cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css
104.17.24.14200 OK 4.2 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css
IP 104.17.24.14:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65348)
Hash c0be8e53226ac34833fd9b5dbc01ebc5
b81ef1b22de26af8a7a4656f565fbc91a69d7518
5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f
GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:36 GMT
content-type: text/css; charset=utf-8
content-length: 4216
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f5628a2-11846"
last-modified: Mon, 07 Sep 2020 12:33:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1203468
expires: Mon, 25 Nov 2024 02:21:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1lsdAcF8CH8TV2RiRKgHeC4utRQObYR6aFSua6xXosTaqDEDC1lWyggrm4JaD2ZMrsOa8iQ%2F8tdeaJTsBAURZgU6q5%2BXqijKgSll8Ycga2dSMJm4wz74M9RErJnGkQoa%2BM2OfGgX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 83110e6cbc45b524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
104.17.24.14200 OK 5.6 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP 104.17.24.14:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:36 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 858484
expires: Mon, 25 Nov 2024 02:21:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rFgAAGw%2BbVVtplaeuInpMPs8FLPZbjOSilMRvIWQGdduNqRnRunqt%2BUbVqjuk6ZD7GTSP3M1CzdfolTvEcSaOIkeBBbxIJlrO3Hx6ymQR7UgHqRBR%2BxQ%2FPUQOXSFjjjPpFuEODwm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 83110e6cbc47b524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.2/css/all.min.css
104.17.24.14 10 kB URL cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.2/css/all.min.css
IP 104.17.24.14:0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (59158)
Hash c4af24ce595437830af0a401897698b2
06b7f92dd894a9edb0aeb9d040b489460ecff593
d1fb8d8337cd22568295b0ed998c85c58f0b4cd083af0b0db21cb0af80002f2d
GET /ajax/libs/font-awesome/5.15.2/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:36 GMT
content-type: text/css; charset=utf-8
content-length: 10472
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5fff7431-e7d0"
last-modified: Wed, 13 Jan 2021 22:29:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1110817
expires: Mon, 25 Nov 2024 02:21:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=By29LMWUrRGiFyytSRhmzI3fhrKPRJ8xFRR2fKECN%2FVPqvReQe3LKrpELUhMP6O9rRsSz8PWaTVVzfb3W%2BaxklERmISkrHQXeZPEW5JkidRcfcqCL7QbuS7RHWwunhROCGV8yGVh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 83110e6cbc48b524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
104.17.24.14 5.8 kB URL cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
IP 104.17.24.14:0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e9365fe85b7e4db79a87015e52c3db6c
2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9
dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56
GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:36 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1022745
expires: Mon, 25 Nov 2024 02:21:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2q57Df4rswfXsMpLmjFiNqqG53ArPLbNAe2AyJVrsn76MFZoy8VAgycn6cW8Pel3%2FGwCeueGdwANQZwoDJYAhEa69vhmp7%2B97Kxl6NHpqAAG6U4D%2Fz2vJGqPzX%2FdHOo7jyRK%2FYCX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 83110e6cbc4ab524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.69JJaQ5G5xA.L.W.O/d=0/rs=AN8SPfpC36MIoWPngdVwZ4RUzeJYZaC7rg/m=el_main_css
142.250.74.99200 OK 4.4 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.69JJaQ5G5xA.L.W.O/d=0/rs=AN8SPfpC36MIoWPngdVwZ4RUzeJYZaC7rg/m=el_main_css
IP 142.250.74.99:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (25228), with no line terminators
Hash 5118e4eff99867b199027e7ee49bd481
7f315ab10b9d0ca73a98a810c272f405f87ec014
7db470720bc87269e9bf81c2da2649d4f59d54eb54ca5ed4547855758d6688a0
GET /_/translate_http/_/ss/k=translate_http.tr.69JJaQ5G5xA.L.W.O/d=0/rs=AN8SPfpC36MIoWPngdVwZ4RUzeJYZaC7rg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 4386
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 23:54:14 GMT
expires: Tue, 03 Dec 2024 23:54:14 GMT
cache-control: public, max-age=31536000
age: 95242
last-modified: Sun, 12 Mar 2023 00:11:57 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
btloader.com/tag?o=5678961798414336&upapi=true
104.22.74.216200 OK 18 kB URL GET HTTP/2 btloader.com/tag?o=5678961798414336&upapi=true
IP 104.22.74.216:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subjectbtloader.com
FingerprintCA:53:B2:07:58:99:D9:F5:8D:2A:FB:76:F6:B4:9F:6B:09:17:7F:40
ValidityThu, 19 Oct 2023 20:28:18 GMT - Wed, 17 Jan 2024 20:28:17 GMT
File type C source, ASCII text, with very long lines (53564)
Hash 819b923a9f106cf6d8f2fec2237854ad
6eef02ce010acf131afbb798f0332b5984004013
55096808ce5a5c7d4aea2fdd142ccd9280e1c203abb4038c5f7af17f9622ab9b
GET /tag?o=5678961798414336&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:36 GMT
content-type: application/javascript
content-length: 18023
cache-control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300
content-encoding: gzip
etag: "d16a68ccf8729bef603a7260799b98e2"
last-modified: Wed, 06 Dec 2023 01:53:31 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 1526
accept-ranges: bytes
server: cloudflare
cf-ray: 83110e6e0ca015f4-ARN
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js
151.101.193.229200 OK 439 B URL GET HTTP/2 cdn.jsdelivr.net/gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js
IP 151.101.193.229:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (693)
Hash e6147523b7396aad764a752dfc6be7f7
22b6719bfb0fe1aaad21fb3511f130e83839ab56
a5230196df9a4e9f6382c504668862efc8e25c1ec093c7dc997fbedb4b3ec54e
GET /gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"2dc-IrZxm/sP4aqtIfs1EfEw6Dg5q1Y"
content-encoding: br
accept-ranges: bytes
date: Wed, 06 Dec 2023 02:21:36 GMT
age: 21279
x-served-by: cache-fra-eddf8230042-FRA, cache-bma1661-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 439
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-K68XP6D85D&l=dataLayer&cx=c
142.250.74.168 83 kB URL www.googletagmanager.com/gtag/js?id=G-K68XP6D85D&l=dataLayer&cx=c
IP 142.250.74.168:0
File type ASCII text, with very long lines (7711)
Hash 386ee4aecc0b89e8edc0a5bbdc9ac3ec
66ea0995f228edd785be094575906592120f5269
aa7aac055be8d711a8bede27d5a649ec704268db14f2eeb2495d4c5a69a6d890
GET /gtag/js?id=G-K68XP6D85D&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 06 Dec 2023 02:21:36 GMT
expires: Wed, 06 Dec 2023 02:21:36 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82886
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-829541-1
142.250.74.168200 OK 65 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=UA-829541-1
IP 142.250.74.168:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3026)
Hash 8116e33d7ab9aa0ad41f3bd515b617b8
a210b04b964a202cf540599015ab6da4150d1f0c
42cce3f68bbb1bd27a310dccec41b57cbd9c19f5cd73e861d60dba9402df14da
GET /gtag/js?id=UA-829541-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 06 Dec 2023 02:21:36 GMT
expires: Wed, 06 Dec 2023 02:21:36 GMT
cache-control: private, max-age=900
last-modified: Wed, 06 Dec 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64911
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.prod.uidapi.com/uid2SecureSignal.js
54.230.216.153 2.8 kB URL cdn.prod.uidapi.com/uid2SecureSignal.js
IP 54.230.216.153:0
File type ASCII text, with very long lines (2776), with no line terminators
Hash a3a9a9ee8e72db69d54e805f0586c651
9423b498b1b19136b84d704924324d3a805965aa
72e960baa80ec819264a604f2f8a8e5c21f81b785ebc17595211ad170d8b1bdc
GET /uid2SecureSignal.js HTTP/1.1
Host: cdn.prod.uidapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 2776
Connection: keep-alive
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 19 Oct 2023 06:40:11 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: KP_OVZMS6roEW_XJdOd.KnSEmM8GWiP3
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 05 Dec 2023 10:03:28 GMT
ETag: "a3a9a9ee8e72db69d54e805f0586c651"
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: A8yKoHEI7ZFiVG6O3j92lVu-UHv5CxRurpsK-HrzHEumHn6CJQYqjw==
Age: 61881
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.id.uR624FEyHGQ.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqMaSqGl8GXKqTVoC53JPi8ulNUdw/m=el_main
142.250.74.106200 OK 76 kB URL GET HTTP/3 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.id.uR624FEyHGQ.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqMaSqGl8GXKqTVoC53JPi8ulNUdw/m=el_main
IP 142.250.74.106:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1573)
Hash d62445872ad42666bac3840f7da64cb3
189873f0252c9d92d137f0b79c6950c395f8ca2f
ffea0cf1484fbe59be4ce5589334d626fddf343222b68a9b962c8b5db82b7e28
GET /_/translate_http/_/js/k=translate_http.tr.id.uR624FEyHGQ.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqMaSqGl8GXKqTVoC53JPi8ulNUdw/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 76042
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 01:43:32 GMT
