Report - qr1.be/ERHM

Report Overview

Submitted URL
qr1.be/ERHM
IP
159.65.3.64
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2022-10-21 10:20:43
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-09T05:09:49Z	401 B	5.8 kB	34.160.144.191
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-09T11:52:10Z	329 B	797 B	93.184.220.29
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-09T05:09:13Z	594 B	127 B	35.155.157.101
code.jquery.com	634	2012-05-21T19:28:02Z	2023-03-09T05:11:44Z	375 B	25 kB	69.16.175.42
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-09T10:04:36Z	3.2 kB	61 kB	34.120.237.76
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-09T05:09:18Z	758 B	2.8 kB	143.204.55.36
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-09T05:09:48Z	321 B	229 B	34.117.237.239
qr1.be	unknown	2019-07-04T16:14:58Z	2023-01-02T10:34:04Z	781 B	256 kB	159.65.3.64
media.qrtiger.com	845186	2020-09-03T10:32:16Z	2023-03-08T14:01:28Z	11 kB	3.7 MB	205.185.216.10
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-09T05:09:05Z	2.3 kB	6.2 kB	23.36.76.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-10-20	medium	qr1.be/ERHM	Adobe Inc.

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

Files detected

URL
media.qrtiger.com/files/2022/10/portfo%CC%81lio-infoview-2.pdf
IP
205.185.216.10
ASN
#20446 STACKPATH-CDN

File type
PDF document, version 1.6 (zip deflate encoded)\012- data
Size
3.2 MB (3194813 bytes)
Hash
dd1384b097d3838a533ce47e5966f6b9
c4f71ae0c0740d02614a1bc0249e0d157e2a0ed9
dfc83f5b7d305b6bd5c926b11ce8d15156ae8c5e7b36f8bdcacf96992e541ab8

Detections

Analyzer	Verdict	Alert
VirusTotal	0/0

JavaScript (5)

	URL	Size	First Seen	Last Seen
	unknown	0 B	2023-03-07	2024-04-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-17 01:10:38 Times Seen36907574 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	media.qrtiger.com/pdf/build/pdf.js	369 kB	2023-03-07	2023-03-11
Pretty URL media.qrtiger.com/pdf/build/pdf.js IP 205.185.216.10 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:35:46 Last Seen2023-03-11 23:23:44 Times Seen1 Hash 5656a918ad726c65c46932d0f1e76798 5a24d62d81be29344135fc13165e53596cf38e4f 28477a2cc4c8c526c659fc53282d2d816dd237d5787eb4df404db8573f178e3c Loading...

	qr1.be/ERHM	188 B	2023-03-07	2023-03-11
Pretty URL qr1.be/ERHM IP 159.65.3.64 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:35:46 Last Seen2023-03-11 23:23:44 Times Seen1 Hash b15903305e372a7653d949e435df46e9 1cac2abdaa90b2299ff4137e2824550e37624f0f 3307c7cea533006781d894aaea155501bb3c6dcd2fed6f1fdf18ce2bc1fa46aa Loading...

	qr1.be/ERHM	550 B	2023-03-07	2023-03-11
Pretty URL qr1.be/ERHM IP 159.65.3.64 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:35:46 Last Seen2023-03-11 23:23:44 Times Seen1 Hash 1d49efbb9f234f0c9ead4706dda7473a 79d4511ff7f51c8f0ed28bf3b38917b56d93cdf8 c0104846dc52fb8e4cee868e372f52a5383d95f964c60d5b26c504448ac4fc68 Loading...

	code.jquery.com/jquery-3.5.1.slim.min.js	72 kB	2023-03-07	2024-04-16
Pretty URL code.jquery.com/jquery-3.5.1.slim.min.js IP 69.16.175.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:10 Last Seen2024-04-16 11:53:42 Times Seen3174 Hash fb8409a092adc6e8be17e87d59e0595e cf8d9821552d51bb50ce572e696aba1309065800 e3e5f35d586c0e6a9a9d7187687be087580c40a5f8d0e52f0c4053bbc25c98db Loading...

