dhl.nl.qas-benelux.edistrada.pl/content/css/main-c059a0a9a2.css
91.206.38.179200 OK 30 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/css/main-c059a0a9a2.css
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type ASCII text, with very long lines (30007)
Hash 96593f9faf9a92eacd103116662aa1a8
610cb0b31b29e38244c150cc355e9b23f32e471c
22e88dc7672f8eac8d89c091e1f57096f9682b559e9d563f65dc1167264e6fa9
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/css/main-c059a0a9a2.css HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:11 GMT
content-type: text/css
content-length: 30056
last-modified: Fri, 20 Oct 2023 16:35:16 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/vendor/vendor-9981f69eeb.css
91.206.38.179200 OK 498 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/vendor/vendor-9981f69eeb.css
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type ASCII text, with very long lines (63799)
Size 498 kB (497488 bytes)
Hash 19c074afcd600a528a49def384daa36e
93d8bbbb129bed9a96d5cc8fe8592d4f3c8ba7c0
e678b2d2efc3af9e1c9fb81891334a097c06c3cb4a0707971ea2271c250cad95
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/vendor/vendor-9981f69eeb.css HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:11 GMT
content-type: text/css
content-length: 497488
last-modified: Fri, 20 Oct 2023 16:35:16 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/app/app-7e85fe47d8.js
91.206.38.179200 OK 444 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/app/app-7e85fe47d8.js
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type C source, ASCII text, with very long lines (32005)
Size 444 kB (444198 bytes)
Hash 68aaf5aaea958c5b0332366acaf11c4d
3dd18926ff2b6610a9bdc8ea5f3d3ca9beb1a1b7
7c1661293e43df5474532a8d28e0fc817507f7dbad77059dbf40cc6827952c96
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /app/app-7e85fe47d8.js HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:11 GMT
content-type: application/javascript
content-length: 444198
last-modified: Fri, 20 Oct 2023 16:35:16 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/app/vendor-28a9ccb1c6.js
91.206.38.179200 OK 1.1 MB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/app/vendor-28a9ccb1c6.js
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type ASCII text, with very long lines (32027)
Size 1.1 MB (1109304 bytes)
Hash 2af476b5af5e71805386d9409e2ff255
f8e8af1b84530d23dec4d20c0e1bfa192f903023
2b6511caf9c47638ff2368fe9fd1a76e6e9f13a5f66458f85903e628c72d00eb
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /app/vendor-28a9ccb1c6.js HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:11 GMT
content-type: application/javascript
content-length: 1109304
last-modified: Fri, 20 Oct 2023 16:35:16 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/images/favicon-a6f1af8e79.gif
91.206.38.179200 OK 2.2 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/images/favicon-a6f1af8e79.gif
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel\012- data
Hash a6f1af8e79a11829ba9a66474b06bb97
d99e3ec7747c865033a8dfad43c9f49634404bc1
b0dbd00f3650fa6b931e678a9d8f79a405d23c7adf111ab91b1a01a0e7109807
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/images/favicon-a6f1af8e79.gif HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: image/gif
content-length: 2238
last-modified: Fri, 20 Oct 2023 16:34:44 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/i18n/angular-locale_nl.js
91.206.38.179200 OK 2.7 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/i18n/angular-locale_nl.js
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
Hash db3515050838b41dcbef44f12a29bbba
376c5871744cb7b7c2f645288a16fe51134537e7
f6861667160531c16cf701b253670fb9ec9e00558374284bb8ac5bc580380642
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /i18n/angular-locale_nl.js HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: application/javascript
content-length: 2740
last-modified: Fri, 20 Oct 2023 16:34:40 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/edistrada2/api/language?cacheBuster=1700663714730
91.206.38.179200 OK 0 B URL POST HTTP/2 dhl.nl.qas-benelux.edistrada.pl/edistrada2/api/language?cacheBuster=1700663714730
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
POST /edistrada2/api/language?cacheBuster=1700663714730 HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
X-Frame-Options: DENY
Content-Type: application/json;charset=utf-8
Authorization: Basic
Content-Length: 2
Origin: https://dhl.nl.qas-benelux.edistrada.pl
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-length: 0
set-cookie: JSESSIONID=CB5B94619054DBD5216A1399BA235F05; Path=/; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
x-content-security-policy: default-src 'self'
x-webkit-csp: default-src 'self'
server: SNP PROXY 2.0.1a
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/edistrada2/api/session?cacheBuster=1700663714731
