| l111-dtc.pages.dev/img/meta-logo-grey.png | 188.114.96.1 | 200 OK | 106 kB |
URL GET HTTP/3l111-dtc.pages.dev/img/meta-logo-grey.png IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
File typePNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced Size106 kB (105511 bytes) Hashffba640622dd859d554ee43a03d53769 c91a100db7bfc04df9a5f3223d5b6f17536bf5ee 139d38d0fbfed2fd9f2b782af9b3eb08005b9bc75faaa31fe29720cc64bcab0f
GET /img/meta-logo-grey.png HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: image/png
content-length: 105511
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "93483d886457ee63afebe88a579e51fd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O0PBTDXtrbv9lYsDeSWZMK%2Bd2Po59OcpqTew%2FVWZtH8wSwgx%2Fm9MocKCLbanFIlVF3MZ9AvCQp7KN5YOWjOjlY3HZiwpmeYGmMJelq987keM4whZQzRNAzwAaHxboMbHXHnhgcU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c24c2256c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| l111-dtc.pages.dev/img/dir.png | 188.114.96.1 | 200 OK | 5.1 kB |
URL GET HTTP/3l111-dtc.pages.dev/img/dir.png IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
File typePNG image data, 120 x 120, 8-bit colormap, non-interlaced Hashaef2b30f6701ba271c07e3e26ffc416e 71cb73ec54a5fc973ccd4f4127b6716f6370709f 60a4bddc93553f14c2dfef0299fa5f3ad0e4005f7b8054e34db89b8afe6a0f2f
GET /img/dir.png HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: image/png
content-length: 5071
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b110453c1d009b3745e2b54f343eb63f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9tuzilxfSHPlZFlYihjqNpGg33Yd73Vj5LbLnUZQChdBTPWQTCTY1YJNMxXmtw0p5e0q%2FGEGm7vZb4z64UcF7sqIzHCGSDyuR0%2FT6txOSwFTbW5W%2BJ7GGQHkMobd5T3eXUoB8N8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c24c3356c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| l111-dtc.pages.dev/img/banner_new_01.png | 188.114.96.1 | 200 OK | 198 kB |
URL GET HTTP/3l111-dtc.pages.dev/img/banner_new_01.png IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
File typePNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced Size198 kB (198020 bytes) Hashfe979feb97d4ac7d44bcd547bc23d9a2 87e59be9ff35c90906e9c1c0e7021d11c8f62e1a f63ca8aab55d8eedfb62cee0c1891c0355f118df5ff22713b0f45e6acfd5f8a6
GET /img/banner_new_01.png HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: image/png
content-length: 198020
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "6b5264a3eaea4b7f1920415b4e44bedb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wp4X7Fit0MBpk5C7FHqdGTqLm00FLQ%2F6pbNCKRpgZ0RSi5a3XEIrkIVKvjbQaSCWxxl%2B15dPl7CLO2CtOre6TLswYdfds9p9X6mrTetzQmxHQfu6Y%2BwIqbDp%2Bzr9YkFd%2BEZ8atA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c24c1b56c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| l111-dtc.pages.dev/img/save_img.png | 188.114.96.1 | 200 OK | 7.6 kB |
URL GET HTTP/3l111-dtc.pages.dev/img/save_img.png IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
File typePNG image data, 120 x 120, 8-bit colormap, non-interlaced Hash8d3bcd1278891fc1e52d38e72549b3d0 af1ab86b5a3993c468c3be9c59a8ed3d9091454d 8fc3f44a189200b47c93a90ad8dffe40fcdeda8a718e62bb4baf98f00d536e97
GET /img/save_img.png HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: image/png
content-length: 7550
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f45fe4ea302b6f38ca01e7100cb578ad"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ceo0smuxL6OK1eMyaYr1CJmDKUBXvMz%2FjEI1UaC0%2Bq1SeFio01AlTUGX%2FqrD2hHjOP0SN%2B3ZL6axVNaa0hevP3iCTffYxDYjrifqt7Mo5uuSiE371k66C1%2BvYw8n6DLaZKGntIg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c24c1c56c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| l111-dtc.pages.dev/img/doc.png | 188.114.96.1 | 200 OK | 5.7 kB |
