r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6ed951622549ed76959631f8a1bf497b
682b2dd2a72190510e3fa7bdb0c0c6f25a322dfb
86f5e5ae2da408a899d16c83b7ca441033ac0c30062cd29f2db1b1b5be666746
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "86F5E5AE2DA408A899D16C83B7CA441033AC0C30062CD29F2DB1B1B5BE666746"
Last-Modified: Sat, 19 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21028
Expires: Sat, 19 Nov 2022 12:18:53 GMT
Date: Sat, 19 Nov 2022 06:28:25 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 67f53a639d57dd6237b5be86fe4f6c1b
287f09532dc331228d09c20b75f4160e91e9800a
41913a8af366685c42af59e9d8e02fccedbe68a3313d2d9fe353deb0c1019075
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4575
Cache-Control: max-age=105537
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:28:25 GMT
Etag: "63775eeb-1d7"
Expires: Sun, 20 Nov 2022 11:47:22 GMT
Last-Modified: Fri, 18 Nov 2022 10:31:07 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e7724a1f27dc1b5b2fb63c7e486f74db
ef0ea648ce8bc189d31382baec4b181c724af93b
2a46916079563d95fa6a695104ebf41829ee95a156d6e4d45b9aef7231a8a80e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A46916079563D95FA6A695104EBF41829EE95A156D6E4D45B9AEF7231A8A80E"
Last-Modified: Fri, 18 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8070
Expires: Sat, 19 Nov 2022 08:42:55 GMT
Date: Sat, 19 Nov 2022 06:28:25 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 19 Nov 2022 05:44:54 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2611
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: cYu2bmmc4B+xaEX24C/uWa6i+2Fa/PARSQ9OgGUlpB5Yv6DilAGcyE32NYV7+ezId2JRuKcbyV5mZQqs5ehwDw==
x-amz-request-id: RZCVT7VH19M44PMK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 19 Nov 2022 05:53:15 GMT
age: 2110
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 06:28:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647
185.148.47.122301 Moved Permanently 252 B URL HTTP/2 dev.awit.ae/bpostale-business/78647
IP 185.148.47.122:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 40913e85e9d45555d0666971bf9110aa
d8a334414f60126612dec278a42b755e4dc8a45a
12d65ead9f1cc933a873296d66232e4cef97e2efd0a0c63492f849282818fedd
Analyzer Verdict Alert openphish La Banque postale
GET /bpostale-business/78647 HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
location: https://dev.awit.ae/bpostale-business/78647/
content-length: 252
content-type: text/html; charset=iso-8859-1
date: Sat, 19 Nov 2022 06:28:25 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f622e36f24fdf59b11376b81241d3723
f2a3a5eb56b22b44551b850c48fbbe2f809ff03a
b51848612e15fd32ec91e5d70c48fa755c1128af984b1dc1e650dffeff5ead27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B51848612E15FD32EC91E5D70C48FA755C1128AF984B1DC1E650DFFEFF5EAD27"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5984
Expires: Sat, 19 Nov 2022 08:08:10 GMT
Date: Sat, 19 Nov 2022 06:28:26 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fe40cc6ea871d80382b6082111393fbe
281f75d0a35dc8ef908bb0500e57abd86bd5388e
6d15422cdf7a6d72d06497188f27af893682314e82ac8a189a0ee2d798cb62d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3856
Cache-Control: max-age=99766
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:28:26 GMT
Etag: "63774b30-1d7"
Expires: Sun, 20 Nov 2022 10:11:12 GMT
Last-Modified: Fri, 18 Nov 2022 09:06:56 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
mmtro.com/tro.js
195.66.82.41200 OK 5.7 kB IP 195.66.82.41:0
Hash 777b8f26695e625482c1302b6b2b9eb7
064e8cecc17dd18542424b669618ccdc67ca81b2
630f44c1f5cf059bf16aed930a1736e6d6f0e5caa83771ffba3e45fbfe923eb2
GET /tro.js HTTP/1.1
Host: mmtro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 06:28:26 GMT
content-type: text/javascript
vary: Accept-Encoding
x-rid: 6378778acb97a8313ada2bb9
cache-control: private, max-age=259200
p3p: policyref="https://mmtro.com/w3c/p3p_mmtro.xml", CP="ALL DSP LAW CUR TAIi PSAi PSDi IVAi IVDi OUR BUS UNI"
server: fdb141453c85e6bc89a824a70a7bfd71a273b947
content-encoding: gzip
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/bsd
185.148.47.122200 OK 17 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/bsd
IP 185.148.47.122:0
File type ASCII text, with no line terminators
Hash e5704dfa7641dfd171ce12e90e86454e
97e96054fa38107d18a484b97c86e2f484a3e268
33e91ef748f0af8ef6ee182576422ffdac615b0611a46823d2df553142755b7c
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/bsd HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 17
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/base-fonts.min.a7e7927fdac70bd77ee0c5330bedd24b.css
185.148.47.122200 OK 2.8 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/base-fonts.min.a7e7927fdac70bd77ee0c5330bedd24b.css
IP 185.148.47.122:0
File type ASCII text, with very long lines (477)
Hash a7e7927fdac70bd77ee0c5330bedd24b
756f7fe024290ae9601641159d9f7bbcca4b4a25
ecf999d7050948f0c99d062040c9ca3a06418cb38931b7ad2d3fd8ac56157a21
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/base-fonts.min.a7e7927fdac70bd77ee0c5330bedd24b.css HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 2831
content-type: text/css
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/assets/css/spinner.css
185.148.47.122200 OK 791 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/assets/css/spinner.css
IP 185.148.47.122:0
File type ASCII text, with CRLF line terminators
Hash 8a8762aa106c6015c26393745d405aab
08cc0f811bb6a5018a9abf47f926e724c7587afa
a8e1d658a276a4706ed13d04de6e9bf673e872dffdff4e30ad0ffdb69e12621b
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/assets/css/spinner.css HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 791
content-type: text/css
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/saved_resource
185.148.47.122200 OK 43 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/saved_resource
IP 185.148.47.122:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/saved_resource HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 43
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/saved_resource(1)
185.148.47.122200 OK 43 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/saved_resource(1)
IP 185.148.47.122:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/saved_resource(1) HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 43
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/seg
185.148.47.122200 OK 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/seg
IP 185.148.47.122:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bpostale-business/78647/asset/seg HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 0
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/px
185.148.47.122200 OK 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/px
IP 185.148.47.122:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bpostale-business/78647/asset/px HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 0
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/4050178.js
185.148.47.122200 OK 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/4050178.js
IP 185.148.47.122:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bpostale-business/78647/asset/4050178.js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 0
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/px(1)
185.148.47.122200 OK 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/px(1)
IP 185.148.47.122:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bpostale-business/78647/asset/px(1) HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 0
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
push.services.mozilla.com/
34.213.140.56101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.213.140.56:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: S+eir2EPpV33NfmAoniMPw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9H8ilBE1kffPy5nM25uvkdq3xiA=
dev.awit.ae/bpostale-business/78647/asset/seg(2)
185.148.47.122200 OK 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/seg(2)
IP 185.148.47.122:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bpostale-business/78647/asset/seg(2) HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 0
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/px(2)
185.148.47.122200 OK 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/px(2)
IP 185.148.47.122:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bpostale-business/78647/asset/px(2) HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 0
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/seg(1)
185.148.47.122200 OK 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/seg(1)
IP 185.148.47.122:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bpostale-business/78647/asset/seg(1) HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 0
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/f(1).txt
185.148.47.122200 OK 2.5 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/f(1).txt
IP 185.148.47.122:0
File type ASCII text, with very long lines (2528), with no line terminators
Hash dd6ec2b5a3faa242ea485860b816b700
2d30a92ce951529fa4b37c0878508a00ff9b9f26
5c9ebe95ffc8bc39c114c23ceb7aeaba5b2e7eb40ab550c03d17d1853689f37c
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/f(1).txt HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 2528
content-type: text/plain
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/wamfactory_dpm.laposte.min.js
185.148.47.122200 OK 5.0 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/wamfactory_dpm.laposte.min.js
IP 185.148.47.122:0
File type ASCII text, with very long lines (5016), with no line terminators
Hash 2a751d93b71295351fdd4655c83871aa
80cafdcda6ca44bf50ad66553365643b8c4d1959
83227c9df3c46625e1c7f1ae833c2870031c4b530de8daec9575c908fabf4540
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/wamfactory_dpm.laposte.min.js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 5016
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/991000.js
185.148.47.122200 OK 5.5 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/991000.js
IP 185.148.47.122:0
File type ASCII text, with very long lines (832)
Hash c34b4f4158f396e49c4e15e7499dbb7f
53c7226b5aa071e4d391af8efa7775f1ef88e582
89cfab0bdbc9ebab83704c7ed01535f1317b35af6148946152359360af6c3f3d
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/991000.js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 5543
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/991001.js
185.148.47.122200 OK 5.5 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/991001.js
IP 185.148.47.122:0
File type ASCII text, with very long lines (808)
Hash 85a34241b5553facbafac08dc0041b32
34ea577c88eb364478692e252b5bc7aa02177bad
a5400d14705e8e45258235d4bf61e819e73b9037115f6e51827dd8d581aeab42
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/991001.js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 5519
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/LOGO-LBP-digital-fd-clair-RVB.svg
185.148.47.122200 OK 3.5 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/LOGO-LBP-digital-fd-clair-RVB.svg
IP 185.148.47.122:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6757a0b44d78b1aa071b09fe076b066b
e5635f6f0e43cee88a094fcbbbf31990e5303f24
739104b5349ad414323b0f821b747b55af29af684d47f6c6a189edb08b76b4e3
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/LOGO-LBP-digital-fd-clair-RVB.svg HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 3537
content-type: image/svg+xml
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/wreport_wcm.js
185.148.47.122200 OK 16 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/wreport_wcm.js
IP 185.148.47.122:0
Hash 9651054b2444f8fe591c9b85bd6ae980
b9514deda0218b7260e66f1a33691b173953ff99
3c48dc566509150c012792896658c27708be714c784a963b59c006f12aa98e6b
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/wreport_wcm.js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 15976
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/e1e16f7b41.js
185.148.47.122200 OK 16 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/e1e16f7b41.js
IP 185.148.47.122:0
File type C source, ASCII text, with very long lines (1208), with CRLF, LF line terminators
Hash bcacd6d453dd67ef9e92b9f9893bb353
e403b2a56f7d55a8c05ede17f3d2e4be3df4eb34
9666caeaefd48f9fc3f7eb0c88be6773faf50aab09e0951627dc2d446de95cf1