expires: Thu, 05 Dec 2024 01:43:32 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 May 2023 23:09:29 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 2284
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.co.id/adsid/integrator.js?domain=www.mediafire.com
142.250.74.162404 Not Found 0 B URL GET HTTP/3 adservice.google.co.id/adsid/integrator.js?domain=www.mediafire.com
IP 142.250.74.162:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.google.co.id
FingerprintE6:C6:CD:6B:62:5D:4D:D5:3A:EB:C2:51:41:65:98:61:25:C4:66:96
ValidityMon, 23 Oct 2023 11:26:09 GMT - Mon, 15 Jan 2024 11:26:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adsid/integrator.js?domain=www.mediafire.com HTTP/1.1
Host: adservice.google.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 06 Dec 2023 02:21:36 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.statically.io/gh/Bagasaryaa/Css/blob/d105f452af81bfed67d2903c3d0593d249c306f4/Facebooklogin.css
151.101.1.91404 Not Found 391 B URL GET HTTP/2 cdn.statically.io/gh/Bagasaryaa/Css/blob/d105f452af81bfed67d2903c3d0593d249c306f4/Facebooklogin.css
IP 151.101.1.91:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerGlobalSign nv-sa
Subjectstatically.io
Fingerprint28:2B:F4:9C:61:EB:4D:6B:10:9F:7B:C4:22:0E:C4:51:7A:DB:60:A4
ValiditySat, 26 Aug 2023 17:58:11 GMT - Thu, 26 Sep 2024 17:58:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3ff5f3a7300ff541988649e1721d42f2
0844532f5097cdde9678e2edeedbadfe48614121
6172693305882d23af3cfd59637a7d2674a1cf96ee6794e4c8b82c13639c685f
GET /gh/Bagasaryaa/Css/blob/d105f452af81bfed67d2903c3d0593d249c306f4/Facebooklogin.css HTTP/1.1
Host: cdn.statically.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-encoding: br
access-control-allow-origin: *
access-control-expose-headers: *
age: 4
cache-control: public, max-age=5
content-type: text/html; charset=utf-8
date: Wed, 06 Dec 2023 02:21:36 GMT
etag: W/"52-PpmeaS5Clo9U4aq2F9N7RBrbJhk"
server: statically
strict-transport-security: max-age=31536000; includeSubDomains; preload
timing-allow-origin: *
vary: Accept-Encoding
x-cache: MISS, MISS
x-content-type-options: nosniff
x-served-by: cache-sjc10057-SJC, cache-bma1663-BMA
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 391
X-Firefox-Spdy: h2
seeklogo.com/images/M/mediafire-logo-8057F17F6B-seeklogo.com.png
172.67.190.76200 OK 4.6 kB URL GET HTTP/2 seeklogo.com/images/M/mediafire-logo-8057F17F6B-seeklogo.com.png
IP 172.67.190.76:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerLet's Encrypt
Subjectseeklogo.com
FingerprintCF:86:78:7F:29:1D:51:F4:D3:E5:C5:82:17:96:52:0D:70:58:C9:EE
ValidityMon, 04 Dec 2023 11:02:03 GMT - Sun, 03 Mar 2024 11:02:02 GMT
File type PNG image data, 300 x 163, 8-bit colormap, non-interlaced\012- data
Hash c7e7e656774d1f96d347615fddc44a42
fe49ece0a44262b059257a7becbe28b66b331373
fef4c67ecc1da2e101b30eb79c7b3bce0baec7fa997dc2604ac955f0a27262a1
GET /images/M/mediafire-logo-8057F17F6B-seeklogo.com.png HTTP/1.1
Host: seeklogo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:37 GMT
content-type: image/png
content-length: 4638
cache-control: public, max-age=31536000
last-modified: Sun, 27 Nov 2022 17:39:47 GMT
etag: "1d902873e1be19e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
x-download-options: noopen
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self'
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
age: 940436
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3XdVF%2B9g3x%2BijPHa8vrgc%2F2rFh6dfuOe0cQB9%2FOxOyuvmHcLH%2Bpn8lzC4RGy77jLEGBO6ynl%2BRfxKmOJ51q938oMrWetqN7yZgsSdpLCGbm%2F0adHOcDZwsZxmmEHCJE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e72998b56bb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.postimg.cc/yxwKZqZ2/navbar.png
162.19.88.68 8.5 kB URL i.postimg.cc/yxwKZqZ2/navbar.png
IP 162.19.88.68:0
File type PNG image data, 904 x 339, 8-bit colormap, non-interlaced\012- data
Hash f29c416a7c6f18ba0c0deb4980763c9d
56c7bfbf2c9a7a2be2e2214b0586c11af8e852bf
7f37cb926c06378327ad2a753c7119291b2ead796a6f588a8374de651ec72a8c
GET /yxwKZqZ2/navbar.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 06 Dec 2023 02:21:37 GMT
content-type: image/png
content-length: 8459
last-modified: Sun, 04 Jun 2023 03:34:03 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
oa.openxcdn.net/esp.js
34.102.146.192 7.9 kB IP 34.102.146.192:0
File type ASCII text, with very long lines (24615), with no line terminators
Hash 6a1f808a2dc8f2ba87772556f1f5ac9d
e8d0876e7b2cde9591a26db04cb0e5536c5b33aa
544c55ca9f05d425f3beb90f287308d7a408b1f60d17728eff5c605a494bc1b9
GET /esp.js HTTP/1.1
Host: oa.openxcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPr9bAXOkI9-tiirrQD1B_g2VEerZiw-0yjjvokBsbFcULfR81WL_5zMSmhFyRY95rGaMiiHaSPscmbLZv70a4rv
x-goog-generation: 1622140251693895
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 7927
content-encoding: gzip
x-goog-hash: crc32c=f21hYg==, md5=31VCuIvA42jGmZdUpbniug==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 7927
server: UploadServer
date: Mon, 13 Nov 2023 23:42:32 GMT
expires: Tue, 12 Nov 2024 23:42:32 GMT
cache-control: no-transform
last-modified: Thu, 27 May 2021 18:30:51 GMT
etag: "df5542b88bc0e368c6999754a5b9e2ba"
content-type: application/javascript
age: 1910345
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-829541-1&l=dataLayer&cx=c
142.250.74.168 65 kB URL www.googletagmanager.com/gtag/js?id=UA-829541-1&l=dataLayer&cx=c
IP 142.250.74.168:0
File type ASCII text, with very long lines (3026)
Hash 69c3050b35fc56fa49b7e323021dae6d
2c0e36ebc9d1ac653e316148d893424562e4ced1
d0c3f02f249c8e6e074bea10618fd9a3a50baaa900e89dc86fa091a865b90ae2
GET /gtag/js?id=UA-829541-1&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 06 Dec 2023 02:21:37 GMT
expires: Wed, 06 Dec 2023 02:21:37 GMT
cache-control: private, max-age=900
last-modified: Wed, 06 Dec 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64944
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
otnolatrnup.com/Tag.engine?time=-420&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=99089&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=420&fpe=1&bw=418&bh=844&res=418x844&curl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fef5nkpv7rxui9rb%2FFF_AutoDetect_TrueID.zip%2Ffile&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone
104.19.214.37 84 kB URL otnolatrnup.com/Tag.engine?time=-420&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=99089&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=420&fpe=1&bw=418&bh=844&res=418x844&curl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fef5nkpv7rxui9rb%2FFF_AutoDetect_TrueID.zip%2Ffile&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone
IP 104.19.214.37:0
File type gzip compressed data, from Unix\012- data
Hash 8cf8fabf488f578a114a43ab7a8db29f
6126f46d4dbbf91ca6c3b7ad79a4612db7de2d8e
f4e2a00365d0ffa76e3e5a89871db291d61b0b1771236f0e21f16e3db750078c
GET /Tag.engine?time=-420&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=99089&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=420&fpe=1&bw=418&bh=844&res=418x844&curl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fef5nkpv7rxui9rb%2FFF_AutoDetect_TrueID.zip%2Ffile&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone HTTP/1.1
Host: otnolatrnup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:36 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
__INF_CC=; expires=Sun, 26-Nov-2023 02:21:36 GMT; path=/
INF_DFL8=false; path=/; SameSite=None; secure
IUID=7e80c484-9f9a-4ba8-ac69-5ffdd546f79f; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure
ISSH=6FC50D; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
CHN=#[]; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Wed, 06-Dec-2023 06:21:36 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#1/1/0001 12:00:00 AM; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"101":[{"SId":"6FC50D","D":"23/12/5T18:21:36"}]}; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[101]; expires=Tue, 06-Dec-2033 02:21:36 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 83110e6dff1b56bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ad-delivery.net/px.gif?ch=2
104.26.3.70200 OK 43 B URL GET HTTP/2 ad-delivery.net/px.gif?ch=2
IP 104.26.3.70:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:7E:C3:56:0A:04:84:BD:24:32:3D:C3:8E:66:52:26:37:E8:90:D3
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:37 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ABPtcPp0wgCF-V8nWRRFweDLkLlZ59B9_HaB5uMb_BoI2XEvFDluZgJZMS-L6RsjtVqwyDwhSyI
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 23 Nov 2023 04:40:57 GMT
cache-control: public, max-age=86400
age: 1117983
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DHyheRtKsGbj9GbtG%2F3wh5MV2UhIzvRtKgxgomRh%2F91tzUCv2AVyiMCQIiPqX2i9WSWShPWYmfoYU4kO9071%2BT%2FwK4EKo9i0NEh2cZtfYTXdyurquBettiKqVPjsj341fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e75388a712f-OSL
X-Firefox-Spdy: h2
