Report - secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639

Report Overview

Visited public
2023-08-23 09:16:50
Tags
URL
secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Finishing URL
secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
IP / ASN
54.83.101.48
#14618 AMAZON-AES
Title
Adobe-PDF Online

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-08-23 00:57:34	958 B	9.9 kB	142.250.74.74
firefox-settings-attachments.cdn.mozilla.net	11509	1998-01-31	2019-11-30 10:32:57	2023-08-23 00:22:18	402 B	818 kB	34.117.121.53
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-08-23 04:44:16	1.7 kB	70 kB	142.250.74.35
secureclick.fipsparcel.com	unknown	2013-06-20	2023-08-23 00:27:08	2023-08-23 05:38:12	4.9 kB	531 kB	100.24.100.138
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-08-22 18:12:05	2.3 kB	4.9 kB	142.250.74.131
www.googletagmanager.com	75	2011-11-11	2013-05-22 04:07:37	2023-08-23 04:45:54	903 B	146 kB	142.250.74.40

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-08-22	medium	secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639	Adobe Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	www.googletagmanager.com/gtag/js?id=UA-126808791-4	ScriptElement	183 kB	2023-08-23	2023-08-23
Pretty URL www.googletagmanager.com/gtag/js?id=UA-126808791-4 IP 142.250.74.40 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-23 11:12 Last Seen2023-08-23 11:23 Times Seen9 Hash 6576a8354e2e62b5842f0750c8966e64 5e11221d47bfbca70a75a4b53b4128395510a4ad c51c3a65f0fb09ae1f7ac2c7c8efa5bafe9413daa35ee6d1adb4a14c10613d6a Loading...

	secureclick.fipsparcel.com/system/content_files/uploads/dae/552/5f-/original/content-data-entry-boilerplate.js	ScriptElement	86 kB	2023-03-08	2025-05-05
Pretty URL secureclick.fipsparcel.com/system/content_files/uploads/dae/552/5f-/original/content-data-entry-boilerplate.js IP 54.83.101.48 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:38 Last Seen2025-05-05 18:09 Times Seen270 Hash 2e1aa7374d39fa64778859b1a8cbfbfe e0d91c61c4dd9ae3ca8fb085c53ae15b9eca7968 ec180d2bc1f49cde05d2dd6db4270f5cba1b7011a4b351c3c796bed587ef55b6 Loading...

	secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639	ScriptElement	0 B	0001-01-01	2025-06-10
Pretty URL secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639 IP 100.24.100.138 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-06-10 03:38 Times Seen4904470 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.google-analytics.com/analytics.js	ScriptElement	4.7 kB	2023-04-11	2025-06-10
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07 Last Seen2025-06-10 03:35 Times Seen351230 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

	www.googletagmanager.com/gtag/js?id=G-JPRZ9JVKLJ&l=dataLayer&cx=c	ScriptElement	222 kB	2023-08-23	2023-08-23
Pretty URL www.googletagmanager.com/gtag/js?id=G-JPRZ9JVKLJ&l=dataLayer&cx=c IP 142.250.74.40 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-23 11:15 Last Seen2023-08-23 11:23 Times Seen8 Hash 2dd04af3fc82ff465ae23be256a373b5 0f6cbe39429d2c80764fe09ce995c05e8f0c2c93 2ff76e66801371f9554ffe01f29813c954c1b85a276cfb304ed2728bc80d0df3 Loading...

	secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639	ScriptElement	0 B	0001-01-01	2025-06-10
Pretty URL secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639 IP 100.24.100.138 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-06-10 03:38 Times Seen4904470 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639	ScriptElement	0 B	0001-01-01	2025-06-10
Pretty URL secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639 IP 100.24.100.138 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-06-10 03:38 Times Seen4904470 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	secureclick.fipsparcel.com/system/content_files/uploads/8f2/ed2/42-/original/static-education-l10n.min.js	ScriptElement	6.3 kB	2023-03-08	2025-05-31
Pretty URL secureclick.fipsparcel.com/system/content_files/uploads/8f2/ed2/42-/original/static-education-l10n.min.js IP 54.83.101.48 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:38 Last Seen2025-05-31 15:04 Times Seen275 Hash 91fcc38fe563880842e269d2b7647b8b dc5d692fa7dc75b8a4bbcf0732d0978b3890e0c0 648d18f8adcfba7d26b20c51328a2d13dcabb8465d673073cefe45735c80bda3 Loading...

