workforceclientconnect.com/ADP_files/CustomSkin_20820_P.css
200 OK 8.1 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/CustomSkin_20820_P.css
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash 2d7dc87a19b25aee93694e34dd369744
261ded02a1ad42a0821edd2b7d8e7d0062c7769e
dbab09483bf795642d667664689b878cdb172095d0ae11a726a288a16698ad42
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/CustomSkin_20820_P.css HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 8095
date: Sun, 24 Sep 2023 01:32:14 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:12 GMT
etag: "1f9f-5eafb3b0dbc00"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/Cobrowse_5.6.11.css
200 OK 71 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/Cobrowse_5.6.11.css
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash de57ff59954ddc2eee5ad930c37d9af7
26b54909986739c310252de9a07023a0cd61a6d3
b473f0246c3b8fd50fead6c4c36511873092b0419fe95950b570394c9dc25a31
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/Cobrowse_5.6.11.css HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 70616
date: Sun, 24 Sep 2023 01:32:14 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:12 GMT
etag: "113d8-5eafb3b0dbc00"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/env-config.json
200 OK 6.3 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/env-config.json
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash 3cbe39ac199b6822e7cc3b676dd539e5
6021f77d778ed878c2cc97b8887afa55d9e0c2ce
17effe9a7fefd789d6d67fbe3f76c7fc7433d37371fc9e41926563e4a3705fd3
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/env-config.json HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 6266
date: Sun, 24 Sep 2023 01:32:14 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:14 GMT
etag: "187a-5eafb3b2c4080"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/hashtable.js.download
200 OK 14 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/hashtable.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash 738fd2ace4e39c3b3d1d6a3818d2eac7
27bdc9af7243e2c96985de841312e471d9c28e7b
ef62646b0b21053bd22e4069e956d629cd4a64b4e35aeaaca0b522123b242c29
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/hashtable.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 13680
date: Sun, 24 Sep 2023 01:32:14 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:14 GMT
etag: "3570-5eafb3b2c4080"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/6a8f894227f41759348779077d1e5851.js.download
200 OK 245 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/6a8f894227f41759348779077d1e5851.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 245 kB (245283 bytes)
Hash 280faa4b3094358be92a2611ae9e18f3
97b0281bcbff6bb25f1baad984a798a01cb7d2de
ac75b358c3d5bad54437f1144af76d576fdefe762ff0081148006ad36b56a379
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/6a8f894227f41759348779077d1e5851.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 245283
date: Sun, 24 Sep 2023 01:32:14 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:14 GMT
etag: "3be23-5eafb3b2c4080"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/rsa.js.download
200 OK 36 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/rsa.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (1826)
Hash 96645e69ca6ce885a12f4a004116fab9
fb019e71f3f7fc29521c4d3dd183f68bfab38118
7a1e50d1786d26aa029aa0142df37416c1a9221e4adde8eeae7788cca74ea0c4
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/rsa.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 36167
date: Sun, 24 Sep 2023 01:32:14 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:16 GMT
etag: "8d47-5eafb3b4ac500"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/fp-clientlib-v4.js.download
200 OK 2.4 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/fp-clientlib-v4.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (2418), with no line terminators
Hash 578ae0e375f58798ed2cd1eee118a3a4
45ec49371f31dd6ad175f3f91abb7461f1ed6e57
1c4c1489cf2485b870342eea557799661a7d4a1a6f73fc10a41bdd3d59bd6aec
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/fp-clientlib-v4.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 2418
date: Sun, 24 Sep 2023 01:32:14 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:14 GMT
etag: "972-5eafb3b2c4080"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/pendo.js.download
200 OK 397 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/pendo.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (47602)
Size 397 kB (397095 bytes)
Hash 841c9149b9b1ab9c23d8aa6b12236530
a525d88b7309ed0913519112aaba57ebce29d56d
616897534f6fa24e1396303e2a6c5ae2446d7c18af3118d2d3bc392257f77aa8
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/pendo.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 397095
date: Sun, 24 Sep 2023 01:32:14 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:14 GMT
etag: "60f27-5eafb3b2c4080"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/2.487b1337.chunk.css
200 OK 311 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/2.487b1337.chunk.css
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 311 kB (310701 bytes)
Hash 080acef9fbf3b1407ead10f1db4fde5a
64d143b1a1b58415f412b5f9932ef45c6638150f
65fd80656f5aeb5046e84fd6b7a942ed43fcee95eeccb6db356bd10a578406aa
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/2.487b1337.chunk.css HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 310701
date: Sun, 24 Sep 2023 01:32:14 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:16 GMT
etag: "4bdad-5eafb3b4ac500"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/main.2fe7c9e0.chunk.css
200 OK 237 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/main.2fe7c9e0.chunk.css
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 237 kB (236632 bytes)
Hash 784075b3906a01653179bfa80c6e3651
ad08abe0d60feec4da894380250cfd1ce8e6aa53
55dc91f6ec85e04b8f30aa6fd5fcb1bef7f1de4ae7dabe785436450930973122
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/main.2fe7c9e0.chunk.css HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 236632
date: Sun, 24 Sep 2023 01:32:14 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:16 GMT
etag: "39c58-5eafb3b4ac500"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/utils.js.download
200 OK 47 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/utils.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 2fa68dd31178e0e1bd50b71382d5e6da
7df9c9f260ac6f071e969a8e94abbbfee2f788b9
83cf0d21c234f01006ec7e1831508eea0cbb80584971ded5b962dd4267f2665c
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/utils.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 46639
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:16 GMT
etag: "b62f-5eafb3b4ac500"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/jquery.bundle.ebd3450.js.download
200 OK 98 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/jquery.bundle.ebd3450.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65457)
Hash a9a448e03fb36fece04e1cfdecc56424
dd4eaadfc931a2a13e66ab86a2a47cb6ab6b8cfe
0d8c1882335a9930bb09b523a761a0fcdc6d368d20d8713bf9fc5fbc736009f1
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/jquery.bundle.ebd3450.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 97674
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:22 GMT
etag: "17d8a-5eafb3ba65280"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/nnlsdk.css
200 OK 8.5 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/nnlsdk.css
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 4e7ebea9ff449c42842fe54a04eb8053
e7b055c7d0a652f2f5ec8e8ffc78d54057976b83
a0a0409ff4f8f425685061e07dd3d60fc3f35becee1426b3dea949a34b05c330
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/nnlsdk.css HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 8503
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:16 GMT
etag: "2137-5eafb3b4ac500"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/metrics.js.download
200 OK 15 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/metrics.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash ff874142e466218a1d077e897bc015a7
d125a0feae91d3311cdec52971be93d37ca97245
5594a1b411141c05793e9cd1ed3e1f31ffd94275ff277463f2d25619c1b3b577
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/metrics.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 14765
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:16 GMT
etag: "39ad-5eafb3b4ac500"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/startup.bundle.ebd3450.js.download
