LeakIX - Host vas-tops2-stg.cbre.com

Open service 2a02:26f0:480:23::1726:6290:443 · vas-tops2-stg.cbre.com

2026-01-02 14:26

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Tue, 25 Nov 2025 06:46:29 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
Server: AmazonS3
ETag: W/"7a2f982dfa86372ffbb2647448bcf1de"
X-Amz-Cf-Pop: FRA60-P12
X-Amz-Cf-Id: VnVV3KvZTc6Els_hJbrC9OTcjGP4wN9JtlWvk9keH4eH3iew4lZ77w==
Vary: origin
Expires: Fri, 02 Jan 2026 14:26:02 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 14:26:02 GMT
Content-Length: 5394
Connection: close
Alt-Svc: h3=":443"; ma=93600
Akamai-GRN: 0.cc632617.1767363962.5437f0d0
Strict-Transport-Security: max-age=86400

Page title: TOPS2

<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>TOPS2</title>
  <style type="text/css">
    @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-regular.woff2') format('woff2');
    font-weight: 400;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-semibold.woff2') format('woff2');
    font-weight: 600;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-medium.woff2') format('woff2');
    font-weight: 500;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-light.woff2') format('woff2');
    font-weight: 300;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-bold.woff2') format('woff2');
    font-weight: 700;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-regular-italic.woff2') format('woff2');
    font-weight: 400;
    font-style: italic;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-light-italic.woff2') format('woff2');
    font-weight: 300;
    font-style: italic;
  }
  </style>
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900">
  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css">
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Material+Icons+Round">



  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.13.7/runtime.min.js"></script>
  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->

  <meta http-equiv="Content-Security-Policy"
    content="default-src 'self' https: localhost:* data:; script-src  blob: 'unsafe-inline' 'unsafe-eval' http: localhost:* https: localhost:*; connect-src https: localhost:* ws://localhost:* wss://ws-apigtw.tops2-dev.cbre.com wss://ws-apigtw.tops2-uat.cbre.com wss://ws-apigtw.tops2.cbre.com https://cbre.palantirfoundry.com; style-src 'unsafe-inline' https:; object-src 'none';">
  <meta name="importmap-type" content="systemjs-importmap" />
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
    <script type="systemjs-importmap"
      src="https://vas-tops2-stg.cbre.com/application/import-map.json"></script>
    

      <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@5.9.0/lib/system/single-spa.min.js" as="script">

      <!-- Add your organization's prod import map URL to this script's src  -->
      <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->
      




          <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-s

Found 2026-01-02 by HttpPlugin

Create report

Open service 2a02:26f0:480:23::1726:628c:80 · vas-tops2-stg.cbre.com

2026-01-02 14:25

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://vas-tops2-stg.cbre.com/
Expires: Fri, 02 Jan 2026 14:26:03 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 14:26:03 GMT
Connection: close
Akamai-GRN: 0.cc632617.1767363963.5437f529

Found 2026-01-02 by HttpPlugin

Create report

Open service 2a02:26f0:480:23::1726:628c:443 · vas-tops2-stg.cbre.com

2026-01-02 14:25

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Tue, 25 Nov 2025 06:46:29 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
Server: AmazonS3
ETag: W/"7a2f982dfa86372ffbb2647448bcf1de"
X-Amz-Cf-Pop: FRA60-P12
X-Amz-Cf-Id: xwVu6ObtEN-vNOjh6RE-K2BSr9mdLxBp_sxLjpaFnf6UcdtiqVz9fQ==
Vary: origin
Expires: Fri, 02 Jan 2026 14:25:59 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 14:25:59 GMT
Content-Length: 5394
Connection: close
Alt-Svc: h3=":443"; ma=93600
Akamai-GRN: 0.d0632617.1767363959.31781f6d
Strict-Transport-Security: max-age=86400