	secureclick.fipsparcel.com/f83a0b/sandbox%20eval%20code		147 B	2023-04-11	2025-06-10
Pretty URL secureclick.fipsparcel.com/f83a0b/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07 Last Seen2025-06-10 03:35 Times Seen351981 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

HTTP Transactions (23)

URL IP Response Size

secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639

100.24.100.138

200 OK

2.6 kB

URL User Request GET HTTP/1.1
secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
IP
100.24.100.138:443
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subject*.fipsparcel.com
Fingerprint68:69:26:07:34:96:03:5C:D9:C1:B4:18:6F:D0:93:B6:8C:0D:5A:F5
ValidityTue, 13 Jun 2023 05:10:03 GMT - Mon, 11 Sep 2023 05:10:02 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Size
2.6 kB (2649 bytes)
Hash
49bfe09c6cecf7f809f8ad741082d8bd
70b1e720255cc5af05a10270ef94aa7f34feca17
85c0dbd391ee5883b7c98594d2214945772f0c8c5f089d62c1aecb400fe2f4b5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Adobe Inc.

HTTP Headers

GET /f83a0b/2316d329-e729-45ca-ae67-9606b4af6639 HTTP/1.1
Host: secureclick.fipsparcel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
access-control-allow-origin: http://landing.phishme.com
cache-control: no-store
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 23 Aug 2023 09:16:32 GMT
etag: W/"85c0dbd391ee5883b7c98594d2214945-gzip"
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
server: Apache
set-cookie: _phishme.com_session_id=201deba534fd5ccdb7e0e0013bcfbb46; path=/; HttpOnly
status: 200 OK
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen, noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-request-id: 1c6b3bee-f236-4ef2-8e73-b5bc2a066d01
x-runtime: 0.042080
x-xss-protection: 1; mode=block
content-length: 2649

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
fe3c6afb87fc7601a2ae5ef6f3540beb
b68061a6ad86cadb48d981519e7fb411adc7fd8a
8e3468a903b89b9af4d8ebc9431fea4d92c58e2e646c87541b20c5611209aa5d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Aug 2023 09:16:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

secureclick.fipsparcel.com/system/content_files/uploads/26b/ad3/4b-/original/content-data-entry-boilerplate.min.css

100.24.100.138

200 OK

3.3 kB

URL GET HTTP/1.1
secureclick.fipsparcel.com/system/content_files/uploads/26b/ad3/4b-/original/content-data-entry-boilerplate.min.css
IP
100.24.100.138:443
ASN
#14618 AMAZON-AES

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerLet's Encrypt
Subject*.fipsparcel.com
Fingerprint68:69:26:07:34:96:03:5C:D9:C1:B4:18:6F:D0:93:B6:8C:0D:5A:F5
ValidityTue, 13 Jun 2023 05:10:03 GMT - Mon, 11 Sep 2023 05:10:02 GMT

File type
ASCII text, with very long lines (18290), with no line terminators
Size
3.3 kB (3341 bytes)
Hash
cde1906f54d9ea8c69be1488fad61743
bc35ba9b37e3e293ef57036210f5a71ac0e7001b
51829c6361406bbe6bbc441e575d760fb1ee39891a7729878b7d3304d4c1399c

HTTP Headers

GET /system/content_files/uploads/26b/ad3/4b-/original/content-data-entry-boilerplate.min.css HTTP/1.1
Host: secureclick.fipsparcel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
DNT: 1
Connection: keep-alive
Cookie: _phishme.com_session_id=201deba534fd5ccdb7e0e0013bcfbb46
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-encoding: gzip
content-type: text/css
date: Wed, 23 Aug 2023 09:16:33 GMT
etag: "4772-5dfc2cb005780-gzip"
expires: Wed, 23 Aug 2023 09:16:33 GMT
last-modified: Tue, 24 May 2022 14:30:06 GMT
server: Apache
vary: Accept-Encoding
x-download-options: noopen
content-length: 3341

www.googletagmanager.com/gtag/js?id=UA-126808791-4

142.250.74.40

200 OK

66 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=UA-126808791-4
IP
142.250.74.40:443
ASN
#15169 GOOGLE