91.206.38.179401 Unauthorized 0 B URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/edistrada2/api/session?cacheBuster=1700663714731
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /edistrada2/api/session?cacheBuster=1700663714731 HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
X-Frame-Options: DENY
Authorization: Basic
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 401 Unauthorized
date: Wed, 22 Nov 2023 14:35:12 GMT
content-length: 0
set-cookie: JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310; Path=/; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
x-content-security-policy: default-src 'self'
x-webkit-csp: default-src 'self'
server: SNP PROXY 2.0.1a
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/i18n/nl/global.json?cacheBuster=1700663714798
91.206.38.179200 OK 4.2 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/i18n/nl/global.json?cacheBuster=1700663714798
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type JSON data\012- , Unicode text, UTF-8 text
Hash de3651015805695c7d32b2f265c10c90
a7624e2dee326d71a61751584c36aa5161475f65
d2fbaabba4c30dbc7b1f89d44b1f1bbd3b509bc8f28b20614b870db0532766c1
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /i18n/nl/global.json?cacheBuster=1700663714798 HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
X-Frame-Options: DENY
Authorization: Basic
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: application/json
content-length: 4153
last-modified: Fri, 20 Oct 2023 16:34:42 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/i18n/nl/login.json?cacheBuster=1700663714798
91.206.38.179200 OK 1.3 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/i18n/nl/login.json?cacheBuster=1700663714798
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type JSON data\012- , Unicode text, UTF-8 text
Hash 3f9a97f1ad5e3551f1f1aa8527c48adc
34426b04619e6d31f1782a9143be224d7dd86976
a6dfa11da41120e917ee1a3bf2495b1c63366d4adf5ea490f3bf9c944d7939c4
GET /i18n/nl/login.json?cacheBuster=1700663714798 HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
X-Frame-Options: DENY
Authorization: Basic
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: application/json
content-length: 1304
last-modified: Fri, 20 Oct 2023 16:34:42 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/edistrada2/api/language?cacheBuster=1700663714798
91.206.38.179200 OK 0 B URL POST HTTP/2 dhl.nl.qas-benelux.edistrada.pl/edistrada2/api/language?cacheBuster=1700663714798
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
POST /edistrada2/api/language?cacheBuster=1700663714798 HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
X-Frame-Options: DENY
Content-Type: application/json;charset=utf-8
Authorization: Basic
Content-Length: 2
Origin: https://dhl.nl.qas-benelux.edistrada.pl
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-length: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
x-content-security-policy: default-src 'self'
x-webkit-csp: default-src 'self'
server: SNP PROXY 2.0.1a
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/edistrada2/api/language?cacheBuster=1700663714870
91.206.38.179200 OK 0 B URL POST HTTP/2 dhl.nl.qas-benelux.edistrada.pl/edistrada2/api/language?cacheBuster=1700663714870
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
POST /edistrada2/api/language?cacheBuster=1700663714870 HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
X-Frame-Options: DENY
Content-Type: application/json;charset=utf-8
Authorization: Basic
Content-Length: 2
Origin: https://dhl.nl.qas-benelux.edistrada.pl
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-length: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
x-content-security-policy: default-src 'self'
x-webkit-csp: default-src 'self'
server: SNP PROXY 2.0.1a
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/images/DHL_rgb-a4dbdac2f8.png
91.206.38.179200 OK 44 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/images/DHL_rgb-a4dbdac2f8.png
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type PNG image data, 1988 x 440, 8-bit/color RGBA, non-interlaced\012- data
Hash a4dbdac2f804e9fc861a516f167a5f33
126f5c866150a0ad42b9181be23dbb7d4c79f6c8
8765d36c6e243027037dd82ea1d5bd2db642bfdc66097d1750fa3b1fb4b18691
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/images/DHL_rgb-a4dbdac2f8.png HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: image/png
content-length: 44111
last-modified: Fri, 20 Oct 2023 16:34:44 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/images/ignore/flags/en.png
91.206.38.179200 OK 856 B URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/images/ignore/flags/en.png
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type PNG image data, 32 x 20, 8-bit colormap, non-interlaced\012- data
Hash fc3aa193c311f16e12fa404839484634
85ffac07df0c9b533538b803a6313697c8a32fe5