ad-delivery.net/px.gif?ch=1&e=0.4494292876758603
104.26.3.70200 OK 43 B URL GET HTTP/2 ad-delivery.net/px.gif?ch=1&e=0.4494292876758603
IP 104.26.3.70:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:7E:C3:56:0A:04:84:BD:24:32:3D:C3:8E:66:52:26:37:E8:90:D3
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=1&e=0.4494292876758603 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:37 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ABPtcPp0wgCF-V8nWRRFweDLkLlZ59B9_HaB5uMb_BoI2XEvFDluZgJZMS-L6RsjtVqwyDwhSyI
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 23 Nov 2023 04:40:57 GMT
cache-control: public, max-age=86400
age: 1117983
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gEcKqlck8Pd02X4p9MpNiQqcdwbONkJefAQgl%2FkGSY%2FJAHYyJBNS75fhw7F5kL1%2FItMn2sGtzvS0Krq%2BkksUwMr8X2D2I%2FQ6VGPrbly6vd%2B7VVe%2FI6s4LmHB5eDKTJ2pOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e75488d712f-OSL
X-Firefox-Spdy: h2
otnolatrnup.com/Tag.engine?time=0&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=37560&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=0&fpe=1&bw=1280&bh=1024&res=1280x1024&curl=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone
104.19.214.37 1.2 kB URL otnolatrnup.com/Tag.engine?time=0&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=37560&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=0&fpe=1&bw=1280&bh=1024&res=1280x1024&curl=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone
IP 104.19.214.37:0
File type ASCII text, with very long lines (2295), with no line terminators
Hash d7295a0942008aedfd11b6cb0c30afb1
e092233d95913091e2618abebe479d96f838ec6f
7dc2be8bf51c878afeb21a0cfb370df530dcc362a9eb4910a52f2216a9b87d4e
GET /Tag.engine?time=0&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=37560&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=0&fpe=1&bw=1280&bh=1024&res=1280x1024&curl=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone HTTP/1.1
Host: otnolatrnup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Cookie: IKSR={}; INF_DFL8=false; IUID=7e80c484-9f9a-4ba8-ac69-5ffdd546f79f; ISSH=6FC50D; VMI=; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP=null; ILPLU=#1/1/0001 12:00:00 AM; ILEALC=#1/1/0001 12:00:00 AM; ILMPF=#False; IPMPLU=#1/1/0001 12:00:00 AM; IPMUID=#; BSWUID=#; IBL=#[]; ISH=#{"101":[{"SId":"6FC50D","D":"23/12/5T18:21:36"}]}; ISH_Q=#[101]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 02:21:37 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
__INF_CC=; expires=Sun, 26-Nov-2023 02:21:37 GMT; path=/
INF_DFL8=false; path=/; SameSite=None; secure
IUID=7e80c484-9f9a-4ba8-ac69-5ffdd546f79f; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure
ISSH=6FC50D; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
CHN=#[]; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Wed, 06-Dec-2023 06:21:37 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#1/1/0001 12:00:00 AM; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"101":[{"SId":"6FC50D","D":"23/12/5T18:21:36"},{"SId":"6FC50D","D":"23/12/5T18:21:37"}]}; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[101,101]; expires=Tue, 06-Dec-2033 02:21:37 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 83110e746a195687-OSL
alt-svc: h3=":443"; ma=86400
api.btloader.com/mw/state?bt_env=prod
130.211.23.194 0 B URL api.btloader.com/mw/state?bt_env=prod
IP 130.211.23.194:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mw/state?bt_env=prod HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cjbfi3.dew4.my.id/
Origin: https://cjbfi3.dew4.my.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-origin: *
vary: Origin
date: Wed, 06 Dec 2023 02:21:37 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cjbfi3.dew4.my.id/js/prebid5.17.0.js
188.114.97.1404 Not Found 84 kB URL GET HTTP/3 cjbfi3.dew4.my.id/js/prebid5.17.0.js
IP 188.114.97.1:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerLet's Encrypt
Subjectdew4.my.id
Fingerprint46:DA:AD:A8:0B:19:5F:1B:18:84:DD:38:BA:D9:6B:1E:86:41:CC:7A
ValidityThu, 23 Nov 2023 18:11:24 GMT - Wed, 21 Feb 2024 18:11:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /js/prebid5.17.0.js HTTP/1.1
Host: cjbfi3.dew4.my.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Cookie: g36FastPopSessionRequestNumber=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 06 Dec 2023 02:21:37 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s7XRiZNykq%2BT1zJqmE7w9NrLzZ4hPeuzdlOO8vK%2FcHsG1azHvWdr3TqQBz5bY1dN%2F8p7bLNnFQ983uemDu2LpRbDq0VIOfLpJ7AKgrOvw0YPNWsZhZUU5zSFrW7lkbhrVhzG%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e749eab569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.131 48 kB URL fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.131:0
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cjbfi3.dew4.my.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 23:53:42 GMT
expires: Tue, 03 Dec 2024 23:53:42 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
age: 95275
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
188.114.97.1200 OK 149 kB URL User Request GET HTTP/2 IP 188.114.97.1:443
Certificate IssuerLet's Encrypt
Subjectdew4.my.id
Fingerprint46:DA:AD:A8:0B:19:5F:1B:18:84:DD:38:BA:D9:6B:1E:86:41:CC:7A
ValidityThu, 23 Nov 2023 18:11:24 GMT - Wed, 21 Feb 2024 18:11:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (335), with CRLF line terminators
Size 149 kB (149149 bytes)
Hash 7695f01a898f870723549a91b23c86ef
46d270a416b9c3caccde8a392abfca2dd36792d5
cea93aaedcf1c10749cff5d080977dcffaee3b37c0a31680d8283d483ec8a8eb
GET / HTTP/1.1
Host: cjbfi3.dew4.my.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:35 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wXhc3m5IlErJ0VeSj0X%2F3XKeHg%2BDgkJldgb1YLMoHSWzyWjXnojmYsOHQrFRDVWMakld0RzFDPI9Y7vqh7TIITsVhIeKQswS7vKdgZHPk4ozXCR5PQbxKy14ZHdS%2BjYy52aZiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83110e678fbfb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.131 48 kB URL fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.131:0
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cjbfi3.dew4.my.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 23:53:42 GMT
expires: Tue, 03 Dec 2024 23:53:42 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
age: 95275
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.131 48 kB URL fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.131:0
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cjbfi3.dew4.my.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 23:53:42 GMT
expires: Tue, 03 Dec 2024 23:53:42 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
age: 95275
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.mediafire.com/images/filetype/file-zip-v3.png
104.16.113.74200 OK 1.9 kB URL GET HTTP/2 static.mediafire.com/images/filetype/file-zip-v3.png
IP 104.16.113.74:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerSectigo Limited
Subject*.mediafire.com
Fingerprint8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File type PNG image data, 43 x 58, 8-bit/color RGBA, non-interlaced\012- data
Hash a23b8b7059e953fc1b74bf87a77ebb0c
f23e0ad301389083104f04d4164fa57423387b17
4448e430d3c53bad548a5d135e1c7e2f9593e806ba47892640d430ea752e979e
GET /images/filetype/file-zip-v3.png HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:37 GMT
content-type: image/png
content-length: 1872
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
etag: "62deda56-750"
expires: Thu, 04 Jan 2024 19:32:58 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 14220
accept-ranges: bytes
set-cookie: __cf_bm=xPdXo76PUHNzFCK_Tu6J_ykS_ZddTfvRisfLce229j4-1701829297-0-AblUsXJBjuklACFar7/UtX8Ks3yEdGdLMj+a1ZKN6XuuWDBnTU6iXL7CpBKE/bbaaT0gnDIhbdD5sTtVqeNiZ5A=; path=/; expires=Wed, 06-Dec-23 02:51:37 GMT; domain=.mediafire.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e784b445684-OSL
X-Firefox-Spdy: h2
static.mediafire.com/images/backgrounds/footer/social/footerIcons.png
104.16.113.74 583 B URL static.mediafire.com/images/backgrounds/footer/social/footerIcons.png
IP 104.16.113.74:0
Certificate IssuerSectigo Limited
Subject*.mediafire.com
Fingerprint8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File type PNG image data, 112 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash e0abc4fea89d2c5153b73cd02ac5ba13
00465ef774805c82fb5b8a40b743f7b1a1d1a7d6
f917a9105c311331b1d40f4d2bdbf11233c1c465616c1a9c46232f451463b061
GET /images/backgrounds/footer/social/footerIcons.png HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Cookie: __cf_bm=xPdXo76PUHNzFCK_Tu6J_ykS_ZddTfvRisfLce229j4-1701829297-0-AblUsXJBjuklACFar7/UtX8Ks3yEdGdLMj+a1ZKN6XuuWDBnTU6iXL7CpBKE/bbaaT0gnDIhbdD5sTtVqeNiZ5A=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:38 GMT
content-type: image/png
content-length: 583
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
etag: "62deda56-247"
expires: Thu, 04 Jan 2024 19:33:17 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 14277