200 OK 614 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/startup.bundle.ebd3450.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 614 kB (614125 bytes)
Hash 4e0b2bf0a7cf0b60cc2ff08728966447
416f8f6fe090b245efc5d56662b62b103010497e
c334bc6c5ad284451cc6e56bb005be734f49db0a9c4327ae491a257b0d974905
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/startup.bundle.ebd3450.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 614125
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:24 GMT
etag: "95eed-5eafb3bc4d700"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/fido-client.js.download
200 OK 14 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/fido-client.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash 02e4d35d34a678a3232e7db9f0d089f2
38dd665f81728019bb8dc6023cac6f7adfeee011
7048a11bb2082fbf680eb178bc95775f7ec7aa21c2b42674c92a74fe9f881683
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/fido-client.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 14338
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:16 GMT
etag: "3802-5eafb3b4ac500"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/fido-method-ui.js.download
200 OK 5.9 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/fido-method-ui.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash ed83ac799d7f19d00a3c3aa06f6a2ebb
096b4da8575059615bc03b41ce34e93c45438c24
fa7c822a259928fe475d30a98e2aabc6a98a25167b28693322cee38184dc136d
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/fido-method-ui.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 5897
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:16 GMT
etag: "1709-5eafb3b4ac500"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/oob-ui.js.download
200 OK 7.7 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/oob-ui.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash 9d78a1b302c920f4b7a33b747cfbf5ed
9a850f1d1740bbe18f4e4c102c20665f50999a89
8a7c58dc72a9b379fa1b3176c73888960a480c99bf5d6cbe0061f707dce124f1
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/oob-ui.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 7705
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:16 GMT
etag: "1e19-5eafb3b4ac500"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/outcome.js.download
200 OK 14 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/outcome.js.download
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash dacf5d5435e1eecdf4f7a0249f1cd9d9
0ac1ffea5491d186f9fb0ca2741853a90a96c135
fab34c78013b28d87cb8a83d66389feb49a7fc130858052fb6fefd651a42b86d
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/outcome.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 14315
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:18 GMT
etag: "37eb-5eafb3b694980"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/GlanceCobrowseVisitorUI_5.6.11M.js.download
200 OK 74 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/GlanceCobrowseVisitorUI_5.6.11M.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (3168)
Hash daddae85bedc0219bd939cafc57fe9d5
16c286dd6780bc518f6dfad3e42299f405db9e76
0b2e74c35f4a4caef860009c0000da6d1d4d7b037dfcc5c73410dcd7ff291ad7
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/GlanceCobrowseVisitorUI_5.6.11M.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 74459
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:18 GMT
etag: "122db-5eafb3b694980"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/browserCap_5.6.11M.js.download
200 OK 37 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/browserCap_5.6.11M.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 15016ce832bb93e45e74c49f5a4e3024
d4c7529d9bb244abfbf21921d5db15fe3c4b4cad
ad3fa8ab341b112ba5db2c04552adfc9f05317aaec75a011030f9c1ab150f4b7
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/browserCap_5.6.11M.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 36575
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:18 GMT
etag: "8edf-5eafb3b694980"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/GlanceCobrowseVisitor_5.6.11M.js.download
200 OK 196 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/GlanceCobrowseVisitor_5.6.11M.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (31787), with CRLF line terminators
Size 196 kB (196165 bytes)
Hash 6c8183c63da4c92e0a705ec6c795439b
193080923fe437906a4d84f32dd52e6261c3a026
544318ebafe1f189b43442e119ac6e32184a17df586bd16059f650215e366b55
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/GlanceCobrowseVisitor_5.6.11M.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 196165
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:18 GMT
etag: "2fe45-5eafb3b694980"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/GlanceVideoSource_5.6.11M.js.download
200 OK 160 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/GlanceVideoSource_5.6.11M.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Size 160 kB (160191 bytes)
Hash 593543e7c534f128346ade798625c069
5d1d6a87bc3c9b576bd983516dd6f99ebd9ff44b
3c04cf852920f14d6da4c1b4322a388a9f6eb4da59c0ec470faa52ed4506b0ec
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/GlanceVideoSource_5.6.11M.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 160191
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:20 GMT
etag: "271bf-5eafb3b87ce00"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/image
200 OK 59 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/image
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type PNG image data, 1459 x 701, 8-bit/color RGBA, non-interlaced\012- data
Hash 3e7aa348830213f95a5bcff10b6bb180
7d6d8f2169462b0d6695cb2794e460f9876f54b9
f1a1ebb7a2adc60302828b1ab6cd885659c2cbf86231916136b94502602c8d4e
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/image HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 59168
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:20 GMT
etag: "e720-5eafb3b87ce00"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/logo-adp-fy19.299df579.svg
200 OK 1.1 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/logo-adp-fy19.299df579.svg
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1062), with no line terminators
Hash 299df579d9d34c79b471c93b1086a126
d1b4cdfda5531a91b85195645757ef02cd4ddc93
d34eb6787c5b2d7a7aa8337c8f7067fa74c773498b70dd3cb5cbaea81c3218f1
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/logo-adp-fy19.299df579.svg HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1062
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:20 GMT
etag: "426-5eafb3b87ce00"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/CobrowseJS.ashx
200 OK 12 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/CobrowseJS.ashx
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (931)
Hash a0bfb5afd1def35cc0f013ffcb55d471
9982f6e7a0a13246a58d29c676017403688e2716
83974c98280af466e05ad7f2ebdf20c40d50cfffb9d002337b5f173de352abc7
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/CobrowseJS.ashx HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 11668
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:20 GMT
etag: "2d94-5eafb3b87ce00"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/2.6c0bb387.chunk.js.download
200 OK 1.9 MB URL GET HTTP/2 workforceclientconnect.com/ADP_files/2.6c0bb387.chunk.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 1.9 MB (1870334 bytes)
Hash 71012395c67b74edff5ca9be55437a4a
45f8cc55098386e34083452c8f5150541d83c890
9cef9b1dbd15fbf5da5b48346b4c0ef015baf313e627078700deca1172c9e5d0
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/2.6c0bb387.chunk.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 1870334
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:20 GMT
etag: "1c89fe-5eafb3b87ce00"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/ae.js.download
200 OK 1.0 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/ae.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash c5f5d23dbd841fb0868078e4bfbbd713
2f28ce456fa7b6b2aa7692b1364c2c49fc26f0b6
9e56bd6105d6e24d804d3db97049f580c26390f475a87f7535e066bdc815b2f2
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/ae.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 1020
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:22 GMT
etag: "3fc-5eafb3ba65280"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/main.892797eb.chunk.js.download
200 OK 1.5 MB URL GET HTTP/2 workforceclientconnect.com/ADP_files/main.892797eb.chunk.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 1.5 MB (1548713 bytes)
Hash 3b73471fdd5908d0d3d0a850e92a8fde
f9ca9639b4563cf91be0758c5ef2be26778a0ce5
45d85ee5e12d9e26d8462fce4eda003ffebabc83b8d0f4aa582d97f5a0fedbf2