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/e1e16f7b41.js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 16497
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/base.min.99f35a940b6f6915d544e01fa9d9b267.css
185.148.47.122200 OK 250 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/base.min.99f35a940b6f6915d544e01fa9d9b267.css
IP 185.148.47.122:0
File type Unicode text, UTF-8 text, with very long lines (6430)
Size 250 kB (249629 bytes)
Hash 99f35a940b6f6915d544e01fa9d9b267
463a95c05ba399676fbafd776aebd55a83420169
2a04136959aa344e6ad1330b618f67e30c693b317cf51b6979461adb4d556881
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/base.min.99f35a940b6f6915d544e01fa9d9b267.css HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 249629
content-type: text/css
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/bat.js
185.148.47.122200 OK 39 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/bat.js
IP 185.148.47.122:0
File type Unicode text, UTF-8 text, with very long lines (38764), with no line terminators
Hash 1e22c535c1b8c0348229033b4be00c89
3259cebb506844bfed82fe8e4750cbf44ca762fd
0fcff9391b8f4560e9bc64c28dcd9101f66de7b93676ea8cc254980567f663db
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/bat.js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 38765
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/uwt.js
185.148.47.122200 OK 57 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/uwt.js
IP 185.148.47.122:0
File type ASCII text, with very long lines (56812), with no line terminators
Hash f345fa1999011d396bda3b2c6fafc302
fa808cef0022b9424af26f0ccef5c9b8f4920c15
aa6959acd3d64822ef7379e437fce6b84a5cd3169003e955e2fffbdb2526d086
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/uwt.js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 56812
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/oct.js
185.148.47.122200 OK 57 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/oct.js
IP 185.148.47.122:0
File type ASCII text, with very long lines (56812), with no line terminators
Hash f345fa1999011d396bda3b2c6fafc302
fa808cef0022b9424af26f0ccef5c9b8f4920c15
aa6959acd3d64822ef7379e437fce6b84a5cd3169003e955e2fffbdb2526d086
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/oct.js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 56812
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/il_transverse_warning.svg
185.148.47.122200 OK 1.1 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/il_transverse_warning.svg
IP 185.148.47.122:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1080), with no line terminators
Hash 637279a6462b76380a178c06d671be2b
b7806d47e23b1cd053edafb51d132562ccb9d0bb
e0a4ab4859b5035345fb3b53608a603464851a10273af55f9f126cc888efd013
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/il_transverse_warning.svg HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 1080
content-type: image/svg+xml
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/f.txt
185.148.47.122200 OK 13 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/f.txt
IP 185.148.47.122:0
File type ASCII text, with very long lines (1711), with CRLF, LF line terminators
Hash 0e9ad44fbf24aac45c7a0ed54222ab69
a60d58b73b59af6b32efcd42e1ee47ff36ee4f1e
a97c78480058db96b30c04900ddb6ef9c954a4d564e1fec6d37bb31b663af5ef
GET /bpostale-business/78647/asset/f.txt HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 40004
content-type: text/plain
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/common/log.js
185.148.47.122200 OK 809 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/common/log.js
IP 185.148.47.122:0
File type ASCII text, with CRLF line terminators
Hash 328c86d0609cc4ff605a27a4a15932c8
b583e3af1917a4155e58ea82de877ad9aaf4d8e0
43e418706d06ccd4aa1e92ce8537789e751ab0d0af1b7ca7cb7e2ad08bbed87f
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/common/log.js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 809
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/base.min.js
185.148.47.122200 OK 568 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/base.min.js
IP 185.148.47.122:0
File type ASCII text, with very long lines (671)
Size 568 kB (568020 bytes)
Hash 0b48d4fd8309020af92e5e069e576243
542ad96d5af421fc625a4d55d2b88d16b3b0e339
392bc3abc5b93e4e42364a2a0e8da30e7a2270cbbbed472b2dc737ec3f57dfb7
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/base.min.js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 568020
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
cstatic.weborama.fr/iframe/sync.html?key=ids_sync&wamid=&src=wamf.laposte.js&ref=dev.awit.ae&d.r=1668839305100
93.184.221.133200 OK 207 B URL HTTP/2 cstatic.weborama.fr/iframe/sync.html?key=ids_sync&wamid=&src=wamf.laposte.js&ref=dev.awit.ae&d.r=1668839305100
IP 93.184.221.133:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 156d13a9471aa8d01e8aafd7330dc5b1
99dfd9a28e98032e6e6d510f32e4ddb1ddac4343
1b6f17ea3e1cbc6b005b2c76299fb8fa1832119d8fe5386f019125ee5b44a9a4
GET /iframe/sync.html?key=ids_sync&wamid=&src=wamf.laposte.js&ref=dev.awit.ae&d.r=1668839305100 HTTP/1.1
Host: cstatic.weborama.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 108235
cache-control: max-age=604800
content-type: text/html
date: Sat, 19 Nov 2022 06:28:27 GMT
etag: "282943589+gzip"
expires: Sat, 26 Nov 2022 06:28:27 GMT
last-modified: Mon, 20 Sep 2021 08:52:49 GMT
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
server: ECAcc (ska/F775)
vary: Accept-Encoding
x-cache: HIT
content-length: 207
X-Firefox-Spdy: h2
cstatic.weborama.fr/iframe/external_libs.v2.js
93.184.221.133200 OK 3.1 kB URL HTTP/2 cstatic.weborama.fr/iframe/external_libs.v2.js
IP 93.184.221.133:0
File type ASCII text, with very long lines (8579), with no line terminators
Hash 7671f8fcc99aee9ca8ab26ca1e2fde9e
a4fe9860d1c1fe5f65f8de511754dc3570a90592
f05e772820ca83b004d5d5e21fda87b97cd68c847c62868fc9cf882203ee2d63
GET /iframe/external_libs.v2.js HTTP/1.1
Host: cstatic.weborama.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cstatic.weborama.fr/iframe/sync.html?key=ids_sync&wamid=&src=wamf.laposte.js&ref=dev.awit.ae&d.r=1668839305100
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 108213
cache-control: max-age=604800
content-type: text/javascript
date: Sat, 19 Nov 2022 06:28:27 GMT
etag: "3142978827+gzip"
expires: Sat, 26 Nov 2022 06:28:27 GMT
last-modified: Mon, 20 Sep 2021 08:52:49 GMT
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
server: ECAcc (ska/F68B)
vary: Accept-Encoding
x-cache: HIT
content-length: 3062
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/js
185.148.47.122200 OK 113 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/js
IP 185.148.47.122:0
File type ASCII text, with very long lines (1596)
Size 113 kB (112871 bytes)
Hash 51eff1cfd3cdea90c684879fc34b7c67
ffddf212c324e0f20e22fbd91a3f579792e94e6b
2dbe5c3cfe5f6186a989ba98fc5633cce232e5f10534d9d9b3b00ba0fe6cb588
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 112871
date: Sat, 19 Nov 2022 06:28:27 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/f(1).txt
185.148.47.122200 OK 2.5 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/f(1).txt
IP 185.148.47.122:0
File type ASCII text, with very long lines (2528), with no line terminators
Hash dd6ec2b5a3faa242ea485860b816b700
2d30a92ce951529fa4b37c0878508a00ff9b9f26
5c9ebe95ffc8bc39c114c23ceb7aeaba5b2e7eb40ab550c03d17d1853689f37c
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/f(1).txt HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 2528
content-type: text/plain
date: Sat, 19 Nov 2022 06:28:27 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/ill_citoyenne.svg
185.148.47.122200 OK 3.9 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/ill_citoyenne.svg
IP 185.148.47.122:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash adf40f7c3de86d4351ba2d6ef3397a14
a18b2add8bdff5d50ab40513cc053df646dfe044
8f4b49755057b59ce072a59784c7d93526dbf07c1846a0cdffed3bf706a11dac
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /bpostale-business/78647/asset/ill_citoyenne.svg HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 3903
content-type: image/svg+xml
date: Sat, 19 Nov 2022 06:28:27 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 17af07b019100dc8adb529ce85f827bd
602adaa722e9a3ee89600ebe40cea7033c435483
aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7192
Expires: Sat, 19 Nov 2022 08:28:20 GMT
Date: Sat, 19 Nov 2022 06:28:28 GMT
Connection: keep-alive
dev.awit.ae/etc.clientlibs/labanquepostale/commons/clientlibs/designsystem/base/resources/svg-icons.svg
185.148.47.122404 Not Found 68 kB URL HTTP/2 dev.awit.ae/etc.clientlibs/labanquepostale/commons/clientlibs/designsystem/base/resources/svg-icons.svg
IP 185.148.47.122:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9381), with CRLF, LF line terminators
Hash dfe6f49360d988f2afc9b9e703052f70
d14c146f9752c59bc564e1530c55a044b6f7b9ef
6d9ca8ff6c4d6ee95e95f6330c5e6db41de0206535e7c72727883a08eb8e2159
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/labanquepostale/commons/clientlibs/designsystem/base/resources/svg-icons.svg HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
x-cache-handler: a2opt-cache-engine
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://dev.awit.ae/wp-json/>; rel="https://api.w.org/"
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-type: text/html; charset=UTF-8
date: Sat, 19 Nov 2022 06:28:27 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 17af07b019100dc8adb529ce85f827bd
602adaa722e9a3ee89600ebe40cea7033c435483
aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7192
Expires: Sat, 19 Nov 2022 08:28:20 GMT
Date: Sat, 19 Nov 2022 06:28:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 17af07b019100dc8adb529ce85f827bd
602adaa722e9a3ee89600ebe40cea7033c435483
aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7192
Expires: Sat, 19 Nov 2022 08:28:20 GMT
Date: Sat, 19 Nov 2022 06:28:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 17af07b019100dc8adb529ce85f827bd
602adaa722e9a3ee89600ebe40cea7033c435483
aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7192
Expires: Sat, 19 Nov 2022 08:28:20 GMT
Date: Sat, 19 Nov 2022 06:28:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f6118fc03f31862ff68fef8a2b9a7f
318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73
cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f3c55266-9b03-4b7f-b076-fdf56704318e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QQyECioAMFzdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6b-3e10cef6117a10a4115cfce7;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9FO1gkdftjvJFDvAlxwLD63BP-liwnS2MImVhVdjg83wi4xJdM73Kg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 31923
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141ee43e-4742-4784-a9a2-359cfa7ac9a3.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141ee43e-4742-4784-a9a2-359cfa7ac9a3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 859348e84041e7934b7f959f087a3679
583310946175391015cb46fcfa476cca96ebb9a9
7fba6813b2d8f06a6098b2c628580190b094c79e300744506344a3febc5f06de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141ee43e-4742-4784-a9a2-359cfa7ac9a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9681
x-amzn-requestid: 73f28d59-8922-473c-9977-df0c39f9cc6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ3t-FC1oAMFQdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d6cbf-6607d2be74559f1d3448dab7;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 21:27:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: aXtuckvPNMzB0frJPAOosiNpmhd_VNb4RHUj8fVkZjVtDxRXwoU33w==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 20:18:57 GMT
age: 36571
etag: "583310946175391015cb46fcfa476cca96ebb9a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b834de670098398062ac06865cfa82a4
6b50f4fdc7d7dcbb11d8739b71e8e1eecec047b4
9eefe7101330de28d8d0fdb3f17a5453f3368324fbacb9f3a36826f76b7c9bde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5226
x-amzn-requestid: c0655cd4-83f6-4c7c-97b6-2847f38df126
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRwFPwoAMFV5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa71-5f7eca026395cbe72daed116;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:41 GMT