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e79db9d5684-OSL
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css
104.17.24.14200 OK 4.2 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css
IP 104.17.24.14:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65348)
Hash c0be8e53226ac34833fd9b5dbc01ebc5
b81ef1b22de26af8a7a4656f565fbc91a69d7518
5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f
GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 02:21:38 GMT
content-type: text/css; charset=utf-8
content-length: 4216
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f5628a2-11846"
last-modified: Mon, 07 Sep 2020 12:33:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1203470
expires: Mon, 25 Nov 2024 02:21:38 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mq76mohONEA017mb9Pt4yVOQIxcALK9CuvTcpZXqOT1HCC33vlKrhefYXHhl%2BFiOddUj3eIt16QpeUHA9NVmebw3UWJ7mZ8HKakYKFkTtQlijqfTruSC%2FlrKhUl0AN3AQZHEH5kQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 83110e7a9d5556b5-OSL
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700;800&display=swap
142.250.74.106 11 kB URL fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700;800&display=swap
IP 142.250.74.106:0
File type gzip compressed data, max compression\012- data
Hash 06372a5ed6a0b3a9698ffb218ac1f3da
1e95b6c42aad923c71a4731c57dfa5c178bfc68e
6331b128aa17685229ea20701d4ba97511ca51b022c780f5c9272987ee7806be
GET /css2?family=Open+Sans:wght@300;400;500;600;700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 06 Dec 2023 02:21:36 GMT
date: Wed, 06 Dec 2023 02:21:36 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.gifan.id/files/20230704_jquery-3.7.0.min.js
104.21.234.34200 OK 37 kB URL GET HTTP/2 api.gifan.id/files/20230704_jquery-3.7.0.min.js
IP 104.21.234.34:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerGoogle Trust Services LLC
Subjectgifan.id
Fingerprint05:08:56:A0:2C:BF:31:A0:4C:D0:5C:0F:18:A3:B9:7D:58:74:03:29
ValidityWed, 29 Nov 2023 03:44:14 GMT - Tue, 27 Feb 2024 03:44:13 GMT
File type ASCII text, with very long lines (65447)
Hash e6c2415c0ace414e5153670314ce99a9
5a9eeac34d86e92e5660e0f4f87204f1ed0c8ff6
d8f9afbf492e4c139e9d2bcb9ba6ef7c14921eb509fb703bc7a3f911b774eff8
GET /files/20230704_jquery-3.7.0.min.js HTTP/1.1
Host: api.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:37 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Wed, 13 Dec 2023 01:43:34 GMT
last-modified: Tue, 04 Jul 2023 06:59:45 GMT
vary: Accept-Encoding,User-Agent
x-powered-by: Niagahoster
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: *
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 2283
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6mr15n1nIv9920fKzrllMurgpi2y6Z%2B%2BSacAh1ut5JapIGkxnM74fyuvkmXGTSJgYonc3Z8Jlb%2BEDwEyWbaoBHoT6ROn7xppEMmhFdxyoCw%2Fi0tH2gg52cXuL0muAE0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83110e74ad3d4e0f-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
104.18.10.207200 OK 13 kB URL GET HTTP/3 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP 104.18.10.207:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:36 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: dd809c84048d5afa8e77adc8acacd559
cdn-cache: HIT
cf-cache-status: HIT
age: 1203471
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 83110e6da9a1b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
btloader.com/tag?o=5678961798414336&upapi=true
104.22.74.216200 OK 18 kB URL GET HTTP/2 btloader.com/tag?o=5678961798414336&upapi=true
IP 104.22.74.216:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subjectbtloader.com
FingerprintCA:53:B2:07:58:99:D9:F5:8D:2A:FB:76:F6:B4:9F:6B:09:17:7F:40
ValidityThu, 19 Oct 2023 20:28:18 GMT - Wed, 17 Jan 2024 20:28:17 GMT
File type C source, ASCII text, with very long lines (53564)
Hash 819b923a9f106cf6d8f2fec2237854ad
6eef02ce010acf131afbb798f0332b5984004013
55096808ce5a5c7d4aea2fdd142ccd9280e1c203abb4038c5f7af17f9622ab9b
GET /tag?o=5678961798414336&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:38 GMT
content-type: application/javascript
content-length: 18023
cache-control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300
content-encoding: gzip
etag: "d16a68ccf8729bef603a7260799b98e2"
last-modified: Wed, 06 Dec 2023 01:53:31 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 1528
accept-ranges: bytes
server: cloudflare
cf-ray: 83110e7ade5315f4-ARN
X-Firefox-Spdy: h2
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.69JJaQ5G5xA.L.W.O/d=0/rs=AN8SPfpC36MIoWPngdVwZ4RUzeJYZaC7rg/m=el_main_css
142.250.74.99200 OK 4.4 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.69JJaQ5G5xA.L.W.O/d=0/rs=AN8SPfpC36MIoWPngdVwZ4RUzeJYZaC7rg/m=el_main_css
IP 142.250.74.99:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (25228), with no line terminators
Hash 5118e4eff99867b199027e7ee49bd481
7f315ab10b9d0ca73a98a810c272f405f87ec014
7db470720bc87269e9bf81c2da2649d4f59d54eb54ca5ed4547855758d6688a0
GET /_/translate_http/_/ss/k=translate_http.tr.69JJaQ5G5xA.L.W.O/d=0/rs=AN8SPfpC36MIoWPngdVwZ4RUzeJYZaC7rg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 4386
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 23:54:14 GMT
expires: Tue, 03 Dec 2024 23:54:14 GMT
cache-control: public, max-age=31536000
age: 95244
last-modified: Sun, 12 Mar 2023 00:11:57 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=UA-829541-1
142.250.74.168200 OK 65 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=UA-829541-1
IP 142.250.74.168:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3026)
Hash 27705dfe70f87dd6250c52711d9e0148
5edc14892aeec4e3155d8cecdbb4806a560f4472
1e3c691b8ba3683f82448e9e20b3cb3ab778d34dd503fefe96a3e2170c93f5ec
GET /gtag/js?id=UA-829541-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 06 Dec 2023 02:21:38 GMT
expires: Wed, 06 Dec 2023 02:21:38 GMT
cache-control: private, max-age=900
last-modified: Wed, 06 Dec 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64915
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.id.uR624FEyHGQ.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqMaSqGl8GXKqTVoC53JPi8ulNUdw/m=el_main
142.250.74.106200 OK 76 kB URL GET HTTP/3 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.id.uR624FEyHGQ.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqMaSqGl8GXKqTVoC53JPi8ulNUdw/m=el_main
IP 142.250.74.106:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1573)
Hash d62445872ad42666bac3840f7da64cb3
189873f0252c9d92d137f0b79c6950c395f8ca2f
ffea0cf1484fbe59be4ce5589334d626fddf343222b68a9b962c8b5db82b7e28
GET /_/translate_http/_/js/k=translate_http.tr.id.uR624FEyHGQ.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqMaSqGl8GXKqTVoC53JPi8ulNUdw/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 76042
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 01:43:32 GMT
expires: Thu, 05 Dec 2024 01:43:32 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 May 2023 23:09:29 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 2286
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.otnolatrnup.com/Scripts/infinity.js.aspx?guid=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0
104.19.214.37 138 kB URL cdn.otnolatrnup.com/Scripts/infinity.js.aspx?guid=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0
IP 104.19.214.37:0
File type gzip compressed data, from Unix\012- data
Size 138 kB (137929 bytes)
Hash 32cc6834172422432605d74e37c6f823
1f3925d2c504a0f985a32e95ae2fbca615b763e4
392c47492ff970e53e08968439e2457f6c4e1d16fb1c3a4254f5ef346ed94572
GET /Scripts/infinity.js.aspx?guid=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0 HTTP/1.1
Host: cdn.otnolatrnup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:36 GMT
content-type: application/x-javascript; charset=utf-8
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version
vary: Accept-Encoding
cache-control: public, no-transform, max-age=900
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
last-modified: Wed, 06 Dec 2023 02:11:47 GMT
cf-cache-status: HIT
age: 265
server: cloudflare
cf-ray: 83110e6def1656bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.prod.uidapi.com/uid2SecureSignal.js
54.230.216.153 2.8 kB URL cdn.prod.uidapi.com/uid2SecureSignal.js
IP 54.230.216.153:0
File type ASCII text, with very long lines (2776), with no line terminators
Hash a3a9a9ee8e72db69d54e805f0586c651
9423b498b1b19136b84d704924324d3a805965aa
72e960baa80ec819264a604f2f8a8e5c21f81b785ebc17595211ad170d8b1bdc
GET /uid2SecureSignal.js HTTP/1.1
Host: cdn.prod.uidapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 2776
Connection: keep-alive
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 19 Oct 2023 06:40:11 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: KP_OVZMS6roEW_XJdOd.KnSEmM8GWiP3
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 05 Dec 2023 10:03:28 GMT
ETag: "a3a9a9ee8e72db69d54e805f0586c651"
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nTSnzgP09D95ipD5piGlNc_KenlZqtzz8ihJRFM68C27fI28p_uGVw==