HTTP Transactions (49)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6b6481bf5f33b42cdd966d49d8b70107
03ed01a9dc82a7efaf3706691249d811f64719a4
1e42a2cd7e7ef655d17dea6423dff85d3f57111d9bd08d2f829535aa462eb11c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1E42A2CD7E7EF655D17DEA6423DFF85D3F57111D9BD08D2F829535AA462EB11C"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7133
Expires: Fri, 21 Oct 2022 12:19:25 GMT
Date: Fri, 21 Oct 2022 10:20:32 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

143.204.55.36

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.36:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
c9df6b36bf16969ac566c1b798362e4a
e56eff34815153ae019a4bf63eb9746dd9ae2e5b
33c1175144ab2be42c9de383f7893a6e60cd1f21f282eacb413d546331db3fa0

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Retry-After, Alert, Content-Type, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 21 Oct 2022 10:01:17 GMT
Expires: Fri, 21 Oct 2022 10:01:17 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jrQtQnJGG030N0m-TIELEjtJHilMPjUGfdesxhjPe3bn1hHZ9ZVy6g==
Age: 1155

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9dc4f23f82148797f6d8041bdda3c7f7
6841ded3e2dd94fd762316d01efd43f7aafb8354
e229db1854a85b320cee574e805210f3adf5797136ea820c0a0ce9abcd63d4dd

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E229DB1854A85B320CEE574E805210F3ADF5797136EA820C0A0CE9ABCD63D4DD"
Last-Modified: Thu, 20 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7089
Expires: Fri, 21 Oct 2022 12:18:41 GMT
Date: Fri, 21 Oct 2022 10:20:32 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 4J7XoSrRBbIZJMYr6/VtiNnHxtny4HUAG7kgNYVyPyZ9zkblBRSSpLbhUx6r5mu+XZcm4PSTjFw=
x-amz-request-id: 1XY3WCYBYN50T666
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 21 Oct 2022 10:05:05 GMT
age: 927
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 10:20:32 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d52fc9ceae821e5e5a9c5764107a1814
faa6ec4389552afd09ea265ed562f5d240e9f6e2
2bc92163492e98b9f49105686b6b7f39f672dd8e67ccd30893071879a10dec45

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2BC92163492E98B9F49105686B6B7F39F672DD8E67CCD30893071879A10DEC45"
Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7546
Expires: Fri, 21 Oct 2022 12:26:19 GMT
Date: Fri, 21 Oct 2022 10:20:33 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.36

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.36:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 21 Oct 2022 09:43:40 GMT
Expires: Fri, 21 Oct 2022 10:43:07 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: boZp3NAQnJx2PudvQj05JTpQ1OJHVx54OBk-mvuD2GFdYESBItJAWg==
Age: 2213

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
f47cc320695635b544a761f72f3afc6f
b7cee764dcb0a625e0f8e0b4a4fce04548a1bf76
78608be3d0d6aaaf0364aed316b8676ab28d23c9b6a8ac6c147cf5d16e5cc283

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4824
Cache-Control: max-age=169598
Content-Type: application/ocsp-response
Date: Fri, 21 Oct 2022 10:20:33 GMT
Etag: "63525317-1d7"
Expires: Sun, 23 Oct 2022 09:27:11 GMT
Last-Modified: Fri, 21 Oct 2022 08:06:47 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

35.155.157.101

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.155.157.101:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OWQ6QJeoTWAjMv/A8a3X3g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: visT3As6451VqNKcOBdLH3NybAg=

qr1.be/ERHM

159.65.3.64

200 OK

4.8 kB

URL HTTP/1.1
qr1.be/ERHM
IP
159.65.3.64:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
4.8 kB (4788 bytes)
Hash
d13e9167a328b9975b8bf30225adb020
d33e697332f51399772488be1dd1dea9b60fc841
b1b5448fac9c26205b23b60a2733c7de3c9d50f5f22a7acf851d93fbb64de362

Detections

Analyzer	Verdict	Alert
openphish	Adobe Inc.

HTTP Headers

GET /ERHM HTTP/1.1
Host: qr1.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
ETag: W/"5a99-K46oJo6fEjUvfnS5DGzFVT7Uvz0"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 21 Oct 2022 10:20:34 GMT
Connection: keep-alive
Transfer-Encoding: chunked

code.jquery.com/jquery-3.5.1.slim.min.js

69.16.175.42

200 OK

25 kB

URL HTTP/2
code.jquery.com/jquery-3.5.1.slim.min.js
IP
69.16.175.42:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text, with very long lines (65245)
Size
25 kB (24606 bytes)
Hash
63f8c134408852106835db2f928cf0e0
7ca0035d2a05154f1f93e19793b2298973cc8733
2555d061e6c2337cc0b62e309c8d0464e8f88d6a44dab74246c37cd0154d73a5