x-amz-cf-pop: SEA19-C3, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gSAFmiB37Xf-Ytu7_BEwytLEY9rflh0ruTy-mU3vHQlS9Amx90qUcg==
via: 1.1 2c6b5dd77f1abe60653ce0454f344b64.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 31923
etag: "6b50f4fdc7d7dcbb11d8739b71e8e1eecec047b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa85a710b-15b8-4e56-ab1e-15b8ca200023.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa85a710b-15b8-4e56-ab1e-15b8ca200023.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8870858ed5cc8a6dc3571374c83495cc
253ef3291eee18d2b2bf6f9becea014aaf5331dc
3f5d637a77e1a430a3b3a06303814c9a28de0db8e79e3a6c5f6c650c43799ffc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa85a710b-15b8-4e56-ab1e-15b8ca200023.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12117
x-amzn-requestid: d4d233be-1313-4dd6-bca2-460ed86a7a9c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brWa-GXloAMFivA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63746aac-0ed94eed1b21daff2d9fc3ed;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 04:44:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9fq8bFv29s6VQk85rBCQaR3EssHFe5fzb5UH3KymwlUiVC37mFjHrw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 68375
etag: "253ef3291eee18d2b2bf6f9becea014aaf5331dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg
34.120.237.76200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 459df915ce91b32b2dcc4850516d68a0
d7a5473d367e7965a4af55acbf4675ed7088fab2
a03e26ebee79ad9b9dda1bf680e0d2467ae6d5e582589ada9fe6ddfa437c483c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4851
x-amzn-requestid: 8c868655-d0eb-428d-9fc0-a7449f770bd4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brtDFF9HoAMFV9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748ee0-4f7daf8f7451dc5e0840f620;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:18:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xirMw5z5GPbmx9Sii_I4iNeh1GS5k9lGmaaJvUGAPWoVyP0Tldhf1w==
via: 1.1 e9ba0a9a729ff2960a04323bf1833df8.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 07:22:04 GMT
age: 83184
etag: "d7a5473d367e7965a4af55acbf4675ed7088fab2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e1d1acd-0ae6-485d-9dd4-2c0c8271a9d3.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e1d1acd-0ae6-485d-9dd4-2c0c8271a9d3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 11bb9d337001b4d155c63b05a0dd9945
14de1c48a2fe80b5947945c9ffa9630f03c5447a
8ee6d3a2f6dec36c49361ef855edeb170e92fbeff29d2ed77c7fd0cf44cfecf5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e1d1acd-0ae6-485d-9dd4-2c0c8271a9d3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9146
x-amzn-requestid: e42f040e-a2f9-4538-bbaf-f1e64719f424
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brsmpGr5oAMFsmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748e2a-15b03190049271db549b1770;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:15:54 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: OjQm2RW65ZJDsUNay0untDwlufnFhXHwbpfAnCwEK3seEDiPIKrnfQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 07:44:01 GMT
age: 81867
etag: "14de1c48a2fe80b5947945c9ffa9630f03c5447a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c2fe75458a179936a385aaed1f6cf377
dea5edeb6e65804dd2e310686a33b51251b7290d
09af04b0d97e216f820891417a1f7a41c4a7c4850c5c77c308ba7af1d7d03f53
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2491
Cache-Control: max-age=156748
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:28:28 GMT
Etag: "63782f1d-1d7"
Expires: Mon, 21 Nov 2022 02:00:56 GMT
Last-Modified: Sat, 19 Nov 2022 01:19:25 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d6f746e338753036d3ce682de8c89153
f81c3fe5356448cdc073753f154bc99f93eb723b
2b5b9132c4a91f2ffb426f0ef11ca8feef8c7316311f25f7b03a5da84a8f8cd9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4061
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:28:28 GMT
Last-Modified: Sat, 19 Nov 2022 05:20:47 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/getuid?//its.tradelab.fr/?type=tlsync&uuid2=$UID&callback=tl_sync
185.89.210.101307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?//its.tradelab.fr/?type=tlsync&uuid2=$UID&callback=tl_sync
IP 185.89.210.101:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?//its.tradelab.fr/?type=tlsync&uuid2=$UID&callback=tl_sync HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3F%2F%2Fits.tradelab.fr%2F%3Ftype%3Dtlsync%26uuid2%3D%24UID%26callback%3Dtl_sync
AN-X-Request-Uuid: a47e23d5-0c56-484b-9ba5-8c14197ee916
Set-Cookie: uuid2=1440691609480167721; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Feb-2023 06:28:28 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 953.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/getuid?//its.tradelab.fr/?type=convr&x=1&uuid2=$UID&cdata=%7B%22a%22%3A991000%2C%22l%22%3A%5B6129654%2C6129670%2C6129677%2C6129705%2C6140244%2C6140246%2C6140363%2C6141029%2C6205745%2C6205752%2C6205755%2C6205762%2C6220830%2C8124214%2C8124594%2C8124968%2C8124973%2C8125344%2C8141760%2C8141763%2C8141816%2C8141850%2C8141875%2C8141880%2C8141931%2C8141938%2C8176847%2C8176869%2C8176878%2C8178278%2C8178332%2C8217168%2C8239623%2C8245529%2C8245533%2C8245537%2C8245540%2C8260100%2C8445392%2C8505468%2C8505515%2C9271738%2C9271745%2C9271969%2C9272093%2C9272160%2C9272905%2C9408323%2C9408407%2C9408587%2C9408663%2C9408768%2C9511553%2C9611699%2C9611846%2C9683342%2C9683349%2C9719394%2C10005812%2C10226877%2C10226889%2C10226919%2C10244639%2C10381193%2C10480996%2C12967986%2C12968507%2C12968515%2C12968543%2C12968782%2C12968784%2C13104005%2C13259085%2C13477519%2C14058054%2C14058197%2C14058205%2C14058228%2C14069494%2C14069497%2C14069560%2C14069565%2C14069590%2C14069626%2C14074179%2C14112662%2C14130392%2C14212376%2C14212411%2C14212419%2C14212455%2C14212467%2C14212692%2C14212694%2C14570528%2C14570544%5D%2C%22i%22%3A1%2C%22c%22%3A7%2C%22t%22%3A%22h%22%2C%22m%22%3A%22null%22%2C%22vi%22%3A0%2C%22vc%22%3A0%2C%22hf%22%3A0%2C%22x%22%3A%7B%7D%7D&advid=2602146&xur=dev.awit.ae%2Fbpostale-business%2F78647%2F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A0%2C%22page_url%22%3A%22%22%2C%22dm%22%3A%22%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A0%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A0%2C%22curr_vis_ts%22%3A1668839305%2C%22total_page_cnt%22%3A0%2C%22prev_page_cnt%22%3A0%2C%22curr_page_cnt%22%3A1%7D%7D
185.89.210.101307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?//its.tradelab.fr/?type=convr&x=1&uuid2=$UID&cdata=%7B%22a%22%3A991000%2C%22l%22%3A%5B6129654%2C6129670%2C6129677%2C6129705%2C6140244%2C6140246%2C6140363%2C6141029%2C6205745%2C6205752%2C6205755%2C6205762%2C6220830%2C8124214%2C8124594%2C8124968%2C8124973%2C8125344%2C8141760%2C8141763%2C8141816%2C8141850%2C8141875%2C8141880%2C8141931%2C8141938%2C8176847%2C8176869%2C8176878%2C8178278%2C8178332%2C8217168%2C8239623%2C8245529%2C8245533%2C8245537%2C8245540%2C8260100%2C8445392%2C8505468%2C8505515%2C9271738%2C9271745%2C9271969%2C9272093%2C9272160%2C9272905%2C9408323%2C9408407%2C9408587%2C9408663%2C9408768%2C9511553%2C9611699%2C9611846%2C9683342%2C9683349%2C9719394%2C10005812%2C10226877%2C10226889%2C10226919%2C10244639%2C10381193%2C10480996%2C12967986%2C12968507%2C12968515%2C12968543%2C12968782%2C12968784%2C13104005%2C13259085%2C13477519%2C14058054%2C14058197%2C14058205%2C14058228%2C14069494%2C14069497%2C14069560%2C14069565%2C14069590%2C14069626%2C14074179%2C14112662%2C14130392%2C14212376%2C14212411%2C14212419%2C14212455%2C14212467%2C14212692%2C14212694%2C14570528%2C14570544%5D%2C%22i%22%3A1%2C%22c%22%3A7%2C%22t%22%3A%22h%22%2C%22m%22%3A%22null%22%2C%22vi%22%3A0%2C%22vc%22%3A0%2C%22hf%22%3A0%2C%22x%22%3A%7B%7D%7D&advid=2602146&xur=dev.awit.ae%2Fbpostale-business%2F78647%2F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A0%2C%22page_url%22%3A%22%22%2C%22dm%22%3A%22%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A0%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A0%2C%22curr_vis_ts%22%3A1668839305%2C%22total_page_cnt%22%3A0%2C%22prev_page_cnt%22%3A0%2C%22curr_page_cnt%22%3A1%7D%7D
IP 185.89.210.101:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?//its.tradelab.fr/?type=convr&x=1&uuid2=$UID&cdata=%7B%22a%22%3A991000%2C%22l%22%3A%5B6129654%2C6129670%2C6129677%2C6129705%2C6140244%2C6140246%2C6140363%2C6141029%2C6205745%2C6205752%2C6205755%2C6205762%2C6220830%2C8124214%2C8124594%2C8124968%2C8124973%2C8125344%2C8141760%2C8141763%2C8141816%2C8141850%2C8141875%2C8141880%2C8141931%2C8141938%2C8176847%2C8176869%2C8176878%2C8178278%2C8178332%2C8217168%2C8239623%2C8245529%2C8245533%2C8245537%2C8245540%2C8260100%2C8445392%2C8505468%2C8505515%2C9271738%2C9271745%2C9271969%2C9272093%2C9272160%2C9272905%2C9408323%2C9408407%2C9408587%2C9408663%2C9408768%2C9511553%2C9611699%2C9611846%2C9683342%2C9683349%2C9719394%2C10005812%2C10226877%2C10226889%2C10226919%2C10244639%2C10381193%2C10480996%2C12967986%2C12968507%2C12968515%2C12968543%2C12968782%2C12968784%2C13104005%2C13259085%2C13477519%2C14058054%2C14058197%2C14058205%2C14058228%2C14069494%2C14069497%2C14069560%2C14069565%2C14069590%2C14069626%2C14074179%2C14112662%2C14130392%2C14212376%2C14212411%2C14212419%2C14212455%2C14212467%2C14212692%2C14212694%2C14570528%2C14570544%5D%2C%22i%22%3A1%2C%22c%22%3A7%2C%22t%22%3A%22h%22%2C%22m%22%3A%22null%22%2C%22vi%22%3A0%2C%22vc%22%3A0%2C%22hf%22%3A0%2C%22x%22%3A%7B%7D%7D&advid=2602146&xur=dev.awit.ae%2Fbpostale-business%2F78647%2F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A0%2C%22page_url%22%3A%22%22%2C%22dm%22%3A%22%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A0%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A0%2C%22curr_vis_ts%22%3A1668839305%2C%22total_page_cnt%22%3A0%2C%22prev_page_cnt%22%3A0%2C%22curr_page_cnt%22%3A1%7D%7D HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3F%2F%2Fits.tradelab.fr%2F%3Ftype%3Dconvr%26x%3D1%26uuid2%3D%24UID%26cdata%3D%257B%2522a%2522%253A991000%252C%2522l%2522%253A%255B6129654%252C6129670%252C6129677%252C6129705%252C6140244%252C6140246%252C6140363%252C6141029%252C6205745%252C6205752%252C6205755%252C6205762%252C6220830%252C8124214%252C8124594%252C8124968%252C8124973%252C8125344%252C8141760%252C8141763%252C8141816%252C8141850%252C8141875%252C8141880%252C8141931%252C8141938%252C8176847%252C8176869%252C8176878%252C8178278%252C8178332%252C8217168%252C8239623%252C8245529%252C8245533%252C8245537%252C8245540%252C8260100%252C8445392%252C8505468%252C8505515%252C9271738%252C9271745%252C9271969%252C9272093%252C9272160%252C9272905%252C9408323%252C9408407%252C9408587%252C9408663%252C9408768%252C9511553%252C9611699%252C9611846%252C9683342%252C9683349%252C9719394%252C10005812%252C10226877%252C10226889%252C10226919%252C10244639%252C10381193%252C10480996%252C12967986%252C12968507%252C12968515%252C12968543%252C12968782%252C12968784%252C13104005%252C13259085%252C13477519%252C14058054%252C14058197%252C14058205%252C14058228%252C14069494%252C14069497%252C14069560%252C14069565%252C14069590%252C14069626%252C14074179%252C14112662%252C14130392%252C14212376%252C14212411%252C14212419%252C14212455%252C14212467%252C14212692%252C14212694%252C14570528%252C14570544%255D%252C%2522i%2522%253A1%252C%2522c%2522%253A7%252C%2522t%2522%253A%2522h%2522%252C%2522m%2522%253A%2522null%2522%252C%2522vi%2522%253A0%252C%2522vc%2522%253A0%252C%2522hf%2522%253A0%252C%2522x%2522%253A%257B%257D%257D%26advid%3D2602146%26xur%3Ddev.awit.ae%252Fbpostale-business%252F78647%252F%26adata%3D%257B%2522c%2522%253A%257B%2522ref_url%2522%253A%2522%2522%252C%2522ref_ts%2522%253A0%252C%2522page_url%2522%253A%2522%2522%252C%2522dm%2522%253A%2522%2522%257D%252C%2522v%2522%253A%257B%2522vis_cnt%2522%253A0%252C%2522frst_vis_ts%2522%253A1668839305%252C%2522prev_vis_ts%2522%253A0%252C%2522curr_vis_ts%2522%253A1668839305%252C%2522total_page_cnt%2522%253A0%252C%2522prev_page_cnt%2522%253A0%252C%2522curr_page_cnt%2522%253A1%257D%257D
AN-X-Request-Uuid: 19b6bb9c-b9cc-4ee9-a18c-f6f3a7e08f72
Set-Cookie: uuid2=7624427740146586264; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Feb-2023 06:28:28 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 953.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/px?id=991001&t=2
185.89.211.12307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/px?id=991001&t=2
