Report - qr1.be/fiiq

Report Overview

Submitted URL
qr1.be/fiiq
IP
161.35.11.28
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2022-11-14 01:56:23
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2012-05-21T19:28:02Z	2023-03-10T05:11:37Z	387 B	25 kB	69.16.175.10
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-10T05:10:02Z	606 B	127 B	52.41.91.37
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-10T05:10:04Z	3.2 kB	57 kB	34.120.237.76
qr1.be	unknown	2019-07-04T16:14:58Z	2023-03-09T14:20:16Z	782 B	5.5 kB	161.35.11.28
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-10T13:49:44Z	682 B	1.6 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-10T05:10:00Z	782 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-10T05:12:35Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-10T05:10:00Z	333 B	229 B	34.117.237.239
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-10T05:09:10Z	2.0 kB	5.3 kB	23.36.76.226
media.qrtiger.com	845186	2020-09-03T10:32:16Z	2023-03-08T14:01:28Z	10 kB	822 kB	205.185.216.42

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-11-13	medium	qr1.be/fiiq	Adobe Inc.
2022-11-13	medium	qr1.be/fiiq	Adobe Inc.

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	media.qrtiger.com/pdf/build/pdf.js	369 kB	2023-03-07	2023-03-11
Pretty URL media.qrtiger.com/pdf/build/pdf.js IP 205.185.216.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:35:46 Last Seen2023-03-11 23:23:44 Times Seen1 Hash 5656a918ad726c65c46932d0f1e76798 5a24d62d81be29344135fc13165e53596cf38e4f 28477a2cc4c8c526c659fc53282d2d816dd237d5787eb4df404db8573f178e3c Loading...

	media.qrtiger.com/pdf/web/viewer.js	343 kB	2023-03-10	2023-03-11
Pretty URL media.qrtiger.com/pdf/web/viewer.js IP 205.185.216.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 09:46:08 Last Seen2023-03-11 11:46:11 Times Seen1 Hash 3c00afffb7ac65955416996c5eacb27e de023142f3ec0f6a5f1ffbd828b4fe5c7cec639f f90d348893f32d49f6be17d46075d63751cc845331d2b190c3dda4f222a26f42 Loading...

	qr1.be/fiiq	188 B	2023-03-07	2023-03-11
Pretty URL qr1.be/fiiq IP 161.35.11.28 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:35:46 Last Seen2023-03-11 23:23:44 Times Seen1 Hash b15903305e372a7653d949e435df46e9 1cac2abdaa90b2299ff4137e2824550e37624f0f 3307c7cea533006781d894aaea155501bb3c6dcd2fed6f1fdf18ce2bc1fa46aa Loading...

	qr1.be/fiiq	550 B	2023-03-07	2023-03-11
Pretty URL qr1.be/fiiq IP 161.35.11.28 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:35:46 Last Seen2023-03-11 23:23:44 Times Seen1 Hash 1d49efbb9f234f0c9ead4706dda7473a 79d4511ff7f51c8f0ed28bf3b38917b56d93cdf8 c0104846dc52fb8e4cee868e372f52a5383d95f964c60d5b26c504448ac4fc68 Loading...

	code.jquery.com/jquery-3.5.1.slim.min.js	72 kB	2023-03-07	2024-04-24
Pretty URL code.jquery.com/jquery-3.5.1.slim.min.js IP 69.16.175.10 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:10 Last Seen2024-04-24 10:55:57 Times Seen3204 Hash fb8409a092adc6e8be17e87d59e0595e cf8d9821552d51bb50ce572e696aba1309065800 e3e5f35d586c0e6a9a9d7187687be087580c40a5f8d0e52f0c4053bbc25c98db Loading...