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/main.892797eb.chunk.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 1548713
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:22 GMT
etag: "17a1a9-5eafb3ba65280"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/bootstrap.js.download
200 OK 35 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/bootstrap.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (21350), with LF, NEL line terminators
Hash 26cd1118277d5c6fd9a45f7d89b2713c
3c5015f978b2ca9b2a08465d2b1e04f1df7d0fe6
14eb7521652b735bb020223dce09a8b809c48b3fd5b55b94a0d6c156fe168482
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/bootstrap.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 34630
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:22 GMT
etag: "8746-5eafb3ba65280"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/appsdk.js.download
200 OK 85 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/appsdk.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash 2a2af074efc372340f470f17b2486084
afdaa5bfbd90b2f2f6c5617091601050b15d6697
a97a65ee85cfaf4a08966bb8a2451a4aa76e314292519ceb809d5c7c4ac24c11
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/appsdk.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 85434
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:22 GMT
etag: "14dba-5eafb3ba65280"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/loader.js.download
200 OK 42 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/loader.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (21482)
Hash 2bd70c01597285145b024d6f23146343
5450906ad853359bf935cc3565ebd914d4c75979
e79ec6c9d64f57bcd38a29f0e19b1e1de556a069a95d59f01a18fd8981828a69
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/loader.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 41587
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:22 GMT
etag: "a273-5eafb3ba65280"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/pendo.js.download
200 OK 397 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/pendo.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (47602)
Size 397 kB (397095 bytes)
Hash 841c9149b9b1ab9c23d8aa6b12236530
a525d88b7309ed0913519112aaba57ebce29d56d
616897534f6fa24e1396303e2a6c5ae2446d7c18af3118d2d3bc392257f77aa8
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/pendo.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 397095
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:14 GMT
etag: "60f27-5eafb3b2c4080"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/pendo.js.download
200 OK 397 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/pendo.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (47602)
Size 397 kB (397095 bytes)
Hash 841c9149b9b1ab9c23d8aa6b12236530
a525d88b7309ed0913519112aaba57ebce29d56d
616897534f6fa24e1396303e2a6c5ae2446d7c18af3118d2d3bc392257f77aa8
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/pendo.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 397095
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:14 GMT
etag: "60f27-5eafb3b2c4080"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/pendo.js.download
200 OK 397 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/pendo.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (47602)
Size 397 kB (397095 bytes)
Hash 841c9149b9b1ab9c23d8aa6b12236530
a525d88b7309ed0913519112aaba57ebce29d56d
616897534f6fa24e1396303e2a6c5ae2446d7c18af3118d2d3bc392257f77aa8
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/pendo.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 397095
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:14 GMT
etag: "60f27-5eafb3b2c4080"
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.pendo.io/agent/static/0b0bc73d-07f7-4cb4-693c-39672a1814b0/pendo.js
200 OK 143 kB URL GET HTTP/2 cdn.pendo.io/agent/static/0b0bc73d-07f7-4cb4-693c-39672a1814b0/pendo.js
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerAmazon
Subjectcdn.pendo.io
Fingerprint8C:89:39:AB:48:13:63:74:3B:78:DD:6A:F2:37:FF:24:05:9B:70:7E
ValidityFri, 30 Jun 2023 00:00:00 GMT - Sun, 28 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65310)
Size 143 kB (142848 bytes)
Hash 623dbe97eea70357783017ae0114be91
adb68a2cef774185dec81017efe354b673bf137c
64faab1fee532bf72b8c4cd46b6c0ea6ddb5bf9fe5427429190436c11a830182
GET /agent/static/0b0bc73d-07f7-4cb4-693c-39672a1814b0/pendo.js HTTP/1.1
Host: cdn.pendo.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 142848
x-guploader-uploadid: ADPycdupRV9yoXxwJAtyxJZOwpPQSvMZMwtPkZxTPytN6SMRpx2s5xgeRgdVp-Xj9kJsVZ4B2FhOH5EXLlsAJJs8cmU2
last-modified: Thu, 21 Sep 2023 18:14:15 GMT
x-goog-generation: 1695320055533171
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 142848
content-encoding: gzip
x-goog-hash: crc32c=rea/vg==, md5=XEIOsesw7UghFRELrB9L5A==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: *
server: UploadServer
date: Sun, 24 Sep 2023 01:32:13 GMT
expires: Sun, 24 Sep 2023 01:39:13 GMT
cache-control: max-age=450
etag: "5c420eb1eb30ed482115110bac1f4be4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gqv4dmdbvmd1OpCK2dC2s82ukEdOS4dDialyfNycMDaJPQ7phdlwxw==
age: 33
X-Firefox-Spdy: h2
cdn.pendo.io/agent/static/0b0bc73d-07f7-4cb4-693c-39672a1814b0/pendo.js
200 OK 143 kB URL GET HTTP/2 cdn.pendo.io/agent/static/0b0bc73d-07f7-4cb4-693c-39672a1814b0/pendo.js
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerAmazon
Subjectcdn.pendo.io
Fingerprint8C:89:39:AB:48:13:63:74:3B:78:DD:6A:F2:37:FF:24:05:9B:70:7E
ValidityFri, 30 Jun 2023 00:00:00 GMT - Sun, 28 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65310)
Size 143 kB (142848 bytes)
Hash 623dbe97eea70357783017ae0114be91
adb68a2cef774185dec81017efe354b673bf137c
64faab1fee532bf72b8c4cd46b6c0ea6ddb5bf9fe5427429190436c11a830182
GET /agent/static/0b0bc73d-07f7-4cb4-693c-39672a1814b0/pendo.js HTTP/1.1
Host: cdn.pendo.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 142848
x-guploader-uploadid: ADPycdupRV9yoXxwJAtyxJZOwpPQSvMZMwtPkZxTPytN6SMRpx2s5xgeRgdVp-Xj9kJsVZ4B2FhOH5EXLlsAJJs8cmU2
last-modified: Thu, 21 Sep 2023 18:14:15 GMT
x-goog-generation: 1695320055533171
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 142848
content-encoding: gzip
x-goog-hash: crc32c=rea/vg==, md5=XEIOsesw7UghFRELrB9L5A==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: *
server: UploadServer
date: Sun, 24 Sep 2023 01:32:13 GMT
expires: Sun, 24 Sep 2023 01:39:13 GMT
cache-control: max-age=450
etag: "5c420eb1eb30ed482115110bac1f4be4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UmjhbkBazCnrUK0HeUS9uYThN1KLqicNfg87oBaDt973CQoiCS2BZA==
age: 33
X-Firefox-Spdy: h2
cdn.pendo.io/agent/static/0b0bc73d-07f7-4cb4-693c-39672a1814b0/pendo.js
200 OK 143 kB URL GET HTTP/2 cdn.pendo.io/agent/static/0b0bc73d-07f7-4cb4-693c-39672a1814b0/pendo.js
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerAmazon
Subjectcdn.pendo.io
Fingerprint8C:89:39:AB:48:13:63:74:3B:78:DD:6A:F2:37:FF:24:05:9B:70:7E
ValidityFri, 30 Jun 2023 00:00:00 GMT - Sun, 28 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65310)
Size 143 kB (142848 bytes)
Hash 623dbe97eea70357783017ae0114be91
adb68a2cef774185dec81017efe354b673bf137c
64faab1fee532bf72b8c4cd46b6c0ea6ddb5bf9fe5427429190436c11a830182
GET /agent/static/0b0bc73d-07f7-4cb4-693c-39672a1814b0/pendo.js HTTP/1.1
Host: cdn.pendo.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 142848
x-guploader-uploadid: ADPycdupRV9yoXxwJAtyxJZOwpPQSvMZMwtPkZxTPytN6SMRpx2s5xgeRgdVp-Xj9kJsVZ4B2FhOH5EXLlsAJJs8cmU2
last-modified: Thu, 21 Sep 2023 18:14:15 GMT
x-goog-generation: 1695320055533171
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 142848
content-encoding: gzip
x-goog-hash: crc32c=rea/vg==, md5=XEIOsesw7UghFRELrB9L5A==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: *
server: UploadServer
date: Sun, 24 Sep 2023 01:32:13 GMT
expires: Sun, 24 Sep 2023 01:39:13 GMT
cache-control: max-age=450
etag: "5c420eb1eb30ed482115110bac1f4be4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LQE3eEihUXM9OR5GKfXbMDp1Kq3v0UlhBtcC-pp_PAocT_gx4FmLPw==
age: 33
X-Firefox-Spdy: h2
cdn.pendo.io/agent/static/0b0bc73d-07f7-4cb4-693c-39672a1814b0/pendo.js
200 OK 143 kB URL GET HTTP/2 cdn.pendo.io/agent/static/0b0bc73d-07f7-4cb4-693c-39672a1814b0/pendo.js
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerAmazon
Subjectcdn.pendo.io
Fingerprint8C:89:39:AB:48:13:63:74:3B:78:DD:6A:F2:37:FF:24:05:9B:70:7E
ValidityFri, 30 Jun 2023 00:00:00 GMT - Sun, 28 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65310)
Size 143 kB (142848 bytes)
Hash 623dbe97eea70357783017ae0114be91
adb68a2cef774185dec81017efe354b673bf137c