HTTP Headers

GET /jquery-3.5.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://qr1.be
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:34 GMT
content-encoding: gzip
content-length: 24606
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-11abc"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1666347634.dop232.sk1.t,1666347634.cds206.sk1.hn,1666347634.cds202.sk1.c
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dcbf142b7958e83961fc03b9676d1fc6
930f67e486f95de63450b6d73d1957aac204fb43
9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9194E452419C2C850073F3DC2D2B23D759DD793B9A0D881CB7B6D862D54805B1"
Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7679
Expires: Fri, 21 Oct 2022 12:28:33 GMT
Date: Fri, 21 Oct 2022 10:20:34 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dcbf142b7958e83961fc03b9676d1fc6
930f67e486f95de63450b6d73d1957aac204fb43
9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9194E452419C2C850073F3DC2D2B23D759DD793B9A0D881CB7B6D862D54805B1"
Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7679
Expires: Fri, 21 Oct 2022 12:28:33 GMT
Date: Fri, 21 Oct 2022 10:20:34 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dcbf142b7958e83961fc03b9676d1fc6
930f67e486f95de63450b6d73d1957aac204fb43
9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9194E452419C2C850073F3DC2D2B23D759DD793B9A0D881CB7B6D862D54805B1"
Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7679
Expires: Fri, 21 Oct 2022 12:28:33 GMT
Date: Fri, 21 Oct 2022 10:20:34 GMT
Connection: keep-alive

media.qrtiger.com/pdf/web/viewer.css

205.185.216.10

200 OK

60 kB

URL HTTP/2
media.qrtiger.com/pdf/web/viewer.css
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
assembler source, ASCII text
Size
60 kB (59822 bytes)
Hash
d83affd2586a5f58ccef89d67dda1a8b
f2fe04a8440d9d7886bac307369843ba880e4f98
9b42b4be381206a3c8c2f512a063e1e7598543ca84a853c70db279880e8854a9

HTTP Headers

GET /pdf/web/viewer.css HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:34 GMT
cache-control: max-age=260485
content-length: 59822
content-type: text/css; charset=utf-8
last-modified: Mon, 31 Aug 2020 11:07:57 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "d83affd2586a5f58ccef89d67dda1a8b"
x-amz-request-id: tx0000000000000e55f995a-00634d3177-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347634.dop065.sk1.t,1666347634.cds245.sk1.hn,1666347634.cds219.sk1.c
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dcbf142b7958e83961fc03b9676d1fc6
930f67e486f95de63450b6d73d1957aac204fb43
9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9194E452419C2C850073F3DC2D2B23D759DD793B9A0D881CB7B6D862D54805B1"
Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7679
Expires: Fri, 21 Oct 2022 12:28:33 GMT
Date: Fri, 21 Oct 2022 10:20:34 GMT
Connection: keep-alive

media.qrtiger.com/pdf/web/viewer.js

205.185.216.10

200 OK

343 kB

URL HTTP/2
media.qrtiger.com/pdf/web/viewer.js
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text, with very long lines (361)
Size
343 kB (342978 bytes)
Hash
3c00afffb7ac65955416996c5eacb27e
de023142f3ec0f6a5f1ffbd828b4fe5c7cec639f
f90d348893f32d49f6be17d46075d63751cc845331d2b190c3dda4f222a26f42

HTTP Headers

GET /pdf/web/viewer.js HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:34 GMT
cache-control: max-age=260485
content-length: 342978
content-type: application/x-javascript
last-modified: Thu, 10 Sep 2020 11:07:13 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "3c00afffb7ac65955416996c5eacb27e"
x-amz-request-id: tx0000000000000f1181b69-00634d3177-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347634.dop065.sk1.t,1666347634.cds245.sk1.hn,1666347634.cds254.sk1.c
X-Firefox-Spdy: h2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97a147f-f3d0-45e2-ab3e-cd90d0626589.jpeg

34.120.237.76

200 OK

6.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97a147f-f3d0-45e2-ab3e-cd90d0626589.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.6 kB (6551 bytes)
Hash
1c6ab9a31e082a0c0eaab2a0f526495a
c30e9954dcef66d4f14ac8618ebf2a1da0b3e12a
ca3a602c8af7b3e87957e54910663ea2bb72d008e14719af0f9fd7bd1a949f3e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97a147f-f3d0-45e2-ab3e-cd90d0626589.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6551
x-amzn-requestid: 4deffe4d-e687-436e-938c-f8128bb84376
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zql_MG5QoAMFahg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6340e9fa-66d4e2210fda5a80155f2466;Sampled=0
x-amzn-remapped-date: Sat, 08 Oct 2022 03:09:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: V5ilfg4GVL-HvWbuZrvFkZynDNCZDiBVNTDWjLdr2ZCLjH04NW3yqw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 07:24:29 GMT
age: 10565
etag: "c30e9954dcef66d4f14ac8618ebf2a1da0b3e12a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f52601f-0c98-4537-a72e-d72f9dbe4167.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10973 bytes)
Hash
6bd5e942443ffd011faf10dc88d92081
beff4ae9e24599addce8a961c955788045c56645
2c59d984971e73d497975032c23700b5602fccf403f4683a8047f5f42d4e261f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f52601f-0c98-4537-a72e-d72f9dbe4167.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10973
x-amzn-requestid: 081470ca-0107-4052-be55-9c713105bb27
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aUr-TEKPoAMFZfQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351c05b-17199f8c0fc0fb7443a902f1;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 21:40:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: h8elwC37DfS3PoG9NuRyfp-bqOoLi9KWeSWvwuY4mFMGG4HHC3jZAg==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 22:17:34 GMT
age: 43380
etag: "beff4ae9e24599addce8a961c955788045c56645"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66bcc767-1c09-4b79-aee1-3917407a2700.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9195 bytes)
Hash
d369f8641d3489521afd62e112136f5b
088a3290733195efeb1d79dcc995c22b603bece0
b18601499cbb7bbcc1eaa464cec12c0287f8fab52a89e97973bd78fcb26ea918