HTTP Transactions (45)

URL IP Response Size

qr1.be/fiiq

161.35.11.28

301 Moved Permanently

217 B

URL HTTP/1.1
qr1.be/fiiq
IP
161.35.11.28:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
217 B (217 bytes)
Hash
9af4b7925c01af888c8eca463d3b72e6
1335ec9a991a870598f1092626b1cf4180c2364f
2d8f84bbb90d97555211726ecdd329c01c0d71249be4905b02fe93404e8c9714

Detections

Analyzer	Verdict	Alert
openphish	Adobe Inc.

HTTP Headers

GET /fiiq HTTP/1.1
Host: qr1.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Location: https://qr1.be/fiiq
Content-Type: text/html; charset=utf-8
Date: Mon, 14 Nov 2022 01:56:12 GMT
Connection: keep-alive
Content-Length: 217

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3d0727e32cd103ddd4b73f28c81758aa
197a7bf43d63723fc532c23c6dced68d5cc36652
d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4798
Expires: Mon, 14 Nov 2022 03:16:10 GMT
Date: Mon, 14 Nov 2022 01:56:12 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
b1e969be0f3201087da138cbc8b89f10
d0a27f525f2b242b5dafa157f126c2ba880c8809
f7e5f39372b5adcc30c27e727eee1b19e6d13ed1b54fa1ad67235dc8ee08ac51

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3063
Cache-Control: max-age=120371
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 01:56:12 GMT
Etag: "6370c779-1d7"
Expires: Tue, 15 Nov 2022 11:22:23 GMT
Last-Modified: Sun, 13 Nov 2022 10:31:21 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8c15cef160d1514fc977ed4c4e97086c
ffe4ce3199658a1fc7a45d1607df40ef3911621d
db1a82d8a2bacc0257b87efec0c365c1b769700fa27ce928321e082505f1d72a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB1A82D8A2BACC0257B87EFEC0C365C1B769700FA27CE928321E082505F1D72A"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6866
Expires: Mon, 14 Nov 2022 03:50:38 GMT
Date: Mon, 14 Nov 2022 01:56:12 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 14 Nov 2022 01:44:10 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 722
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: OIj5zJkY/EAuQfBqwOpWqXiy9fRfmlAEC2m8pSFqvOhRVHXDkWUj9zFOPjkBsLDJsduf9eFWVLrGaKlJM93MNQ==
x-amz-request-id: GVK4KF3DV97YB9Q3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 14 Nov 2022 01:50:54 GMT
age: 318
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 14 Nov 2022 01:56:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
91edfd2751a0c469404f75f754339870
4efae3767d505973d915d65e0d6be5fd2915744b
f1a5693ad1896f3a82d3b114a09c47aa908b9fbf1c4e44a48d7325f54c05ddd5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F1A5693AD1896F3A82D3B114A09C47AA908B9FBF1C4E44A48D7325F54C05DDD5"
Last-Modified: Sat, 12 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=683
Expires: Mon, 14 Nov 2022 02:07:35 GMT
Date: Mon, 14 Nov 2022 01:56:12 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 14 Nov 2022 01:44:48 GMT
cache-control: public,max-age=3600
age: 684
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

qr1.be/fiiq

161.35.11.28

200 OK

4.8 kB

URL HTTP/1.1
qr1.be/fiiq
IP
161.35.11.28:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
4.8 kB (4795 bytes)
Hash
6401e26d7fc1a3afe61d64e145642193
ef6041a6b490eda4d2c520df898d7ba8cb37ba05
3f94ea02c4842c643357ad2e8975e8d44e77d50775610ab59e03367c49b11cae

Detections

Analyzer	Verdict	Alert
openphish	Adobe Inc.