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintCD:19:11:50:03:C9:31:CD:B2:32:E1:82:F6:AD:5A:C5:F5:E8:7F:CE
ValidityMon, 31 Jul 2023 08:16:43 GMT - Mon, 23 Oct 2023 08:16:42 GMT

File type
ASCII text, with very long lines (4179)
Size
66 kB (66536 bytes)
Hash
6576a8354e2e62b5842f0750c8966e64
5e11221d47bfbca70a75a4b53b4128395510a4ad
c51c3a65f0fb09ae1f7ac2c7c8efa5bafe9413daa35ee6d1adb4a14c10613d6a

HTTP Headers

GET /gtag/js?id=UA-126808791-4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secureclick.fipsparcel.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 23 Aug 2023 09:16:33 GMT
expires: Wed, 23 Aug 2023 09:16:33 GMT
cache-control: private, max-age=900
last-modified: Wed, 23 Aug 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 66536
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

secureclick.fipsparcel.com/system/content_files/uploads/d5e/4f7/68-/original/adobe-pdf-file-verification-styles.css

100.24.100.138

200 OK

1.5 kB

URL GET HTTP/1.1
secureclick.fipsparcel.com/system/content_files/uploads/d5e/4f7/68-/original/adobe-pdf-file-verification-styles.css
IP
100.24.100.138:443
ASN
#14618 AMAZON-AES

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerLet's Encrypt
Subject*.fipsparcel.com
Fingerprint68:69:26:07:34:96:03:5C:D9:C1:B4:18:6F:D0:93:B6:8C:0D:5A:F5
ValidityTue, 13 Jun 2023 05:10:03 GMT - Mon, 11 Sep 2023 05:10:02 GMT

File type
ASCII text, with CRLF line terminators
Size
1.5 kB (1498 bytes)
Hash
bc3b3e7680c5d43b6477be5822d43301
5c3f77fdd067c94376f568182adaf7d42159b984
6029d55d7bdf1d85780717a13a0e4ac6268c1da6cfc1b47e9212e2d658139d36

HTTP Headers

GET /system/content_files/uploads/d5e/4f7/68-/original/adobe-pdf-file-verification-styles.css HTTP/1.1
Host: secureclick.fipsparcel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
DNT: 1
Connection: keep-alive
Cookie: _phishme.com_session_id=201deba534fd5ccdb7e0e0013bcfbb46
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-encoding: gzip
content-type: text/css
date: Wed, 23 Aug 2023 09:16:33 GMT
etag: "14ee-5dfc2cb0f99c0-gzip"
expires: Wed, 23 Aug 2023 09:16:33 GMT
last-modified: Tue, 24 May 2022 14:30:07 GMT
server: Apache
vary: Accept-Encoding
x-download-options: noopen
content-length: 1498

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
fe3c6afb87fc7601a2ae5ef6f3540beb
b68061a6ad86cadb48d981519e7fb411adc7fd8a
8e3468a903b89b9af4d8ebc9431fea4d92c58e2e646c87541b20c5611209aa5d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Aug 2023 09:16:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
74eed3f5ba40ed8254fd560147072a3c
7e8836b3b7b3bdd43fc16c13f520912d9588901f
6c961d618eadd1e94ff53dd884d9c65078a8c7116c02a567c3b24d6ca81ad271

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Aug 2023 09:16:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;700&display=swap

142.250.74.74

200 OK

1.2 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;700&display=swap
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint2A:06:F9:5A:FD:FC:89:5C:D7:C5:CC:38:F0:25:78:FB:15:9F:5A:67
ValidityMon, 31 Jul 2023 08:22:19 GMT - Mon, 23 Oct 2023 08:22:18 GMT