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66bcc767-1c09-4b79-aee1-3917407a2700.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9195
x-amzn-requestid: e40418b8-2272-44a3-83d6-9465798793ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aUsKLEk4oAMFsSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351c0a7-34994aca1e13dcab306bf1a4;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 21:41:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 86MQ2WBrOZ2pH88f27PxZ9f8tuu_9u6qNzyr4LZz6-yNbfjJdjgr0w==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 21:48:08 GMT
age: 45146
etag: "088a3290733195efeb1d79dcc995c22b603bece0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8cf1b5d7-d878-479d-b3d9-7686ee0227ab.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.7 kB (5748 bytes)
Hash
ef2bbeb80f3b5ed8230377024febf22a
542d0ec1eb9ed3805327a415606dfdaebc760650
b05e48b03380a0f57cafd7e78682cdf78b087de20a8af3f9e83b286c3df27e19

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8cf1b5d7-d878-479d-b3d9-7686ee0227ab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5748
x-amzn-requestid: 43155cec-36ed-461c-80d8-4dd55a74f622
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aUsKLHLgoAMFrpg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351c0a7-5dc550c8214d049c6319189f;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 21:41:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: hEjyTWJG-5hG2_dT0-lhuJ6LH846ls6-wLEXM-tfnXZQfmgP8ERdbw==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 21:50:08 GMT
etag: "542d0ec1eb9ed3805327a415606dfdaebc760650"
content-type: image/jpeg
age: 45026
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcd75a30-b86f-487c-9bd7-4cc33f5ffaa6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11799 bytes)
Hash
92376b39b83dbbd4e18725ffe338a348
9a9fa707f507d0c9db15f422b29e1ea4baff5aff
5dca893e682d31f6ebbd01f2f587bb5374c0ccc23d81a99ccae38c02db86c166

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcd75a30-b86f-487c-9bd7-4cc33f5ffaa6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11799
x-amzn-requestid: 99c0ee76-b0c5-47fb-bb88-8f2041c14013
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aUr-UF2mIAMFh4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351c05b-386fb3157e4b63af7899705b;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 21:40:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lhRt-nFYnea2frKiWBGu6akrGHom67TzZU488Otjk40lEFMWpuaNWA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 21:49:07 GMT
age: 45087
etag: "9a9fa707f507d0c9db15f422b29e1ea4baff5aff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e67413c-6e4d-487c-807f-ff21a90aa792.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10799 bytes)
Hash
00f8ff57c0d15e1ce75a788b91dc0bd3
46445de659e1aa0623c7666c98b5f642ffeff89d
95eb2c3d2ab4643affffd59887814a013edacba9f73c633399905d9d0d397b1d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e67413c-6e4d-487c-807f-ff21a90aa792.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10799
x-amzn-requestid: 9b27131b-a0ca-426d-939c-78de0beac51c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aUsKLF9hIAMF97g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351c0a7-76bf3c356f04a6a672e2f7a1;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 21:41:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 96xd1B3QDqywkAxLGVMbF6P4UJ_gweEBpEc8fcCwUzVhTG6GWA66FA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 21:50:08 GMT
age: 45026
etag: "46445de659e1aa0623c7666c98b5f642ffeff89d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/texture.png

205.185.216.10

200 OK

2.4 kB

URL HTTP/2
media.qrtiger.com/pdf/web/images/texture.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Size
2.4 kB (2417 bytes)
Hash
be7cd9355fa2121fab8e619ed546ced4
230a3d5e2dfacfa7228f58a559de5df3734118f5
161fb247ede7ecb867d864863b8e3de3a93daae6286fce1ab7c3700f55112c9e