ca0425d2003db32593f081e41f0fe5c03cb4f1a2dcbd397947cb47ddd3ea1d1d
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/images/ignore/flags/en.png HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: image/png
content-length: 856
last-modified: Fri, 20 Oct 2023 16:34:44 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/images/ignore/flags/nl.png
91.206.38.179200 OK 99 B URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/images/ignore/flags/nl.png
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type PNG image data, 32 x 20, 2-bit colormap, non-interlaced\012- data
Hash f591196ce58662965f749c67976e5578
778eb7c3e80c1c933bccfe4fb159ade13391bf3f
c5834702ae33e27c843278617c38ca1f094e28886ff5c6cd08849458d48b7dbe
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/images/ignore/flags/nl.png HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: image/png
content-length: 99
last-modified: Fri, 20 Oct 2023 16:34:44 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/images/ignore/flags/fr.png
91.206.38.179200 OK 99 B URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/images/ignore/flags/fr.png
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type PNG image data, 32 x 20, 2-bit colormap, non-interlaced\012- data
Hash c83313884746af6593a2c5316e2ee40b
23ffbfb6e7ee9b0e9d3bc8d875651700aa95adb5
eb8604c2cc9ff6fb296728c716d6894268500bf0119547a1e9efe9c16f8d80c7
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/images/ignore/flags/fr.png HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: image/png
content-length: 99
last-modified: Fri, 20 Oct 2023 16:34:44 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/images/ignore/flags/de.png
91.206.38.179200 OK 99 B URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/images/ignore/flags/de.png
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type PNG image data, 32 x 20, 2-bit colormap, non-interlaced\012- data
Hash ce1c806317987f0d189dd089cc662a35
18373c247ee35cd86074f8a3c7511165a5b222fd
82df55ae8608770bc968b86b406ba8dd5a39bee56ef1a48bc7d93e9919e867f9
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/images/ignore/flags/de.png HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: image/png
content-length: 99
last-modified: Fri, 20 Oct 2023 16:34:44 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/fonts/Delivery_W_Bd-7637928007.woff2
91.206.38.179200 OK 34 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/fonts/Delivery_W_Bd-7637928007.woff2
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type Web Open Font Format (Version 2), TrueType, length 33808, version 1.66\012- data
Hash 7637928007dc8ed18d0c789995aa2af2
421ccda189112cb40cdf3fff8fb20f5f840e3dfc
62cf91563ce604e4d98e2e0e479f636cb95f505eccae77e14da46bc28f8cedfc
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/fonts/Delivery_W_Bd-7637928007.woff2 HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/content/css/main-c059a0a9a2.css
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: application/octet-stream
content-length: 33808
last-modified: Fri, 20 Oct 2023 16:34:42 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/fonts/Delivery_W_Rg-3bbcc3a3f3.woff2
91.206.38.179200 OK 34 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/fonts/Delivery_W_Rg-3bbcc3a3f3.woff2
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type Web Open Font Format (Version 2), TrueType, length 33604, version 1.66\012- data
Hash 3bbcc3a3f3979bcd9c2842f97b2c748c
dfcca250f17cc18e127bc780af6309c10baa12de
571e1a3904a7324bd4a06b8d87f474c79f18ada3e25d6f3cba5f5b4179793cda
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/fonts/Delivery_W_Rg-3bbcc3a3f3.woff2 HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/content/css/main-c059a0a9a2.css
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: application/octet-stream
content-length: 33603
last-modified: Fri, 20 Oct 2023 16:34:42 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/fonts/fontawesome-webfont-c559fcc74f.woff2?v=4.6.3
91.206.38.179200 OK 77 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/fonts/fontawesome-webfont-c559fcc74f.woff2?v=4.6.3
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash c559fcc74ff2037d8e94e800e98538b6
598c13c9d6b64d3089f4a2a84fb6964cbd5b46c3
9278f630bfea2530b8273089cb8e51aa1048ec25c04efad95dfa3166f460cc5e
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/fonts/fontawesome-webfont-c559fcc74f.woff2?v=4.6.3 HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/content/css/main-c059a0a9a2.css
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: application/octet-stream
content-length: 77159
last-modified: Fri, 20 Oct 2023 16:34:42 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/fonts/dhlicons-d273de87b9.ttf
91.206.38.179200 OK 8.0 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/fonts/dhlicons-d273de87b9.ttf
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, dhlicons \012- data