64faab1fee532bf72b8c4cd46b6c0ea6ddb5bf9fe5427429190436c11a830182
GET /agent/static/0b0bc73d-07f7-4cb4-693c-39672a1814b0/pendo.js HTTP/1.1
Host: cdn.pendo.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 142848
x-guploader-uploadid: ADPycdupRV9yoXxwJAtyxJZOwpPQSvMZMwtPkZxTPytN6SMRpx2s5xgeRgdVp-Xj9kJsVZ4B2FhOH5EXLlsAJJs8cmU2
last-modified: Thu, 21 Sep 2023 18:14:15 GMT
x-goog-generation: 1695320055533171
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 142848
content-encoding: gzip
x-goog-hash: crc32c=rea/vg==, md5=XEIOsesw7UghFRELrB9L5A==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: *
server: UploadServer
date: Sun, 24 Sep 2023 01:32:13 GMT
expires: Sun, 24 Sep 2023 01:39:13 GMT
cache-control: max-age=450
etag: "5c420eb1eb30ed482115110bac1f4be4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2R55xvRFmNi9DTFilxfo4QJUmLNfVz5jbV8V5SH6N4QgjJ-nUo9dsQ==
age: 33
X-Firefox-Spdy: h2
workforceclientconnect.com/static/media/proximanova-regular.6762c74d.woff2
404 Not Found 626 B URL GET HTTP/2 workforceclientconnect.com/static/media/proximanova-regular.6762c74d.woff2
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 72b5424a8c45f4b05d09b421f3ca4067
a0734bc0b83d7b23b6e1072e8b6249de1fa2e3de
74ac52d11c9bb070670a89aa26554c6cb8ad9bf69376b970b119471459d9ceaf
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /static/media/proximanova-regular.6762c74d.woff2 HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/main.2fe7c9e0.chunk.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
content-length: 626
date: Sun, 24 Sep 2023 01:32:16 GMT
server: Apache
X-Firefox-Spdy: h2
workforceclientconnect.com/static/media/proximanova-light.971655af.woff2
404 Not Found 626 B URL GET HTTP/2 workforceclientconnect.com/static/media/proximanova-light.971655af.woff2
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 72b5424a8c45f4b05d09b421f3ca4067
a0734bc0b83d7b23b6e1072e8b6249de1fa2e3de
74ac52d11c9bb070670a89aa26554c6cb8ad9bf69376b970b119471459d9ceaf
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /static/media/proximanova-light.971655af.woff2 HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/main.2fe7c9e0.chunk.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
content-length: 626
date: Sun, 24 Sep 2023 01:32:16 GMT
server: Apache
X-Firefox-Spdy: h2
workforceclientconnect.com/static/media/proximanova-semibold.003d2f25.woff2
404 Not Found 626 B URL GET HTTP/2 workforceclientconnect.com/static/media/proximanova-semibold.003d2f25.woff2
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 72b5424a8c45f4b05d09b421f3ca4067
a0734bc0b83d7b23b6e1072e8b6249de1fa2e3de
74ac52d11c9bb070670a89aa26554c6cb8ad9bf69376b970b119471459d9ceaf
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /static/media/proximanova-semibold.003d2f25.woff2 HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/main.2fe7c9e0.chunk.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
content-length: 626
date: Sun, 24 Sep 2023 01:32:16 GMT
server: Apache
X-Firefox-Spdy: h2
wsv3cdn.audioeye.com/bootstrap.js?d=workforceclientconnect.com
404 Not Found 0 B URL GET HTTP/2 wsv3cdn.audioeye.com/bootstrap.js?d=workforceclientconnect.com
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintEE:8B:07:1F:A3:E3:C1:17:AC:CF:C5:DE:FD:E0:83:D9:2E:B0:89:8A
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bootstrap.js?d=workforceclientconnect.com HTTP/1.1
Host: wsv3cdn.audioeye.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sun, 24 Sep 2023 01:32:17 GMT
content-length: 0
cf-cache-status: HIT
age: 3
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b745ce8d21b4f4-OSL
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/iframe-utils.js.download
200 OK 4.0 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/iframe-utils.js.download
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash 259aeb186aa05c103234b9345d73ed03
a2ec5001287dd858710ce122f15e9ea23b67964f
53de306f72aa849f2d27dabfd06e389531714e81b3ebcf99e57e36e7a4a17b0a
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/iframe-utils.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 4020
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:24 GMT
etag: "fb4-5eafb3bc4d700"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/outcome.js.download
200 OK 14 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/outcome.js.download
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash dacf5d5435e1eecdf4f7a0249f1cd9d9
0ac1ffea5491d186f9fb0ca2741853a90a96c135
fab34c78013b28d87cb8a83d66389feb49a7fc130858052fb6fefd651a42b86d
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/outcome.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 14315
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:18 GMT
etag: "37eb-5eafb3b694980"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/saved_resource(2).html
200 OK 771 B URL GET HTTP/2 workforceclientconnect.com/ADP_files/saved_resource(2).html
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 1f9663384fdcb4fba49258b542065d47
11a4fe4c5f648605658dc7708e1945978c79336e
058ee7b8b977daf78e8136596d9c86eede7c42bebfb62d4fa13042cc0e80dbc5
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/saved_resource(2).html HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:26 GMT
etag: W/"95-5eafb3be35b80"
content-encoding: gzip
X-Firefox-Spdy: h2
workforceclientconnect.com/static/media/proximanova-regular.40c4c207.woff
404 Not Found 626 B URL GET HTTP/2 workforceclientconnect.com/static/media/proximanova-regular.40c4c207.woff
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 72b5424a8c45f4b05d09b421f3ca4067
a0734bc0b83d7b23b6e1072e8b6249de1fa2e3de
74ac52d11c9bb070670a89aa26554c6cb8ad9bf69376b970b119471459d9ceaf
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /static/media/proximanova-regular.40c4c207.woff HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/main.2fe7c9e0.chunk.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
content-length: 626
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/iframe-default.js.download
200 OK 5.2 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/iframe-default.js.download
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash 2bb90732fa2b49e1bc7e343b94930dbd
a1382d0ce61fdd76e984478ab967526a36f76fac
a7a98aa232013d4af06b300c0c53346e65cd695997e2cbaedd48bd7308593d79
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/iframe-default.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 5223
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:24 GMT
etag: "1467-5eafb3bc4d700"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/saved_resource(3).html
200 OK 771 B URL GET HTTP/2 workforceclientconnect.com/ADP_files/saved_resource(3).html
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 1f9663384fdcb4fba49258b542065d47
11a4fe4c5f648605658dc7708e1945978c79336e
058ee7b8b977daf78e8136596d9c86eede7c42bebfb62d4fa13042cc0e80dbc5
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/saved_resource(3).html HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:26 GMT
etag: W/"95-5eafb3be35b80"
content-encoding: gzip
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/iframe-metrics.js.download
200 OK 2.3 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/iframe-metrics.js.download
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash cf951ec270416f41a201fdde1d26bee2
0f19321d1e0a6090c5b91725b8e00080d9faca98
b1cbd3b872e492b90099bdbc53982c3fa93f323f9f4c604ecab9a681fa91dd83
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/iframe-metrics.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 2324
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:24 GMT
etag: "914-5eafb3bc4d700"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/jquery.min.js.download
200 OK 90 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/jquery.min.js.download
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/jquery.min.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 89476
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:24 GMT
etag: "15d84-5eafb3bc4d700"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/iframe-custom.js.download
200 OK 20 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/iframe-custom.js.download
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash fd78223f6323bfdf3dd8c32283e246d5
47ecdb665bbab9b5ae11ddcc2b51a6a93d610d52
019b6b2d798a7f05a0a20e889e9aabb99526b741ab0f40d0edcb96113f11043b
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/iframe-custom.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 19952
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:24 GMT