File type
gzip compressed data, max compression\012- data
Size
1.2 kB (1206 bytes)
Hash
442129ecbacca09ec07add5b272232c3
af92a4091b7cd2d7f5d62cc8d4ca7614742a5fb7
3f6a190d84ccf6fb8105c2a4123d6a846c22220786ddd00877a006377662a1d3

HTTP Headers

GET /css2?family=Inter:wght@100;200;300;400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secureclick.fipsparcel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Aug 2023 09:16:33 GMT
date: Wed, 23 Aug 2023 09:16:33 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

secureclick.fipsparcel.com/system/content_files/uploads/8f2/ed2/42-/original/static-education-l10n.min.js

54.83.101.48

200 OK

2.0 kB

URL GET HTTP/1.1
secureclick.fipsparcel.com/system/content_files/uploads/8f2/ed2/42-/original/static-education-l10n.min.js
IP
54.83.101.48:443
ASN
#14618 AMAZON-AES

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerLet's Encrypt
Subject*.fipsparcel.com
Fingerprint68:69:26:07:34:96:03:5C:D9:C1:B4:18:6F:D0:93:B6:8C:0D:5A:F5
ValidityTue, 13 Jun 2023 05:10:03 GMT - Mon, 11 Sep 2023 05:10:02 GMT

File type
ASCII text, with very long lines (6328), with no line terminators
Size
2.0 kB (1960 bytes)
Hash
91fcc38fe563880842e269d2b7647b8b
dc5d692fa7dc75b8a4bbcf0732d0978b3890e0c0
648d18f8adcfba7d26b20c51328a2d13dcabb8465d673073cefe45735c80bda3

HTTP Headers

GET /system/content_files/uploads/8f2/ed2/42-/original/static-education-l10n.min.js HTTP/1.1
Host: secureclick.fipsparcel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
DNT: 1
Connection: keep-alive
Cookie: _phishme.com_session_id=201deba534fd5ccdb7e0e0013bcfbb46
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-encoding: gzip
content-type: application/javascript
date: Wed, 23 Aug 2023 09:16:33 GMT
etag: "18b8-5df59999f7180-gzip"
expires: Wed, 23 Aug 2023 09:16:33 GMT
last-modified: Thu, 19 May 2022 09:00:06 GMT
server: Apache
vary: Accept-Encoding
x-download-options: noopen
content-length: 1960

secureclick.fipsparcel.com/system/content_images/uploads/f6d/5c5/90-/original/document-icon.png

100.24.100.138

200 OK

433 B

URL GET HTTP/1.1
secureclick.fipsparcel.com/system/content_images/uploads/f6d/5c5/90-/original/document-icon.png
IP
100.24.100.138:443
ASN
#14618 AMAZON-AES

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerLet's Encrypt
Subject*.fipsparcel.com
Fingerprint68:69:26:07:34:96:03:5C:D9:C1:B4:18:6F:D0:93:B6:8C:0D:5A:F5
ValidityTue, 13 Jun 2023 05:10:03 GMT - Mon, 11 Sep 2023 05:10:02 GMT

File type
PNG image data, 84 x 100, 8-bit colormap, non-interlaced\012- data
Size
433 B (433 bytes)
Hash
2efaca0d37a5e9975694b035dfcacc59
6bd1cf3a6d34dee7509fbafdb49d08f921ea3eb3
8788e47f94ef44823a24b37013f8322b5f719ba8ce9c280549481f6b72c56eb7

HTTP Headers

GET /system/content_images/uploads/f6d/5c5/90-/original/document-icon.png HTTP/1.1
Host: secureclick.fipsparcel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
DNT: 1
Connection: keep-alive
Cookie: _phishme.com_session_id=201deba534fd5ccdb7e0e0013bcfbb46
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-type: image/png
date: Wed, 23 Aug 2023 09:16:33 GMT
etag: "1b1-5b0aaf67efe80"
expires: Wed, 23 Aug 2023 09:16:33 GMT
last-modified: Fri, 02 Oct 2020 07:20:10 GMT
server: Apache
x-download-options: noopen
content-length: 433

firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/6c7d9b78-4642-461c-9b2d-b802ccd7a1d5.bin

34.117.121.53

817 kB

URL
firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/6c7d9b78-4642-461c-9b2d-b802ccd7a1d5.bin
IP
34.117.121.53:0
ASN
#15169 GOOGLE

