bd4f16852d7491fa0d2d27208318d10
780911a80399262efd3de45d684bb03fc965406402d3b60720d3dcfe7a4a3fc0
GET /sb/interstitial/games/hentai-heroes/main/8/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 10:34:45 GMT
content-type: image/svg+xml
last-modified: Thu, 19 Oct 2023 16:12:58 GMT
etag: W/"6531558a-49d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1828911
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kmaOS9IpZvxP2N8sj2SLLdIKQM2rCMe5N38d3wnU%2FW%2B6Sc3z3Q2wimj5BltUvpxutVKI2Xk7t%2F6RM4CDAUo7vLfDjvtrvwnGeoquQzW6Fay9kQ5%2F9rhkrWNzhRNYayEMpFbWOgY6J1FO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82da33314a36240f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2