etag: "4df0-5eafb3bc4d700"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/oob-rest.js.download
200 OK 1.7 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/oob-rest.js.download
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash 366bd0d5783f61467031761bc8c1e3e9
be57d5024dc8f1371c77233c590ca3357adce52b
732f670be4b46c6729e3cdbfc07d89b10a6b234cdb7b74755fd241bcecc9ad00
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/oob-rest.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 1681
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:24 GMT
etag: "691-5eafb3bc4d700"
accept-ranges: bytes
X-Firefox-Spdy: h2
wsv3cdn.audioeye.com/v2/build/jquery.bundle.ebd3450.js
404 Not Found 9.5 kB URL GET HTTP/2 wsv3cdn.audioeye.com/v2/build/jquery.bundle.ebd3450.js
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintEE:8B:07:1F:A3:E3:C1:17:AC:CF:C5:DE:FD:E0:83:D9:2E:B0:89:8A
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /v2/build/jquery.bundle.ebd3450.js HTTP/1.1
Host: wsv3cdn.audioeye.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Sun, 24 Sep 2023 01:32:17 GMT
content-type: text/html
cf-cache-status: HIT
age: 3
expires: Mon, 23 Sep 2024 01:32:17 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b745cfbd8bb4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/iframe.js.download
200 OK 3.5 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/iframe.js.download
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash 0337a75dfc6d3b2e627f07e28f147188
33dc708871acc5381e6117609bcfc7696e96e0e0
d2bab07b33afe2692c6b2159484c4e2f34d4f03c4b2b0dd50ea6e162093ec60d
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/iframe.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 3503
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:24 GMT
etag: "daf-5eafb3bc4d700"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/CobrowseJS.ashx
200 OK 12 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/CobrowseJS.ashx
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (931)
Hash a0bfb5afd1def35cc0f013ffcb55d471
9982f6e7a0a13246a58d29c676017403688e2716
83974c98280af466e05ad7f2ebdf20c40d50cfffb9d002337b5f173de352abc7
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/CobrowseJS.ashx HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 11668
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:20 GMT
etag: "2d94-5eafb3b87ce00"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/require.js.download
200 OK 86 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/require.js.download
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Hash f0cc8bbb2fcef87fc194fecbb632fcfa
33bc97e78f4905e72b4c1eb2ca0a4662588443e3
9485f0917f97fcf4f63a5ea365200ffd57f123f451382a2f9a1ad2e2fd51ac9b
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/require.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 86483
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:24 GMT
etag: "151d3-5eafb3bc4d700"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/GlanceCobrowseVisitor_5.6.11M.js.download
200 OK 196 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/GlanceCobrowseVisitor_5.6.11M.js.download
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (31787), with CRLF line terminators
Size 196 kB (196165 bytes)
Hash 6c8183c63da4c92e0a705ec6c795439b
193080923fe437906a4d84f32dd52e6261c3a026
544318ebafe1f189b43442e119ac6e32184a17df586bd16059f650215e366b55
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/GlanceCobrowseVisitor_5.6.11M.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 196165
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:18 GMT
etag: "2fe45-5eafb3b694980"
accept-ranges: bytes
X-Firefox-Spdy: h2
online.adp.com/api/brand-service/v1/brands/image?productId=$default$&imageId=ADP_default_background.png
200 OK 110 kB URL GET HTTP/1.1 online.adp.com/api/brand-service/v1/brands/image?productId=$default$&imageId=ADP_default_background.png
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subjectonline.adp.com
FingerprintD2:6F:1C:A8:A7:B9:B3:4E:9D:E2:66:E3:EE:D9:93:D3:60:F5:35:4B
ValiditySat, 11 Mar 2023 00:00:00 GMT - Wed, 10 Apr 2024 23:59:59 GMT
File type PNG image data, 2000 x 1280, 8-bit colormap, non-interlaced\012- data
Size 110 kB (110000 bytes)
Hash cafb953ab16fa855e2ca9508a092a5fb
e2b70ec3b759be2abe33812e9f2efc378fc3780f
df7069893e99a7ab00720402ec3249023ea35ef37fe7c20d856a8bfd31a0e1b1
GET /api/brand-service/v1/brands/image?productId=$default$&imageId=ADP_default_background.png HTTP/1.1
Host: online.adp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 24 Sep 2023 01:32:17 GMT
Server: AIMServer
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
Content-Type: image/png
X-Powered-By: Express
ETag: W/"1adb0-4rcOw7dZviq+M4Euny78N4/DeA8:dtagent10273230920145353Um8P:dtagent10273230920145353Um8P:dtagent10273230920145353Um8P"
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1289583136"
Set-Cookie: dtCookie=v_4_srv_30_sn_3081D55BE9A5A7713D243BF145B7F9E2_perc_100000_ol_0_mul_1_app-3A8a0feea63876fad3_1_rcs-3Acss_1; Path=/; Domain=.adp.com
Keep-Alive: timeout=15, max=335
Connection: Keep-Alive
Transfer-Encoding: chunked
www.glancecdn.net/cobrowse/CobrowseJS.ashx?group=20820&site=production
302 Found 189 B URL GET HTTP/2 www.glancecdn.net/cobrowse/CobrowseJS.ashx?group=20820&site=production
IP
Requested by https://workforceclientconnect.com/ADP_files/saved_resource(1).html
Certificate IssuerDigiCert Inc
Subject*.glancecdn.net
Fingerprint39:C5:84:26:01:E7:91:9A:1D:F8:E5:9E:8F:94:90:38:81:CA:B4:32
ValidityThu, 25 May 2023 00:00:00 GMT - Thu, 13 Jun 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 0eca6f340e68f999e96012f0d81fb7d2
466eeb028566f8daddc0e47f597d2eda5d3c004c
62304bef705c6d92ef251bb1aef067356dc821b36039a06253e86cf94668ebcb
GET /cobrowse/CobrowseJS.ashx?group=20820&site=production HTTP/1.1
Host: www.glancecdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 24 Sep 2023 01:32:17 GMT
content-type: text/html; charset=utf-8
content-length: 189
location: https://storage.glancecdn.net/cobrowse/js/GlanceCobrowseLoader_6.4.0M.js
cache-control: max-age=3600
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
X-Firefox-Spdy: h2
online.adp.com/favicon.ico
200 OK 1.3 kB URL GET HTTP/1.1 online.adp.com/favicon.ico
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subjectonline.adp.com
FingerprintD2:6F:1C:A8:A7:B9:B3:4E:9D:E2:66:E3:EE:D9:93:D3:60:F5:35:4B
ValiditySat, 11 Mar 2023 00:00:00 GMT - Wed, 10 Apr 2024 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 32x32\012- data
Hash f90c239d21f230b8fa0ddfffbb97e728
b9b0149b96f9678ba2e5b09e5fced2f7d7af5ee0
a60fd4845413c9ef7356742390033a861ffc090bcb14a1b0ab9dc1647dc8b299
GET /favicon.ico HTTP/1.1
Host: online.adp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 24 Sep 2023 01:32:17 GMT
Server: AIMServer
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
Last-Modified: Sat, 09 Apr 2016 21:16:44 GMT
ETag: "8be-53013d411c700"
Accept-Ranges: bytes
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1144494941"
Set-Cookie: dtCookie=v_4_srv_25_sn_5CA45520CDF366E5E398EF5A32AA0DCF_perc_100000_ol_0_mul_1_app-3A8a0feea63876fad3_1; Path=/; Domain=.adp.com
Keep-Alive: timeout=15, max=195
Connection: Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
www.glancecdn.net/cobrowse/js/GlanceCobrowseVisitor_5.6.11M.js
301 Moved Permanently 197 B URL GET HTTP/2 www.glancecdn.net/cobrowse/js/GlanceCobrowseVisitor_5.6.11M.js
IP
Requested by https://workforceclientconnect.com/ADP_files/saved_resource(1).html
Certificate IssuerDigiCert Inc
Subject*.glancecdn.net
Fingerprint39:C5:84:26:01:E7:91:9A:1D:F8:E5:9E:8F:94:90:38:81:CA:B4:32
ValidityThu, 25 May 2023 00:00:00 GMT - Thu, 13 Jun 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash d1d56a3e1e2632a2c58f7ce99206a20e
bb0fb4481a64b6eeabae9305bd847bf7edb2ab11
86f71c9998afd2eb740dbdc570bb92b6217fd9ad530c02419e0e9ebe419ea500
GET /cobrowse/js/GlanceCobrowseVisitor_5.6.11M.js HTTP/1.1
Host: www.glancecdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sun, 24 Sep 2023 01:32:17 GMT
content-type: text/html; charset=UTF-8
content-length: 197
location: https://storage.glancecdn.net/cobrowse/js/GlanceCobrowseVisitor_5.6.11M.js
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.glancecdn.net/cobrowse/js/GlanceCleanContext_5.6.11M.js
301 Moved Permanently 194 B URL GET HTTP/2 www.glancecdn.net/cobrowse/js/GlanceCleanContext_5.6.11M.js
IP
Requested by https://workforceclientconnect.com/ADP_files/saved_resource(4).html
Certificate IssuerDigiCert Inc
Subject*.glancecdn.net
Fingerprint39:C5:84:26:01:E7:91:9A:1D:F8:E5:9E:8F:94:90:38:81:CA:B4:32