File type
data
Size
817 kB (817083 bytes)
Hash
6b5b15372ca108d4b33caf02ed016f3e
13df17583626a0987070dde4340f876d08c401c0
9c890391b90d43bf692755185bfa1780ee051467ae9a2775759d9866f4546664

HTTP Headers

GET /staging/addons-bloomfilters/6c7d9b78-4642-461c-9b2d-b802ccd7a1d5.bin HTTP/1.1
Host: firefox-settings-attachments.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-guploader-uploadid: ADPycds0RD5ChxdLubL7uDZ4DAuIBSTEPt5jZKbTHsk_XGlchn6p4bjsjJDs8ym9zDjaKctygbUCGRORUL0_glqKdzRphp3oremC
x-goog-generation: 1690223885754624
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 817083
x-goog-hash: crc32c=NmyCHA==, md5=a1sVNyyhCNSzPK8C7QFvPg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 817083
server: UploadServer
date: Sat, 19 Aug 2023 15:48:07 GMT
cache-control: public,max-age=604800
age: 322106
last-modified: Mon, 24 Jul 2023 18:38:05 GMT
etag: "6b5b15372ca108d4b33caf02ed016f3e"
content-type: application/octet-stream
alt-svc: clear
X-Firefox-Spdy: h2

secureclick.fipsparcel.com/system/content_files/uploads/dae/552/5f-/original/content-data-entry-boilerplate.js

54.83.101.48

200 OK

18 kB

URL GET HTTP/1.1
secureclick.fipsparcel.com/system/content_files/uploads/dae/552/5f-/original/content-data-entry-boilerplate.js
IP
54.83.101.48:443
ASN
#14618 AMAZON-AES

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerLet's Encrypt
Subject*.fipsparcel.com
Fingerprint68:69:26:07:34:96:03:5C:D9:C1:B4:18:6F:D0:93:B6:8C:0D:5A:F5
ValidityTue, 13 Jun 2023 05:10:03 GMT - Mon, 11 Sep 2023 05:10:02 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
18 kB (17552 bytes)
Hash
2e1aa7374d39fa64778859b1a8cbfbfe
e0d91c61c4dd9ae3ca8fb085c53ae15b9eca7968
ec180d2bc1f49cde05d2dd6db4270f5cba1b7011a4b351c3c796bed587ef55b6

HTTP Headers

GET /system/content_files/uploads/dae/552/5f-/original/content-data-entry-boilerplate.js HTTP/1.1
Host: secureclick.fipsparcel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
DNT: 1
Connection: keep-alive
Cookie: _phishme.com_session_id=201deba534fd5ccdb7e0e0013bcfbb46
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-encoding: gzip
content-type: application/javascript
date: Wed, 23 Aug 2023 09:16:33 GMT
etag: "150e9-5de403f6dffc0-gzip"
expires: Wed, 23 Aug 2023 09:16:33 GMT
last-modified: Thu, 05 May 2022 09:20:07 GMT
server: Apache
vary: Accept-Encoding
x-download-options: noopen
content-length: 17552

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
947600e4be53944e87b4f8079edc7e16
7599ce8b4e1d524805d08eac142d8c5e086a7600
746726d08cee31e4b98087500043497e8532e452f19bd02bd49278aef2a913a8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Aug 2023 09:16:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.googletagmanager.com/gtag/js?id=G-JPRZ9JVKLJ&l=dataLayer&cx=c

142.250.74.40

200 OK

79 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=G-JPRZ9JVKLJ&l=dataLayer&cx=c
IP
142.250.74.40:443
ASN
#15169 GOOGLE

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintCD:19:11:50:03:C9:31:CD:B2:32:E1:82:F6:AD:5A:C5:F5:E8:7F:CE
ValidityMon, 31 Jul 2023 08:16:43 GMT - Mon, 23 Oct 2023 08:16:42 GMT

File type
ASCII text, with very long lines (5857)
Size
79 kB (78782 bytes)
Hash
2dd04af3fc82ff465ae23be256a373b5
0f6cbe39429d2c80764fe09ce995c05e8f0c2c93
2ff76e66801371f9554ffe01f29813c954c1b85a276cfb304ed2728bc80d0df3