HTTP Headers

GET /fiiq HTTP/1.1
Host: qr1.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
ETag: W/"5a9e-BLkbqqnHID3JSmPPol03psnua7c"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 14 Nov 2022 01:56:12 GMT
Connection: keep-alive
Transfer-Encoding: chunked

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
0a9a357f652868f9317812b8103ba15d
95a90c7a07b591dce7f39c6f9ab27974d1a1ed2a
16fd52c7ee6806455e724f30af8d58630a141a8a3823c48c20b5da3a71f066da

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4399
Cache-Control: max-age=116639
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 01:56:12 GMT
Etag: "6370b3ac-1d7"
Expires: Tue, 15 Nov 2022 10:20:11 GMT
Last-Modified: Sun, 13 Nov 2022 09:06:52 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

code.jquery.com/jquery-3.5.1.slim.min.js

69.16.175.10

200 OK

25 kB

URL HTTP/2
code.jquery.com/jquery-3.5.1.slim.min.js
IP
69.16.175.10:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text, with very long lines (65245)
Size
25 kB (24606 bytes)
Hash
63f8c134408852106835db2f928cf0e0
7ca0035d2a05154f1f93e19793b2298973cc8733
2555d061e6c2337cc0b62e309c8d0464e8f88d6a44dab74246c37cd0154d73a5

HTTP Headers

GET /jquery-3.5.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://qr1.be
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:12 GMT
content-encoding: gzip
content-length: 24606
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-11abc"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1668390972.dop225.sk1.t,1668390972.cds243.sk1.hn,1668390972.cds202.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/viewer.css

205.185.216.42

200 OK

60 kB

URL HTTP/2
media.qrtiger.com/pdf/web/viewer.css
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
assembler source, ASCII text
Size
60 kB (59822 bytes)
Hash
d83affd2586a5f58ccef89d67dda1a8b
f2fe04a8440d9d7886bac307369843ba880e4f98
9b42b4be381206a3c8c2f512a063e1e7598543ca84a853c70db279880e8854a9

HTTP Headers

GET /pdf/web/viewer.css HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:12 GMT
cache-control: max-age=32766
content-length: 59822
content-type: text/css; charset=utf-8
last-modified: Mon, 31 Aug 2020 11:07:57 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "d83affd2586a5f58ccef89d67dda1a8b"
x-amz-request-id: tx0000000000001488ff27d-006368e5ba-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390972.dop209.sk1.t,1668390972.cds217.sk1.hn,1668390972.cds219.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/build/pdf.js

205.185.216.42

200 OK

369 kB

URL HTTP/2
media.qrtiger.com/pdf/build/pdf.js
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text, with very long lines (913)
Size
369 kB (368912 bytes)
Hash
5656a918ad726c65c46932d0f1e76798
5a24d62d81be29344135fc13165e53596cf38e4f
28477a2cc4c8c526c659fc53282d2d816dd237d5787eb4df404db8573f178e3c

HTTP Headers

GET /pdf/build/pdf.js HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:12 GMT
cache-control: max-age=32766
content-length: 368912
content-type: application/x-javascript
last-modified: Thu, 10 Sep 2020 11:06:33 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "5656a918ad726c65c46932d0f1e76798"
x-amz-request-id: tx00000000000013a3706eb-006368e5ba-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390972.dop209.sk1.t,1668390972.cds217.sk1.hn,1668390972.cds254.sk1.c
X-Firefox-Spdy: h2

push.services.mozilla.com/

52.41.91.37

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.41.91.37:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qUnu4h5Zmv6qB7jUPpqUBg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ap2xqlqBu07hccozu2wwWl0eMhw=

media.qrtiger.com/images/QRtiger/favicon.ico

205.185.216.42

200 OK

15 kB

URL HTTP/2
media.qrtiger.com/images/QRtiger/favicon.ico
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size
15 kB (15406 bytes)
Hash
b63cb7c5745810a0e3b20a55f60cb88e
8f310be80dd9c62f6ce1bafe128e2c586468d1d6
2963e8af5b4a28be58d77ee2484bedf6762880296e853a4e635f05e58399532a