IP 185.89.211.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px?id=991001&t=2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://secure.adnxs.com/bounce?%2Fpx%3Fid%3D991001%26t%3D2
AN-X-Request-Uuid: c1b29d8e-55c8-4e67-8e9e-fe65a97f8663
Set-Cookie: uuid2=6101418001394723185; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Feb-2023 06:28:28 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 947.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/px?id=991000&t=2
185.89.211.12307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/px?id=991000&t=2
IP 185.89.211.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px?id=991000&t=2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://secure.adnxs.com/bounce?%2Fpx%3Fid%3D991000%26t%3D2
AN-X-Request-Uuid: a8096fae-a886-4af1-b846-cadec999b85e
Set-Cookie: uuid2=5499231614421530883; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Feb-2023 06:28:28 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 947.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
dev.awit.ae/bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Bold.woff
185.148.47.122404 Not Found 68 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Bold.woff
IP 185.148.47.122:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9381), with CRLF, LF line terminators
Hash 2a16b5fad3f8e6bf3d669205c512c89e
6f7482a075dee7393819463134b91dee98b3fa58
1444822bbcc9331f57e51a3de6d7888dee9f476e211003a9df09157ee704bd21
GET /bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Bold.woff HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/asset/base-fonts.min.a7e7927fdac70bd77ee0c5330bedd24b.css
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
x-cache-handler: a2opt-cache-engine
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://dev.awit.ae/wp-json/>; rel="https://api.w.org/"
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-type: text/html; charset=UTF-8
date: Sat, 19 Nov 2022 06:28:28 GMT
server: Apache
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3F%2F%2Fits.tradelab.fr%2F%3Ftype%3Dconvr%26x%3D1%26uuid2%3D%24UID%26cdata%3D%257B%2522a%2522%253A991000%252C%2522l%2522%253A%255B6129654%252C6129670%252C6129677%252C6129705%252C6140244%252C6140246%252C6140363%252C6141029%252C6205745%252C6205752%252C6205755%252C6205762%252C6220830%252C8124214%252C8124594%252C8124968%252C8124973%252C8125344%252C8141760%252C8141763%252C8141816%252C8141850%252C8141875%252C8141880%252C8141931%252C8141938%252C8176847%252C8176869%252C8176878%252C8178278%252C8178332%252C8217168%252C8239623%252C8245529%252C8245533%252C8245537%252C8245540%252C8260100%252C8445392%252C8505468%252C8505515%252C9271738%252C9271745%252C9271969%252C9272093%252C9272160%252C9272905%252C9408323%252C9408407%252C9408587%252C9408663%252C9408768%252C9511553%252C9611699%252C9611846%252C9683342%252C9683349%252C9719394%252C10005812%252C10226877%252C10226889%252C10226919%252C10244639%252C10381193%252C10480996%252C12967986%252C12968507%252C12968515%252C12968543%252C12968782%252C12968784%252C13104005%252C13259085%252C13477519%252C14058054%252C14058197%252C14058205%252C14058228%252C14069494%252C14069497%252C14069560%252C14069565%252C14069590%252C14069626%252C14074179%252C14112662%252C14130392%252C14212376%252C14212411%252C14212419%252C14212455%252C14212467%252C14212692%252C14212694%252C14570528%252C14570544%255D%252C%2522i%2522%253A1%252C%2522c%2522%253A7%252C%2522t%2522%253A%2522h%2522%252C%2522m%2522%253A%2522null%2522%252C%2522vi%2522%253A0%252C%2522vc%2522%253A0%252C%2522hf%2522%253A0%252C%2522x%2522%253A%257B%257D%257D%26advid%3D2602146%26xur%3Ddev.awit.ae%252Fbpostale-business%252F78647%252F%26adata%3D%257B%2522c%2522%253A%257B%2522ref_url%2522%253A%2522%2522%252C%2522ref_ts%2522%253A0%252C%2522page_url%2522%253A%2522%2522%252C%2522dm%2522%253A%2522%2522%257D%252C%2522v%2522%253A%257B%2522vis_cnt%2522%253A0%252C%2522frst_vis_ts%2522%253A1668839305%252C%2522prev_vis_ts%2522%253A0%252C%2522curr_vis_ts%2522%253A1668839305%252C%2522total_page_cnt%2522%253A0%252C%2522prev_page_cnt%2522%253A0%252C%2522curr_page_cnt%2522%253A1%257D%257D
185.89.210.101302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3F%2F%2Fits.tradelab.fr%2F%3Ftype%3Dconvr%26x%3D1%26uuid2%3D%24UID%26cdata%3D%257B%2522a%2522%253A991000%252C%2522l%2522%253A%255B6129654%252C6129670%252C6129677%252C6129705%252C6140244%252C6140246%252C6140363%252C6141029%252C6205745%252C6205752%252C6205755%252C6205762%252C6220830%252C8124214%252C8124594%252C8124968%252C8124973%252C8125344%252C8141760%252C8141763%252C8141816%252C8141850%252C8141875%252C8141880%252C8141931%252C8141938%252C8176847%252C8176869%252C8176878%252C8178278%252C8178332%252C8217168%252C8239623%252C8245529%252C8245533%252C8245537%252C8245540%252C8260100%252C8445392%252C8505468%252C8505515%252C9271738%252C9271745%252C9271969%252C9272093%252C9272160%252C9272905%252C9408323%252C9408407%252C9408587%252C9408663%252C9408768%252C9511553%252C9611699%252C9611846%252C9683342%252C9683349%252C9719394%252C10005812%252C10226877%252C10226889%252C10226919%252C10244639%252C10381193%252C10480996%252C12967986%252C12968507%252C12968515%252C12968543%252C12968782%252C12968784%252C13104005%252C13259085%252C13477519%252C14058054%252C14058197%252C14058205%252C14058228%252C14069494%252C14069497%252C14069560%252C14069565%252C14069590%252C14069626%252C14074179%252C14112662%252C14130392%252C14212376%252C14212411%252C14212419%252C14212455%252C14212467%252C14212692%252C14212694%252C14570528%252C14570544%255D%252C%2522i%2522%253A1%252C%2522c%2522%253A7%252C%2522t%2522%253A%2522h%2522%252C%2522m%2522%253A%2522null%2522%252C%2522vi%2522%253A0%252C%2522vc%2522%253A0%252C%2522hf%2522%253A0%252C%2522x%2522%253A%257B%257D%257D%26advid%3D2602146%26xur%3Ddev.awit.ae%252Fbpostale-business%252F78647%252F%26adata%3D%257B%2522c%2522%253A%257B%2522ref_url%2522%253A%2522%2522%252C%2522ref_ts%2522%253A0%252C%2522page_url%2522%253A%2522%2522%252C%2522dm%2522%253A%2522%2522%257D%252C%2522v%2522%253A%257B%2522vis_cnt%2522%253A0%252C%2522frst_vis_ts%2522%253A1668839305%252C%2522prev_vis_ts%2522%253A0%252C%2522curr_vis_ts%2522%253A1668839305%252C%2522total_page_cnt%2522%253A0%252C%2522prev_page_cnt%2522%253A0%252C%2522curr_page_cnt%2522%253A1%257D%257D
IP 185.89.210.101:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3F%2F%2Fits.tradelab.fr%2F%3Ftype%3Dconvr%26x%3D1%26uuid2%3D%24UID%26cdata%3D%257B%2522a%2522%253A991000%252C%2522l%2522%253A%255B6129654%252C6129670%252C6129677%252C6129705%252C6140244%252C6140246%252C6140363%252C6141029%252C6205745%252C6205752%252C6205755%252C6205762%252C6220830%252C8124214%252C8124594%252C8124968%252C8124973%252C8125344%252C8141760%252C8141763%252C8141816%252C8141850%252C8141875%252C8141880%252C8141931%252C8141938%252C8176847%252C8176869%252C8176878%252C8178278%252C8178332%252C8217168%252C8239623%252C8245529%252C8245533%252C8245537%252C8245540%252C8260100%252C8445392%252C8505468%252C8505515%252C9271738%252C9271745%252C9271969%252C9272093%252C9272160%252C9272905%252C9408323%252C9408407%252C9408587%252C9408663%252C9408768%252C9511553%252C9611699%252C9611846%252C9683342%252C9683349%252C9719394%252C10005812%252C10226877%252C10226889%252C10226919%252C10244639%252C10381193%252C10480996%252C12967986%252C12968507%252C12968515%252C12968543%252C12968782%252C12968784%252C13104005%252C13259085%252C13477519%252C14058054%252C14058197%252C14058205%252C14058228%252C14069494%252C14069497%252C14069560%252C14069565%252C14069590%252C14069626%252C14074179%252C14112662%252C14130392%252C14212376%252C14212411%252C14212419%252C14212455%252C14212467%252C14212692%252C14212694%252C14570528%252C14570544%255D%252C%2522i%2522%253A1%252C%2522c%2522%253A7%252C%2522t%2522%253A%2522h%2522%252C%2522m%2522%253A%2522null%2522%252C%2522vi%2522%253A0%252C%2522vc%2522%253A0%252C%2522hf%2522%253A0%252C%2522x%2522%253A%257B%257D%257D%26advid%3D2602146%26xur%3Ddev.awit.ae%252Fbpostale-business%252F78647%252F%26adata%3D%257B%2522c%2522%253A%257B%2522ref_url%2522%253A%2522%2522%252C%2522ref_ts%2522%253A0%252C%2522page_url%2522%253A%2522%2522%252C%2522dm%2522%253A%2522%2522%257D%252C%2522v%2522%253A%257B%2522vis_cnt%2522%253A0%252C%2522frst_vis_ts%2522%253A1668839305%252C%2522prev_vis_ts%2522%253A0%252C%2522curr_vis_ts%2522%253A1668839305%252C%2522total_page_cnt%2522%253A0%252C%2522prev_page_cnt%2522%253A0%252C%2522curr_page_cnt%2522%253A1%257D%257D HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: //its.tradelab.fr/?type=convr&x=1&uuid2=0&cdata={"a":991000,"l":[6129654,6129670,6129677,6129705,6140244,6140246,6140363,6141029,6205745,6205752,6205755,6205762,6220830,8124214,8124594,8124968,8124973,8125344,8141760,8141763,8141816,8141850,8141875,8141880,8141931,8141938,8176847,8176869,8176878,8178278,8178332,8217168,8239623,8245529,8245533,8245537,8245540,8260100,8445392,8505468,8505515,9271738,9271745,9271969,9272093,9272160,9272905,9408323,9408407,9408587,9408663,9408768,9511553,9611699,9611846,9683342,9683349,9719394,10005812,10226877,10226889,10226919,10244639,10381193,10480996,12967986,12968507,12968515,12968543,12968782,12968784,13104005,13259085,13477519,14058054,14058197,14058205,14058228,14069494,14069497,14069560,14069565,14069590,14069626,14074179,14112662,14130392,14212376,14212411,14212419,14212455,14212467,14212692,14212694,14570528,14570544],"i":1,"c":7,"t":"h","m":"null","vi":0,"vc":0,"hf":0,"x":{}}&advid=2602146&xur=dev.awit.ae/bpostale-business/78647/&adata={"c":{"ref_url":"","ref_ts":0,"page_url":"","dm":""},"v":{"vis_cnt":0,"frst_vis_ts":1668839305,"prev_vis_ts":0,"curr_vis_ts":1668839305,"total_page_cnt":0,"prev_page_cnt":0,"curr_page_cnt":1}}
AN-X-Request-Uuid: 2f19cf41-d65d-49d9-8ed1-f0fb92cedda0
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 953.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/bounce?%2Fpx%3Fid%3D991001%26t%3D2
185.89.211.12200 OK 43 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fpx%3Fid%3D991001%26t%3D2
IP 185.89.211.12:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fpx%3Fid%3D991001%26t%3D2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:28 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: d20d4ae1-694f-44f3-8dbb-2aeba9a8c0d5
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 947.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/bounce?%2Fpx%3Fid%3D991000%26t%3D2
185.89.211.12200 OK 43 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fpx%3Fid%3D991000%26t%3D2
IP 185.89.211.12:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fpx%3Fid%3D991000%26t%3D2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:28 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 0f8267bf-52a1-47a2-a2ed-6946086e928d
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 947.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fgetuid%3F%2F%2Fits.tradelab.fr%2F%3Ftype%3Dtlsync%26uuid2%3D%24UID%26callback%3Dtl_sync
185.89.210.101302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3F%2F%2Fits.tradelab.fr%2F%3Ftype%3Dtlsync%26uuid2%3D%24UID%26callback%3Dtl_sync
IP 185.89.210.101:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3F%2F%2Fits.tradelab.fr%2F%3Ftype%3Dtlsync%26uuid2%3D%24UID%26callback%3Dtl_sync HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: //its.tradelab.fr/?type=tlsync&uuid2=0&callback=tl_sync
AN-X-Request-Uuid: 9155c7ee-36b0-437a-9220-d1e41fe2a935