URL GET HTTP/3l111-dtc.pages.dev/img/doc.png IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
File typePNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced Hash95382a6dab40d5911185a921c53e6f6b 4229cb577571111d747021988aac9dd6cd50634f e341d9055288dfcd7dd5facab6c915f6b7bcffbf80f8b48468c7275b8cada069
GET /img/doc.png HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: image/png
content-length: 5723
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "3ce51bb2383ce4642346e61097bfad1a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FmdusuJqzjE0bt%2Buqe1HBAfoxYrBx5kJVuKJS5zUk3Pd4ibrDxwgcTwLCewq99u9euN7ephYQT073izXzq9S4zIvaEEi130UeRa7SrZ4Y%2FEmO9YQJVaTppNp40KPkjIHYMCQHUI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c24c2056c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| l111-dtc.pages.dev/img/fb_round_logo.png | 188.114.96.1 | 200 OK | 43 kB |
URL GET HTTP/3l111-dtc.pages.dev/img/fb_round_logo.png IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
File typePNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced Hash81bb5cf1e451109cf0b1868b2152914b b70017639afc079394be1ea8625f7c4beb44d617 676c83478e410d324fe56aca428d3305505732c648667b22e15c8222117c75e6
GET /img/fb_round_logo.png HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: image/png
content-length: 42676
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7d1889db1d3e65c198b0ac8371624e0f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vl%2BxrNFFkZKE%2BJ7JBafsDPGEl7xfkTiiyH1qN%2BDE0AWC5Srl7Po%2FuX%2FUsRhd71TYsPz3Ss48vBXAETDBgm9X361mh12%2BOL%2BaPlkJxk686W0Sh6sSZ5mQeWJn0Ksi5L7XKJkfLmk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c24c2656c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| l111-dtc.pages.dev/img/block_2.png | 188.114.96.1 | 200 OK | 19 kB |
URL GET HTTP/3l111-dtc.pages.dev/img/block_2.png IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
File typePNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced Hash8942e3ff39cd6784c7c89bd6eb26d604 b03e96fa075ba36fc3d6729fb312f0a59c2a023a 9b7c1670777cc38a18fc6b98443b40036fde8de97cdba6087e2a31a1de9e748b
GET /img/block_2.png HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: image/png
content-length: 18787
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "0f462aef24b0a9f9cc3abd4a2dc3ed0a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3af8XmH2lapyif0xugZpYPqisYljnyxXvCsCDLIydERfME6ZSyP4VFhPDdO6Tol6WdboHoENgugBj588wL52FZ6TQZySkZJW4CMT3lM0A5nEqTBLcYSGFhhKpCk1O%2F43n0mhrkw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c23c1756c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| l111-dtc.pages.dev/img/no_avatar.png | 188.114.96.1 | 200 OK | 6.0 kB |
URL GET HTTP/3l111-dtc.pages.dev/img/no_avatar.png IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced Hashd5d30f28ca92743610c956684a424b7e fd4a7207b724254d981a4ed4c7f675fd87868535 4b842e25c6be485fd7f06b745ac91db2b6e9eee778c5442b157be78d51f83563
GET /img/no_avatar.png HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: image/png
content-length: 6043
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "81284854efe7846d60f398437ddf5e57"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8nrCoLCFX3airIGwb%2BejRS36N0MxUiZn0dMvMvVzqAKjz9x6h3CXzOS3%2F%2BpKYQOjYdfPAe4XNQUBx6b7MHdZh0GAbIW9ubpNYPs7NlGcesZjOwl%2Bd2jjxOrzDvDlrYrs3nHbQFg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c24c1956c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| l111-dtc.pages.dev/img/2FA.png | 188.114.96.1 | 200 OK | 115 kB |
URL GET HTTP/3l111-dtc.pages.dev/img/2FA.png IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
File typePNG image data, 541 x 252, 8-bit/color RGBA, non-interlaced Size115 kB (114767 bytes) Hash03d39d5d071182aba1b01ba2e859de39 7ba8f968b03e92fd59a6c4f6ce5c8aa36a5d2b92 a7fd65363687e512751d88f7850b61969427e8d3aa9a177946bcd4bc280b71ad