HTTP Headers

GET /images/QRtiger/favicon.ico HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:14 GMT
cache-control: max-age=24614
content-length: 15406
content-type: image/x-icon
last-modified: Wed, 03 Mar 2021 08:58:18 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "b63cb7c5745810a0e3b20a55f60cb88e"
x-amz-request-id: tx000000000000139d9f0d9-006368c5e3-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390974.dop209.sk1.t,1668390974.cds217.sk1.hn,1668390974.cds245.sk1.c
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4883
Expires: Mon, 14 Nov 2022 03:17:37 GMT
Date: Mon, 14 Nov 2022 01:56:14 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4883
Expires: Mon, 14 Nov 2022 03:17:37 GMT
Date: Mon, 14 Nov 2022 01:56:14 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4883
Expires: Mon, 14 Nov 2022 03:17:37 GMT
Date: Mon, 14 Nov 2022 01:56:14 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e7a51c-5de3-477d-928f-95ab858d7616.jpeg

34.120.237.76

200 OK

5.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e7a51c-5de3-477d-928f-95ab858d7616.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.4 kB (5401 bytes)
Hash
32cd1a339ce2c05c0d0e57e0d706068f
9d223cfd46c57e901a892dbdb10d9be5a33017b3
a98f05d589d44c9d03e785253c9655f846a283425a84f9282ae96bc3e0487d95

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e7a51c-5de3-477d-928f-95ab858d7616.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5401
x-amzn-requestid: 45142688-ad31-425c-9391-c7a8c8c74a1f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bhz-5FKyIAMFYDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637099f8-71be2fa256fd345c5f3436c6;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 07:17:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: InAofPuyHHjnQpW1oK5EwPMe5jOpGLq8HoCVTGRU_157FHD-SBnA2A==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 07:40:47 GMT
age: 65727
etag: "9d223cfd46c57e901a892dbdb10d9be5a33017b3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5797e726-229b-4f42-9376-00ae67e14407.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.5 kB (6535 bytes)
Hash
a0db3498954921b58948ad8a4e7fd49f
6b618c3ff6e589f9e01650bd0a619acb70d8004e
fa3baa9e32e455ab2eeefab0c76714bf0ff5f67a5ccd7c10b3f5c21d8138c5cf

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5797e726-229b-4f42-9376-00ae67e14407.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6535
x-amzn-requestid: 3333aa65-c0c7-4704-9af1-fb0a49f830fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyDtHbhoAMFSsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-51c3e4513240b7e5662b8e6e;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 6dTOcWIKFuo-Thf3zUH_1WY70yFyQkj3w2xPrb6Ntjf8TUFPVG-_lA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:54:01 GMT
age: 14533
etag: "6b618c3ff6e589f9e01650bd0a619acb70d8004e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff08b5706-5917-455d-96fa-e56fe4670cf6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11323 bytes)
Hash
b5a6c04c4c8c28100a69ac8e3969fe0c
1ad175acb910577e70c46149005ee5a70599518b
188e715bb141598dc890a3b55807b1f7e04f4a1e8b1870147411c32de2225926