Age: 61883
cdn.jsdelivr.net/gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js
151.101.193.229200 OK 439 B URL GET HTTP/2 cdn.jsdelivr.net/gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js
IP 151.101.193.229:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (693)
Hash e6147523b7396aad764a752dfc6be7f7
22b6719bfb0fe1aaad21fb3511f130e83839ab56
a5230196df9a4e9f6382c504668862efc8e25c1ec093c7dc997fbedb4b3ec54e
GET /gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 439
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"2dc-IrZxm/sP4aqtIfs1EfEw6Dg5q1Y"
content-encoding: br
accept-ranges: bytes
date: Wed, 06 Dec 2023 02:21:38 GMT
age: 21280
x-served-by: cache-fra-eddf8230042-FRA, cache-bma1654-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
static.mediafire.com/images/icons/svg_dark/share.svg
104.16.113.74 12 kB URL static.mediafire.com/images/icons/svg_dark/share.svg
IP 104.16.113.74:0
Certificate IssuerSectigo Limited
Subject*.mediafire.com
Fingerprint8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 7594663d1ddaae17a9ef5cc77a6c73d2
049795006c7aad09b6a2521e270ad92641392c99
6e90adfad565670625c4ded3f1feaf28dffd290408eaa3f3a2026f57b91da91f
GET /images/icons/svg_dark/share.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:37 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
etag: W/"62deda56-2e1"
access-control-allow-origin: *
cf-cache-status: HIT
age: 11188
set-cookie: __cf_bm=2Dij18EuAa6y67sAXYbU8owTte32ccN8eNfub15qo_g-1701829297-0-AcvZriGCynruoCaLbeLc6wgZPj184UbbqHvYKhL2RAaLMwjm2ozIPHXNljwXeca+Iq96uh6xNG6T78IrNMTXXf0=; path=/; expires=Wed, 06-Dec-23 02:51:37 GMT; domain=.mediafire.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e784b465684-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
oa.openxcdn.net/esp.js
34.102.146.192 7.9 kB IP 34.102.146.192:0
File type ASCII text, with very long lines (24615), with no line terminators
Hash 6a1f808a2dc8f2ba87772556f1f5ac9d
e8d0876e7b2cde9591a26db04cb0e5536c5b33aa
544c55ca9f05d425f3beb90f287308d7a408b1f60d17728eff5c605a494bc1b9
GET /esp.js HTTP/1.1
Host: oa.openxcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ABPtcPr9bAXOkI9-tiirrQD1B_g2VEerZiw-0yjjvokBsbFcULfR81WL_5zMSmhFyRY95rGaMiiHaSPscmbLZv70a4rv
x-goog-generation: 1622140251693895
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 7927
content-encoding: gzip
x-goog-hash: crc32c=f21hYg==, md5=31VCuIvA42jGmZdUpbniug==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 7927
server: UploadServer
date: Mon, 13 Nov 2023 23:42:32 GMT
expires: Tue, 12 Nov 2024 23:42:32 GMT
cache-control: no-transform
last-modified: Thu, 27 May 2021 18:30:51 GMT
etag: "df5542b88bc0e368c6999754a5b9e2ba"
content-type: application/javascript
age: 1910346
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
region1.analytics.google.com/g/collect?v=2&tid=G-K68XP6D85D>m=45je3bt0v887485693z86304663&_p=1701829303185&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=2042550625.1701829304&ul=en-us&sr=1280x1024&_s=1&sid=1701829303&sct=1&seg=0&dl=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&dt=VidioBokepViral&en=page_view&_fv=1&_nsi=1&_ss=1&up.page_url=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&tfd=2408
216.239.32.36 0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-K68XP6D85D>m=45je3bt0v887485693z86304663&_p=1701829303185&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=2042550625.1701829304&ul=en-us&sr=1280x1024&_s=1&sid=1701829303&sct=1&seg=0&dl=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&dt=VidioBokepViral&en=page_view&_fv=1&_nsi=1&_ss=1&up.page_url=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&tfd=2408
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K68XP6D85D>m=45je3bt0v887485693z86304663&_p=1701829303185&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=2042550625.1701829304&ul=en-us&sr=1280x1024&_s=1&sid=1701829303&sct=1&seg=0&dl=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&dt=VidioBokepViral&en=page_view&_fv=1&_nsi=1&_ss=1&up.page_url=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&tfd=2408 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cjbfi3.dew4.my.id
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://cjbfi3.dew4.my.id
date: Wed, 06 Dec 2023 02:21:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.statically.io/gh/Bagasaryaa/Css/blob/d105f452af81bfed67d2903c3d0593d249c306f4/Facebooklogin.css
151.101.1.91404 Not Found 391 B URL GET HTTP/2 cdn.statically.io/gh/Bagasaryaa/Css/blob/d105f452af81bfed67d2903c3d0593d249c306f4/Facebooklogin.css
IP 151.101.1.91:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerGlobalSign nv-sa
Subjectstatically.io
Fingerprint28:2B:F4:9C:61:EB:4D:6B:10:9F:7B:C4:22:0E:C4:51:7A:DB:60:A4
ValiditySat, 26 Aug 2023 17:58:11 GMT - Thu, 26 Sep 2024 17:58:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3ff5f3a7300ff541988649e1721d42f2
0844532f5097cdde9678e2edeedbadfe48614121
6172693305882d23af3cfd59637a7d2674a1cf96ee6794e4c8b82c13639c685f
GET /gh/Bagasaryaa/Css/blob/d105f452af81bfed67d2903c3d0593d249c306f4/Facebooklogin.css HTTP/1.1
Host: cdn.statically.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 391
content-encoding: br
access-control-allow-origin: *
access-control-expose-headers: *
age: 4
cache-control: public, max-age=5
content-type: text/html; charset=utf-8
date: Wed, 06 Dec 2023 02:21:38 GMT
etag: W/"52-PpmeaS5Clo9U4aq2F9N7RBrbJhk"
server: statically
strict-transport-security: max-age=31536000; includeSubDomains; preload
timing-allow-origin: *
vary: Accept-Encoding
x-cache: MISS, MISS
x-content-type-options: nosniff
x-served-by: cache-sjc10029-SJC, cache-bma1640-BMA
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K68XP6D85D&cid=2042550625.1701829304>m=45je3bt0v887485693z86304663&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=377790619
142.250.74.163 42 B URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K68XP6D85D&cid=2042550625.1701829304>m=45je3bt0v887485693z86304663&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=377790619
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K68XP6D85D&cid=2042550625.1701829304>m=45je3bt0v887485693z86304663&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=377790619 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 06 Dec 2023 02:21:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
188.114.97.1200 OK 184 kB URL User Request GET HTTP/2 IP 188.114.97.1:443
Certificate IssuerLet's Encrypt
Subjectdew4.my.id
Fingerprint46:DA:AD:A8:0B:19:5F:1B:18:84:DD:38:BA:D9:6B:1E:86:41:CC:7A
ValidityThu, 23 Nov 2023 18:11:24 GMT - Wed, 21 Feb 2024 18:11:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (335), with CRLF line terminators
Size 184 kB (184164 bytes)
Hash 7695f01a898f870723549a91b23c86ef
46d270a416b9c3caccde8a392abfca2dd36792d5
cea93aaedcf1c10749cff5d080977dcffaee3b37c0a31680d8283d483ec8a8eb
GET / HTTP/1.1
Host: cjbfi3.dew4.my.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Cookie: g36FastPopSessionRequestNumber=1; _ga_K68XP6D85D=GS1.1.1701829303.1.0.1701829303.60.0.0; _ga=GA1.1.2042550625.1701829304
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 02:21:38 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E94vLck4xFm6GmlUC0%2FKJ9HwHOGKtPt109rj1imwhiUXmL4UFiXU%2BBA1qjHXwUW1dxwmjgnxcqHN6mwBwVJuLJJfi0tRd8aUQnSj5ehZO3uAH9omq1cr7Buj3JSweTkGLWYRiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83110e771f7c569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css
142.250.74.99200 OK 4.0 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css
IP 142.250.74.99:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (20367), with no line terminators
Hash 72d3a735ccca1027f6b3afba2c93e3a7
67f8eff8d17334c59c28fc1753bf451527c7490d
c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 07:43:08 GMT
expires: Wed, 04 Dec 2024 07:43:08 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 67111
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ad-delivery.net/px.gif?ch=2
104.26.3.70200 OK 43 B URL GET HTTP/2 ad-delivery.net/px.gif?ch=2
IP 104.26.3.70:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:7E:C3:56:0A:04:84:BD:24:32:3D:C3:8E:66:52:26:37:E8:90:D3
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:39 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ABPtcPp0wgCF-V8nWRRFweDLkLlZ59B9_HaB5uMb_BoI2XEvFDluZgJZMS-L6RsjtVqwyDwhSyI
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 23 Nov 2023 04:40:57 GMT
cache-control: public, max-age=86400
age: 1117985
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yGMkPDFU7PVNYs9q6nT1woP0TOumbjcsw%2FV0H0j3WATqu7dEg0ZObS6hAkKHo8QjLkYGMnn4VdpSix60Gwry4Bltp6w%2BjmJzad0gfvdPIU0SJs9aNPIYALuuXcUj22JNwA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e822bde712f-OSL
X-Firefox-Spdy: h2
ad-delivery.net/px.gif?ch=1&e=0.9855425935575197
104.26.3.70 43 B URL ad-delivery.net/px.gif?ch=1&e=0.9855425935575197
IP 104.26.3.70:0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:7E:C3:56:0A:04:84:BD:24:32:3D:C3:8E:66:52:26:37:E8:90:D3