GET /img/2FA.png HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: image/png
content-length: 114767
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d9a0b3def2303eea8e6fb8e0c42a507e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yUS9QxX3oad5j2xeBIrjZRjPhkUnZE2bp79%2F85SebYFYPQBeYVhfGJCpki656fD9IDZm%2BzJIo6WBt7zJQJ1xViZhrkIFckLEUQjOIH5%2BZ7SL0DtImrHp80GrGHPamrPViuwYRxs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c24c2e56c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| l111-dtc.pages.dev/img/phone.png | 188.114.96.1 | 200 OK | 255 kB |
URL GET HTTP/3l111-dtc.pages.dev/img/phone.png IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
File typePNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced Size255 kB (255341 bytes) Hash3c18a93313e72ab9967152a4e92aa238 74671591dd7cc381c6ec6de1137b83c0e2f4d7ec fbc7addde1cd6057bd59c03941fcf38a6ac17dd90312d142ebd7520891c3656e
GET /img/phone.png HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: image/png
content-length: 255341
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "61e55ae27317c54c2f39565664ae1036"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aE5mS%2F2OBFVdnEb1b7TovDjKu6mRy27c%2BVZtWcQY8uVxL7fwUjn6LVNVC1eeFk%2F3diGo3rKpKoe%2BAWy1pgre0ACsJB4NP4gurKdrKA7r%2B6Qjr8NSjFo31px0idnn9idnCsMOYIA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c24c2f56c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| l111-dtc.pages.dev/img/star.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/3l111-dtc.pages.dev/img/star.png IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
File typePNG image data, 41 x 41, 8-bit colormap, non-interlaced Hashaae920faed2a3fe4c3083b339cd783df be5e47195c28b585d65478e2399d0d5f9b74435c f75d9bcacc1a1aabc6f93c383f5494307d91f7f302c266626d6dc92b4b86585e
GET /img/star.png HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: image/png
content-length: 1980
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2d0505a634160012acbac092a160c140"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yOLfgL1Hf08Aq2QRiSRRO8OJNw4kZzXAzdUWqbdB8Q%2BgWG%2B8nZys51zIWPlT%2FT3fUp9rigA7RZZ7gBmwaySkrrIzDdxVqp1rJz6GMJs4shDWFN9KjcxNtU0YgZmxIROWXOMG0h8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c24c3256c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js | 142.250.74.170 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js IP142.250.74.170:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30462
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:53:27 GMT
expires: Fri, 02 May 2025 01:53:27 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 12 Sep 2023 02:38:22 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 481365
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| l111-dtc.pages.dev/ico.ico | 188.114.96.1 | 200 OK | 5.4 kB |
URL GET HTTP/3l111-dtc.pages.dev/ico.ico IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
File typeMS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash6701a4ba0b931af579be35b93631da04 c8161484acccdd0cae1cd6484f56942cb7ffd7dc ce8a22ece441cfd0f09fb0359b8d683fed0e66f8bec0bbc067a8257c95b05fd8
GET /ico.ico HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:12 GMT
content-type: null
content-length: 5430
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "773da043c26d9f9196dd0884ea1708e8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QCcsbyTLenwWhwsyR78t4RwZmlNBPhJEsO0mmrhxlE4grGPYSV%2FCbeQf25TGyzQOBsF%2Ft9cwtoI6VMZ0HH4%2FAmFDPD6Fz377YG%2FP8Tml5HcdofHhzoLqyB4qLYFKfLKkK%2B5gZVc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c5aaa656c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| api.db-ip.com/v2/free/self/ | 104.26.4.15 | 200 OK | 638 B |