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff08b5706-5917-455d-96fa-e56fe4670cf6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11323
x-amzn-requestid: 1455b668-15d1-4a9c-a3b6-8e1b15ea9009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyDvFzaoAMFxQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-2783642c5cfcd69e672131a1;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MCmix3JMuBtn98wae7Ek9dfEi4v4914Mlg4ZE3aEyfoD1cFt9aAfyw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:53:45 GMT
age: 14549
etag: "1ad175acb910577e70c46149005ee5a70599518b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F11024ab6-70a0-4537-b976-642a32f8a125.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.9 kB (9944 bytes)
Hash
de6b8d945685fcbd3b58522e10370c90
234bccdfc13730502e4c1ed2fdefd18f6e755819
f4b8aa1afeffd037e199a46290d16e9145815f6d0eb07ff9778c7f279005ca7c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F11024ab6-70a0-4537-b976-642a32f8a125.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9944
x-amzn-requestid: 00690925-6754-46e2-aa9e-e1c70dd8058d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bhzYBE88IAMFTyw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637098ff-5ab1f32a12f1366146c0e86c;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 07:13:03 GMT
x-amz-cf-pop: SFO20-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: hMdY-OxJEaeuh3jP7eiShmumpDGUJTNGcnb-GB7FWeTnixd1wo8oaQ==
via: 1.1 34d694cee116d42560f77448eb932ac8.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 07:19:01 GMT
age: 67033
etag: "234bccdfc13730502e4c1ed2fdefd18f6e755819"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11667 bytes)
Hash
032386e5c9dffff1ba1ee5e8a322d438
dd4fd6c803a9b333bace9a541c6bd183d0c56bb9
0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: 4778d1bd-28c3-4665-89da-046e356087f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyD1HE-oAMF0QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-53c7330c5fd36d3c4d9e6aed;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ubqvgLaJlGIxyJC1KBJP4ncx_2ltXS0C5dLGddjtbkt6pJmX84_VAg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:54:01 GMT
age: 14533
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ed38e2b-996e-4243-a418-929f20183420.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.7 kB (5715 bytes)
Hash
c017b320b8160218fc060f69c4617c81
380ab5343fd3212c0f682b1e125a587fe49da95d
6cc252fd04c4a28d884d7bddd0ac088bc3570ec04aebf483d516d12543c97c8e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ed38e2b-996e-4243-a418-929f20183420.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5715
x-amzn-requestid: 4633f4bd-b1cc-4729-8827-a9202df4fab0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyFdHloIAMF_iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163bc-785f952757673c9c0197c35d;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:38:04 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -dbgLM4YPeQqeygY_gieC_NW_lN0r7zvD43mamnFR3DzkF5sz4E9iw==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 22:01:14 GMT
age: 14100
etag: "380ab5343fd3212c0f682b1e125a587fe49da95d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/viewer.js

205.185.216.42

200 OK

343 kB

URL HTTP/2
media.qrtiger.com/pdf/web/viewer.js
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text, with very long lines (361)
Size
343 kB (342978 bytes)
Hash
3c00afffb7ac65955416996c5eacb27e
de023142f3ec0f6a5f1ffbd828b4fe5c7cec639f
f90d348893f32d49f6be17d46075d63751cc845331d2b190c3dda4f222a26f42

HTTP Headers

GET /pdf/web/viewer.js HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=32759
content-length: 342978
content-type: application/x-javascript
last-modified: Thu, 10 Sep 2020 11:07:13 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "3c00afffb7ac65955416996c5eacb27e"
x-amz-request-id: tx00000000000013a3706ef-006368e5ba-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390972.dop209.sk1.t,1668390972.cds217.sk1.hn,1668390979.cds254.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/texture.png

205.185.216.42

200 OK

2.4 kB

URL HTTP/2
media.qrtiger.com/pdf/web/images/texture.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Size
2.4 kB (2417 bytes)
Hash
be7cd9355fa2121fab8e619ed546ced4
230a3d5e2dfacfa7228f58a559de5df3734118f5
161fb247ede7ecb867d864863b8e3de3a93daae6286fce1ab7c3700f55112c9e

HTTP Headers

GET /pdf/web/images/texture.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=32760
content-length: 2417
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:07:00 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "be7cd9355fa2121fab8e619ed546ced4"
x-amz-request-id: tx0000000000001488ff64c-006368e5bb-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds253.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-viewThumbnail.png

205.185.216.42

200 OK

185 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-viewThumbnail.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
185 B (185 bytes)
Hash
5ab2c00425ead7f7a0c219385d55bf03
f62aad7c7719300f1d8e922155f451661d41d42d
32170f852e6761cbbcfbb87175bfd6d84ed73823def767b1a7bdd058c6a3030a

HTTP Headers

GET /pdf/web/images/toolbarButton-viewThumbnail.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 185
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:45 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "5ab2c00425ead7f7a0c219385d55bf03"
x-amz-request-id: tx00000000000014419daad-00636c024b-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds020.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-viewOutline.png