HTTP Headers

GET /pdf/web/images/texture.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=260489
content-length: 2417
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:07:00 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "be7cd9355fa2121fab8e619ed546ced4"
x-amz-request-id: tx0000000000000e55fa478-00634d317c-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds253.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-viewThumbnail.png

205.185.216.10

200 OK

185 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-viewThumbnail.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
185 B (185 bytes)
Hash
5ab2c00425ead7f7a0c219385d55bf03
f62aad7c7719300f1d8e922155f451661d41d42d
32170f852e6761cbbcfbb87175bfd6d84ed73823def767b1a7bdd058c6a3030a

HTTP Headers

GET /pdf/web/images/toolbarButton-viewThumbnail.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349468
content-length: 185
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:45 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "5ab2c00425ead7f7a0c219385d55bf03"
x-amz-request-id: tx0000000000000f5b8ad58-00634e8d0f-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds020.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-viewAttachments.png

205.185.216.10

200 OK

384 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-viewAttachments.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
384 B (384 bytes)
Hash
b58498a5ba191146108d60bf1e079592
53c5a0c4c40f5f47fb6d2f57a82a4a6d0a83feb0
0bce5882a5b8caabd453fcc98c3d017f5663c845f50a00dcc78df854248b7d20

HTTP Headers

GET /pdf/web/images/toolbarButton-viewAttachments.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349466
content-length: 384
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:55 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "b58498a5ba191146108d60bf1e079592"
x-amz-request-id: tx0000000000000e9ddd3b5-00634e8d0d-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds201.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-sidebarToggle.png

205.185.216.10

200 OK

225 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-sidebarToggle.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
225 B (225 bytes)
Hash
6c365a103073ff2d8303c68856df0a4e
ff7ef30371233abe8c548c2f3d5cbb335183ca92
b97006dda25f0b3908ce7604108261ff8ab1e1984118f3dac296428bcf34b1a3

HTTP Headers

GET /pdf/web/images/toolbarButton-sidebarToggle.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349466
content-length: 225
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:44 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "6c365a103073ff2d8303c68856df0a4e"
x-amz-request-id: tx0000000000000e9ddd3bd-00634e8d0d-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds246.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-search.png

205.185.216.10

200 OK

309 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-search.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
309 B (309 bytes)
Hash
273cffad049d5b4e1f0a9d7af149e597
14c3ef60d3979df9e8d13cf39cad10ed043f5578
0a0c8700265901b93feb0814d2db720d0e4f0b66ebfa98f717d1dc4e28e36646

HTTP Headers

GET /pdf/web/images/toolbarButton-search.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349466
content-length: 309
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:33 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "273cffad049d5b4e1f0a9d7af149e597"
x-amz-request-id: tx0000000000000f5b8a82c-00634e8d0d-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds241.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-pageUp.png

205.185.216.10

200 OK

246 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-pageUp.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
246 B (246 bytes)
Hash
c270b41d7a0ff9892ba9ac67d789a841
b1eae4614fb964b6d0483f114f3dd2b49ec1b64a
8722c44457c51f5090545306b32627b6907ace334e615bb5eba264e7aeba1b18

HTTP Headers

GET /pdf/web/images/toolbarButton-pageUp.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349466
content-length: 246
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:07:29 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "c270b41d7a0ff9892ba9ac67d789a841"
x-amz-request-id: tx0000000000000f5b8a832-00634e8d0d-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds017.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-pageDown.png

205.185.216.10

200 OK

238 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-pageDown.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
238 B (238 bytes)
Hash
d86ed7c2ca30e08f7f3b499de2dca107
6e10286da3a52e0bba782d0fc4a7c33d10c8f4b9
3e1aa1df58b9ba316c01f4e6ce1099e0fc56948836433b9fb34939de5a5e0e98

HTTP Headers

GET /pdf/web/images/toolbarButton-pageDown.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349468
content-length: 238
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:07:46 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "d86ed7c2ca30e08f7f3b499de2dca107"
x-amz-request-id: tx0000000000000f5b8ad59-00634e8d0f-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds256.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-presentationMode.png

205.185.216.10

200 OK

321 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-presentationMode.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
321 B (321 bytes)
Hash
fb94ca39aec07d85a29fdb62b0b03b24
3d206e303f9663dca95482df9abe55a08851c574
f386bff1c7c4986544a70003bd5b6b730153f0788e4d12ffb1372b709d2468b9

HTTP Headers

GET /pdf/web/images/toolbarButton-presentationMode.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=363305
content-length: 321
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:08:58 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "fb94ca39aec07d85a29fdb62b0b03b24"
x-amz-request-id: tx0000000000000ea9cc00c-00634ec31c-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds220.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-openFile.png