URL GET HTTP/2api.db-ip.com/v2/free/self/ IP104.26.4.15:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectdb-ip.com Fingerprint65:B1:27:2E:35:D2:F7:1F:20:04:C5:CA:EA:4E:7A:B4:69:6A:83:00 ValiditySun, 17 Mar 2024 01:33:55 GMT - Sat, 15 Jun 2024 01:33:54 GMT
Hashb3cbea51f9a9fcaf6275e88da822e6aa b9740712e7a8e51a3cfa95a11c75c671644c5ab2 9976a8ae9b1a43de4fb568b400d7026c135c71935aa1041418252b0882ba41ff
GET /v2/free/self/ HTTP/1.1
Host: api.db-ip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/
Origin: https://l111-dtc.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 15:36:12 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: max-age=1800
x-iplb-request-id: A29EDE0B:93EE_93878F2E:0050_663A4A6C_F9FD10F:6F90
x-iplb-instance: 54170
cf-cache-status: MISS
last-modified: Tue, 07 May 2024 15:36:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QJPLJ07%2Bi3lNLAu%2FQKUwk1Jo0lNIVaz4mNaRMRRAGtnAc0LSlvcVSHsWFgNzL4fX7PGNDAJ%2FANwQ7RpJfUMIiJ4ROgDUV%2BHIWNwQRG51re81q0VtjYzHByYAie0rv%2FU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c4c8df5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| l111-dtc.pages.dev/appeal_case_ID/ | 188.114.96.1 | 200 OK | 256 kB |
URL User Request GET HTTP/2l111-dtc.pages.dev/appeal_case_ID/ IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
Size256 kB (256471 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | suspicious | Suspicious - Suspicious Javascript code |
GET /appeal_case_ID/ HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"7854ef28460db0cdfa557067b2c76733"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l8tAGZCwA%2FLOtZvMzjEzR3JaHv2bxhFyDk7Y0k%2F73vizBp2XmGmzWLHihrBsVVmtijJwPutoBbBMp4Ptf2aC2zyh%2FPkV%2BEOez%2BNQu3Wlz5AY57fShFoDNVcVOrJ7%2Fvm4fTRMFXc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248bfaf8eb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| l111-dtc.pages.dev/styles/bootstrap.min.css | 188.114.96.1 | 200 OK | 156 kB |
URL GET HTTP/3l111-dtc.pages.dev/styles/bootstrap.min.css IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
Size156 kB (155798 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /styles/bootstrap.min.css HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"076fe4e7bb88ce87d741b55584b7a4a7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=frli5lGNDg9ThGoh3fSKPUUJU%2Brc44xf64vmCBuIB%2FmEf7iNQ8NIB3ne%2BaK2qcUCaQfPKb6ZrGT9u%2BCQgSk7czVAdfoINv2HGl4Qni32ziV1N4BBQrZhXoXEYewursepPBvBcj0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c23c1056c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| l111-dtc.pages.dev/styles/style.css | 188.114.96.1 | 200 OK | 12 kB |
URL GET HTTP/3l111-dtc.pages.dev/styles/style.css IP188.114.96.1:443
Requested byhttps://l111-dtc.pages.dev/appeal_case_ID/ CertificateIssuerGoogle Trust Services LLC Subjectl111-dtc.pages.dev Fingerprint00:F9:2A:26:52:94:01:ED:8C:BF:B0:30:B5:16:93:29:3F:91:57:74 ValidityMon, 06 May 2024 06:29:18 GMT - Sun, 04 Aug 2024 06:29:17 GMT
Hashd0057ba3ba52bf55a2e251cd40e43978 d69d834434feee1dde288a62f26819f8036ca872 bff6093d0a9bb4b155ad4421357237c65d7cfa1e7907a254ee932ba1dad640a0
GET /styles/style.css HTTP/1.1
Host: l111-dtc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l111-dtc.pages.dev/appeal_case_ID/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 15:36:11 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f9ce4338cd4ecf9532d74e765d544604"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ceH6Lsamvk8zNhVpeYJacus1gQyehRaGyHFJBlQAZsfBymba6TwVcssUtvpgb57rKdQ7G9apNS6peG42kXXbm3hUdu4BAGjX1KUNydcavJUxVQnb1iRGsCRtaaqLzQSHROsqUmE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880248c23c1656c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|