205.185.216.42

200 OK

178 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-viewOutline.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
178 B (178 bytes)
Hash
2d32348db7b0eca4195bf844551a5c58
ec7aa605c063faf6a951c2d64a8d98933b60f6a4
f4bf8e4b3ddd92edaa4f3d39da434aa55ca52f487964cfe139242a29cfb596bf

HTTP Headers

GET /pdf/web/images/toolbarButton-viewOutline.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 178
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:08:41 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "2d32348db7b0eca4195bf844551a5c58"
x-amz-request-id: tx00000000000014419daa9-00636c024b-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds203.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-viewAttachments.png

205.185.216.42

200 OK

384 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-viewAttachments.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
384 B (384 bytes)
Hash
b58498a5ba191146108d60bf1e079592
53c5a0c4c40f5f47fb6d2f57a82a4a6d0a83feb0
0bce5882a5b8caabd453fcc98c3d017f5663c845f50a00dcc78df854248b7d20

HTTP Headers

GET /pdf/web/images/toolbarButton-viewAttachments.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 384
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:55 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "b58498a5ba191146108d60bf1e079592"
x-amz-request-id: tx000000000000152c21b90-00636c024b-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds201.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-sidebarToggle.png

205.185.216.42

200 OK

225 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-sidebarToggle.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
225 B (225 bytes)
Hash
6c365a103073ff2d8303c68856df0a4e
ff7ef30371233abe8c548c2f3d5cbb335183ca92
b97006dda25f0b3908ce7604108261ff8ab1e1984118f3dac296428bcf34b1a3

HTTP Headers

GET /pdf/web/images/toolbarButton-sidebarToggle.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 225
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:44 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "6c365a103073ff2d8303c68856df0a4e"
x-amz-request-id: tx000000000000152c21b8d-00636c024b-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds246.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-search.png

205.185.216.42

200 OK

309 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-search.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
309 B (309 bytes)
Hash
273cffad049d5b4e1f0a9d7af149e597
14c3ef60d3979df9e8d13cf39cad10ed043f5578
0a0c8700265901b93feb0814d2db720d0e4f0b66ebfa98f717d1dc4e28e36646

HTTP Headers

GET /pdf/web/images/toolbarButton-search.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 309
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:33 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "273cffad049d5b4e1f0a9d7af149e597"
x-amz-request-id: tx00000000000014419daae-00636c024b-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds241.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-pageUp.png

205.185.216.42

200 OK

246 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-pageUp.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
246 B (246 bytes)
Hash
c270b41d7a0ff9892ba9ac67d789a841
b1eae4614fb964b6d0483f114f3dd2b49ec1b64a
8722c44457c51f5090545306b32627b6907ace334e615bb5eba264e7aeba1b18

HTTP Headers

GET /pdf/web/images/toolbarButton-pageUp.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 246
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:07:29 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "c270b41d7a0ff9892ba9ac67d789a841"
x-amz-request-id: tx00000000000014419dab1-00636c024b-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds017.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-pageDown.png

205.185.216.42

200 OK

238 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-pageDown.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
238 B (238 bytes)
Hash
d86ed7c2ca30e08f7f3b499de2dca107
6e10286da3a52e0bba782d0fc4a7c33d10c8f4b9
3e1aa1df58b9ba316c01f4e6ce1099e0fc56948836433b9fb34939de5a5e0e98

HTTP Headers

GET /pdf/web/images/toolbarButton-pageDown.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 238
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:07:46 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "d86ed7c2ca30e08f7f3b499de2dca107"
x-amz-request-id: tx000000000000152c21b92-00636c024b-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds256.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-presentationMode.png

205.185.216.42

200 OK

321 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-presentationMode.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
321 B (321 bytes)
Hash
fb94ca39aec07d85a29fdb62b0b03b24
3d206e303f9663dca95482df9abe55a08851c574
f386bff1c7c4986544a70003bd5b6b730153f0788e4d12ffb1372b709d2468b9

HTTP Headers

GET /pdf/web/images/toolbarButton-presentationMode.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 321
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:08:58 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "fb94ca39aec07d85a29fdb62b0b03b24"
x-amz-request-id: tx00000000000014419dab0-00636c024b-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds220.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-openFile.png

205.185.216.42

200 OK

295 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-openFile.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
295 B (295 bytes)
Hash
8db4158c49b8a31e311ee501af30566f
6b17acd1c4ea6a9d9859819456952eff133f3cc1
ec9dd66c32fedbf6d5e1fd166e01ac13ac751e2441d7fe9ab8dd79dc5c94b825

HTTP Headers

GET /pdf/web/images/toolbarButton-openFile.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 295
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:08:24 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "8db4158c49b8a31e311ee501af30566f"
x-amz-request-id: tx000000000000152c21b96-00636c024b-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds225.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-print.png

205.185.216.42

200 OK

257 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-print.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
257 B (257 bytes)
Hash
923cfb0f2a944b5a49f99a6901770f71
77463c425966b8a298a2d87863533e68092676bc
f09068d019819fca961f6f1fbe02a267a83186e8a503857291b75c9360c63433

HTTP Headers

GET /pdf/web/images/toolbarButton-print.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=521580
content-length: 257
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:07:06 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "923cfb0f2a944b5a49f99a6901770f71"
x-amz-request-id: tx00000000000015fbe648e-0063705b2f-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds258.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-bookmark.png

205.185.216.42

200 OK

174 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-bookmark.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
174 B (174 bytes)
Hash
97676ebb2225309ad15ba193f23f7fa8
0193cebc494facb8ba8733a1a8f50457e7189f56
0a281d912535dfd0a663182d7e9db5e6bcd9ca699aaefb489ce0e313f990d666

HTTP Headers

GET /pdf/web/images/toolbarButton-bookmark.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 174
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:56 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "97676ebb2225309ad15ba193f23f7fa8"
x-amz-request-id: tx000000000000152c21b99-00636c024b-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds021.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-download.png

205.185.216.42

200 OK

259 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-download.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
259 B (259 bytes)
Hash
f20a55dc99268dac130586e52e2b10d6
b25abd4a3c95097a338b8b138476e22189cb235e
6f44f96517c6ced760ede55714c5e7e1e259783974fcba750f53880a932ecd50

HTTP Headers

GET /pdf/web/images/toolbarButton-download.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 259
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:07:51 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "f20a55dc99268dac130586e52e2b10d6"
x-amz-request-id: tx00000000000014419dab3-00636c024b-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds021.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-secondaryToolbarToggle.png

205.185.216.42

200 OK

243 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-secondaryToolbarToggle.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
243 B (243 bytes)
Hash
7af7e96cf59fea4b789db1c5d4636d08
6cedbeddac0d6191afe09cabed7b6d517f7c7b21
c41dd1f67d354720df07f64acaa46716d50ac22e10efe15e92fe6033dea8ff68

HTTP Headers

GET /pdf/web/images/toolbarButton-secondaryToolbarToggle.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236681
content-length: 243
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:08:13 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "7af7e96cf59fea4b789db1c5d4636d08"
x-amz-request-id: tx00000000000014419dab9-00636c024b-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds015.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-zoomIn.png

205.185.216.42

200 OK

136 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-zoomIn.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
136 B (136 bytes)
Hash
1ec009b6c54709afa73d99db10c57039
838adbe15d84daceec25cfd4d8d6ac1580b4f693
1f18129857ba039238716c12d5dab4e23e30ff73e3e4d217cf7b65bc058fb22c