Hash d273de87b98eed62c9055fc98b418757
8bce2218f15a7a7b305ca1218c4283d709f3db0d
dfc3c6bda2597985c3aa2387d9f2f158969742cee11356698967a98d7d60e7f3
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/fonts/dhlicons-d273de87b9.ttf HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/content/css/main-c059a0a9a2.css
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: application/octet-stream
content-length: 8032
last-modified: Fri, 20 Oct 2023 16:34:40 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/fonts/glyphicons-halflings-regular-448c34a56d.woff2
91.206.38.179200 OK 18 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/fonts/glyphicons-halflings-regular-448c34a56d.woff2
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Hash 448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/fonts/glyphicons-halflings-regular-448c34a56d.woff2 HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/content/vendor/vendor-9981f69eeb.css
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: application/octet-stream
content-length: 18028
last-modified: Fri, 20 Oct 2023 16:34:42 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/fonts/Delivery_W_Rg-03f859bf58.woff
91.206.38.179200 OK 41 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/fonts/Delivery_W_Rg-03f859bf58.woff
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type Web Open Font Format, TrueType, length 41084, version 1.66\012- data
Hash 03f859bf58e4d37841070de34be7d978
3436d4fa17e7ee470c3d62b08787cfa7de408408
5af5c3746b03792640b9cafdabddfb2c5407f72988e128541a88fa439607d940
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/fonts/Delivery_W_Rg-03f859bf58.woff HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/content/css/main-c059a0a9a2.css
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: application/octet-stream
content-length: 41084
last-modified: Fri, 20 Oct 2023 16:34:42 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/fonts/fontawesome-webfont-f3652b29b2.woff?v=4.6.3
91.206.38.179200 OK 98 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/fonts/fontawesome-webfont-f3652b29b2.woff?v=4.6.3
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type Web Open Font Format, TrueType, length 98024, version 4.7\012- data
Hash f3652b29b2153ecf20d925efbed9e3cd
c6f61c52e926a7ec4910e0297eeaf4ffd0eae034
56678081f8d20039bddf6eadab2b070b3d343d7014151f9990eb588cb49dad1e
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /content/fonts/fontawesome-webfont-f3652b29b2.woff?v=4.6.3 HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/content/css/main-c059a0a9a2.css
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: application/octet-stream
content-length: 98019
last-modified: Fri, 20 Oct 2023 16:34:42 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/content/fonts/fontawesome-webfont-b06871f281.ttf?v=4.6.3
91.206.38.179200 OK 166 kB URL GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/content/fonts/fontawesome-webfont-b06871f281.ttf?v=4.6.3
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Requested by https://dhl.nl.qas-benelux.edistrada.pl/
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type TrueType Font data, 13 tables, 1st "FFTM", 24 names, Macintosh\012- data
Size 166 kB (165548 bytes)
Hash b06871f281fee6b241d60582ae9369b9
13b1eab65a983c7a73bc7997c479d66943f7c6cb
aa58f33f239a0fb02f5c7a6c45c043d7a9ac9a093335806694ecd6d4edc0d6a8
GET /content/fonts/fontawesome-webfont-b06871f281.ttf?v=4.6.3 HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.nl.qas-benelux.edistrada.pl/content/css/main-c059a0a9a2.css
Cookie: NG_TRANSLATE_LANG_KEY=%22nl%22; JSESSIONID=C95960D0A1DEFE05E1FB79F5D2EBA310
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:12 GMT
content-type: application/octet-stream
content-length: 165548
last-modified: Fri, 20 Oct 2023 16:34:42 GMT
accept-ranges: bytes
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dhl.nl.qas-benelux.edistrada.pl/
91.206.38.179200 OK 1.2 kB URL User Request GET HTTP/2 dhl.nl.qas-benelux.edistrada.pl/
IP 91.206.38.179:443
ASN #20889 All for One sp. z o.o.
Certificate IssuerLet's Encrypt
Subjectdhl.nl.qas-benelux.edistrada.pl
Fingerprint40:0E:59:21:F4:2D:2E:5D:E6:AA:AC:CD:55:6E:BD:7E:8C:60:36:4B
ValidityTue, 26 Sep 2023 13:41:03 GMT - Mon, 25 Dec 2023 13:41:02 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1243), with no line terminators
Hash 45b3e8734b8106d7bc47851e8ac806d9
577e78355062f673272ae915b410fb6c98eb34f8
cc967f10ff1b46db3dfc2ea9a2e26e1904a664350aa7c353d9d257b42100c37d
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET / HTTP/1.1
Host: dhl.nl.qas-benelux.edistrada.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 22 Nov 2023 14:35:11 GMT
content-type: text/html
last-modified: Fri, 20 Oct 2023 16:35:16 GMT
server: SNP PROXY 2.0.1a
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2