Page title: TOPS2

<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>TOPS2</title>
  <style type="text/css">
    @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-regular.woff2') format('woff2');
    font-weight: 400;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-semibold.woff2') format('woff2');
    font-weight: 600;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-medium.woff2') format('woff2');
    font-weight: 500;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-light.woff2') format('woff2');
    font-weight: 300;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-bold.woff2') format('woff2');
    font-weight: 700;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-regular-italic.woff2') format('woff2');
    font-weight: 400;
    font-style: italic;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-light-italic.woff2') format('woff2');
    font-weight: 300;
    font-style: italic;
  }
  </style>
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900">
  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css">
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Material+Icons+Round">



  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.13.7/runtime.min.js"></script>
  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->

  <meta http-equiv="Content-Security-Policy"
    content="default-src 'self' https: localhost:* data:; script-src  blob: 'unsafe-inline' 'unsafe-eval' http: localhost:* https: localhost:*; connect-src https: localhost:* ws://localhost:* wss://ws-apigtw.tops2-dev.cbre.com wss://ws-apigtw.tops2-uat.cbre.com wss://ws-apigtw.tops2.cbre.com https://cbre.palantirfoundry.com; style-src 'unsafe-inline' https:; object-src 'none';">
  <meta name="importmap-type" content="systemjs-importmap" />
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
    <script type="systemjs-importmap"
      src="https://vas-tops2-stg.cbre.com/application/import-map.json"></script>
    

      <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@5.9.0/lib/system/single-spa.min.js" as="script">

      <!-- Add your organization's prod import map URL to this script's src  -->
      <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->
      




          <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-s

Found 2026-01-02 by HttpPlugin

Create report

Open service 2.16.183.12:443 · vas-tops2-stg.cbre.com

2026-01-02 14:25

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Tue, 25 Nov 2025 06:46:29 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
Server: AmazonS3
ETag: W/"7a2f982dfa86372ffbb2647448bcf1de"
X-Amz-Cf-Pop: HAM50-P5
X-Amz-Cf-Id: nKJxkBvGRC9MloAqbEu3M8qDr6NrF1rjD9MbXrA-brKTXyll197Crw==
Vary: origin
Expires: Fri, 02 Jan 2026 14:26:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 14:26:00 GMT
Content-Length: 5394
Connection: close
Alt-Svc: h3=":443"; ma=93600
Akamai-GRN: 0.d81d1002.1767363960.d375a4ec
Strict-Transport-Security: max-age=86400

Page title: TOPS2

<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>TOPS2</title>
  <style type="text/css">
    @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-regular.woff2') format('woff2');
    font-weight: 400;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-semibold.woff2') format('woff2');
    font-weight: 600;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-medium.woff2') format('woff2');
    font-weight: 500;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-light.woff2') format('woff2');
    font-weight: 300;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-bold.woff2') format('woff2');
    font-weight: 700;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-regular-italic.woff2') format('woff2');
    font-weight: 400;
    font-style: italic;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-light-italic.woff2') format('woff2');
    font-weight: 300;
    font-style: italic;
  }
  </style>
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900">
  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css">
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Material+Icons+Round">



  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.13.7/runtime.min.js"></script>
  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->

  <meta http-equiv="Content-Security-Policy"
    content="default-src 'self' https: localhost:* data:; script-src  blob: 'unsafe-inline' 'unsafe-eval' http: localhost:* https: localhost:*; connect-src https: localhost:* ws://localhost:* wss://ws-apigtw.tops2-dev.cbre.com wss://ws-apigtw.tops2-uat.cbre.com wss://ws-apigtw.tops2.cbre.com https://cbre.palantirfoundry.com; style-src 'unsafe-inline' https:; object-src 'none';">
  <meta name="importmap-type" content="systemjs-importmap" />
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
    <script type="systemjs-importmap"
      src="https://vas-tops2-stg.cbre.com/application/import-map.json"></script>
    

      <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@5.9.0/lib/system/single-spa.min.js" as="script">

      <!-- Add your organization's prod import map URL to this script's src  -->
      <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->
      




          <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-s

Found 2026-01-02 by HttpPlugin

Create report

Open service 2.16.183.24:443 · vas-tops2-stg.cbre.com

2026-01-02 14:25

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Tue, 25 Nov 2025 06:46:29 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
Server: AmazonS3
ETag: W/"7a2f982dfa86372ffbb2647448bcf1de"
X-Amz-Cf-Pop: HAM50-P5
X-Amz-Cf-Id: 7PG8xHGGSto9dSktV6Bk9b64As9Rf2GsX7Ns4WZqn7WL_Cz2UgzUtw==
Vary: origin
Expires: Fri, 02 Jan 2026 14:26:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 14:26:00 GMT
Content-Length: 5394
Connection: close
Alt-Svc: h3=":443"; ma=93600
Akamai-GRN: 0.cc1d1002.1767363959.9c21d4ee
Strict-Transport-Security: max-age=86400

Page title: TOPS2

<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>TOPS2</title>
  <style type="text/css">
    @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-regular.woff2') format('woff2');
    font-weight: 400;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-semibold.woff2') format('woff2');
    font-weight: 600;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-medium.woff2') format('woff2');
    font-weight: 500;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-light.woff2') format('woff2');
    font-weight: 300;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-bold.woff2') format('woff2');
    font-weight: 700;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-regular-italic.woff2') format('woff2');
    font-weight: 400;
    font-style: italic;
  }

  @font-face {
    font-family: "Calibre-R";
    src: url('/fonts/calibre-r-web-light-italic.woff2') format('woff2');
    font-weight: 300;
    font-style: italic;
  }
  </style>
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900">
  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css">
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Material+Icons+Round">



  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.13.7/runtime.min.js"></script>
  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->

  <meta http-equiv="Content-Security-Policy"
    content="default-src 'self' https: localhost:* data:; script-src  blob: 'unsafe-inline' 'unsafe-eval' http: localhost:* https: localhost:*; connect-src https: localhost:* ws://localhost:* wss://ws-apigtw.tops2-dev.cbre.com wss://ws-apigtw.tops2-uat.cbre.com wss://ws-apigtw.tops2.cbre.com https://cbre.palantirfoundry.com; style-src 'unsafe-inline' https:; object-src 'none';">
  <meta name="importmap-type" content="systemjs-importmap" />
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
    <script type="systemjs-importmap"
      src="https://vas-tops2-stg.cbre.com/application/import-map.json"></script>
    

      <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@5.9.0/lib/system/single-spa.min.js" as="script">

      <!-- Add your organization's prod import map URL to this script's src  -->
      <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->
      




          <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-s

Found 2026-01-02 by HttpPlugin

Create report

Open service 2a02:26f0:480:23::1726:6290:80 · vas-tops2-stg.cbre.com

2026-01-02 14:25

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://vas-tops2-stg.cbre.com/
Expires: Fri, 02 Jan 2026 14:26:02 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 14:26:02 GMT
Connection: close
Akamai-GRN: 0.d0632617.1767363962.31782dc8

Found 2026-01-02 by HttpPlugin

Create report

Open service 2.16.183.12:80 · vas-tops2-stg.cbre.com

2026-01-02 14:25

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://vas-tops2-stg.cbre.com/
Expires: Fri, 02 Jan 2026 14:26:02 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 14:26:02 GMT
Connection: close
Akamai-GRN: 0.cc1d1002.1767363962.9c222509

Found 2026-01-02 by HttpPlugin

Create report

Open service 2.16.183.24:80 · vas-tops2-stg.cbre.com

2026-01-02 14:25

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://vas-tops2-stg.cbre.com/
Expires: Fri, 02 Jan 2026 14:26:02 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 14:26:02 GMT
Connection: close
Akamai-GRN: 0.d81d1002.1767363962.d375dd3b

Found 2026-01-02 by HttpPlugin

Domain vas-tops2-stg.cbre.com

Germany

Software information

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

vas-tops2-stg.cbre.com

Domain summary

IP summary