205.185.216.10

200 OK

295 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-openFile.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
295 B (295 bytes)
Hash
8db4158c49b8a31e311ee501af30566f
6b17acd1c4ea6a9d9859819456952eff133f3cc1
ec9dd66c32fedbf6d5e1fd166e01ac13ac751e2441d7fe9ab8dd79dc5c94b825

HTTP Headers

GET /pdf/web/images/toolbarButton-openFile.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349466
content-length: 295
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:08:24 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "8db4158c49b8a31e311ee501af30566f"
x-amz-request-id: tx0000000000000e9ddd3bb-00634e8d0d-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds225.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-print.png

205.185.216.10

200 OK

257 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-print.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
257 B (257 bytes)
Hash
923cfb0f2a944b5a49f99a6901770f71
77463c425966b8a298a2d87863533e68092676bc
f09068d019819fca961f6f1fbe02a267a83186e8a503857291b75c9360c63433

HTTP Headers

GET /pdf/web/images/toolbarButton-print.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=13268
content-length: 257
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:07:06 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "923cfb0f2a944b5a49f99a6901770f71"
x-amz-request-id: tx0000000000000e5eff5e2-0063496bc7-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds258.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-download.png

205.185.216.10

200 OK

259 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-download.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
259 B (259 bytes)
Hash
f20a55dc99268dac130586e52e2b10d6
b25abd4a3c95097a338b8b138476e22189cb235e
6f44f96517c6ced760ede55714c5e7e1e259783974fcba750f53880a932ecd50

HTTP Headers

GET /pdf/web/images/toolbarButton-download.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349466
content-length: 259
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:07:51 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "f20a55dc99268dac130586e52e2b10d6"
x-amz-request-id: tx0000000000000f5b8a839-00634e8d0d-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds021.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-bookmark.png

205.185.216.10

200 OK

174 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-bookmark.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
174 B (174 bytes)
Hash
97676ebb2225309ad15ba193f23f7fa8
0193cebc494facb8ba8733a1a8f50457e7189f56
0a281d912535dfd0a663182d7e9db5e6bcd9ca699aaefb489ce0e313f990d666

HTTP Headers

GET /pdf/web/images/toolbarButton-bookmark.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349466
content-length: 174
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:56 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "97676ebb2225309ad15ba193f23f7fa8"
x-amz-request-id: tx0000000000000f5b8a83b-00634e8d0d-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds021.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-secondaryToolbarToggle.png

205.185.216.10

200 OK

243 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-secondaryToolbarToggle.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
243 B (243 bytes)
Hash
7af7e96cf59fea4b789db1c5d4636d08
6cedbeddac0d6191afe09cabed7b6d517f7c7b21
c41dd1f67d354720df07f64acaa46716d50ac22e10efe15e92fe6033dea8ff68

HTTP Headers

GET /pdf/web/images/toolbarButton-secondaryToolbarToggle.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349466
content-length: 243
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:08:13 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "7af7e96cf59fea4b789db1c5d4636d08"
x-amz-request-id: tx0000000000000f5b8a83a-00634e8d0d-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds015.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-zoomOut.png

205.185.216.10

200 OK

88 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-zoomOut.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
88 B (88 bytes)
Hash
e1256ccd98a1865848fb957009e6f7a9
63a719d5e6a708a22014f20abc0722cd54ffb0f6
bea530f1ac565fe3b95be3d4599508b9947fa6ef50114bc33216802342ff5187

HTTP Headers

GET /pdf/web/images/toolbarButton-zoomOut.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349466
content-length: 88
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:07:30 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "e1256ccd98a1865848fb957009e6f7a9"
x-amz-request-id: tx0000000000000f5b8a847-00634e8d0d-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds255.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-zoomIn.png

205.185.216.10

200 OK

136 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-zoomIn.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
136 B (136 bytes)
Hash
1ec009b6c54709afa73d99db10c57039
838adbe15d84daceec25cfd4d8d6ac1580b4f693
1f18129857ba039238716c12d5dab4e23e30ff73e3e4d217cf7b65bc058fb22c

HTTP Headers

GET /pdf/web/images/toolbarButton-zoomIn.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349468
content-length: 136
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:39 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "1ec009b6c54709afa73d99db10c57039"
x-amz-request-id: tx0000000000000f5b8ad5e-00634e8d0f-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds256.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-menuArrows.png

205.185.216.10

200 OK

107 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-menuArrows.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 7 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
107 B (107 bytes)
Hash
0f776a81f64ed3775ce1917917879e4b
acbbc7071a0641a10e1d50991d1abbfa26b5dce9
59280ac4ec15b3176cd6948fa4d2319698d484c971f432eb8454dd851416e5dd