HTTP Headers

GET /pdf/web/images/toolbarButton-zoomIn.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 136
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:06:39 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "1ec009b6c54709afa73d99db10c57039"
x-amz-request-id: tx000000000000152c21b9d-00636c024b-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds256.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-zoomOut.png

205.185.216.42

200 OK

88 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-zoomOut.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size
88 B (88 bytes)
Hash
e1256ccd98a1865848fb957009e6f7a9
63a719d5e6a708a22014f20abc0722cd54ffb0f6
bea530f1ac565fe3b95be3d4599508b9947fa6ef50114bc33216802342ff5187

HTTP Headers

GET /pdf/web/images/toolbarButton-zoomOut.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 88
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:07:30 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "e1256ccd98a1865848fb957009e6f7a9"
x-amz-request-id: tx00000000000014419dab7-00636c024b-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds255.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/images/toolbarButton-menuArrows.png

205.185.216.42

200 OK

107 B

URL HTTP/2
media.qrtiger.com/pdf/web/images/toolbarButton-menuArrows.png
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 7 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
107 B (107 bytes)
Hash
0f776a81f64ed3775ce1917917879e4b
acbbc7071a0641a10e1d50991d1abbfa26b5dce9
59280ac4ec15b3176cd6948fa4d2319698d484c971f432eb8454dd851416e5dd

HTTP Headers

GET /pdf/web/images/toolbarButton-menuArrows.png HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://media.qrtiger.com/pdf/web/viewer.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=236680
content-length: 107
content-type: image/png
last-modified: Mon, 31 Aug 2020 11:08:46 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "0f776a81f64ed3775ce1917917879e4b"
x-amz-request-id: tx000000000000152c21ba3-00636c024b-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds213.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/locale/locale.properties

205.185.216.42

200 OK

4.2 kB

URL HTTP/2
media.qrtiger.com/pdf/web/locale/locale.properties
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text
Size
4.2 kB (4190 bytes)
Hash
e09cdc3b378be2e091686c10363f0b15
958bea12909f30886fa0a3d822bc982916fbe860
a4b5fb6d7c28b03aed164c4039514cb1abb5619ac64e6b4f1a91eb0610edd759

HTTP Headers

GET /pdf/web/locale/locale.properties HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://qr1.be
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=32760
content-length: 4190
content-type: application/octet-stream
last-modified: Mon, 31 Aug 2020 11:07:12 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "e09cdc3b378be2e091686c10363f0b15"
x-amz-request-id: tx00000000000013a370b9d-006368e5bb-34c5ae65-nyc3b
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 31536000
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds009.sk1.c
X-Firefox-Spdy: h2

media.qrtiger.com/pdf/web/locale/en-US/viewer.properties

205.185.216.42

200 OK

11 kB

URL HTTP/2
media.qrtiger.com/pdf/web/locale/en-US/viewer.properties
IP
205.185.216.42:0
ASN
#20446 STACKPATH-CDN

File type
Unicode text, UTF-8 text
Size
11 kB (10916 bytes)
Hash
91f2e97345938350abef4186f9f1dc44
d70246f7127f8b9d93982cfdfc62216c8f3b33c1
77f4397dc9c1c6870f6b1cae9eddbc8b31a478ca93bfdbfeae2cdd07316f2e1d

HTTP Headers

GET /pdf/web/locale/en-US/viewer.properties HTTP/1.1
Host: media.qrtiger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://qr1.be
Connection: keep-alive
Referer: https://qr1.be/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 14 Nov 2022 01:56:19 GMT
cache-control: max-age=212339
content-length: 10916
content-type: application/octet-stream
last-modified: Mon, 31 Aug 2020 11:07:42 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "91f2e97345938350abef4186f9f1dc44"
x-amz-request-id: tx000000000000142dd29ca-00636ba336-34c5ae65-nyc3b
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 31536000
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1668390979.dop209.sk1.t,1668390979.cds217.sk1.hn,1668390979.cds209.sk1.c
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (45)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type