HTTP Headers

GET /gtag/js?id=G-JPRZ9JVKLJ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secureclick.fipsparcel.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 23 Aug 2023 09:16:33 GMT
expires: Wed, 23 Aug 2023 09:16:33 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 78782
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
947600e4be53944e87b4f8079edc7e16
7599ce8b4e1d524805d08eac142d8c5e086a7600
746726d08cee31e4b98087500043497e8532e452f19bd02bd49278aef2a913a8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Aug 2023 09:16:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
947600e4be53944e87b4f8079edc7e16
7599ce8b4e1d524805d08eac142d8c5e086a7600
746726d08cee31e4b98087500043497e8532e452f19bd02bd49278aef2a913a8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Aug 2023 09:16:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2

142.250.74.35

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintB4:FE:48:07:8D:40:C5:C8:CB:74:41:13:3F:8E:10:8B:6F:1C:F4:CB
ValidityMon, 31 Jul 2023 08:22:18 GMT - Mon, 23 Oct 2023 08:22:17 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14892, version 1.0\012- data
Size
15 kB (14892 bytes)
Hash
9ec6deaf6bada919e20b98f9f7b718b1
501d36403ad8205e4644532600019ecb10f5cb0a
7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762

HTTP Headers

GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secureclick.fipsparcel.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Aug 2023 07:39:48 GMT
expires: Thu, 22 Aug 2024 07:39:48 GMT
cache-control: public, max-age=31536000
age: 5805
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2

142.250.74.35

200 OK

38 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintB4:FE:48:07:8D:40:C5:C8:CB:74:41:13:3F:8E:10:8B:6F:1C:F4:CB
ValidityMon, 31 Jul 2023 08:22:18 GMT - Mon, 23 Oct 2023 08:22:17 GMT

File type
Web Open Font Format (Version 2), TrueType, length 37924, version 1.0\012- data
Size
38 kB (37924 bytes)
Hash
e08be6d5d433944f7ad52902e4d24db5
e2600c1d60d12d397b3ee44411a021231d71e974
450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e

HTTP Headers

GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secureclick.fipsparcel.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37924
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 18 Aug 2023 10:16:08 GMT
expires: Sat, 17 Aug 2024 10:16:08 GMT
cache-control: public, max-age=31536000
age: 428425
last-modified: Mon, 11 Jul 2022 20:54:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2

142.250.74.35

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintB4:FE:48:07:8D:40:C5:C8:CB:74:41:13:3F:8E:10:8B:6F:1C:F4:CB
ValidityMon, 31 Jul 2023 08:22:18 GMT - Mon, 23 Oct 2023 08:22:17 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14824, version 1.0\012- data
Size
15 kB (14824 bytes)
Hash
48598bad30f08e1c3eb3d0e69b420bd5
28c2cf160273c2062f909a875c4b4c0541ee2f84
ca57b79a870bbf54700730858603a70d79743779c1b059922ec401bfddc5adc9

HTTP Headers

GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secureclick.fipsparcel.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Aug 2023 15:13:33 GMT
expires: Fri, 16 Aug 2024 15:13:33 GMT
cache-control: public, max-age=31536000
age: 496980
last-modified: Thu, 01 Jun 2023 22:52:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
947600e4be53944e87b4f8079edc7e16
7599ce8b4e1d524805d08eac142d8c5e086a7600
746726d08cee31e4b98087500043497e8532e452f19bd02bd49278aef2a913a8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Aug 2023 09:16:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

secureclick.fipsparcel.com/system/content_images/uploads/a49/6c2/d7-/original/adobe-favicon.png

54.83.101.48

200 OK

3.4 kB

URL GET HTTP/1.1
secureclick.fipsparcel.com/system/content_images/uploads/a49/6c2/d7-/original/adobe-favicon.png
IP
54.83.101.48:443
ASN
#14618 AMAZON-AES