HTTP Headers

GET /pdf/web/images/toolbarButton-menuArrows.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349466
content-length: 107
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:08:46 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "0f776a81f64ed3775ce1917917879e4b"
x-amz-request-id: tx0000000000000e9ddd3c6-00634e8d0d-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds213.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/locale/locale.properties

205.185.216.10

200 OK

4.2 kB

URL HTTP/2
media.qrtiger.com/pdf/web/locale/locale.properties
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text
Size
4.2 kB (4190 bytes)
Hash
e09cdc3b378be2e091686c10363f0b15
958bea12909f30886fa0a3d822bc982916fbe860
a4b5fb6d7c28b03aed164c4039514cb1abb5619ac64e6b4f1a91eb0610edd759

HTTP Headers

GET /pdf/web/locale/locale.properties HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://qr1.be
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=260489
content-length: 4190
content-type: application/octet-stream
last-modified: Mon, 31 Aug 2020 11:07:12 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "e09cdc3b378be2e091686c10363f0b15"
x-amz-request-id: tx0000000000000f118276b-00634d317c-34c6886a-nyc3b
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 31536000
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds009.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-viewOutline.png

205.185.216.10

200 OK

178 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-viewOutline.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
178 B (178 bytes)
Hash
2d32348db7b0eca4195bf844551a5c58
ec7aa605c063faf6a951c2d64a8d98933b60f6a4
f4bf8e4b3ddd92edaa4f3d39da434aa55ca52f487964cfe139242a29cfb596bf

HTTP Headers

GET /pdf/web/images/toolbarButton-viewOutline.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=349466
content-length: 178
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:08:41 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "2d32348db7b0eca4195bf844551a5c58"
x-amz-request-id: tx0000000000000f5b8a829-00634e8d0d-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds203.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/images/QRtiger/favicon.ico

205.185.216.10

200 OK

15 kB

URL HTTP/2
media.qrtiger.com/images/QRtiger/favicon.ico
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size
15 kB (15406 bytes)
Hash
b63cb7c5745810a0e3b20a55f60cb88e
8f310be80dd9c62f6ce1bafe128e2c586468d1d6
2963e8af5b4a28be58d77ee2484bedf6762880296e853a4e635f05e58399532a

HTTP Headers

GET /images/QRtiger/favicon.ico HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=253237
content-length: 15406
content-type: image/x-icon
last-modified: Wed, 03 Mar 2021 08:58:18 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "b63cb7c5745810a0e3b20a55f60cb88e"
x-amz-request-id: tx0000000000000e50cfc51-00634d1528-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds245.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/locale/en-US/viewer.properties

205.185.216.10

200 OK

11 kB

URL HTTP/2
media.qrtiger.com/pdf/web/locale/en-US/viewer.properties
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
Unicode text, UTF-8 text
Size
11 kB (10916 bytes)
Hash
91f2e97345938350abef4186f9f1dc44
d70246f7127f8b9d93982cfdfc62216c8f3b33c1
77f4397dc9c1c6870f6b1cae9eddbc8b31a478ca93bfdbfeae2cdd07316f2e1d

HTTP Headers

GET /pdf/web/locale/en-US/viewer.properties HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://qr1.be
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:35 GMT
cache-control: max-age=397603
content-length: 10916
content-type: application/octet-stream
last-modified: Mon, 31 Aug 2020 11:07:42 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "91f2e97345938350abef4186f9f1dc44"
x-amz-request-id: tx0000000000000f858ad7b-00634f4916-34c6886a-nyc3b
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 31536000
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347635.dop065.sk1.t,1666347635.cds245.sk1.hn,1666347635.cds209.sk1.c
X-Firefox-Spdy: h2

qr1.be/pdf/build/pdf.worker.js

159.65.3.64

200 OK

250 kB

URL HTTP/1.1
qr1.be/pdf/build/pdf.worker.js
IP
159.65.3.64:0
ASN
#14061 DIGITALOCEAN-ASN

File type
ASCII text, with very long lines (913)
Size
250 kB (250311 bytes)
Hash
eef560f45000e9376f3e76ac0c9631bd
866fd0003ffc1155b79f1c8366b7e04bc10245e4
334240331da1c0cfff2e18a9e0cc39f9edd199f24dc5b49305ecbff2f7f00eeb