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 953.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fgetuid%3F%2F%2Fits.tradelab.fr%2F%3Ftype%3Dconvr%26x%3D1%26uuid2%3D%24UID%26cdata%3D%257B%2522a%2522%253A991001%252C%2522l%2522%253A%255B6129654%252C6129670%252C6129677%252C6129705%252C6140244%252C6140246%252C6140363%252C6141029%252C6205745%252C6205752%252C6205755%252C6205762%252C6220830%252C8124214%252C8124594%252C8124968%252C8124973%252C8125344%252C8141760%252C8141763%252C8141816%252C8141850%252C8141875%252C8141880%252C8141931%252C8141938%252C8176847%252C8176869%252C8176878%252C8239623%252C8245529%252C8245533%252C8245537%252C8245540%252C8260100%252C8445392%252C8505468%252C8505515%252C9271738%252C9271745%252C9271969%252C9272093%252C9272160%252C9272905%252C9408323%252C9408407%252C9408587%252C9408663%252C9408768%252C9511553%252C9611699%252C9611846%252C9683342%252C9683349%252C9719394%252C10005812%252C10226877%252C10226889%252C10226919%252C10244639%252C10381193%252C10480996%252C12967986%252C12968507%252C12968515%252C12968543%252C12968782%252C12968784%252C13104005%252C13259085%252C13477519%252C14058054%252C14058197%252C14058205%252C14058228%252C14069494%252C14069497%252C14069560%252C14069565%252C14069590%252C14069626%252C14074179%252C14112662%252C14130392%252C14212376%252C14212411%252C14212419%252C14212455%252C14212467%252C14212692%252C14212694%252C14570528%252C14570544%255D%252C%2522i%2522%253A1%252C%2522c%2522%253A7%252C%2522t%2522%253A%2522h%2522%252C%2522m%2522%253A%2522null%2522%252C%2522vi%2522%253A0%252C%2522vc%2522%253A0%252C%2522hf%2522%253A0%252C%2522x%2522%253A%257B%257D%257D%26advid%3D2602146%26xur%3Ddev.awit.ae%252Fbpostale-business%252F78647%252F%26adata%3D%257B%2522c%2522%253A%257B%2522ref_url%2522%253A%2522%2522%252C%2522ref_ts%2522%253A0%252C%2522page_url%2522%253A%2522%2522%252C%2522dm%2522%253A%2522%2522%257D%252C%2522v%2522%253A%257B%2522vis_cnt%2522%253A0%252C%2522frst_vis_ts%2522%253A1668839305%252C%2522prev_vis_ts%2522%253A0%252C%2522curr_vis_ts%2522%253A1668839305%252C%2522total_page_cnt%2522%253A0%252C%2522prev_page_cnt%2522%253A0%252C%2522curr_page_cnt%2522%253A1%257D%257D
185.89.210.101302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3F%2F%2Fits.tradelab.fr%2F%3Ftype%3Dconvr%26x%3D1%26uuid2%3D%24UID%26cdata%3D%257B%2522a%2522%253A991001%252C%2522l%2522%253A%255B6129654%252C6129670%252C6129677%252C6129705%252C6140244%252C6140246%252C6140363%252C6141029%252C6205745%252C6205752%252C6205755%252C6205762%252C6220830%252C8124214%252C8124594%252C8124968%252C8124973%252C8125344%252C8141760%252C8141763%252C8141816%252C8141850%252C8141875%252C8141880%252C8141931%252C8141938%252C8176847%252C8176869%252C8176878%252C8239623%252C8245529%252C8245533%252C8245537%252C8245540%252C8260100%252C8445392%252C8505468%252C8505515%252C9271738%252C9271745%252C9271969%252C9272093%252C9272160%252C9272905%252C9408323%252C9408407%252C9408587%252C9408663%252C9408768%252C9511553%252C9611699%252C9611846%252C9683342%252C9683349%252C9719394%252C10005812%252C10226877%252C10226889%252C10226919%252C10244639%252C10381193%252C10480996%252C12967986%252C12968507%252C12968515%252C12968543%252C12968782%252C12968784%252C13104005%252C13259085%252C13477519%252C14058054%252C14058197%252C14058205%252C14058228%252C14069494%252C14069497%252C14069560%252C14069565%252C14069590%252C14069626%252C14074179%252C14112662%252C14130392%252C14212376%252C14212411%252C14212419%252C14212455%252C14212467%252C14212692%252C14212694%252C14570528%252C14570544%255D%252C%2522i%2522%253A1%252C%2522c%2522%253A7%252C%2522t%2522%253A%2522h%2522%252C%2522m%2522%253A%2522null%2522%252C%2522vi%2522%253A0%252C%2522vc%2522%253A0%252C%2522hf%2522%253A0%252C%2522x%2522%253A%257B%257D%257D%26advid%3D2602146%26xur%3Ddev.awit.ae%252Fbpostale-business%252F78647%252F%26adata%3D%257B%2522c%2522%253A%257B%2522ref_url%2522%253A%2522%2522%252C%2522ref_ts%2522%253A0%252C%2522page_url%2522%253A%2522%2522%252C%2522dm%2522%253A%2522%2522%257D%252C%2522v%2522%253A%257B%2522vis_cnt%2522%253A0%252C%2522frst_vis_ts%2522%253A1668839305%252C%2522prev_vis_ts%2522%253A0%252C%2522curr_vis_ts%2522%253A1668839305%252C%2522total_page_cnt%2522%253A0%252C%2522prev_page_cnt%2522%253A0%252C%2522curr_page_cnt%2522%253A1%257D%257D
IP 185.89.210.101:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3F%2F%2Fits.tradelab.fr%2F%3Ftype%3Dconvr%26x%3D1%26uuid2%3D%24UID%26cdata%3D%257B%2522a%2522%253A991001%252C%2522l%2522%253A%255B6129654%252C6129670%252C6129677%252C6129705%252C6140244%252C6140246%252C6140363%252C6141029%252C6205745%252C6205752%252C6205755%252C6205762%252C6220830%252C8124214%252C8124594%252C8124968%252C8124973%252C8125344%252C8141760%252C8141763%252C8141816%252C8141850%252C8141875%252C8141880%252C8141931%252C8141938%252C8176847%252C8176869%252C8176878%252C8239623%252C8245529%252C8245533%252C8245537%252C8245540%252C8260100%252C8445392%252C8505468%252C8505515%252C9271738%252C9271745%252C9271969%252C9272093%252C9272160%252C9272905%252C9408323%252C9408407%252C9408587%252C9408663%252C9408768%252C9511553%252C9611699%252C9611846%252C9683342%252C9683349%252C9719394%252C10005812%252C10226877%252C10226889%252C10226919%252C10244639%252C10381193%252C10480996%252C12967986%252C12968507%252C12968515%252C12968543%252C12968782%252C12968784%252C13104005%252C13259085%252C13477519%252C14058054%252C14058197%252C14058205%252C14058228%252C14069494%252C14069497%252C14069560%252C14069565%252C14069590%252C14069626%252C14074179%252C14112662%252C14130392%252C14212376%252C14212411%252C14212419%252C14212455%252C14212467%252C14212692%252C14212694%252C14570528%252C14570544%255D%252C%2522i%2522%253A1%252C%2522c%2522%253A7%252C%2522t%2522%253A%2522h%2522%252C%2522m%2522%253A%2522null%2522%252C%2522vi%2522%253A0%252C%2522vc%2522%253A0%252C%2522hf%2522%253A0%252C%2522x%2522%253A%257B%257D%257D%26advid%3D2602146%26xur%3Ddev.awit.ae%252Fbpostale-business%252F78647%252F%26adata%3D%257B%2522c%2522%253A%257B%2522ref_url%2522%253A%2522%2522%252C%2522ref_ts%2522%253A0%252C%2522page_url%2522%253A%2522%2522%252C%2522dm%2522%253A%2522%2522%257D%252C%2522v%2522%253A%257B%2522vis_cnt%2522%253A0%252C%2522frst_vis_ts%2522%253A1668839305%252C%2522prev_vis_ts%2522%253A0%252C%2522curr_vis_ts%2522%253A1668839305%252C%2522total_page_cnt%2522%253A0%252C%2522prev_page_cnt%2522%253A0%252C%2522curr_page_cnt%2522%253A1%257D%257D HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: //its.tradelab.fr/?type=convr&x=1&uuid2=0&cdata={"a":991001,"l":[6129654,6129670,6129677,6129705,6140244,6140246,6140363,6141029,6205745,6205752,6205755,6205762,6220830,8124214,8124594,8124968,8124973,8125344,8141760,8141763,8141816,8141850,8141875,8141880,8141931,8141938,8176847,8176869,8176878,8239623,8245529,8245533,8245537,8245540,8260100,8445392,8505468,8505515,9271738,9271745,9271969,9272093,9272160,9272905,9408323,9408407,9408587,9408663,9408768,9511553,9611699,9611846,9683342,9683349,9719394,10005812,10226877,10226889,10226919,10244639,10381193,10480996,12967986,12968507,12968515,12968543,12968782,12968784,13104005,13259085,13477519,14058054,14058197,14058205,14058228,14069494,14069497,14069560,14069565,14069590,14069626,14074179,14112662,14130392,14212376,14212411,14212419,14212455,14212467,14212692,14212694,14570528,14570544],"i":1,"c":7,"t":"h","m":"null","vi":0,"vc":0,"hf":0,"x":{}}&advid=2602146&xur=dev.awit.ae/bpostale-business/78647/&adata={"c":{"ref_url":"","ref_ts":0,"page_url":"","dm":""},"v":{"vis_cnt":0,"frst_vis_ts":1668839305,"prev_vis_ts":0,"curr_vis_ts":1668839305,"total_page_cnt":0,"prev_page_cnt":0,"curr_page_cnt":1}}
AN-X-Request-Uuid: fab3bd6f-b387-4954-a342-9b75e510ca15
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 953.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
www.labanquepostale.fr/content/dam/lbp/favicon/LOGO-digital-fd-clair-RVB-blanc-32px.ico
185.16.252.161200 OK 2.1 kB URL HTTP/1.1 www.labanquepostale.fr/content/dam/lbp/favicon/LOGO-digital-fd-clair-RVB-blanc-32px.ico
IP 185.16.252.161:0
File type PC bitmap, Windows 3.x format, 32 x 32 x 8, image size 1024, resolution 3780 x 3780 px/m, cbSize 2102, bits offset 1078\012- data
Hash e09db732f49bc80f1343df16218657b9
515a45a2798beb4466403d03fa321c6b3c6dc06b
1039cd13a2a786952a5036f7ab41e2c695782028abafb8e9f4783a3e95da3b85
GET /content/dam/lbp/favicon/LOGO-digital-fd-clair-RVB-blanc-32px.ico HTTP/1.1
Host: www.labanquepostale.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-Dispatcher: dispatcher
X-Vhost: publish
Content-Disposition: attachment
X-Content-Type-Options: nosniff
Last-Modified: Wed, 18 May 2022 12:56:10 GMT
ETag: "836-5df48c8058e80"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Keep-Alive: timeout=5, max=52
Content-Type: image/x-icon
Connection: Keep-Alive
Date: Sat, 19 Nov 2022 06:28:28 GMT
Age: 32
Content-Length: 2102
ocsp.godaddy.com/
192.124.249.23200 OK 1.8 kB IP 192.124.249.23:0
Hash 99c0aeae6e1cbecbbb5ab337c8905a6a
967f96687d6d06a5cc4fcf64aedd69c4fbccbfde
9c7be0cece7487f2b5ac9063b8e54b78278a4ff7d4ad439289ab4a802013f22d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 19 Nov 2022 06:28:28 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 18 Nov 2022 19:53:18 GMT
Expires: Sat, 19 Nov 2022 19:53:18 GMT
ETag: "967f96687d6d06a5cc4fcf64aedd69c4fbccbfde"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
dev.awit.ae/bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Bold.ttf
185.148.47.122404 Not Found 69 kB URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Bold.ttf
IP 185.148.47.122:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9381), with CRLF, LF line terminators
Hash 2daab073eb43d242f61cd4a1092c373e
af74a27dbb3704ec47bdacf47c5f2c47c3c35d10
b49e0e70f2cb4a78ec23f04cdea5fea3b08b2f9e2259dc5674a822668e8dafc0
GET /bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Bold.ttf HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/asset/base-fonts.min.a7e7927fdac70bd77ee0c5330bedd24b.css
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
x-cache-handler: a2opt-cache-engine
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://dev.awit.ae/wp-json/>; rel="https://api.w.org/"
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-type: text/html; charset=UTF-8
date: Sat, 19 Nov 2022 06:28:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.23200 OK 1.8 kB IP 192.124.249.23:0
Hash 99c0aeae6e1cbecbbb5ab337c8905a6a
967f96687d6d06a5cc4fcf64aedd69c4fbccbfde
9c7be0cece7487f2b5ac9063b8e54b78278a4ff7d4ad439289ab4a802013f22d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 19 Nov 2022 06:28:28 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 18 Nov 2022 19:53:18 GMT
Expires: Sat, 19 Nov 2022 19:53:18 GMT
ETag: "967f96687d6d06a5cc4fcf64aedd69c4fbccbfde"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
its.tradelab.fr/?type=convr&x=1&uuid2=0&cdata={%22a%22:991001,%22l%22:[6129654,6129670,6129677,6129705,6140244,6140246,6140363,6141029,6205745,6205752,6205755,6205762,6220830,8124214,8124594,8124968,8124973,8125344,8141760,8141763,8141816,8141850,8141875,8141880,8141931,8141938,8176847,8176869,8176878,8239623,8245529,8245533,8245537,8245540,8260100,8445392,8505468,8505515,9271738,9271745,9271969,9272093,9272160,9272905,9408323,9408407,9408587,9408663,9408768,9511553,9611699,9611846,9683342,9683349,9719394,10005812,10226877,10226889,10226919,10244639,10381193,10480996,12967986,12968507,12968515,12968543,12968782,12968784,13104005,13259085,13477519,14058054,14058197,14058205,14058228,14069494,14069497,14069560,14069565,14069590,14069626,14074179,14112662,14130392,14212376,14212411,14212419,14212455,14212467,14212692,14212694,14570528,14570544],%22i%22:1,%22c%22:7,%22t%22:%22h%22,%22m%22:%22null%22,%22vi%22:0,%22vc%22:0,%22hf%22:0,%22x%22:{}}&advid=2602146&xur=dev.awit.ae/bpostale-business/78647/&adata={%22c%22:{%22ref_url%22:%22%22,%22ref_ts%22:0,%22page_url%22:%22%22,%22dm%22:%22%22},%22v%22:{%22vis_cnt%22:0,%22frst_vis_ts%22:1668839305,%22prev_vis_ts%22:0,%22curr_vis_ts%22:1668839305,%22total_page_cnt%22:0,%22prev_page_cnt%22:0,%22curr_page_cnt%22:1}}
62.212.64.230200 OK 43 B URL HTTP/1.1 its.tradelab.fr/?type=convr&x=1&uuid2=0&cdata={%22a%22:991001,%22l%22:[6129654,6129670,6129677,6129705,6140244,6140246,6140363,6141029,6205745,6205752,6205755,6205762,6220830,8124214,8124594,8124968,8124973,8125344,8141760,8141763,8141816,8141850,8141875,8141880,8141931,8141938,8176847,8176869,8176878,8239623,8245529,8245533,8245537,8245540,8260100,8445392,8505468,8505515,9271738,9271745,9271969,9272093,9272160,9272905,9408323,9408407,9408587,9408663,9408768,9511553,9611699,9611846,9683342,9683349,9719394,10005812,10226877,10226889,10226919,10244639,10381193,10480996,12967986,12968507,12968515,12968543,12968782,12968784,13104005,13259085,13477519,14058054,14058197,14058205,14058228,14069494,14069497,14069560,14069565,14069590,14069626,14074179,14112662,14130392,14212376,14212411,14212419,14212455,14212467,14212692,14212694,14570528,14570544],%22i%22:1,%22c%22:7,%22t%22:%22h%22,%22m%22:%22null%22,%22vi%22:0,%22vc%22:0,%22hf%22:0,%22x%22:{}}&advid=2602146&xur=dev.awit.ae/bpostale-business/78647/&adata={%22c%22:{%22ref_url%22:%22%22,%22ref_ts%22:0,%22page_url%22:%22%22,%22dm%22:%22%22},%22v%22:{%22vis_cnt%22:0,%22frst_vis_ts%22:1668839305,%22prev_vis_ts%22:0,%22curr_vis_ts%22:1668839305,%22total_page_cnt%22:0,%22prev_page_cnt%22:0,%22curr_page_cnt%22:1}}
IP 62.212.64.230:0
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 45cf913e5d9d3c9b2058033056d3dd23
30cb5d44e276505b1d4c053c8b25525da228db30
42b976597a2d977d0e300f6d06bc903db389e5c112d33c1c8c249690a522d9f2
GET /?type=convr&x=1&uuid2=0&cdata={%22a%22:991001,%22l%22:[6129654,6129670,6129677,6129705,6140244,6140246,6140363,6141029,6205745,6205752,6205755,6205762,6220830,8124214,8124594,8124968,8124973,8125344,8141760,8141763,8141816,8141850,8141875,8141880,8141931,8141938,8176847,8176869,8176878,8239623,8245529,8245533,8245537,8245540,8260100,8445392,8505468,8505515,9271738,9271745,9271969,9272093,9272160,9272905,9408323,9408407,9408587,9408663,9408768,9511553,9611699,9611846,9683342,9683349,9719394,10005812,10226877,10226889,10226919,10244639,10381193,10480996,12967986,12968507,12968515,12968543,12968782,12968784,13104005,13259085,13477519,14058054,14058197,14058205,14058228,14069494,14069497,14069560,14069565,14069590,14069626,14074179,14112662,14130392,14212376,14212411,14212419,14212455,14212467,14212692,14212694,14570528,14570544],%22i%22:1,%22c%22:7,%22t%22:%22h%22,%22m%22:%22null%22,%22vi%22:0,%22vc%22:0,%22hf%22:0,%22x%22:{}}&advid=2602146&xur=dev.awit.ae/bpostale-business/78647/&adata={%22c%22:{%22ref_url%22:%22%22,%22ref_ts%22:0,%22page_url%22:%22%22,%22dm%22:%22%22},%22v%22:{%22vis_cnt%22:0,%22frst_vis_ts%22:1668839305,%22prev_vis_ts%22:0,%22curr_vis_ts%22:1668839305,%22total_page_cnt%22:0,%22prev_page_cnt%22:0,%22curr_page_cnt%22:1}} HTTP/1.1
Host: its.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.7
Date: Sat, 19 Nov 2022 06:28:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uuid2=0; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:29 GMT; Secure; SameSite=None
uuid=2797012169281610852; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:29 GMT; Secure; SameSite=None
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
X-Powered-By: Tradelab ITS / node4.tradelab.fr
its.tradelab.fr/?type=convr&x=1&uuid2=0&cdata={%22a%22:991000,%22l%22:[6129654,6129670,6129677,6129705,6140244,6140246,6140363,6141029,6205745,6205752,6205755,6205762,6220830,8124214,8124594,8124968,8124973,8125344,8141760,8141763,8141816,8141850,8141875,8141880,8141931,8141938,8176847,8176869,8176878,8178278,8178332,8217168,8239623,8245529,8245533,8245537,8245540,8260100,8445392,8505468,8505515,9271738,9271745,9271969,9272093,9272160,9272905,9408323,9408407,9408587,9408663,9408768,9511553,9611699,9611846,9683342,9683349,9719394,10005812,10226877,10226889,10226919,10244639,10381193,10480996,12967986,12968507,12968515,12968543,12968782,12968784,13104005,13259085,13477519,14058054,14058197,14058205,14058228,14069494,14069497,14069560,14069565,14069590,14069626,14074179,14112662,14130392,14212376,14212411,14212419,14212455,14212467,14212692,14212694,14570528,14570544],%22i%22:1,%22c%22:7,%22t%22:%22h%22,%22m%22:%22null%22,%22vi%22:0,%22vc%22:0,%22hf%22:0,%22x%22:{}}&advid=2602146&xur=dev.awit.ae/bpostale-business/78647/&adata={%22c%22:{%22ref_url%22:%22%22,%22ref_ts%22:0,%22page_url%22:%22%22,%22dm%22:%22%22},%22v%22:{%22vis_cnt%22:0,%22frst_vis_ts%22:1668839305,%22prev_vis_ts%22:0,%22curr_vis_ts%22:1668839305,%22total_page_cnt%22:0,%22prev_page_cnt%22:0,%22curr_page_cnt%22:1}}
62.212.64.230200 OK 43 B URL HTTP/1.1 its.tradelab.fr/?type=convr&x=1&uuid2=0&cdata={%22a%22:991000,%22l%22:[6129654,6129670,6129677,6129705,6140244,6140246,6140363,6141029,6205745,6205752,6205755,6205762,6220830,8124214,8124594,8124968,8124973,8125344,8141760,8141763,8141816,8141850,8141875,8141880,8141931,8141938,8176847,8176869,8176878,8178278,8178332,8217168,8239623,8245529,8245533,8245537,8245540,8260100,8445392,8505468,8505515,9271738,9271745,9271969,9272093,9272160,9272905,9408323,9408407,9408587,9408663,9408768,9511553,9611699,9611846,9683342,9683349,9719394,10005812,10226877,10226889,10226919,10244639,10381193,10480996,12967986,12968507,12968515,12968543,12968782,12968784,13104005,13259085,13477519,14058054,14058197,14058205,14058228,14069494,14069497,14069560,14069565,14069590,14069626,14074179,14112662,14130392,14212376,14212411,14212419,14212455,14212467,14212692,14212694,14570528,14570544],%22i%22:1,%22c%22:7,%22t%22:%22h%22,%22m%22:%22null%22,%22vi%22:0,%22vc%22:0,%22hf%22:0,%22x%22:{}}&advid=2602146&xur=dev.awit.ae/bpostale-business/78647/&adata={%22c%22:{%22ref_url%22:%22%22,%22ref_ts%22:0,%22page_url%22:%22%22,%22dm%22:%22%22},%22v%22:{%22vis_cnt%22:0,%22frst_vis_ts%22:1668839305,%22prev_vis_ts%22:0,%22curr_vis_ts%22:1668839305,%22total_page_cnt%22:0,%22prev_page_cnt%22:0,%22curr_page_cnt%22:1}}
IP 62.212.64.230:0
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 45cf913e5d9d3c9b2058033056d3dd23
30cb5d44e276505b1d4c053c8b25525da228db30
42b976597a2d977d0e300f6d06bc903db389e5c112d33c1c8c249690a522d9f2
GET /?type=convr&x=1&uuid2=0&cdata={%22a%22:991000,%22l%22:[6129654,6129670,6129677,6129705,6140244,6140246,6140363,6141029,6205745,6205752,6205755,6205762,6220830,8124214,8124594,8124968,8124973,8125344,8141760,8141763,8141816,8141850,8141875,8141880,8141931,8141938,8176847,8176869,8176878,8178278,8178332,8217168,8239623,8245529,8245533,8245537,8245540,8260100,8445392,8505468,8505515,9271738,9271745,9271969,9272093,9272160,9272905,9408323,9408407,9408587,9408663,9408768,9511553,9611699,9611846,9683342,9683349,9719394,10005812,10226877,10226889,10226919,10244639,10381193,10480996,12967986,12968507,12968515,12968543,12968782,12968784,13104005,13259085,13477519,14058054,14058197,14058205,14058228,14069494,14069497,14069560,14069565,14069590,14069626,14074179,14112662,14130392,14212376,14212411,14212419,14212455,14212467,14212692,14212694,14570528,14570544],%22i%22:1,%22c%22:7,%22t%22:%22h%22,%22m%22:%22null%22,%22vi%22:0,%22vc%22:0,%22hf%22:0,%22x%22:{}}&advid=2602146&xur=dev.awit.ae/bpostale-business/78647/&adata={%22c%22:{%22ref_url%22:%22%22,%22ref_ts%22:0,%22page_url%22:%22%22,%22dm%22:%22%22},%22v%22:{%22vis_cnt%22:0,%22frst_vis_ts%22:1668839305,%22prev_vis_ts%22:0,%22curr_vis_ts%22:1668839305,%22total_page_cnt%22:0,%22prev_page_cnt%22:0,%22curr_page_cnt%22:1}} HTTP/1.1
Host: its.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.7
Date: Sat, 19 Nov 2022 06:28:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uuid2=0; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:29 GMT; Secure; SameSite=None
uuid=1762191802032849458; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:29 GMT; Secure; SameSite=None
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
X-Powered-By: Tradelab ITS / node4.tradelab.fr
its.tradelab.fr/?type=tlsync&uuid2=0&callback=tl_sync
62.212.64.230200 OK 35 B URL HTTP/1.1 its.tradelab.fr/?type=tlsync&uuid2=0&callback=tl_sync
IP 62.212.64.230:0
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 3f258d384dfcf4690ba118cfbdc0f6c8
4c3d76f261b9aeda53ec1ae09afe595c31df7348
b620b82a196a9341f2d2fa7cc299c2ccd19c3193e9f2850c8cf3f52f93c5f607
GET /?type=tlsync&uuid2=0&callback=tl_sync HTTP/1.1
Host: its.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.7
Date: Sat, 19 Nov 2022 06:28:29 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uuid2=0; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:29 GMT; Secure; SameSite=None
uuid=1862928508159087817; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:29 GMT; Secure; SameSite=None
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0,post-check=0,pre-check=0
Access-Control-Allow-Origin: *
P3p: CP="CAO PSA OUR"
secure.adnxs.com/seg?add=2491894:0&t=2
185.89.211.12307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=2491894:0&t=2
IP 185.89.211.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=2491894:0&t=2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D2491894%3A0%26t%3D2
AN-X-Request-Uuid: cdff3fd4-0b8b-4a31-8bc9-4a908fcad79a
Set-Cookie: uuid2=393198401655162113; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Feb-2023 06:28:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 947.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
its.tradelab.fr/?type=tp&advid=2602146&uuid=1862928508159087817&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D
62.212.64.230302 Found 0 B URL HTTP/1.1 its.tradelab.fr/?type=tp&advid=2602146&uuid=1862928508159087817&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D
IP 62.212.64.230:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?type=tp&advid=2602146&uuid=1862928508159087817&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D HTTP/1.1
Host: its.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.17.7
Date: Sat, 19 Nov 2022 06:28:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uuid=1862928508159087817; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:29 GMT; Secure; SameSite=None
iev0=eJyrVjIyMzAyNDFTsqpWKiopVrIyNDOzsDC2NDawNDA30VEqSs4rUbIyADJSSosgDKBIJoRVXACSq60FAH0eEyA=; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:29 GMT; Secure; SameSite=None
Access-Control-Allow-Origin: *
X-Powered-By: Tradelab ITS / node4.tradelab.fr
Location: https://cm.g.doubleclick.net/pixel?google_nid=tradelab_dmp&google_cm
cdn.tradelab.fr/fseg/2135.js?add=12608265
152.195.132.24200 OK 2.6 kB URL HTTP/2 cdn.tradelab.fr/fseg/2135.js?add=12608265
IP 152.195.132.24:0
File type ASCII text, with very long lines (518)
Hash e8e2acc1934a78e938bb2f88981f126c
04e508ff2ef2b20c1edabb2861528cb353ee7775
c33fd65b0d81fa1bfb50c0e3ff4ac82c26aa752ea196874322466bed02496acd
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /fseg/2135.js?add=12608265 HTTP/1.1
Host: cdn.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-allow-origin: *
age: 696
cache-control: max-age=1800
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:29 GMT
etag: "1bbd-59ff7646fd68a-gzip"
expires: Sat, 19 Nov 2022 06:58:29 GMT
last-modified: Tue, 03 Mar 2020 18:22:54 GMT
server: ECAcc (ska/F73F)
vary: Accept-Encoding
x-cache: HIT
content-length: 2594
X-Firefox-Spdy: h2
cdn.tradelab.fr/conv/991000.js
152.195.132.24200 OK 2.0 kB URL HTTP/2 cdn.tradelab.fr/conv/991000.js
IP 152.195.132.24:0
File type ASCII text, with very long lines (832)
Hash 866cef51cc7a1af978bd63d062ad7597
fc1a7e138eff4b50c0a722a777684720ff1a1450
339200fc612e99e909baf07bd33255243a505dbbb0b92ebe802b0ec89c843053
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /conv/991000.js HTTP/1.1
Host: cdn.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-allow-origin: *
age: 1511
cache-control: max-age=1800
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:29 GMT
etag: "15a7-5c445be4e9274-gzip"
expires: Sat, 19 Nov 2022 06:58:29 GMT
last-modified: Tue, 08 Jun 2021 18:58:28 GMT
server: ECAcc (ska/F753)
vary: Accept-Encoding
x-cache: HIT
content-length: 2034
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D2491894%3A0%26t%3D2
185.89.211.12200 OK 43 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D2491894%3A0%26t%3D2
IP 185.89.211.12:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fseg%3Fadd%3D2491894%3A0%26t%3D2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:29 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: c409071a-7b8d-4ccc-9ca4-c348244c461d
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2C'$mZrnf!]tbP6j2F-XstGt!@DYk$hs#.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Feb-2023 06:28:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 947.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 53d56fb68da96a50df543c9c9fb58f52
d802493bcf8c683b1ac73b035c51cd02b907a251
68b4e1c61fb6285a348937a2f6f81000f7979d90dd2882d5933fc4e64af68158
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:28:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
secure.adnxs.com/seg?add=12608265&t=2
185.89.211.12307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=12608265&t=2
IP 185.89.211.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=12608265&t=2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D12608265%26t%3D2
AN-X-Request-Uuid: 2f8f636d-f76b-4b7d-89da-79f8f7652c04
Set-Cookie: uuid2=2550762567607358710; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Feb-2023 06:28:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 947.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
its.tradelab.fr/?type=fseg&uuid2=0&sid=12608265&val=undefined&fun=2135&step=1&siev=12608262&fp=0&advid=2602146&isregen=0&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&ur=https%253A%252F%252Fdev.awit.ae%252Fbpostale-business%252F78647%252F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D
62.212.64.230200 OK 43 B URL HTTP/1.1 its.tradelab.fr/?type=fseg&uuid2=0&sid=12608265&val=undefined&fun=2135&step=1&siev=12608262&fp=0&advid=2602146&isregen=0&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&ur=https%253A%252F%252Fdev.awit.ae%252Fbpostale-business%252F78647%252F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D
IP 62.212.64.230:0
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 45cf913e5d9d3c9b2058033056d3dd23
30cb5d44e276505b1d4c053c8b25525da228db30
42b976597a2d977d0e300f6d06bc903db389e5c112d33c1c8c249690a522d9f2
GET /?type=fseg&uuid2=0&sid=12608265&val=undefined&fun=2135&step=1&siev=12608262&fp=0&advid=2602146&isregen=0&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&ur=https%253A%252F%252Fdev.awit.ae%252Fbpostale-business%252F78647%252F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D HTTP/1.1
Host: its.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.7
Date: Sat, 19 Nov 2022 06:28:29 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: uuid2=0; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:29 GMT; Secure; SameSite=None
uuid=7622607876531215153; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:29 GMT; Secure; SameSite=None
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0,post-check=0,pre-check=0
Access-Control-Allow-Origin: *
P3p: CP="CAO PSA OUR"
its.tradelab.fr/?type=convr&x=0&cdata=%7B%22a%22%3A991000%2C%22l%22%3A%5B6129654%2C6129670%2C6129677%2C6129705%2C6140244%2C6140246%2C6140363%2C6141029%2C6205745%2C6205752%2C6205755%2C6205762%2C6220830%2C8124214%2C8124594%2C8124968%2C8124973%2C8125344%2C8141760%2C8141763%2C8141816%2C8141850%2C8141875%2C8141880%2C8141931%2C8141938%2C8176847%2C8176869%2C8176878%2C8178278%2C8178332%2C8217168%2C8239623%2C8245529%2C8245533%2C8245537%2C8245540%2C8260100%2C8445392%2C8505468%2C8505515%2C9271738%2C9271745%2C9271969%2C9272093%2C9272160%2C9272905%2C9408323%2C9408407%2C9408587%2C9408663%2C9408768%2C9511553%2C9611699%2C9611846%2C9683342%2C9683349%2C9719394%2C10005812%2C10226877%2C10226889%2C10226919%2C10244639%2C10381193%2C10480996%2C12967986%2C12968507%2C12968515%2C12968543%2C12968782%2C12968784%2C13104005%2C13259085%2C13477519%2C14058054%2C14058197%2C14058205%2C14058228%2C14069494%2C14069497%2C14069560%2C14069565%2C14069590%2C14069626%2C14074179%2C14112662%2C14130392%2C14212376%2C14212411%2C14212419%2C14212455%2C14212467%2C14212692%2C14212694%2C14570528%2C14570544%5D%2C%22i%22%3A1%2C%22c%22%3A7%2C%22t%22%3A%22h%22%2C%22m%22%3A%22null%22%2C%22vi%22%3A0%2C%22vc%22%3A0%2C%22hf%22%3A0%2C%22x%22%3A%7B%7D%7D&advid=2602146&xur=dev.awit.ae%2Fbpostale-business%2F78647%2F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D
62.212.64.230200 OK 43 B URL HTTP/1.1 its.tradelab.fr/?type=convr&x=0&cdata=%7B%22a%22%3A991000%2C%22l%22%3A%5B6129654%2C6129670%2C6129677%2C6129705%2C6140244%2C6140246%2C6140363%2C6141029%2C6205745%2C6205752%2C6205755%2C6205762%2C6220830%2C8124214%2C8124594%2C8124968%2C8124973%2C8125344%2C8141760%2C8141763%2C8141816%2C8141850%2C8141875%2C8141880%2C8141931%2C8141938%2C8176847%2C8176869%2C8176878%2C8178278%2C8178332%2C8217168%2C8239623%2C8245529%2C8245533%2C8245537%2C8245540%2C8260100%2C8445392%2C8505468%2C8505515%2C9271738%2C9271745%2C9271969%2C9272093%2C9272160%2C9272905%2C9408323%2C9408407%2C9408587%2C9408663%2C9408768%2C9511553%2C9611699%2C9611846%2C9683342%2C9683349%2C9719394%2C10005812%2C10226877%2C10226889%2C10226919%2C10244639%2C10381193%2C10480996%2C12967986%2C12968507%2C12968515%2C12968543%2C12968782%2C12968784%2C13104005%2C13259085%2C13477519%2C14058054%2C14058197%2C14058205%2C14058228%2C14069494%2C14069497%2C14069560%2C14069565%2C14069590%2C14069626%2C14074179%2C14112662%2C14130392%2C14212376%2C14212411%2C14212419%2C14212455%2C14212467%2C14212692%2C14212694%2C14570528%2C14570544%5D%2C%22i%22%3A1%2C%22c%22%3A7%2C%22t%22%3A%22h%22%2C%22m%22%3A%22null%22%2C%22vi%22%3A0%2C%22vc%22%3A0%2C%22hf%22%3A0%2C%22x%22%3A%7B%7D%7D&advid=2602146&xur=dev.awit.ae%2Fbpostale-business%2F78647%2F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D
IP 62.212.64.230:0
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 45cf913e5d9d3c9b2058033056d3dd23
30cb5d44e276505b1d4c053c8b25525da228db30
42b976597a2d977d0e300f6d06bc903db389e5c112d33c1c8c249690a522d9f2
GET /?type=convr&x=0&cdata=%7B%22a%22%3A991000%2C%22l%22%3A%5B6129654%2C6129670%2C6129677%2C6129705%2C6140244%2C6140246%2C6140363%2C6141029%2C6205745%2C6205752%2C6205755%2C6205762%2C6220830%2C8124214%2C8124594%2C8124968%2C8124973%2C8125344%2C8141760%2C8141763%2C8141816%2C8141850%2C8141875%2C8141880%2C8141931%2C8141938%2C8176847%2C8176869%2C8176878%2C8178278%2C8178332%2C8217168%2C8239623%2C8245529%2C8245533%2C8245537%2C8245540%2C8260100%2C8445392%2C8505468%2C8505515%2C9271738%2C9271745%2C9271969%2C9272093%2C9272160%2C9272905%2C9408323%2C9408407%2C9408587%2C9408663%2C9408768%2C9511553%2C9611699%2C9611846%2C9683342%2C9683349%2C9719394%2C10005812%2C10226877%2C10226889%2C10226919%2C10244639%2C10381193%2C10480996%2C12967986%2C12968507%2C12968515%2C12968543%2C12968782%2C12968784%2C13104005%2C13259085%2C13477519%2C14058054%2C14058197%2C14058205%2C14058228%2C14069494%2C14069497%2C14069560%2C14069565%2C14069590%2C14069626%2C14074179%2C14112662%2C14130392%2C14212376%2C14212411%2C14212419%2C14212455%2C14212467%2C14212692%2C14212694%2C14570528%2C14570544%5D%2C%22i%22%3A1%2C%22c%22%3A7%2C%22t%22%3A%22h%22%2C%22m%22%3A%22null%22%2C%22vi%22%3A0%2C%22vc%22%3A0%2C%22hf%22%3A0%2C%22x%22%3A%7B%7D%7D&advid=2602146&xur=dev.awit.ae%2Fbpostale-business%2F78647%2F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D HTTP/1.1
Host: its.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.7
Date: Sat, 19 Nov 2022 06:28:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uuid=2828056817680435557; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:29 GMT; Secure; SameSite=None
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
X-Powered-By: Tradelab ITS / node2.tradelab.fr
cm.g.doubleclick.net/pixel?google_nid=tradelab_dmp&google_cm
142.250.74.98302 Found 285 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=tradelab_dmp&google_cm
IP 142.250.74.98:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 99eacce2df6348525adbb66179b6a122
9ae2089704548b1c8545021a9de724f71fa8fb84
cd793d1e2bdcc66fa07e118627012f0d24684aa085f149eed09b86a06ade7384
GET /pixel?google_nid=tradelab_dmp&google_cm HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=tradelab_dmp&google_cm=&google_tc=
date: Sat, 19 Nov 2022 06:28:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 285
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 19-Nov-2022 06:43:29 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D12608265%26t%3D2
185.89.211.12200 OK 43 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D12608265%26t%3D2
IP 185.89.211.12:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fseg%3Fadd%3D12608265%26t%3D2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:29 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 56c47fbb-89a7-4077-bea0-147557845f21
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2C'$mZrnf!]tbP6j2F-XstGt!@DYk$hs#.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Feb-2023 06:28:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 947.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
cm.g.doubleclick.net/pixel?google_nid=tradelab_dmp&google_cm=&google_tc=
142.250.74.98302 Found 256 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=tradelab_dmp&google_cm=&google_tc=
IP 142.250.74.98:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 71887a73cc8a27e417a04a9a689586c0
d3128cba3bfccf3eb54562cccc344d30ca175703
86083e6edab8fa44c3d8b0b5ff3a7292f6bdf16e2a3046f90a285f036b0ce96b
GET /pixel?google_nid=tradelab_dmp&google_cm=&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://its.tradelab.fr/?type=tlsync_dbm&google_error=3
date: Sat, 19 Nov 2022 06:28:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 256
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 53d56fb68da96a50df543c9c9fb58f52
d802493bcf8c683b1ac73b035c51cd02b907a251
68b4e1c61fb6285a348937a2f6f81000f7979d90dd2882d5933fc4e64af68158
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:28:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
its.tradelab.fr/?type=tlsync_dbm&google_error=3
62.212.64.230200 OK 43 B URL HTTP/1.1 its.tradelab.fr/?type=tlsync_dbm&google_error=3
IP 62.212.64.230:0
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 45cf913e5d9d3c9b2058033056d3dd23
30cb5d44e276505b1d4c053c8b25525da228db30
42b976597a2d977d0e300f6d06bc903db389e5c112d33c1c8c249690a522d9f2
GET /?type=tlsync_dbm&google_error=3 HTTP/1.1
Host: its.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.7
Date: Sat, 19 Nov 2022 06:28:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uuid=2882774638312031340; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:29 GMT; Secure; SameSite=None
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
X-Powered-By: Tradelab ITS / node4.tradelab.fr
cdn.tradelab.fr/fseg/2135.js?add=12608266
152.195.132.24200 OK 2.6 kB URL HTTP/2 cdn.tradelab.fr/fseg/2135.js?add=12608266
IP 152.195.132.24:0
File type ASCII text, with very long lines (518)
Hash e8e2acc1934a78e938bb2f88981f126c
04e508ff2ef2b20c1edabb2861528cb353ee7775
c33fd65b0d81fa1bfb50c0e3ff4ac82c26aa752ea196874322466bed02496acd
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /fseg/2135.js?add=12608266 HTTP/1.1
Host: cdn.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-allow-origin: *
age: 701
cache-control: max-age=1800
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:34 GMT
etag: "1bbd-59ff7646fd68a-gzip"
expires: Sat, 19 Nov 2022 06:58:34 GMT
last-modified: Tue, 03 Mar 2020 18:22:54 GMT
server: ECAcc (ska/F73F)
vary: Accept-Encoding
x-cache: HIT
content-length: 2594
X-Firefox-Spdy: h2
cdn.tradelab.fr/conv/991001.js
152.195.132.24200 OK 2.0 kB URL HTTP/2 cdn.tradelab.fr/conv/991001.js
IP 152.195.132.24:0
File type ASCII text, with very long lines (808)
Hash 76ab9cb9225329cbb283ca854ec51436
0b6c85a3be3979ecb9c5464c793fad122794b9a9
e44c53266fbef09b992000993e8e46ed1ad51742ab33fb389b2eb934c66c0b5d
Analyzer Verdict Alert urlquery Phishing - La Banque postale
GET /conv/991001.js HTTP/1.1
Host: cdn.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-allow-origin: *
age: 627
cache-control: max-age=1800
content-type: application/javascript
date: Sat, 19 Nov 2022 06:28:34 GMT
etag: "158f-5c445be5b05ff-gzip"
expires: Sat, 19 Nov 2022 06:58:34 GMT
last-modified: Tue, 08 Jun 2021 18:58:28 GMT
server: ECAcc (ska/F730)
vary: Accept-Encoding
x-cache: HIT
content-length: 2023
X-Firefox-Spdy: h2
secure.adnxs.com/seg?add=12608266&t=2
185.89.211.12307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=12608266&t=2
IP 185.89.211.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=12608266&t=2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:34 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D12608266%26t%3D2
AN-X-Request-Uuid: 7f06156e-95b2-4a15-a93c-bb429e2ee114
Set-Cookie: uuid2=3924605827586734348; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Feb-2023 06:28:34 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 947.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D12608266%26t%3D2
185.89.211.12200 OK 43 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D12608266%26t%3D2
IP 185.89.211.12:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fseg%3Fadd%3D12608266%26t%3D2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dev.awit.ae/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 06:28:34 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 5fa4aec6-3b2f-4f50-b977-1541a3cee2a7
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2GVKmZrnf!]tbP6j2F-XstGt!@D^k$k%IC; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Feb-2023 06:28:34 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 947.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
its.tradelab.fr/?type=fseg&uuid2=0&sid=12608266&val=undefined&fun=2135&step=2&siev=12608263&fp=0&advid=2602146&isregen=0&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&ur=https%253A%252F%252Fdev.awit.ae%252Fbpostale-business%252F78647%252F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D