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=1&e=0.9855425935575197 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:39 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ABPtcPp0wgCF-V8nWRRFweDLkLlZ59B9_HaB5uMb_BoI2XEvFDluZgJZMS-L6RsjtVqwyDwhSyI
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 23 Nov 2023 04:40:57 GMT
cache-control: public, max-age=86400
age: 1117985
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RzlKJBSgraYojLIPdulv9m9gGn2dl%2FLPB4Dyqj8nBnN3QVpWIZkP%2BK7SosT%2F%2FssOJE1p1jzs3yapHigq%2FogVPA2Ez7tv%2Fzj0q727jwRhZ7JhHJ6QQwe2Q%2F9uZ3S28PfR7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e822bdf712f-OSL
X-Firefox-Spdy: h2
adservice.google.co.id/adsid/integrator.js?domain=www.mediafire.com
142.250.74.66404 Not Found 0 B URL GET HTTP/3 adservice.google.co.id/adsid/integrator.js?domain=www.mediafire.com
IP 142.250.74.66:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.google.co.id
FingerprintE6:C6:CD:6B:62:5D:4D:D5:3A:EB:C2:51:41:65:98:61:25:C4:66:96
ValidityMon, 23 Oct 2023 11:26:09 GMT - Mon, 15 Jan 2024 11:26:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adsid/integrator.js?domain=www.mediafire.com HTTP/1.1
Host: adservice.google.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 06 Dec 2023 02:21:39 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=UA-829541-1&l=dataLayer&cx=c
142.250.74.168 65 kB URL www.googletagmanager.com/gtag/js?id=UA-829541-1&l=dataLayer&cx=c
IP 142.250.74.168:0
File type ASCII text, with very long lines (3026)
Hash 9f995b1f7ff07f7cf79e74a0738809a6
6789aabfd5c2ee5f2240d46190cc6e1f0ffbed53
4e2533dc6bb1bd781779984273db77e942a5b8bfd6c67301c819b7f9bd6d118b
GET /gtag/js?id=UA-829541-1&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 06 Dec 2023 02:21:39 GMT
expires: Wed, 06 Dec 2023 02:21:39 GMT
cache-control: private, max-age=900
last-modified: Wed, 06 Dec 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64942
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.mediafire.com/images/backgrounds/download/additional_content/world.svg
104.16.113.74 193 kB URL static.mediafire.com/images/backgrounds/download/additional_content/world.svg
IP 104.16.113.74:0
Certificate IssuerSectigo Limited
Subject*.mediafire.com
Fingerprint8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (25749)
Size 193 kB (192845 bytes)
Hash 4fda7e22bb3e559979cadfc044994d49
1983b0e10265446796e34b9ac0b75a595fb3256f
b079523af50b761b79cadb9ddb7624013539e384815dc0c0af5c38a716a60b82
GET /images/backgrounds/download/additional_content/world.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Cookie: __cf_bm=xPdXo76PUHNzFCK_Tu6J_ykS_ZddTfvRisfLce229j4-1701829297-0-AblUsXJBjuklACFar7/UtX8Ks3yEdGdLMj+a1ZKN6XuuWDBnTU6iXL7CpBKE/bbaaT0gnDIhbdD5sTtVqeNiZ5A=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:38 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
etag: W/"62deda56-23ce2"
access-control-allow-origin: *
cf-cache-status: HIT
age: 14220
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e79bb955684-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-53LP4T
142.250.74.168200 OK 84 kB URL GET HTTP/3 www.googletagmanager.com/gtm.js?id=GTM-53LP4T
IP 142.250.74.168:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (30556)
Hash 477ac625566131f7d21a974cda48dd5d
4957b255cb0e43598c5c2efbe6a719ab6d51f9cb
b79c6e8112278c837227b86bbf349cfd3b210d125cc2772abf4ffb526be51a8e
GET /gtm.js?id=GTM-53LP4T HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 06 Dec 2023 02:21:39 GMT
expires: Wed, 06 Dec 2023 02:21:39 GMT
cache-control: private, max-age=900
last-modified: Wed, 06 Dec 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 83480
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.mediafire.com/images/icons/svg_light/download.svg
104.16.113.74 32 kB URL static.mediafire.com/images/icons/svg_light/download.svg
IP 104.16.113.74:0
Certificate IssuerSectigo Limited
Subject*.mediafire.com
Fingerprint8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash d3a679da74a0cf79a9d351e6b439e5bb
1e761717b2a6ae160c3c3a2b7ecbf5c74e06151f
0c401451711e095b6f3eea9dd008189fcb7f3d3acb187b54d3a5f788b15cf8af
GET /images/icons/svg_light/download.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:37 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
etag: W/"62deda56-15c"
access-control-allow-origin: *
cf-cache-status: HIT
age: 11188
set-cookie: __cf_bm=X4ckatNBdoDWNZEuri.fqvps85QEWYGTA1EfiaigDrI-1701829297-0-AS5rtoZ/6vpd83pkntKysp1IM5R+5iD4omTkyyVRIPd1CpNpzsbJeoA0Amq46sm98ymnA2AmeeVzvmCtQnaTl+k=; path=/; expires=Wed, 06-Dec-23 02:51:37 GMT; domain=.mediafire.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e784b435684-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
142.250.74.131 3.3 kB URL fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
IP 142.250.74.131:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6225), with no line terminators
Hash 2bd5c073a88b83ed74db88282a56ddfb
d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650
ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:11:35 GMT
expires: Thu, 28 Nov 2024 21:11:35 GMT
cache-control: public, max-age=31536000
age: 537004
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/images/branding/product/2x/translate_24dp.png
142.250.74.99200 OK 1.8 kB URL GET HTTP/3 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP 142.250.74.99:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 13:35:22 GMT
expires: Wed, 04 Dec 2024 13:35:22 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
age: 45977
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
142.250.74.106 1.4 kB URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP 142.250.74.106:0
Hash a3eefe14b1b4698460d992bd1673a26b
a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4
87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 06 Dec 2023 02:21:39 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=lYhPiDK_DeDSykPSqwOXXG9IeEhTSBBZXrHZfnfLanGHBttEuKisZspMyxXvKLv54schRPEROElESkdyEkhJYjH-DTS62ZUSDSbWx2QyqZpBtj1UTb7ISEJq5DEaqmLJrNZAuxZAb3caa11wAIKuWb0XVuw8MhQ0_uiEkjGn14U; expires=Thu, 06-Jun-2024 02:21:39 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+902; expires=Fri, 05-Dec-2025 02:21:39 GMT; path=/; domain=.googleapis.com; Secure
expires: Wed, 06 Dec 2023 02:21:39 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
seeklogo.com/images/M/mediafire-logo-8057F17F6B-seeklogo.com.png
172.67.190.76200 OK 4.6 kB URL GET HTTP/2 seeklogo.com/images/M/mediafire-logo-8057F17F6B-seeklogo.com.png
IP 172.67.190.76:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerLet's Encrypt
Subjectseeklogo.com
FingerprintCF:86:78:7F:29:1D:51:F4:D3:E5:C5:82:17:96:52:0D:70:58:C9:EE
ValidityMon, 04 Dec 2023 11:02:03 GMT - Sun, 03 Mar 2024 11:02:02 GMT
File type PNG image data, 300 x 163, 8-bit colormap, non-interlaced\012- data
Hash c7e7e656774d1f96d347615fddc44a42
fe49ece0a44262b059257a7becbe28b66b331373
fef4c67ecc1da2e101b30eb79c7b3bce0baec7fa997dc2604ac955f0a27262a1
GET /images/M/mediafire-logo-8057F17F6B-seeklogo.com.png HTTP/1.1
Host: seeklogo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 02:21:39 GMT
content-type: image/png
content-length: 4638
cache-control: public, max-age=31536000
last-modified: Sun, 27 Nov 2022 17:39:47 GMT
etag: "1d902873e1be19e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
x-download-options: noopen
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self'
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
age: 940438
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jf98u6ZJjV1ZmPN5Vi%2Bs6bNFYA%2FYAeLiUwH%2FXJCnZmgxp%2FxCzg7CzD0JWgCWZw00lhecXAJqwhxccZZXCpUNMqaOt83ufP8jK%2Fo7kV7XXr80a1iI%2F%2BsyEmYqtMVDa5c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e845b7b712b-OSL
alt-svc: h3=":443"; ma=86400
i.postimg.cc/yxwKZqZ2/navbar.png
162.19.88.68 8.5 kB URL i.postimg.cc/yxwKZqZ2/navbar.png
IP 162.19.88.68:0
File type PNG image data, 904 x 339, 8-bit colormap, non-interlaced\012- data
Hash f29c416a7c6f18ba0c0deb4980763c9d
56c7bfbf2c9a7a2be2e2214b0586c11af8e852bf
7f37cb926c06378327ad2a753c7119291b2ead796a6f588a8374de651ec72a8c
GET /yxwKZqZ2/navbar.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 06 Dec 2023 02:21:39 GMT
content-type: image/png
content-length: 8459
last-modified: Sun, 04 Jun 2023 03:34:03 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20231203
216.58.211.14204 No Content 0 B URL GET HTTP/3 translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20231203
IP 216.58.211.14:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gen204?sl=en&nca=te_ap&client=te&logld=vTE_20231203 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: image/gif; charset=us-ascii
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 02:21:39 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin
content-security-policy: script-src 'nonce-y-5OJCfYfLjUOIKs7ePpxg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: __Secure-ENID=16.SE=HbJvbIjcW_5ENZeunrBKvD0VIV9SG8fzC4uBAyhAj28jkijULGNxXawWLLlmAjAz0xmmrhpNbWYbyqrInd57frJ9-Vd3m_PLa0fEUiOviu833408utdowW0ZcDl0AdWd0DuQ1bMASeLyj4_e2PDZjVbFRAxHwNa5qRIhaQqtt4s; expires=Sat, 04-Jan-2025 18:39:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css
142.250.74.99200 OK 4.0 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css
IP 142.250.74.99:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (20367), with no line terminators
Hash 72d3a735ccca1027f6b3afba2c93e3a7
67f8eff8d17334c59c28fc1753bf451527c7490d
c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 07:43:08 GMT
expires: Wed, 04 Dec 2024 07:43:08 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 67112
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/f/AGSKWxXrjtEH6OsIEa1eMxJNrJTV18lP5XKGKMJi5rI13IlsGpcs5yT-0hk0wJuzpkaKFvH14rtURv0da3wnJCfhkp8=
216.58.211.14200 OK 91 kB URL GET HTTP/2 fundingchoicesmessages.google.com/f/AGSKWxXrjtEH6OsIEa1eMxJNrJTV18lP5XKGKMJi5rI13IlsGpcs5yT-0hk0wJuzpkaKFvH14rtURv0da3wnJCfhkp8=
IP 216.58.211.14:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (2193)
Hash 6f1822a66931f0e68f6fbf8fd54fdd0d
db7160879b90135178964f31b5160be52550867b
87504401e90251cb1937a5b2cd643c172a94474ff5bdd0b9e941def640a592a0
GET /f/AGSKWxXrjtEH6OsIEa1eMxJNrJTV18lP5XKGKMJi5rI13IlsGpcs5yT-0hk0wJuzpkaKFvH14rtURv0da3wnJCfhkp8= HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 02:21:39 GMT
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport, script-src 'nonce-s51c7iGqH7ABXPtVxDAbqg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
142.250.74.131 3.3 kB URL fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
IP 142.250.74.131:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6225), with no line terminators
Hash 2bd5c073a88b83ed74db88282a56ddfb
d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650
ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:11:35 GMT
expires: Thu, 28 Nov 2024 21:11:35 GMT
cache-control: public, max-age=31536000
age: 537005
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/f/AGSKWxXrj58Hn9u60hDchwSlIEGib7RRbB-JyU5hbODrl9SE7WseyUN7HYkYAl30sqFuz0aXWA3ilPpYCuTFwVM1CVI4liLOZtr0yWzfeunZvXsHOek8vYcvY0RYecwhFdglIYebSOh6Zg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg0NDkxMjczLDIwMjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3Lm1lZGlhZmlyZS5jb20vZmlsZS9lZjVua3B2N3J4dWk5cmIvRkZfQXV0b0RldGVjdF9UcnVlSUQuemlwL2ZpbGUiLG51bGwsW1s4LCI0NUJnZ2ZkekdpVSJdLFs5LCJlbi1VUyJdXV0
216.58.211.14200 OK 58 kB URL GET HTTP/3 fundingchoicesmessages.google.com/f/AGSKWxXrj58Hn9u60hDchwSlIEGib7RRbB-JyU5hbODrl9SE7WseyUN7HYkYAl30sqFuz0aXWA3ilPpYCuTFwVM1CVI4liLOZtr0yWzfeunZvXsHOek8vYcvY0RYecwhFdglIYebSOh6Zg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg0NDkxMjczLDIwMjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3Lm1lZGlhZmlyZS5jb20vZmlsZS9lZjVua3B2N3J4dWk5cmIvRkZfQXV0b0RldGVjdF9UcnVlSUQuemlwL2ZpbGUiLG51bGwsW1s4LCI0NUJnZ2ZkekdpVSJdLFs5LCJlbi1VUyJdXV0
IP 216.58.211.14:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (6765)
Hash 06d52bcd843692849f3c64ba14dc2795
f6b4deee526b765f85cb78bd3b2c3e016615fdbf
e8d351e32fa106532a81e6a4f780847c15efa85e7e2c60a0fb9404a13093569e
GET /f/AGSKWxXrj58Hn9u60hDchwSlIEGib7RRbB-JyU5hbODrl9SE7WseyUN7HYkYAl30sqFuz0aXWA3ilPpYCuTFwVM1CVI4liLOZtr0yWzfeunZvXsHOek8vYcvY0RYecwhFdglIYebSOh6Zg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg0NDkxMjczLDIwMjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3Lm1lZGlhZmlyZS5jb20vZmlsZS9lZjVua3B2N3J4dWk5cmIvRkZfQXV0b0RldGVjdF9UcnVlSUQuemlwL2ZpbGUiLG51bGwsW1s4LCI0NUJnZ2ZkekdpVSJdLFs5LCJlbi1VUyJdXV0 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
timing-allow-origin: *
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 02:21:40 GMT
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-6-fWLQzx_9CZ9XZamr0jbg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20231203
216.58.211.14204 No Content 0 B URL GET HTTP/3 translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20231203
IP 216.58.211.14:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gen204?sl=en&nca=te_ap&client=te&logld=vTE_20231203 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: image/gif; charset=us-ascii
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 02:21:40 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-security-policy: script-src 'nonce-Tjm9KriAog7rCnCNM5hQBw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport
cross-origin-opener-policy: same-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: __Secure-ENID=16.SE=KI7uetw4GBirwJQ2gUhjYIOLsE9vTnXTho0RdhkmzZ26d1dRL0oAJM72WRIeurUDeUdrkrtbJPBpKrchmca1THv4lu9vP9m8SIQnuXX3RGBHU5Mj0PEoEAB2mq50aHwzzHwt1Rt2g3bUaahMhV9G5RT3fr_5hTfgoItjUOmzGWs; expires=Sat, 04-Jan-2025 18:39:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/f/AGSKWxX--y5nBjbSH5OMXyzD4blXCXmdc3PIamI1ko8OKc9zrCP7n1CbPeGGbXOSUCyBOR89oejGJOrdKcz1I4BTZYr926xTVJAC8BKCeGvMqMYHLg6vTQi8sd384ymbgOUnAt_WbtDGhQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg0NDkxMjczLDI4MjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiwxMF0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3Lm1lZGlhZmlyZS5jb20vZmlsZS9lZjVua3B2N3J4dWk5cmIvRkZfQXV0b0RldGVjdF9UcnVlSUQuemlwL2ZpbGUiLG51bGwsW1s4LCI0NUJnZ2ZkekdpVSJdLFs5LCJlbi1VUyJdXV0
216.58.211.14200 OK 60 kB URL GET HTTP/3 fundingchoicesmessages.google.com/f/AGSKWxX--y5nBjbSH5OMXyzD4blXCXmdc3PIamI1ko8OKc9zrCP7n1CbPeGGbXOSUCyBOR89oejGJOrdKcz1I4BTZYr926xTVJAC8BKCeGvMqMYHLg6vTQi8sd384ymbgOUnAt_WbtDGhQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg0NDkxMjczLDI4MjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiwxMF0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3Lm1lZGlhZmlyZS5jb20vZmlsZS9lZjVua3B2N3J4dWk5cmIvRkZfQXV0b0RldGVjdF9UcnVlSUQuemlwL2ZpbGUiLG51bGwsW1s4LCI0NUJnZ2ZkekdpVSJdLFs5LCJlbi1VUyJdXV0
IP 216.58.211.14:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (6765)
Hash 0b875f7b94ae011bfa481e3995b07280
53ee4a8e248100476a1507644f62a6219fbe4f38
c0760665da39a3e944780ad815d07a8c8925161937b467a08ed45803b464eb13
GET /f/AGSKWxX--y5nBjbSH5OMXyzD4blXCXmdc3PIamI1ko8OKc9zrCP7n1CbPeGGbXOSUCyBOR89oejGJOrdKcz1I4BTZYr926xTVJAC8BKCeGvMqMYHLg6vTQi8sd384ymbgOUnAt_WbtDGhQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg0NDkxMjczLDI4MjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiwxMF0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3Lm1lZGlhZmlyZS5jb20vZmlsZS9lZjVua3B2N3J4dWk5cmIvRkZfQXV0b0RldGVjdF9UcnVlSUQuemlwL2ZpbGUiLG51bGwsW1s4LCI0NUJnZ2ZkekdpVSJdLFs5LCJlbi1VUyJdXV0 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
timing-allow-origin: *
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 02:21:40 GMT
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-oPH2OUfPv5l8z56pwMmgsQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.google.com/translate_a/element.js?cb=googHeadTranslate
216.58.211.14200 OK 32 kB URL GET HTTP/3 translate.google.com/translate_a/element.js?cb=googHeadTranslate
IP 216.58.211.14:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type gzip compressed data, max compression\012- data
Hash 6dd4c2c0fafa416629dc6699945c1419
6d524e51e1f0d493945d4458e7bb66abce773c9e
a3b6639a8636db3d7580f7ec6cb07d10a9b7f56c3562b495c7406ad0329b62ea
GET /translate_a/element.js?cb=googHeadTranslate HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 02:21:39 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+146; expires=Fri, 05-Dec-2025 02:21:39 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
142.250.74.99 1.6 kB URL www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
IP 142.250.74.99:0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a931d597decd2553aac6634b766cf2
6ec84fb4a2745b4b71520241be77db1fd1013830
f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e
GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1597
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 22:32:13 GMT
expires: Tue, 03 Dec 2024 22:32:13 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 30 Jun 2023 18:58:00 GMT
content-type: image/png
vary: Origin
age: 100167
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/images/cleardot.gif
142.250.74.132 43 B URL www.google.com/images/cleardot.gif
IP 142.250.74.132:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /images/cleardot.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/gif
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 43
date: Wed, 06 Dec 2023 02:21:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css
142.250.74.99200 OK 4.0 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css
IP 142.250.74.99:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (20367), with no line terminators
Hash 72d3a735ccca1027f6b3afba2c93e3a7
67f8eff8d17334c59c28fc1753bf451527c7490d
c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 07:43:08 GMT
expires: Wed, 04 Dec 2024 07:43:08 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 67112
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
region1.analytics.google.com/g/collect?v=2&tid=G-K68XP6D85D>m=45je3bt0v887485693z86304663&_p=1701829305384&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=2042550625.1701829304&ul=en-us&sr=1280x1024&_s=1&sid=1701829303&sct=1&seg=1&dl=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&dr=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&dt=VidioBokepViral&en=page_view&up.page_url=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&tfd=6924
216.239.32.36 0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-K68XP6D85D>m=45je3bt0v887485693z86304663&_p=1701829305384&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=2042550625.1701829304&ul=en-us&sr=1280x1024&_s=1&sid=1701829303&sct=1&seg=1&dl=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&dr=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&dt=VidioBokepViral&en=page_view&up.page_url=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&tfd=6924
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K68XP6D85D>m=45je3bt0v887485693z86304663&_p=1701829305384&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=2042550625.1701829304&ul=en-us&sr=1280x1024&_s=1&sid=1701829303&sct=1&seg=1&dl=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&dr=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&dt=VidioBokepViral&en=page_view&up.page_url=https%3A%2F%2Fcjbfi3.dew4.my.id%2F&tfd=6924 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cjbfi3.dew4.my.id
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://cjbfi3.dew4.my.id
date: Wed, 06 Dec 2023 02:21:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
142.250.74.106 0 B URL translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP 142.250.74.106:0
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser
Referer: https://cjbfi3.dew4.my.id/
Origin: https://cjbfi3.dew4.my.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://cjbfi3.dew4.my.id
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin
content-type: text/plain; charset=UTF-8
date: Wed, 06 Dec 2023 02:21:49 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+363; expires=Fri, 05-Dec-2025 02:21:49 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Wed, 06 Dec 2023 02:21:49 GMT
cache-control: private
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
142.250.74.106 131 B URL translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP 142.250.74.106:0
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Encoding: gzip
Content-Type: application/binary
Content-Length: 301
Origin: https://cjbfi3.dew4.my.id
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://cjbfi3.dew4.my.id
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 06 Dec 2023 02:21:49 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+895; expires=Fri, 05-Dec-2025 02:21:49 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Wed, 06 Dec 2023 02:21:49 GMT
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
142.250.74.106 131 B URL translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP 142.250.74.106:0
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Encoding: gzip
Content-Type: application/binary
Content-Length: 293
Origin: https://cjbfi3.dew4.my.id
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://cjbfi3.dew4.my.id
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 06 Dec 2023 02:21:50 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+797; expires=Fri, 05-Dec-2025 02:21:50 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Wed, 06 Dec 2023 02:21:50 GMT
fundingchoicesmessages.google.com/i/183096492?ers=3
216.58.211.14200 OK 23 kB URL GET HTTP/3 fundingchoicesmessages.google.com/i/183096492?ers=3
IP 216.58.211.14:443
Requested by https://cjbfi3.dew4.my.id/#
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1898)
Hash 844b5ec7a7965fd4098bcccae92a83c7
4d1cdc40dccdf6792c3d4de102ec392ce66e6292
b1dd3c12e87f2ae7b8b64828ee227983792e1a8e550275d1b5447408f96a0fdc
GET /i/183096492?ers=3 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 02:21:40 GMT
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-e-Y7EyRfY_U8MHll8TKIdA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.mediafire.com/images/backgrounds/header/mf_logo_full_color.svg
104.16.113.74200 OK 3.4 kB URL GET HTTP/2 static.mediafire.com/images/backgrounds/header/mf_logo_full_color.svg
IP 104.16.113.74:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerSectigo Limited
Subject*.mediafire.com
Fingerprint8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA
ValidityMon, 18 Sep 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (3431), with no line terminators
Hash dcdfa60ac03cdc6d20a6f5387d8e8bc1
44eb0cadc59e09b469ebe80f5e8daa08d171bd4a
c51b0ebbdbc3f553f727d7b29c9390260ffc62f0fd67356081e6ac03cf0e3155
GET /images/backgrounds/header/mf_logo_full_color.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 02:21:37 GMT
content-type: image/svg+xml
last-modified: Fri, 28 Oct 2016 22:22:42 GMT
etag: W/"5813cfb2-d1d"
access-control-allow-origin: *
cf-cache-status: HIT
age: 14277
set-cookie: __cf_bm=PBybaf6GyRo9lxljj3x2MUSvsYwVkkEgeHn_Wk8QcpI-1701829297-0-AXYUE7nbiXJqaFvzLmxLBIsA3pqqcPwxyFS2XHk3Qw6+hOHWWJU9Ef0BM9k95voCopBsjB25dtvyWsugBXl53vI=; path=/; expires=Wed, 06-Dec-23 02:51:37 GMT; domain=.mediafire.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 83110e785b485684-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fundingchoicesmessages.google.com/f/AGSKWxUCbyToItSTQHOVnX-kigRpuDFoFY0Oocn7m6Ll_d4O3le1zHuFi-7o-83Vn2phnyot7Uu3yuqe16VQhaSfrY7R1b5vHhQSGKgQ0zzmGdlKeXWrJ8eRcLaFGTwlpLwwu5EVFU-3tA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg0NDkxMjczLDM0MzAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiwxMCw5XSxudWxsLDIsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbS9maWxlL2VmNW5rcHY3cnh1aTlyYi9GRl9BdXRvRGV0ZWN0X1RydWVJRC56aXAvZmlsZSIsbnVsbCxbWzgsIjQ1QmdnZmR6R2lVIl0sWzksImVuLVVTIl1dXQ
216.58.211.14200 OK 3.6 kB URL GET HTTP/2 fundingchoicesmessages.google.com/f/AGSKWxUCbyToItSTQHOVnX-kigRpuDFoFY0Oocn7m6Ll_d4O3le1zHuFi-7o-83Vn2phnyot7Uu3yuqe16VQhaSfrY7R1b5vHhQSGKgQ0zzmGdlKeXWrJ8eRcLaFGTwlpLwwu5EVFU-3tA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg0NDkxMjczLDM0MzAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiwxMCw5XSxudWxsLDIsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbS9maWxlL2VmNW5rcHY3cnh1aTlyYi9GRl9BdXRvRGV0ZWN0X1RydWVJRC56aXAvZmlsZSIsbnVsbCxbWzgsIjQ1QmdnZmR6R2lVIl0sWzksImVuLVVTIl1dXQ
IP 216.58.211.14:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3714), with no line terminators
Hash 74fb11d320f95f5ee7167bcc3b951f6b
532a6c240a9c168e52155e612612ddd7bc2e034e
a90815da29a60a6647062e574abf870c1a1a0a888c9c6613f49e9e4f11ba5733
GET /f/AGSKWxUCbyToItSTQHOVnX-kigRpuDFoFY0Oocn7m6Ll_d4O3le1zHuFi-7o-83Vn2phnyot7Uu3yuqe16VQhaSfrY7R1b5vHhQSGKgQ0zzmGdlKeXWrJ8eRcLaFGTwlpLwwu5EVFU-3tA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg0NDkxMjczLDM0MzAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiwxMCw5XSxudWxsLDIsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbS9maWxlL2VmNW5rcHY3cnh1aTlyYi9GRl9BdXRvRGV0ZWN0X1RydWVJRC56aXAvZmlsZSIsbnVsbCxbWzgsIjQ1QmdnZmR6R2lVIl0sWzksImVuLVVTIl1dXQ HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
timing-allow-origin: *
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 02:21:38 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-C67tUo8hinKCqSuc_oqNLw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fundingchoicesmessages.google.com/i/183096492?ers=3
216.58.211.14200 OK 23 kB URL GET HTTP/2 fundingchoicesmessages.google.com/i/183096492?ers=3
IP 216.58.211.14:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1898)
Hash 844b5ec7a7965fd4098bcccae92a83c7
4d1cdc40dccdf6792c3d4de102ec392ce66e6292
b1dd3c12e87f2ae7b8b64828ee227983792e1a8e550275d1b5447408f96a0fdc
GET /i/183096492?ers=3 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 02:21:38 GMT
content-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport, script-src 'nonce-lBVon7XIHwMNS9dSWWEoGQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cjbfi3.dew4.my.id/
188.114.97.1200 OK 510 kB IP 188.114.97.1:443
Requested by https://cjbfi3.dew4.my.id/
Certificate IssuerLet's Encrypt
Subjectdew4.my.id
Fingerprint46:DA:AD:A8:0B:19:5F:1B:18:84:DD:38:BA:D9:6B:1E:86:41:CC:7A
ValidityThu, 23 Nov 2023 18:11:24 GMT - Wed, 21 Feb 2024 18:11:23 GMT
Size 510 kB (509714 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: cjbfi3.dew4.my.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjbfi3.dew4.my.id/
Cookie: g36FastPopSessionRequestNumber=1; _ga_K68XP6D85D=GS1.1.1701829303.1.0.1701829303.60.0.0; _ga=GA1.1.2042550625.1701829304
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 02:21:38 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E94vLck4xFm6GmlUC0%2FKJ9HwHOGKtPt109rj1imwhiUXmL4UFiXU%2BBA1qjHXwUW1dxwmjgnxcqHN6mwBwVJuLJJfi0tRd8aUQnSj5ehZO3uAH9omq1cr7Buj3JSweTkGLWYRiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83110e771f7c569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400