HTTP Headers

GET /pdf/build/pdf.worker.js HTTP/1.1
Host: qr1.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qr1.be/ERHM
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 04 Aug 2020 07:27:03 GMT
ETag: W/"13ec25-173b85dd1c1"
Content-Type: application/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 21 Oct 2022 10:20:35 GMT
Connection: keep-alive
Transfer-Encoding: chunked

media.qrtiger.com/files/2022/10/portfo%CC%81lio-infoview-2.pdf

205.185.216.10

200 OK

3.2 MB

URL HTTP/2
media.qrtiger.com/files/2022/10/portfo%CC%81lio-infoview-2.pdf
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PDF document, version 1.6 (zip deflate encoded)\012- data
Size
3.2 MB (3194813 bytes)
Hash
dd1384b097d3838a533ce47e5966f6b9
c4f71ae0c0740d02614a1bc0249e0d157e2a0ed9
dfc83f5b7d305b6bd5c926b11ce8d15156ae8c5e7b36f8bdcacf96992e541ab8

HTTP Headers

GET /files/2022/10/portfo%CC%81lio-infoview-2.pdf HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qr1.be/
Origin: https://qr1.be
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:36 GMT
content-length: 3194813
content-type: application/pdf
last-modified: Thu, 13 Oct 2022 16:07:32 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "dd1384b097d3838a533ce47e5966f6b9"
cache-control: 2592000
x-amz-request-id: tx0000000000000f4cb221c-00635206eb-34c5ae65-nyc3b
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 31536000
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347636.dop065.sk1.t,1666347636.cds245.sk1.hn,1666347636.cds065.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/shadow.png

205.185.216.10

200 OK

290 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/shadow.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 19 x 19, 8-bit gray+alpha, non-interlaced\012- data
Size
290 B (290 bytes)
Hash
bf677598a57b9539055834af51cf6062
02b6adc1ca6ad8f57605ee92943b65c6250d73ba
a9c6fb05ccd9fea5e3aaea84933b182ceca88fc66142544fd0476b387a39f722

HTTP Headers

GET /pdf/web/images/shadow.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:36 GMT
cache-control: max-age=260502
content-length: 290
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:08:05 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "bf677598a57b9539055834af51cf6062"
x-amz-request-id: tx0000000000000e55fcca3-00634d318a-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347636.dop065.sk1.t,1666347636.cds245.sk1.hn,1666347636.cds256.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/loading-icon.gif

205.185.216.10

200 OK

2.5 kB

URL HTTP/2
media.qrtiger.com/pdf/web/images/loading-icon.gif
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
GIF image data, version 89a, 24 x 24\012- data
Size
2.5 kB (2545 bytes)
Hash
faa74e8c61fc64d5edb11613c7eead2c
e043879d3ee94a3edf10260f21f44bfa4a6fc66e
483c4a0396691993a641ec409c44b8b7e1daab0ae7e2b2944c4bc59520bb7655

HTTP Headers

GET /pdf/web/images/loading-icon.gif HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:36 GMT
cache-control: max-age=260502
content-length: 2545
content-type: image/gif
last-modified: Mon, 31 Aug 2020 11:08:39 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "faa74e8c61fc64d5edb11613c7eead2c"
x-amz-request-id: tx0000000000000e55fcca5-00634d318a-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347636.dop065.sk1.t,1666347636.cds245.sk1.hn,1666347636.cds241.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/loading-small.png

205.185.216.10

200 OK

7.4 kB

URL HTTP/2
media.qrtiger.com/pdf/web/images/loading-small.png
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced\012- data
Size
7.4 kB (7402 bytes)
Hash
9244a600a36f650764a9512791792ec8
c1abf9b89af7392824f2228312785a899df224a0
826d7d78fc6fb07d0546261d93f82e109225ab81ba612b7eeefec942da66f7e9

HTTP Headers

GET /pdf/web/images/loading-small.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:36 GMT
cache-control: max-age=349470
content-length: 7402
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:48 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "9244a600a36f650764a9512791792ec8"
x-amz-request-id: tx0000000000000e9dde3a7-00634e8d12-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347636.dop065.sk1.t,1666347636.cds245.sk1.hn,1666347636.cds258.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/build/pdf.js

205.185.216.10

200 OK

0 B

URL HTTP/2
media.qrtiger.com/pdf/build/pdf.js
IP
205.185.216.10:0
ASN
#20446 STACKPATH-CDN

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /pdf/build/pdf.js HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Fri, 21 Oct 2022 10:20:34 GMT
cache-control: max-age=260485
content-length: 368912
content-type: application/x-javascript
last-modified: Thu, 10 Sep 2020 11:06:33 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "5656a918ad726c65c46932d0f1e76798"
x-amz-request-id: tx0000000000000e55f9958-00634d3177-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1666347634.dop065.sk1.t,1666347634.cds245.sk1.hn,1666347634.cds254.sk1.c
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (5)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (49)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers