| notice.redundancy-payments.org.uk/static/public/assets/images/govuk-apple-touch-icon-180x180.png |  20.39.208.24 | 200 OK | 3.5 kB |
URL GET HTTP/1.1notice.redundancy-payments.org.uk/static/public/assets/images/govuk-apple-touch-icon-180x180.png IP20.39.208.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://notice.redundancy-payments.org.uk/claims/start CertificateIssuerLet's Encrypt Subjectida-cs-prod.redundancy-payments.org.uk Fingerprint91:5F:35:CC:B2:22:5C:9F:78:CD:01:D7:39:62:C9:75:09:3C:5B:B2 ValidityThu, 04 Apr 2024 00:48:35 GMT - Wed, 03 Jul 2024 00:48:34 GMT
File typePNG image data, 180 x 180, 8-bit colormap, non-interlaced Hasha0f7e1b728a42016b247dc54ee40d055 f02b551f1af5d4ef5bc4aee07da9a6e36a3f9037 ea1cbb1cbbeddfff275dfa6e8e46b84cd530892df79dc4882a8f99b802b49a90
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | HM Revenue & Customs |
GET /static/public/assets/images/govuk-apple-touch-icon-180x180.png HTTP/1.1
Host: notice.redundancy-payments.org.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notice.redundancy-payments.org.uk/claims/start
Cookie: _csrf_token=002ad8781c9fe74b0066748c0baa6a2cd49ab5fafabea768270e067c6fdaa5ea; session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: image/png
Content-Length: 3503
Connection: keep-alive
Last-Modified: Tue, 16 Aug 2022 06:42:03 GMT
Cache-Control: public, max-age=43200
Expires: Wed, 17 Apr 2024 05:08:43 GMT
ETag: "1660632123.0890522-3503-2454793242"
Date: Tue, 16 Apr 2024 17:08:43 GMT
Set-Cookie: session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ; Expires=Tue, 16-Apr-2024 17:38:43 GMT; Secure; HttpOnly; Path=/
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
| notice.redundancy-payments.org.uk/static/public/assets/images/favicon.ico | 20.39.208.24 | 200 OK | 6.3 kB |
URL GET HTTP/1.1notice.redundancy-payments.org.uk/static/public/assets/images/favicon.ico IP20.39.208.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://notice.redundancy-payments.org.uk/claims/start CertificateIssuerLet's Encrypt Subjectida-cs-prod.redundancy-payments.org.uk Fingerprint91:5F:35:CC:B2:22:5C:9F:78:CD:01:D7:39:62:C9:75:09:3C:5B:B2 ValidityThu, 04 Apr 2024 00:48:35 GMT - Wed, 03 Jul 2024 00:48:34 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 4 bits/pixel, 32x32, 8 bits/pixel Hashde7abc5226925203ac10b0a4a94af949 f56cdbb947dae5ef70f410639c06c034bc2db511 6921a31b023a41929073393bdad00077436c3835994079bcd2e437261875b2fc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | HM Revenue & Customs |
GET /static/public/assets/images/favicon.ico HTTP/1.1
Host: notice.redundancy-payments.org.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notice.redundancy-payments.org.uk/claims/start
Cookie: _csrf_token=002ad8781c9fe74b0066748c0baa6a2cd49ab5fafabea768270e067c6fdaa5ea; session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: image/vnd.microsoft.icon
Content-Length: 6318
Connection: keep-alive
Last-Modified: Tue, 16 Aug 2022 06:42:03 GMT
Cache-Control: public, max-age=43200
Expires: Wed, 17 Apr 2024 05:08:43 GMT
ETag: "1660632123.0890522-6318-3919717518"
Date: Tue, 16 Apr 2024 17:08:43 GMT
Set-Cookie: session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ; Expires=Tue, 16-Apr-2024 17:38:43 GMT; Secure; HttpOnly; Path=/
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
| notice.redundancy-payments.org.uk/static/public/assets/images/govuk-crest.png | 20.39.208.24 | 200 OK | 3.6 kB |
URL GET HTTP/1.1notice.redundancy-payments.org.uk/static/public/assets/images/govuk-crest.png IP20.39.208.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://notice.redundancy-payments.org.uk/claims/start CertificateIssuerLet's Encrypt Subjectida-cs-prod.redundancy-payments.org.uk Fingerprint91:5F:35:CC:B2:22:5C:9F:78:CD:01:D7:39:62:C9:75:09:3C:5B:B2 ValidityThu, 04 Apr 2024 00:48:35 GMT - Wed, 03 Jul 2024 00:48:34 GMT
File typePNG image data, 125 x 102, 8-bit colormap, non-interlaced Hashbcd5768bd7721641ee71ba103bb38900 42a8d445a3446dee17cc6684ea055703e490bf5e bb9e22aff7881b895c2ceb41d9340804451c474b883f09fe1b4026e76456f44b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | HM Revenue & Customs |
GET /static/public/assets/images/govuk-crest.png HTTP/1.1
Host: notice.redundancy-payments.org.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notice.redundancy-payments.org.uk/static/public/stylesheets/inss.css
Cookie: _csrf_token=002ad8781c9fe74b0066748c0baa6a2cd49ab5fafabea768270e067c6fdaa5ea; session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: image/png
Content-Length: 3584
Connection: keep-alive
Last-Modified: Tue, 16 Aug 2022 06:42:03 GMT
Cache-Control: public, max-age=43200
Expires: Wed, 17 Apr 2024 05:08:43 GMT
ETag: "1660632123.0890522-3584-2155161132"
Date: Tue, 16 Apr 2024 17:08:43 GMT
Set-Cookie: session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ; Expires=Tue, 16-Apr-2024 17:38:43 GMT; Secure; HttpOnly; Path=/
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
| notice.redundancy-payments.org.uk/static/public/assets/fonts/bold-affa96571d-v2.woff | 20.39.208.24 | 200 OK | 41 kB |
URL GET HTTP/1.1notice.redundancy-payments.org.uk/static/public/assets/fonts/bold-affa96571d-v2.woff IP20.39.208.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://notice.redundancy-payments.org.uk/claims/start CertificateIssuerLet's Encrypt Subjectida-cs-prod.redundancy-payments.org.uk Fingerprint91:5F:35:CC:B2:22:5C:9F:78:CD:01:D7:39:62:C9:75:09:3C:5B:B2 ValidityThu, 04 Apr 2024 00:48:35 GMT - Wed, 03 Jul 2024 00:48:34 GMT
File typeWeb Open Font Format, TrueType, length 40816, version 1.0 Hashaffa96571d94a9ab7d95b0850b26edde 1117d82d9030e93f62e8c70b525097c1b1801138 5a2a925237869837d1afdd0a70ffded0717296d2d25885865d19c0da7f3ece5d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | HM Revenue & Customs |
GET /static/public/assets/fonts/bold-affa96571d-v2.woff HTTP/1.1
Host: notice.redundancy-payments.org.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://notice.redundancy-payments.org.uk/static/public/stylesheets/inss.css
Cookie: _csrf_token=002ad8781c9fe74b0066748c0baa6a2cd49ab5fafabea768270e067c6fdaa5ea; session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: font/woff
Content-Length: 40816
Connection: keep-alive
Last-Modified: Tue, 16 Aug 2022 06:42:03 GMT
Cache-Control: public, max-age=43200
Expires: Wed, 17 Apr 2024 05:08:43 GMT
ETag: "1660632123.0770519-40816-2261329780"
Date: Tue, 16 Apr 2024 17:08:43 GMT
Set-Cookie: session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ; Expires=Tue, 16-Apr-2024 17:38:43 GMT; Secure; HttpOnly; Path=/
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
| notice.redundancy-payments.org.uk/static/public/assets/fonts/light-94a07e06a1-v2.woff2 | 20.39.208.24 | 404 NOT FOUND | 53 kB |
URL GET HTTP/1.1notice.redundancy-payments.org.uk/static/public/assets/fonts/light-94a07e06a1-v2.woff2 IP20.39.208.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://notice.redundancy-payments.org.uk/claims/start CertificateIssuerLet's Encrypt Subjectida-cs-prod.redundancy-payments.org.uk Fingerprint91:5F:35:CC:B2:22:5C:9F:78:CD:01:D7:39:62:C9:75:09:3C:5B:B2 ValidityThu, 04 Apr 2024 00:48:35 GMT - Wed, 03 Jul 2024 00:48:34 GMT
Hashfaf8e2a2b2dfb8f994050d873eaef37a afe01a905e1dbac331cfa4721cb18f405d4be26a bd74c40aa89efb565dcf18af2330bdbdfc5d445494959bf34bbdd716917f9a74
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | HM Revenue & Customs |
GET /static/public/assets/fonts/light-94a07e06a1-v2.woff2 HTTP/1.1
Host: notice.redundancy-payments.org.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://notice.redundancy-payments.org.uk/static/public/stylesheets/inss.css
Cookie: _csrf_token=002ad8781c9fe74b0066748c0baa6a2cd49ab5fafabea768270e067c6fdaa5ea; session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 NOT FOUND
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 16 Apr 2024 17:08:43 GMT
Content-Type: text/html; charset=utf-8
Set-Cookie: session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ; Expires=Tue, 16-Apr-2024 17:38:43 GMT; Secure; HttpOnly; Path=/
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
| notice.redundancy-payments.org.uk/static/public/assets/fonts/bold-b542beb274-v2.woff2 | 20.39.208.24 | 404 NOT FOUND | 16 kB |
URL GET HTTP/1.1notice.redundancy-payments.org.uk/static/public/assets/fonts/bold-b542beb274-v2.woff2 IP20.39.208.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://notice.redundancy-payments.org.uk/claims/start CertificateIssuerLet's Encrypt Subjectida-cs-prod.redundancy-payments.org.uk Fingerprint91:5F:35:CC:B2:22:5C:9F:78:CD:01:D7:39:62:C9:75:09:3C:5B:B2 ValidityThu, 04 Apr 2024 00:48:35 GMT - Wed, 03 Jul 2024 00:48:34 GMT
Hash5fe36419fd4fab83aa07a2ad3adce473 be4300fee57c842d495652884e97fa998e0d627b 07dfd2511004a0b65cf63e01f776bdf3c8a82e8ccf2286f2e649026e708d6c77
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | HM Revenue & Customs |
GET /static/public/assets/fonts/bold-b542beb274-v2.woff2 HTTP/1.1
Host: notice.redundancy-payments.org.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://notice.redundancy-payments.org.uk/static/public/stylesheets/inss.css
Cookie: _csrf_token=002ad8781c9fe74b0066748c0baa6a2cd49ab5fafabea768270e067c6fdaa5ea; session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 NOT FOUND
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 16 Apr 2024 17:08:43 GMT
Content-Type: text/html; charset=utf-8
Set-Cookie: session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ; Expires=Tue, 16-Apr-2024 17:38:43 GMT; Secure; HttpOnly; Path=/
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
| notice.redundancy-payments.org.uk/claims/start | 20.39.208.24 | 200 OK | 17 kB |
URL User Request GET HTTP/1.1notice.redundancy-payments.org.uk/claims/start IP20.39.208.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerLet's Encrypt Subjectida-cs-prod.redundancy-payments.org.uk Fingerprint91:5F:35:CC:B2:22:5C:9F:78:CD:01:D7:39:62:C9:75:09:3C:5B:B2 ValidityThu, 04 Apr 2024 00:48:35 GMT - Wed, 03 Jul 2024 00:48:34 GMT
Hashd5ec60803577acafa97892f3edfa5fd1 9822fb2d3a5537bfa3926141c62b23cdcc646559 c743cc6ff4a99afb8864926e4fa15bdec13aae8e56b11f950c769d0a73a250aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | HM Revenue & Customs |
GET /claims/start HTTP/1.1
Host: notice.redundancy-payments.org.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: _csrf_token=002ad8781c9fe74b0066748c0baa6a2cd49ab5fafabea768270e067c6fdaa5ea; session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 16 Apr 2024 17:08:42 GMT
Content-Type: text/html; charset=utf-8
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Vary: Cookie
Set-Cookie: _csrf_token=002ad8781c9fe74b0066748c0baa6a2cd49ab5fafabea768270e067c6fdaa5ea; Expires=Sun, 21-Apr-2024 17:08:42 GMT; Max-Age=432000; Secure; HttpOnly; Path=/; SameSite=Lax
session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ; Expires=Tue, 16-Apr-2024 17:38:42 GMT; Secure; HttpOnly; Path=/
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
| notice.redundancy-payments.org.uk/ | 20.39.208.24 | 302 FOUND | 12 kB |
URL User Request GET HTTP/1.1notice.redundancy-payments.org.uk/ IP20.39.208.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerLet's Encrypt Subjectida-cs-prod.redundancy-payments.org.uk Fingerprint91:5F:35:CC:B2:22:5C:9F:78:CD:01:D7:39:62:C9:75:09:3C:5B:B2 ValidityThu, 04 Apr 2024 00:48:35 GMT - Wed, 03 Jul 2024 00:48:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | HM Revenue & Customs |
GET / HTTP/1.1
Host: notice.redundancy-payments.org.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 FOUND
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 16 Apr 2024 17:08:42 GMT
Content-Type: text/html; charset=utf-8
Location: https://notice.redundancy-payments.org.uk/claims/start
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Refresh: 1815
Vary: Cookie
Set-Cookie: _csrf_token=002ad8781c9fe74b0066748c0baa6a2cd49ab5fafabea768270e067c6fdaa5ea; Expires=Sun, 21-Apr-2024 17:08:42 GMT; Max-Age=432000; Secure; HttpOnly; Path=/; SameSite=Lax
session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ; Expires=Tue, 16-Apr-2024 17:38:42 GMT; Secure; HttpOnly; Path=/
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
| notice.redundancy-payments.org.uk/static/public/stylesheets/inss.css | 20.39.208.24 | 200 OK | 109 kB |
URL GET HTTP/1.1notice.redundancy-payments.org.uk/static/public/stylesheets/inss.css IP20.39.208.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://notice.redundancy-payments.org.uk/claims/start CertificateIssuerLet's Encrypt Subjectida-cs-prod.redundancy-payments.org.uk Fingerprint91:5F:35:CC:B2:22:5C:9F:78:CD:01:D7:39:62:C9:75:09:3C:5B:B2 ValidityThu, 04 Apr 2024 00:48:35 GMT - Wed, 03 Jul 2024 00:48:34 GMT
Size109 kB (109094 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | HM Revenue & Customs |
GET /static/public/stylesheets/inss.css HTTP/1.1
Host: notice.redundancy-payments.org.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notice.redundancy-payments.org.uk/claims/start
Cookie: _csrf_token=002ad8781c9fe74b0066748c0baa6a2cd49ab5fafabea768270e067c6fdaa5ea; session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/css; charset=utf-8
Last-Modified: Tue, 16 Aug 2022 06:42:03 GMT
Cache-Control: public, max-age=43200
Expires: Wed, 17 Apr 2024 05:08:42 GMT
ETag: "1660632123.1770544-109094-991896312"
Date: Tue, 16 Apr 2024 17:08:42 GMT
Set-Cookie: session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ; Expires=Tue, 16-Apr-2024 17:38:42 GMT; Secure; HttpOnly; Path=/
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
| notice.redundancy-payments.org.uk/static/public/javascripts/all.js | 20.39.208.24 | 200 OK | 88 kB |
URL GET HTTP/1.1notice.redundancy-payments.org.uk/static/public/javascripts/all.js IP20.39.208.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://notice.redundancy-payments.org.uk/claims/start CertificateIssuerLet's Encrypt Subjectida-cs-prod.redundancy-payments.org.uk Fingerprint91:5F:35:CC:B2:22:5C:9F:78:CD:01:D7:39:62:C9:75:09:3C:5B:B2 ValidityThu, 04 Apr 2024 00:48:35 GMT - Wed, 03 Jul 2024 00:48:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | HM Revenue & Customs |
GET /static/public/javascripts/all.js HTTP/1.1
Host: notice.redundancy-payments.org.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notice.redundancy-payments.org.uk/claims/start
Cookie: _csrf_token=002ad8781c9fe74b0066748c0baa6a2cd49ab5fafabea768270e067c6fdaa5ea; session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 16 Aug 2022 06:42:03 GMT
Cache-Control: public, max-age=43200
Expires: Wed, 17 Apr 2024 05:08:42 GMT
ETag: "1660632123.157054-87820-4081197557"
Date: Tue, 16 Apr 2024 17:08:42 GMT
Set-Cookie: session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ; Expires=Tue, 16-Apr-2024 17:38:42 GMT; Secure; HttpOnly; Path=/
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
| notice.redundancy-payments.org.uk/static/public/assets/fonts/light-f591b13f7d-v2.woff | 20.39.208.24 | 200 OK | 43 kB |
URL GET HTTP/1.1notice.redundancy-payments.org.uk/static/public/assets/fonts/light-f591b13f7d-v2.woff IP20.39.208.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://notice.redundancy-payments.org.uk/claims/start CertificateIssuerLet's Encrypt Subjectida-cs-prod.redundancy-payments.org.uk Fingerprint91:5F:35:CC:B2:22:5C:9F:78:CD:01:D7:39:62:C9:75:09:3C:5B:B2 ValidityThu, 04 Apr 2024 00:48:35 GMT - Wed, 03 Jul 2024 00:48:34 GMT
File typeWeb Open Font Format, TrueType, length 43425, version 1.2 Hashf591b13f7daad512cf0dfa0ddcb2960e 3ddaa91b2256c7aab9786d3e2b4c97abedc91930 091aa3008e57dfeea899e33243c1d4ea95bab658f1cc2191679193bcbfac0b7b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | HM Revenue & Customs |
GET /static/public/assets/fonts/light-f591b13f7d-v2.woff HTTP/1.1
Host: notice.redundancy-payments.org.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://notice.redundancy-payments.org.uk/static/public/stylesheets/inss.css
Cookie: _csrf_token=002ad8781c9fe74b0066748c0baa6a2cd49ab5fafabea768270e067c6fdaa5ea; session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: font/woff
Content-Length: 43425
Connection: keep-alive
Last-Modified: Tue, 16 Aug 2022 06:42:03 GMT
Cache-Control: public, max-age=43200
Expires: Wed, 17 Apr 2024 05:08:43 GMT
ETag: "1660632123.0770519-43425-2908235705"
Date: Tue, 16 Apr 2024 17:08:43 GMT
Set-Cookie: session=6e01309a-eb83-4398-b0a9-099de69cb15c.QCRHoIFETdXbwEoHHGmNESj5YTQ; Expires=Tue, 16-Apr-2024 17:38:43 GMT; Secure; HttpOnly; Path=/
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|