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerLet's Encrypt
Subject*.fipsparcel.com
Fingerprint68:69:26:07:34:96:03:5C:D9:C1:B4:18:6F:D0:93:B6:8C:0D:5A:F5
ValidityTue, 13 Jun 2023 05:10:03 GMT - Mon, 11 Sep 2023 05:10:02 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
3.4 kB (3373 bytes)
Hash
a1b24266f7b44ad83e0a53cca975bee9
bc0a9c4ae0a3631c036653f555908c283b837060
8e8cbbe84e3a50457e8398665c24162dcd17c3f3a2f43e464d40ea4ba96f4c37

HTTP Headers

GET /system/content_images/uploads/a49/6c2/d7-/original/adobe-favicon.png HTTP/1.1
Host: secureclick.fipsparcel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
DNT: 1
Connection: keep-alive
Cookie: _phishme.com_session_id=201deba534fd5ccdb7e0e0013bcfbb46
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-type: image/png
date: Wed, 23 Aug 2023 09:16:33 GMT
etag: "d2d-5de403fab08c0"
expires: Wed, 23 Aug 2023 09:16:33 GMT
last-modified: Thu, 05 May 2022 09:20:11 GMT
server: Apache
x-download-options: noopen
content-length: 3373

secureclick.fipsparcel.com/system/content_images/uploads/aa9/f9c/9b-/original/adobe-bg.png

100.24.100.138

200 OK

497 kB

URL GET HTTP/1.1
secureclick.fipsparcel.com/system/content_images/uploads/aa9/f9c/9b-/original/adobe-bg.png
IP
100.24.100.138:443
ASN
#14618 AMAZON-AES

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerLet's Encrypt
Subject*.fipsparcel.com
Fingerprint68:69:26:07:34:96:03:5C:D9:C1:B4:18:6F:D0:93:B6:8C:0D:5A:F5
ValidityTue, 13 Jun 2023 05:10:03 GMT - Mon, 11 Sep 2023 05:10:02 GMT

File type
PNG image data, 1600 x 1069, 8-bit colormap, non-interlaced\012- data
Size
497 kB (497022 bytes)
Hash
06774f93cf54dadc9bc565e0644f9059
4efaffafbb538b4d31df2ffc82a941b1c5695a3f
c148cb5e9bb46432e33d71140f95dbb35e4629eff7cfb2cc41387eb8d7633758

HTTP Headers

GET /system/content_images/uploads/aa9/f9c/9b-/original/adobe-bg.png HTTP/1.1
Host: secureclick.fipsparcel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secureclick.fipsparcel.com/system/content_files/uploads/d5e/4f7/68-/original/adobe-pdf-file-verification-styles.css
Cookie: _phishme.com_session_id=201deba534fd5ccdb7e0e0013bcfbb46
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-type: image/png
date: Wed, 23 Aug 2023 09:16:33 GMT
etag: "7957e-5afd031f8ca80"
expires: Wed, 23 Aug 2023 09:16:33 GMT
last-modified: Mon, 21 Sep 2020 10:20:10 GMT
server: Apache
x-download-options: noopen
content-length: 497022

fonts.googleapis.com/css2?family=Source+Sans+Pro:wght@300;400;600&display=swap

142.250.74.74

200 OK

7.4 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Source+Sans+Pro:wght@300;400;600&display=swap
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://secureclick.fipsparcel.com/f83a0b/2316d329-e729-45ca-ae67-9606b4af6639
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint2A:06:F9:5A:FD:FC:89:5C:D7:C5:CC:38:F0:25:78:FB:15:9F:5A:67
ValidityMon, 31 Jul 2023 08:22:19 GMT - Mon, 23 Oct 2023 08:22:18 GMT

File type
ASCII text, with very long lines (7601), with no line terminators
Size
7.4 kB (7412 bytes)
Hash
62c26f06ca1eddeab5f73f2bd84485ec
25c402a7e40dacab9514bb8b8b850b4e09e9c48c
db469f03896fb5a14e69b53e4e7491d3378b183860a16837d02bb742f3285a7c

HTTP Headers

GET /css2?family=Source+Sans+Pro:wght@300;400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secureclick.fipsparcel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Aug 2023 09:16:33 GMT
date: Wed, 23 Aug 2023 09:16:33 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (23)

URL User Request GET HTTP/1.1

IP

ASN