ValidityThu, 25 May 2023 00:00:00 GMT - Thu, 13 Jun 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 3a881c3196f1dd99069fc5925b86420e
882ebc04ac4405b88c76a60b3af8a3fb2be096f1
682a6b1a30706d621744a4f754304651c6e4dce0c3c853be51248f44142efe08
GET /cobrowse/js/GlanceCleanContext_5.6.11M.js HTTP/1.1
Host: www.glancecdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sun, 24 Sep 2023 01:32:17 GMT
content-type: text/html; charset=UTF-8
content-length: 194
location: https://storage.glancecdn.net/cobrowse/js/GlanceCleanContext_5.6.11M.js
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/utils.js.downloadhtml/oob-ui.html
300 Multiple Choices 654 B URL GET HTTP/2 workforceclientconnect.com/ADP_files/utils.js.downloadhtml/oob-ui.html
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f25f267e25fb140a2889385db3ac047f
750f1ca9e663805b8d3e91052a0b459c03d436db
8f7e533bba4e8a105f31d8144caf3762ab6c53ccab72f17e0c9522e6fb00753c
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/utils.js.downloadhtml/oob-ui.html HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 300 Multiple Choices
content-type: text/html; charset=iso-8859-1
content-length: 654
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
X-Firefox-Spdy: h2
storage.glancecdn.net/cobrowse/js/GlanceCleanContext_5.6.11M.js
200 OK 741 B URL GET HTTP/2 storage.glancecdn.net/cobrowse/js/GlanceCleanContext_5.6.11M.js
IP
Requested by https://workforceclientconnect.com/ADP_files/saved_resource.html
Certificate IssuerDigiCert Inc
Subject*.glancecdn.net
Fingerprint39:C5:84:26:01:E7:91:9A:1D:F8:E5:9E:8F:94:90:38:81:CA:B4:32
ValidityThu, 25 May 2023 00:00:00 GMT - Thu, 13 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (472)
Hash d0faf9deaa59656e51477d1c9b6051b0
aa84e1cc0dbd08e430d2770c7414b6a07f468c6c
09e6e7b44ab3c5f85866ac8c89bb5005b77116811fda4a92f9168ae51cf74ddf
GET /cobrowse/js/GlanceCleanContext_5.6.11M.js HTTP/1.1
Host: storage.glancecdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://workforceclientconnect.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 741
date: Sat, 23 Sep 2023 07:45:09 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: COMPLETED
last-modified: Thu, 01 Sep 2022 15:08:06 GMT
etag: "d0faf9deaa59656e51477d1c9b6051b0"
cache-control: public, max-age=31556926
x-amz-version-id: 4Vf3VIKoxjIVxemA.Qbeh.FNsOnSHJSP
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: heQCrb_pWgHvJ1DH0oGYUQWnGVBRoVM-zcrpZ14kIXaT6CcUIcFGTg==
age: 64029
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/utils.js.downloadhtml/utils.html
300 Multiple Choices 651 B URL GET HTTP/2 workforceclientconnect.com/ADP_files/utils.js.downloadhtml/utils.html
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1f9827f67eb20f4c45118c39cd0da0a5
056eab42d44a53e1573bcb9b7666afa333aefe6b
5777db65b9e82ced8e1a493006aefefbfb325bc19abceef23751b1764fc7c5c2
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/utils.js.downloadhtml/utils.html HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 300 Multiple Choices
content-type: text/html; charset=iso-8859-1
content-length: 651
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/saved_resource(1).html
200 OK 761 B URL GET HTTP/2 workforceclientconnect.com/ADP_files/saved_resource(1).html
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash a6f7a3f16df155f22379994887cb8ff7
818cde5221bb88edfda473c0e92c07100d05096e
1b1607ed2c55092b9f7573eb4c20498f6b923f914780cf7252af16729bad5dcf
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/saved_resource(1).html HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sun, 24 Sep 2023 01:32:16 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:26 GMT
etag: W/"270-5eafb3be35b80"
content-encoding: gzip
X-Firefox-Spdy: h2
storage.glancecdn.net/cobrowse/js/GlanceCleanContext_5.6.11M.js
200 OK 741 B URL GET HTTP/2 storage.glancecdn.net/cobrowse/js/GlanceCleanContext_5.6.11M.js
IP
Requested by https://workforceclientconnect.com/ADP_files/saved_resource.html
Certificate IssuerDigiCert Inc
Subject*.glancecdn.net
Fingerprint39:C5:84:26:01:E7:91:9A:1D:F8:E5:9E:8F:94:90:38:81:CA:B4:32
ValidityThu, 25 May 2023 00:00:00 GMT - Thu, 13 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (472)
Hash d0faf9deaa59656e51477d1c9b6051b0
aa84e1cc0dbd08e430d2770c7414b6a07f468c6c
09e6e7b44ab3c5f85866ac8c89bb5005b77116811fda4a92f9168ae51cf74ddf
GET /cobrowse/js/GlanceCleanContext_5.6.11M.js HTTP/1.1
Host: storage.glancecdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://workforceclientconnect.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 741
date: Sat, 23 Sep 2023 07:45:09 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: COMPLETED
last-modified: Thu, 01 Sep 2022 15:08:06 GMT
etag: "d0faf9deaa59656e51477d1c9b6051b0"
cache-control: public, max-age=31556926
x-amz-version-id: 4Vf3VIKoxjIVxemA.Qbeh.FNsOnSHJSP
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DDZP27Mnnp4KH9Rpt5JY_lcNvia4udULj_7wfjYIwM0D4zxqFkXUJg==
age: 64029
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/OFehS0NuTHc
472 B URL ocsp.pki.goog/s/gts1d4/OFehS0NuTHc
IP
Hash 42d8177c9daebc2247983958cfc734b8
b4df6e3e27026184a6ac0166b4ef03147be90821
3cabaf338b5e067b58975ed7d3f8aac7bba58018a9973456e7615df528cfe2d7
POST /s/gts1d4/OFehS0NuTHc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 01:32:18 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/OFehS0NuTHc
472 B URL ocsp.pki.goog/s/gts1d4/OFehS0NuTHc
IP
Hash 42d8177c9daebc2247983958cfc734b8
b4df6e3e27026184a6ac0166b4ef03147be90821
3cabaf338b5e067b58975ed7d3f8aac7bba58018a9973456e7615df528cfe2d7
POST /s/gts1d4/OFehS0NuTHc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 01:32:18 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/OFehS0NuTHc
472 B URL ocsp.pki.goog/s/gts1d4/OFehS0NuTHc
IP
Hash 42d8177c9daebc2247983958cfc734b8
b4df6e3e27026184a6ac0166b4ef03147be90821
3cabaf338b5e067b58975ed7d3f8aac7bba58018a9973456e7615df528cfe2d7
POST /s/gts1d4/OFehS0NuTHc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 01:32:18 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
data.pendo.io/data/guide.js/0b0bc73d-07f7-4cb4-693c-39672a1814b0?jzb=eJx9jrFuwyAURf-FOTY2jl3bW9Rm6NKmcqqMCONHQksAAXalVv73QIeoUze4uved84MW6WUw7nlCPaKH_cvTKz3S6vv0tojHvfo4og1inJtZh1TRs1IbNDsV25cQrO8x_jLuUxjHgSsJOnCjNfCQc3PF9LAbhtxebLxyhcAmFhjq79D0lP-APXgvjf51Ew9lXUM7ZUxUXbZtyzZr63HMyoaQDppqFETEiWL6PLMzxAVo-j6g9e4fafFjmYuSu79RtEp9ssVFh0lBqnhnAZfQKc7LuskLap2Z0LreAAC1Yl8&v=2.156.0_prod&ct=1695519138274
200 OK 281 B URL GET HTTP/2 data.pendo.io/data/guide.js/0b0bc73d-07f7-4cb4-693c-39672a1814b0?jzb=eJx9jrFuwyAURf-FOTY2jl3bW9Rm6NKmcqqMCONHQksAAXalVv73QIeoUze4uved84MW6WUw7nlCPaKH_cvTKz3S6vv0tojHvfo4og1inJtZh1TRs1IbNDsV25cQrO8x_jLuUxjHgSsJOnCjNfCQc3PF9LAbhtxebLxyhcAmFhjq79D0lP-APXgvjf51Ew9lXUM7ZUxUXbZtyzZr63HMyoaQDppqFETEiWL6PLMzxAVo-j6g9e4fafFjmYuSu79RtEp9ssVFh0lBqnhnAZfQKc7LuskLap2Z0LreAAC1Yl8&v=2.156.0_prod&ct=1695519138274
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerGoogle Trust Services LLC
Subjectpendo.io
FingerprintA2:0F:70:0A:69:33:07:09:29:05:33:92:82:0D:CB:3D:A5:CD:B8:34
ValiditySat, 12 Aug 2023 02:04:25 GMT - Fri, 10 Nov 2023 03:00:20 GMT
Hash a872591654efd9766e28ebd180c7fb3d
931ce975f5a4dccb9f54d4ca686ebc13edc61566
31c2eaa13af4db286ad143394ef04e5cbd4a33e419e871204223db09d2a51a42
GET /data/guide.js/0b0bc73d-07f7-4cb4-693c-39672a1814b0?jzb=eJx9jrFuwyAURf-FOTY2jl3bW9Rm6NKmcqqMCONHQksAAXalVv73QIeoUze4uved84MW6WUw7nlCPaKH_cvTKz3S6vv0tojHvfo4og1inJtZh1TRs1IbNDsV25cQrO8x_jLuUxjHgSsJOnCjNfCQc3PF9LAbhtxebLxyhcAmFhjq79D0lP-APXgvjf51Ew9lXUM7ZUxUXbZtyzZr63HMyoaQDppqFETEiWL6PLMzxAVo-j6g9e4fafFjmYuSu79RtEp9ssVFh0lBqnhnAZfQKc7LuskLap2Z0LreAAC1Yl8&v=2.156.0_prod&ct=1695519138274 HTTP/1.1
Host: data.pendo.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
access-control-max-age: 600
content-encoding: gzip
content-type: application/javascript
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 01:32:18 GMT
content-length: 281
x-envoy-upstream-service-time: 2
server: istio-envoy
via: 1.1 google
strict-transport-security: max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
data.pendo.io/data/guide.gif/0b0bc73d-07f7-4cb4-693c-39672a1814b0?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1695519138276&v=2.156.0_prod
57 B URL GET data.pendo.io/data/guide.gif/0b0bc73d-07f7-4cb4-693c-39672a1814b0?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1695519138276&v=2.156.0_prod
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerGoogle Trust Services LLC
Subjectpendo.io
FingerprintA2:0F:70:0A:69:33:07:09:29:05:33:92:82:0D:CB:3D:A5:CD:B8:34