62.212.64.230200 OK 43 B URL HTTP/1.1 its.tradelab.fr/?type=fseg&uuid2=0&sid=12608266&val=undefined&fun=2135&step=2&siev=12608263&fp=0&advid=2602146&isregen=0&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&ur=https%253A%252F%252Fdev.awit.ae%252Fbpostale-business%252F78647%252F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D
IP 62.212.64.230:0
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 45cf913e5d9d3c9b2058033056d3dd23
30cb5d44e276505b1d4c053c8b25525da228db30
42b976597a2d977d0e300f6d06bc903db389e5c112d33c1c8c249690a522d9f2
GET /?type=fseg&uuid2=0&sid=12608266&val=undefined&fun=2135&step=2&siev=12608263&fp=0&advid=2602146&isregen=0&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&ur=https%253A%252F%252Fdev.awit.ae%252Fbpostale-business%252F78647%252F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D HTTP/1.1
Host: its.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.7
Date: Sat, 19 Nov 2022 06:28:34 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: uuid2=0; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:34 GMT; Secure; SameSite=None
uuid=5492257139697467321; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:34 GMT; Secure; SameSite=None
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0,post-check=0,pre-check=0
Access-Control-Allow-Origin: *
P3p: CP="CAO PSA OUR"
its.tradelab.fr/?type=convr&x=0&cdata=%7B%22a%22%3A991001%2C%22l%22%3A%5B6129654%2C6129670%2C6129677%2C6129705%2C6140244%2C6140246%2C6140363%2C6141029%2C6205745%2C6205752%2C6205755%2C6205762%2C6220830%2C8124214%2C8124594%2C8124968%2C8124973%2C8125344%2C8141760%2C8141763%2C8141816%2C8141850%2C8141875%2C8141880%2C8141931%2C8141938%2C8176847%2C8176869%2C8176878%2C8239623%2C8245529%2C8245533%2C8245537%2C8245540%2C8260100%2C8445392%2C8505468%2C8505515%2C9271738%2C9271745%2C9271969%2C9272093%2C9272160%2C9272905%2C9408323%2C9408407%2C9408587%2C9408663%2C9408768%2C9511553%2C9611699%2C9611846%2C9683342%2C9683349%2C9719394%2C10005812%2C10226877%2C10226889%2C10226919%2C10244639%2C10381193%2C10480996%2C12967986%2C12968507%2C12968515%2C12968543%2C12968782%2C12968784%2C13104005%2C13259085%2C13477519%2C14058054%2C14058197%2C14058205%2C14058228%2C14069494%2C14069497%2C14069560%2C14069565%2C14069590%2C14069626%2C14074179%2C14112662%2C14130392%2C14212376%2C14212411%2C14212419%2C14212455%2C14212467%2C14212692%2C14212694%2C14570528%2C14570544%5D%2C%22i%22%3A1%2C%22c%22%3A7%2C%22t%22%3A%22h%22%2C%22m%22%3A%22null%22%2C%22vi%22%3A0%2C%22vc%22%3A0%2C%22hf%22%3A0%2C%22x%22%3A%7B%7D%7D&advid=2602146&xur=dev.awit.ae%2Fbpostale-business%2F78647%2F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D
62.212.64.230200 OK 43 B URL HTTP/1.1 its.tradelab.fr/?type=convr&x=0&cdata=%7B%22a%22%3A991001%2C%22l%22%3A%5B6129654%2C6129670%2C6129677%2C6129705%2C6140244%2C6140246%2C6140363%2C6141029%2C6205745%2C6205752%2C6205755%2C6205762%2C6220830%2C8124214%2C8124594%2C8124968%2C8124973%2C8125344%2C8141760%2C8141763%2C8141816%2C8141850%2C8141875%2C8141880%2C8141931%2C8141938%2C8176847%2C8176869%2C8176878%2C8239623%2C8245529%2C8245533%2C8245537%2C8245540%2C8260100%2C8445392%2C8505468%2C8505515%2C9271738%2C9271745%2C9271969%2C9272093%2C9272160%2C9272905%2C9408323%2C9408407%2C9408587%2C9408663%2C9408768%2C9511553%2C9611699%2C9611846%2C9683342%2C9683349%2C9719394%2C10005812%2C10226877%2C10226889%2C10226919%2C10244639%2C10381193%2C10480996%2C12967986%2C12968507%2C12968515%2C12968543%2C12968782%2C12968784%2C13104005%2C13259085%2C13477519%2C14058054%2C14058197%2C14058205%2C14058228%2C14069494%2C14069497%2C14069560%2C14069565%2C14069590%2C14069626%2C14074179%2C14112662%2C14130392%2C14212376%2C14212411%2C14212419%2C14212455%2C14212467%2C14212692%2C14212694%2C14570528%2C14570544%5D%2C%22i%22%3A1%2C%22c%22%3A7%2C%22t%22%3A%22h%22%2C%22m%22%3A%22null%22%2C%22vi%22%3A0%2C%22vc%22%3A0%2C%22hf%22%3A0%2C%22x%22%3A%7B%7D%7D&advid=2602146&xur=dev.awit.ae%2Fbpostale-business%2F78647%2F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D
IP 62.212.64.230:0
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 45cf913e5d9d3c9b2058033056d3dd23
30cb5d44e276505b1d4c053c8b25525da228db30
42b976597a2d977d0e300f6d06bc903db389e5c112d33c1c8c249690a522d9f2
GET /?type=convr&x=0&cdata=%7B%22a%22%3A991001%2C%22l%22%3A%5B6129654%2C6129670%2C6129677%2C6129705%2C6140244%2C6140246%2C6140363%2C6141029%2C6205745%2C6205752%2C6205755%2C6205762%2C6220830%2C8124214%2C8124594%2C8124968%2C8124973%2C8125344%2C8141760%2C8141763%2C8141816%2C8141850%2C8141875%2C8141880%2C8141931%2C8141938%2C8176847%2C8176869%2C8176878%2C8239623%2C8245529%2C8245533%2C8245537%2C8245540%2C8260100%2C8445392%2C8505468%2C8505515%2C9271738%2C9271745%2C9271969%2C9272093%2C9272160%2C9272905%2C9408323%2C9408407%2C9408587%2C9408663%2C9408768%2C9511553%2C9611699%2C9611846%2C9683342%2C9683349%2C9719394%2C10005812%2C10226877%2C10226889%2C10226919%2C10244639%2C10381193%2C10480996%2C12967986%2C12968507%2C12968515%2C12968543%2C12968782%2C12968784%2C13104005%2C13259085%2C13477519%2C14058054%2C14058197%2C14058205%2C14058228%2C14069494%2C14069497%2C14069560%2C14069565%2C14069590%2C14069626%2C14074179%2C14112662%2C14130392%2C14212376%2C14212411%2C14212419%2C14212455%2C14212467%2C14212692%2C14212694%2C14570528%2C14570544%5D%2C%22i%22%3A1%2C%22c%22%3A7%2C%22t%22%3A%22h%22%2C%22m%22%3A%22null%22%2C%22vi%22%3A0%2C%22vc%22%3A0%2C%22hf%22%3A0%2C%22x%22%3A%7B%7D%7D&advid=2602146&xur=dev.awit.ae%2Fbpostale-business%2F78647%2F&adata=%7B%22c%22%3A%7B%22ref_url%22%3A%22%22%2C%22ref_ts%22%3A1668839307%2C%22page_url%22%3A%22dev.awit.ae%2Fbpostale-business%2F78647%2F%22%2C%22dm%22%3A%22www.labanquepostale.fr%22%7D%2C%22v%22%3A%7B%22vis_cnt%22%3A1%2C%22frst_vis_ts%22%3A1668839305%2C%22prev_vis_ts%22%3A1668839305%2C%22curr_vis_ts%22%3A1668839307%2C%22total_page_cnt%22%3A1%2C%22prev_page_cnt%22%3A1%2C%22curr_page_cnt%22%3A1%7D%7D HTTP/1.1
Host: its.tradelab.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.7
Date: Sat, 19 Nov 2022 06:28:34 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uuid=2840494039388357125; Max-Age=7776000; Domain=.tradelab.fr; Path=/; Expires=Fri, 17 Feb 2023 06:28:34 GMT; Secure; SameSite=None
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
X-Powered-By: Tradelab ITS / node2.tradelab.fr
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53a83e17-462d-4d4f-8f42-f44460fc79a2.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53a83e17-462d-4d4f-8f42-f44460fc79a2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 50a8727077dd86072a07bd2077c252a8
0e2df523714ca147a69465f3ad4867a33314acb2
9fd12b1e80aa231ffd709c05edda762a4c63d0c70010fb62efdf21c73e657459
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53a83e17-462d-4d4f-8f42-f44460fc79a2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7445
x-amzn-requestid: 10c0e6f1-9264-49a0-93b1-16f291edb643
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bu9_nGVwIAMFlKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375dd30-42e9fc0207225de072a699c6;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 07:05:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qCvIW2IsCq9sLUWmSTXQOrBC61C1rL7qmSoTn1IHuaXrOzg-bM9NJQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 07:41:15 GMT
age: 82040
etag: "0e2df523714ca147a69465f3ad4867a33314acb2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Light.ttf
185.148.47.122404 Not Found 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Light.ttf
IP 185.148.47.122:0
GET /bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Light.ttf HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/asset/base-fonts.min.a7e7927fdac70bd77ee0c5330bedd24b.css
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
x-cache-handler: a2opt-cache-engine
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://dev.awit.ae/wp-json/>; rel="https://api.w.org/"
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-type: text/html; charset=UTF-8
date: Sat, 19 Nov 2022 06:28:27 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Light.woff
185.148.47.122404 Not Found 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Light.woff
IP 185.148.47.122:0
GET /bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Light.woff HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/asset/base-fonts.min.a7e7927fdac70bd77ee0c5330bedd24b.css
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
x-cache-handler: a2opt-cache-engine
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://dev.awit.ae/wp-json/>; rel="https://api.w.org/"
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-type: text/html; charset=UTF-8
date: Sat, 19 Nov 2022 06:28:28 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/css/bootstrap.min.css
185.148.47.122200 OK 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/css/bootstrap.min.css
IP 185.148.47.122:0
GET /bpostale-business/78647/asset/css/bootstrap.min.css HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 155758
content-type: text/css
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
s.shouji.qihucdn.com/221109/17bf7706e790a93204a73a5158fa12e1/bubei.tingshu_228100.apk?en=curpage=&exp=1668966217&from=appStore_getRecomendAppsBytype&m2=&ts=1668361417&tok=3169b5d3ff54d96a32556169efb60ed8&v=&f=z.apk
104.192.108.21200 OK 0 B URL HTTP/1.1 s.shouji.qihucdn.com/221109/17bf7706e790a93204a73a5158fa12e1/bubei.tingshu_228100.apk?en=curpage=&exp=1668966217&from=appStore_getRecomendAppsBytype&m2=&ts=1668361417&tok=3169b5d3ff54d96a32556169efb60ed8&v=&f=z.apk
IP 104.192.108.21:0
ASN #55992 Beijing Qihu Technology Company Limited
GET /221109/17bf7706e790a93204a73a5158fa12e1/bubei.tingshu_228100.apk?en=curpage=&exp=1668966217&from=appStore_getRecomendAppsBytype&m2=&ts=1668361417&tok=3169b5d3ff54d96a32556169efb60ed8&v=&f=z.apk HTTP/1.1
Host: s.shouji.qihucdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 06:28:27 GMT
Content-Type: application/vnd.android.package-archive
Content-Length: 71440743
Connection: keep-alive
Expires: Sat, 26 Nov 2022 06:28:27 GMT
Last-Modified: Wed, 09 Nov 2022 07:45:28 GMT
Cache-Control: max-age=604800
ETag: "636b5a98-4421967"
KCS-Via: HIT from w-f05.lato;MISS from back-f05.dl.lato;HIT from w-subsrc02.lato
K-Cache-status: MISS
Accept-Ranges: bytes
dev.awit.ae/libs/granite/csrf/token.json
185.148.47.122404 Not Found 0 B URL HTTP/2 dev.awit.ae/libs/granite/csrf/token.json
IP 185.148.47.122:0
Analyzer Verdict Alert fortinet Phishing
GET /libs/granite/csrf/token.json HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
x-cache-handler: a2opt-cache-engine
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://dev.awit.ae/wp-json/>; rel="https://api.w.org/"
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-type: text/html; charset=UTF-8
date: Sat, 19 Nov 2022 06:28:27 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/
185.148.47.122200 OK 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/
IP 185.148.47.122:0
GET /bpostale-business/78647/ HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-type: text/html; charset=UTF-8
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Regular.ttf
185.148.47.122404 Not Found 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Regular.ttf
IP 185.148.47.122:0
GET /bpostale-business/78647/asset/base-fonts/resources/fonts/lato/Lato-Regular.ttf HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/asset/base-fonts.min.a7e7927fdac70bd77ee0c5330bedd24b.css
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
x-cache-handler: a2opt-cache-engine
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://dev.awit.ae/wp-json/>; rel="https://api.w.org/"
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-type: text/html; charset=UTF-8
date: Sat, 19 Nov 2022 06:28:27 GMT
server: Apache
X-Firefox-Spdy: h2
dev.awit.ae/bpostale-business/78647/asset/js
185.148.47.122200 OK 0 B URL HTTP/2 dev.awit.ae/bpostale-business/78647/asset/js
IP 185.148.47.122:0
GET /bpostale-business/78647/asset/js HTTP/1.1
Host: dev.awit.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dev.awit.ae/bpostale-business/78647/
Cookie: mailchimp_landing_site=https%3A%2F%2Fdev.awit.ae%2Fespaceclientbusness%2F91726%2Fasset%2Fbase-fonts%2Fresources%2Ffonts%2Flato%2FLato-Regular.ttf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 18 Nov 2022 16:22:01 GMT
accept-ranges: bytes
content-length: 112871
date: Sat, 19 Nov 2022 06:28:26 GMT
server: Apache
X-Firefox-Spdy: h2