ValiditySat, 12 Aug 2023 02:04:25 GMT - Fri, 10 Nov 2023 03:00:20 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /data/guide.gif/0b0bc73d-07f7-4cb4-693c-39672a1814b0?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1695519138276&v=2.156.0_prod HTTP/1.1
Host: data.pendo.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
access-control-max-age: 600
content-encoding: gzip
content-type: image/gif
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 01:32:18 GMT
content-length: 57
x-envoy-upstream-service-time: 1
server: istio-envoy
via: 1.1 google
strict-transport-security: max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
data.pendo.io/data/ptm.gif/0b0bc73d-07f7-4cb4-693c-39672a1814b0?v=2.156.0_prod&ct=1695519138268&jzb=eJzFUU2P0zAU_C8-56O245D0toKuYFlooeFLCFlOYqcBx7Ycp1G36n9fu4WKU2-Im99k3szkzfcjcAfDwRIM3DEQgdrqeeSWun7wKMxLQmAJcYEIicC-H3unLe1bv0A3q_ev1rSi-OnLh714uZI_Ky_AmkZPyp05apIyApOVnr5zzozLNJ21_SW0bXgje65co5XijUsaPaR0c7fdJmZnvIyx2oxgefzjGZ63bEc-jr1WbwJFvICE8KKNmcBlnBWwiAtS1zHMESp5jmuBhF-RTHUT68LPc0U_bcHpmt67-cEw6xPe_Q21zAU-ytJFmaIFwl5nz22wDnACSZ4sqA_fBrWLQMXqEOtyDHcZwFssq02hOvHu6es89UFHWDbw88f7j6_NvHpYPzx--7y-7_LQy8Fxf48M4VN07Uxq1t7srPw_nYVcv9NkWQn_ySUQwacfz08Q4mM
200 OK 42 B URL GET HTTP/2 data.pendo.io/data/ptm.gif/0b0bc73d-07f7-4cb4-693c-39672a1814b0?v=2.156.0_prod&ct=1695519138268&jzb=eJzFUU2P0zAU_C8-56O245D0toKuYFlooeFLCFlOYqcBx7Ycp1G36n9fu4WKU2-Im99k3szkzfcjcAfDwRIM3DEQgdrqeeSWun7wKMxLQmAJcYEIicC-H3unLe1bv0A3q_ev1rSi-OnLh714uZI_Ky_AmkZPyp05apIyApOVnr5zzozLNJ21_SW0bXgje65co5XijUsaPaR0c7fdJmZnvIyx2oxgefzjGZ63bEc-jr1WbwJFvICE8KKNmcBlnBWwiAtS1zHMESp5jmuBhF-RTHUT68LPc0U_bcHpmt67-cEw6xPe_Q21zAU-ytJFmaIFwl5nz22wDnACSZ4sqA_fBrWLQMXqEOtyDHcZwFssq02hOvHu6es89UFHWDbw88f7j6_NvHpYPzx--7y-7_LQy8Fxf48M4VN07Uxq1t7srPw_nYVcv9NkWQn_ySUQwacfz08Q4mM
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerGoogle Trust Services LLC
Subjectpendo.io
FingerprintA2:0F:70:0A:69:33:07:09:29:05:33:92:82:0D:CB:3D:A5:CD:B8:34
ValiditySat, 12 Aug 2023 02:04:25 GMT - Fri, 10 Nov 2023 03:00:20 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /data/ptm.gif/0b0bc73d-07f7-4cb4-693c-39672a1814b0?v=2.156.0_prod&ct=1695519138268&jzb=eJzFUU2P0zAU_C8-56O245D0toKuYFlooeFLCFlOYqcBx7Ycp1G36n9fu4WKU2-Im99k3szkzfcjcAfDwRIM3DEQgdrqeeSWun7wKMxLQmAJcYEIicC-H3unLe1bv0A3q_ev1rSi-OnLh714uZI_Ky_AmkZPyp05apIyApOVnr5zzozLNJ21_SW0bXgje65co5XijUsaPaR0c7fdJmZnvIyx2oxgefzjGZ63bEc-jr1WbwJFvICE8KKNmcBlnBWwiAtS1zHMESp5jmuBhF-RTHUT68LPc0U_bcHpmt67-cEw6xPe_Q21zAU-ytJFmaIFwl5nz22wDnACSZ4sqA_fBrWLQMXqEOtyDHcZwFssq02hOvHu6es89UFHWDbw88f7j6_NvHpYPzx--7y-7_LQy8Fxf48M4VN07Uxq1t7srPw_nYVcv9NkWQn_ySUQwacfz08Q4mM HTTP/1.1
Host: data.pendo.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
access-control-max-age: 600
content-type: image/gif
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 01:32:18 GMT
content-length: 42
x-envoy-upstream-service-time: 111
server: istio-envoy
via: 1.1 google
strict-transport-security: max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
445 B URL aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
IP
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (332)
Hash d39546249a86d29697ea6b389afd84f2
244ce5f2d9a3e80da843e527f35cae0b9d9e20be
ba339c9812783530a739e05b9bc0ec254d9c22eb13779e8e5be5860a192f8c80
GET /update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: 17805
rule-data-version: 1
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2023-10-29-15-54-13.chain; p384ecdsa=j5Z57pos-pdQoNGBvRcWUnH-OZ68zS8ueK3S3zLE5Ky_LQVumX_hEWEy7YvitKmW4JtSNbnGd10zYXEO3ZiRkLHUCDpl3zzP1hRZW3RV05jp9016xPqX0lEYDkZJzpWy
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Sun, 24 Sep 2023 01:32:14 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 445
age: 18
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
512 kB URL ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP
ASN #1299 Telia Company AB
File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size 512 kB (511815 bytes)
Hash 152eda253e242e18443ef3282495bc7c
ff0fa85565f21ec4931baad4573b4c0bd08c4019
8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48
GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Last-Modified: Wed, 07 Jun 2023 18:17:03 GMT
ETag: 152eda253e242e18443ef3282495bc7c
Content-Length: 511815
Accept-Ranges: bytes
X-Timestamp: 1686161822.36709
Content-Type: application/zip
X-Trans-Id: txd2204b6ada9547b3ab53e-0064818762dfw1
Cache-Control: public, max-age=222349
Expires: Tue, 26 Sep 2023 15:18:21 GMT
Date: Sun, 24 Sep 2023 01:32:32 GMT
Connection: keep-alive
workforceclientconnect.com/ADP_files/saved_resource.html
200 OK 240 B URL GET HTTP/2 workforceclientconnect.com/ADP_files/saved_resource.html
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 89a2b200cda715687327b0c568536243
a922c7cff06365a60aaeb1dfc75c95280acc4d59
36488c7c9fff7a2ddd4464a3a0ad531254334e8306c4519c5d39e0583f2f6714
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/saved_resource.html HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
date: Sun, 24 Sep 2023 01:32:16 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:26 GMT
etag: W/"f0-5eafb3be35b80"
content-encoding: gzip
X-Firefox-Spdy: h2
wsv3cdn.audioeye.com/v2/build/startup.bundle.ebd3450.js
404 Not Found 0 B URL GET HTTP/2 wsv3cdn.audioeye.com/v2/build/startup.bundle.ebd3450.js
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintEE:8B:07:1F:A3:E3:C1:17:AC:CF:C5:DE:FD:E0:83:D9:2E:B0:89:8A
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/build/startup.bundle.ebd3450.js HTTP/1.1
Host: wsv3cdn.audioeye.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sun, 24 Sep 2023 01:32:17 GMT
content-type: text/html
cf-cache-status: HIT
age: 3
expires: Mon, 23 Sep 2024 01:32:17 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b745ce7d14b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
workforceclientconnect.com/static/media/proximanova-semibold.e29fe11b.woff
404 Not Found 626 B URL GET HTTP/2 workforceclientconnect.com/static/media/proximanova-semibold.e29fe11b.woff
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (669), with no line terminators
Hash 888864daea1b645cf687d38595064333
a92dd436b9d88d1691daba822f652618ab8961ca
ee20768409a1f431b8425d6b1a92821929ce6081ef86ea83c6c05c0153b1636f
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /static/media/proximanova-semibold.e29fe11b.woff HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/main.2fe7c9e0.chunk.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
content-length: 626
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/iframe.html
200 OK 1.7 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/iframe.html
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1807), with no line terminators
Hash ae1b533974475f51d9d999d198a9bbe0
1a5d3e8689a4ac6917dcd0067801d80809582496
1ac3f8093a304e5d47d49d6f2527f86dd89429d008408eeaec2c5d5be9490486
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/iframe.html HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
date: Sun, 24 Sep 2023 01:32:16 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:26 GMT
etag: W/"683-5eafb3be35b80"
content-encoding: gzip
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/Lato.css
404 Not Found 626 B URL GET HTTP/2 workforceclientconnect.com/ADP_files/Lato.css
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (669), with no line terminators
Hash 888864daea1b645cf687d38595064333
a92dd436b9d88d1691daba822f652618ab8961ca
ee20768409a1f431b8425d6b1a92821929ce6081ef86ea83c6c05c0153b1636f
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/Lato.css HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/Cobrowse_5.6.11.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
content-encoding: gzip
X-Firefox-Spdy: h2
storage.glancecdn.net/cobrowse/js/GlanceCobrowseVisitor_5.6.11M.js
200 OK 196 kB URL GET HTTP/2 storage.glancecdn.net/cobrowse/js/GlanceCobrowseVisitor_5.6.11M.js
IP
Requested by https://workforceclientconnect.com/ADP_files/saved_resource(1).html
Certificate IssuerDigiCert Inc
Subject*.glancecdn.net
Fingerprint39:C5:84:26:01:E7:91:9A:1D:F8:E5:9E:8F:94:90:38:81:CA:B4:32
ValidityThu, 25 May 2023 00:00:00 GMT - Thu, 13 Jun 2024 23:59:59 GMT
Size 196 kB (196165 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cobrowse/js/GlanceCobrowseVisitor_5.6.11M.js HTTP/1.1
Host: storage.glancecdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://workforceclientconnect.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 22 Sep 2023 14:02:43 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: COMPLETED
last-modified: Thu, 01 Sep 2022 15:08:06 GMT
etag: W/"6c8183c63da4c92e0a705ec6c795439b"
cache-control: public, max-age=31556926
x-amz-version-id: W_r696gvENnkjWNoX71BsRLPPOtiWwg.
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tV3o4isckEUCUq7llR06z81bMADLHtclJNEjOQojnWwhThtvkghohw==
age: 127775
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/iframe-fido.js.download
200 OK 9.4 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/iframe-fido.js.download
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (10664), with no line terminators
Hash 5380c5e43688acb9a3ddb06b4ff17cef
743c35683077b45e3deec6a91cce30255747d3f7
6b6dc5f26de7ea44d9aaee6e300e39f4dc8333a3cc5e9cd350d8e1892e833e38
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/iframe-fido.js.download HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
content-length: 9413
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:26 GMT
etag: "24c5-5eafb3be35b80"
accept-ranges: bytes
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/saved_resource(4).html
200 OK 240 B URL GET HTTP/2 workforceclientconnect.com/ADP_files/saved_resource(4).html
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 89a2b200cda715687327b0c568536243
a922c7cff06365a60aaeb1dfc75c95280acc4d59
36488c7c9fff7a2ddd4464a3a0ad531254334e8306c4519c5d39e0583f2f6714
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/saved_resource(4).html HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:26 GMT
etag: W/"f0-5eafb3be35b80"
content-encoding: gzip
X-Firefox-Spdy: h2
storage.glancecdn.net/cobrowse/js/GlanceCobrowseLoader_6.4.0M.js
200 OK 13 kB URL GET HTTP/2 storage.glancecdn.net/cobrowse/js/GlanceCobrowseLoader_6.4.0M.js
IP
Requested by https://workforceclientconnect.com/ADP_files/saved_resource(1).html
Certificate IssuerDigiCert Inc
Subject*.glancecdn.net
Fingerprint39:C5:84:26:01:E7:91:9A:1D:F8:E5:9E:8F:94:90:38:81:CA:B4:32
ValidityThu, 25 May 2023 00:00:00 GMT - Thu, 13 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (642)
Hash ab0f929f85a90fbf6eaf06b0781dd213
d773c12c253eb158939645a0ae273074971a0135
3f4aa82226f0842f1ba33877db61789c1c59d99bec827898196e177d0d0252ed
GET /cobrowse/js/GlanceCobrowseLoader_6.4.0M.js HTTP/1.1
Host: storage.glancecdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://workforceclientconnect.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 11 Jul 2023 02:05:20 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: COMPLETED
last-modified: Thu, 22 Jun 2023 17:42:18 GMT
etag: W/"ab0f929f85a90fbf6eaf06b0781dd213"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31556926
x-amz-version-id: kLFz72XdG1j..Sdo_iw2ELMjSw5cvIx1
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wspkE76pcmb7MG9lF8PxXTvY0fOWljrLvJsTi9MrCb3YXBgTYXO89g==
age: 6478018
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/cookieStorage.html
200 OK 1.3 kB URL GET HTTP/2 workforceclientconnect.com/ADP_files/cookieStorage.html
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1415), with no line terminators
Hash 9f78baf5f6e692191eed17638368eda8
8764f0d6b29b2357e2ac9d2708d661095bafef41
20a31dd79b70017fa236fd04bb0213420f0ec83e1a8e382a4f35330a013c302e
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/cookieStorage.html HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
date: Sun, 24 Sep 2023 01:32:16 GMT
server: Apache
last-modified: Fri, 14 Oct 2022 09:27:26 GMT
etag: W/"52a-5eafb3be35b80"
content-encoding: gzip
X-Firefox-Spdy: h2
workforceclientconnect.com/static/media/proximanova-light.1665eb88.woff
404 Not Found 626 B URL GET HTTP/2 workforceclientconnect.com/static/media/proximanova-light.1665eb88.woff
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (669), with no line terminators
Hash 888864daea1b645cf687d38595064333
a92dd436b9d88d1691daba822f652618ab8961ca
ee20768409a1f431b8425d6b1a92821929ce6081ef86ea83c6c05c0153b1636f
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /static/media/proximanova-light.1665eb88.woff HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/main.2fe7c9e0.chunk.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
content-length: 626
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
X-Firefox-Spdy: h2
workforceclientconnect.com/csrf
404 Not Found 626 B URL GET HTTP/2 workforceclientconnect.com/csrf
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (669), with no line terminators
Hash 888864daea1b645cf687d38595064333
a92dd436b9d88d1691daba822f652618ab8961ca
ee20768409a1f431b8425d6b1a92821929ce6081ef86ea83c6c05c0153b1636f
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /csrf HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Sun, 24 Sep 2023 01:32:16 GMT
server: Apache
content-encoding: gzip
X-Firefox-Spdy: h2
wsv3cdn.audioeye.com/v2/scripts/loader.js?h=52efded7263d54aeb85806644ce63802&lang=en&cb=ebd3450
200 OK 48 kB URL GET HTTP/2 wsv3cdn.audioeye.com/v2/scripts/loader.js?h=52efded7263d54aeb85806644ce63802&lang=en&cb=ebd3450
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintEE:8B:07:1F:A3:E3:C1:17:AC:CF:C5:DE:FD:E0:83:D9:2E:B0:89:8A
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (28008)
Hash 0cf3d70ca86457d7e3693edf06e17da5
e9483397a1aebdf8cd5db1c984c466ab46b5cbcb
b901263333ab11d4f757809dc552f2205a73d312722927db48473753a38b9d25
GET /v2/scripts/loader.js?h=52efded7263d54aeb85806644ce63802&lang=en&cb=ebd3450 HTTP/1.1
Host: wsv3cdn.audioeye.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://workforceclientconnect.com
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 01:32:17 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=60, s-maxage=7200, max-stale=86400, stale-while-revalidate=86400, public
surrogate-key: prod 52efded7263d54aeb85806644ce63802 ebd3450
last-modified: Sat, 23 Sep 2023 22:55:58 GMT
cf-cache-status: HIT
age: 3
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b745ce796956c1-OSL
content-encoding: br
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/js/iframe.js
404 Not Found 626 B URL GET HTTP/2 workforceclientconnect.com/ADP_files/js/iframe.js
IP
Requested by https://workforceclientconnect.com/ADP_files/iframe.html
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (669), with no line terminators
Hash 888864daea1b645cf687d38595064333
a92dd436b9d88d1691daba822f652618ab8961ca
ee20768409a1f431b8425d6b1a92821929ce6081ef86ea83c6c05c0153b1636f
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/js/iframe.js HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Sun, 24 Sep 2023 01:32:17 GMT
server: Apache
content-encoding: gzip
X-Firefox-Spdy: h2
workforceclientconnect.com/_PASS.php
200 OK 120 kB URL User Request GET HTTP/2 workforceclientconnect.com/_PASS.php
IP
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
Size 120 kB (119713 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /_PASS.php HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Sun, 24 Sep 2023 01:32:13 GMT
server: Apache
content-encoding: gzip
X-Firefox-Spdy: h2
workforceclientconnect.com/styles/Lato.css
404 Not Found 626 B URL GET HTTP/2 workforceclientconnect.com/styles/Lato.css
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (669), with no line terminators
Hash 888864daea1b645cf687d38595064333
a92dd436b9d88d1691daba822f652618ab8961ca
ee20768409a1f431b8425d6b1a92821929ce6081ef86ea83c6c05c0153b1636f
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /styles/Lato.css HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/CustomSkin_20820_P.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
content-encoding: gzip
X-Firefox-Spdy: h2
workforceclientconnect.com/ADP_files/Roboto.css
404 Not Found 626 B URL GET HTTP/2 workforceclientconnect.com/ADP_files/Roboto.css
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (669), with no line terminators
Hash 888864daea1b645cf687d38595064333
a92dd436b9d88d1691daba822f652618ab8961ca
ee20768409a1f431b8425d6b1a92821929ce6081ef86ea83c6c05c0153b1636f
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /ADP_files/Roboto.css HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/ADP_files/Cobrowse_5.6.11.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Sun, 24 Sep 2023 01:32:15 GMT
server: Apache
content-encoding: gzip
X-Firefox-Spdy: h2
workforceclientconnect.com/api/brand-service/v1/brands?callingAppId=default
404 Not Found 626 B URL GET HTTP/2 workforceclientconnect.com/api/brand-service/v1/brands?callingAppId=default
IP
Requested by https://workforceclientconnect.com/_PASS.php
Certificate IssuerDigiCert Inc
Subject*.workforceclientconnect.com
Fingerprint62:AC:51:10:CF:1F:08:A5:C7:B4:F9:75:BE:94:CA:86:D7:42:DE:A7
ValidityFri, 28 Oct 2022 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (669), with no line terminators
Hash 888864daea1b645cf687d38595064333
a92dd436b9d88d1691daba822f652618ab8961ca
ee20768409a1f431b8425d6b1a92821929ce6081ef86ea83c6c05c0153b1636f
Analyzer Verdict Alert OpenPhish phishing ADP, LLC
GET /api/brand-service/v1/brands?callingAppId=default HTTP/1.1
Host: workforceclientconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
consumer: OLP
DNT: 1
Connection: keep-alive
Referer: https://workforceclientconnect.com/_PASS.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Sun, 24 Sep 2023 01:32:16 GMT
server: Apache
content-encoding: gzip
X-Firefox-Spdy: h2
74.208.236.160
62.115.252.115
0.0.0.0