https://urldefense.com/v3/__https://ladwp.us.onbmc.com/arsys/servlet/ViewFormServlet?form=NTE*3ANotifier&server=onbmc-s&eid=NTS000006314932__;JQ!!MajgCvY!S4Nhldu1op2cGICiTndSPTmtpJnPP5Favs9QVlG1GO4oUMHGZN1suE1ekKHe75Pem7M$

Last Checked: Sep 21, 2021, 20:51 EDT

IP Address: 52.6.56.188
ASN #: AS14618 AMAZON-AES, US
Location: Ashburn, Virginia, US
URL Reputation:
  • Unknown This URL is not identified as malicious in the PhishTank Database.
  • Unknown PhishCheck thinks this URL is likely not a phish.
  • Unknown OpenPhish: URL not in feed.

Other submissions on 52.6.56.188:

  • https://urldefense.com/v3/__http:/lnk.businesscasewritingmails.com/ltrack?g=0&id=cB9SBFVUAlUAVERSUghRXFINABg=BQYND1ZWXVUeAkUEFE8KBF1fSiIAWlFMRFoDV01UCQg=&client=86453&c=0000__;!!BN3BN5aqUA!o2ewG01Z_wCf4kEXFgyR1r7YlobeJn7qOPS3d0vO26vnD6u-8Z0STj-p6vxzY4RUHWw$

  • https://urldefense.com/v3/__http://radicalfast.com/d88v.aspx?uhjdiouoxznii=mybjwxokrqgyu153ip1p02fcsi01h590010qw070nt6u3x5v8v__;!!JUyETn1neQ!pZCh0GVrn_IQvK7hmLTtwB94ocbrlJXaaZSJjSMSbkroPkylh1DC-eWaWCvkYyY4iWoY7H_6$

  • https://urldefense.com/v3/__https://www.2sharedoc00034652443.com/__;!!Bx5qvpqhOUs5Sg!GeYlvISKG-7zq8OlDln7vnTQwyb4dpuzkEh_gCnEOLpjqPoXDj9MWKiqaKqfVA9G2QXR6w$

  • https://urldefense.com/v3/__https:/forms.gle/jGh3ByPJ4GQsS7Cm9__;!!MajgCvY!VXZcex1N8AtxSJBFZfwW0TjizdpVQX7e281H9t9Vdf45L4cjeglWeNf799V3ffdn$

  • https://urldefense.com/v3/__http:/cipparonepa.com/__;!!I2XIyG2ANlwasLbx!CiUTU8aAtvH-ZfQ1r55eyUnZymyNVqkVMsOMOv0bmg2EPQGUW5txEXzE8JTwa1h8WJk$

  • https://urldefense.com/v3/__https://fishuidwinne-0000000.web.app/00000000c00.html*d3NtQGltYXRlY2guY29tLmF1__;Iw!!OVe7agNpIlw!fimq2Tqq9qZfXmuvfp8uNCLNSHIazko5DRVgg023hkM6w9WV8tiVnwrKL0fVAw$

  • https://urldefense.com/v3/__https://doc-10-48-docs.googleusercontent.com/docs/securesc/htqreffcgavaq2es07o3t9d03bienvgf/59nelnntmp5iq5bd98ushdpoqgfsddmj/1622292600000/11844501780091865682/13688793187807109782Z/1Q0jHmmlNDJI14COY70aw8IPNts5qSff3?e=download&nonce=agsunadh50g2i&user=13688793187807109782Z&hash=hu0kbhcv1e3ikj71dkfnd9o7l9flkbuq__;!!GyOyJ9dp6TEiFg!oX8eh5b1U9I0eAmJDm_6DAGGBmNN-iM3HBepXDVfLPOwbzBCU5OY_zw40qMJPivzXGKR1ZH7$

  • https://urldefense.com/v3/__http://links.concurtechnologies.mkt7817.com/els/v2/xqNgJ2-pmgfy/c1lWbUMxZ0ZMdWk3ZGgxOVdvOEJNK0xmSHZXWitCaUVldy9aNlVDOUNFUTVPajR4UkFMNFc5Z3daai9JWnhrRkpnRkh6VTQ4VTF5NjU1TitCMGxOZVV2eXh1L052L3Y2dDJ2UVJESGtaRVpMaCsvZUN5ejkwSkVtay81MzVZLzZsUGdhZ002WmdMcz0S1/K3ZmRWNrNm53RVZ3Zm11Y3JySGdzVlhzTC9zdUhLbzcvNVFFNlZrMGphdEZTeXRkMDc5WnBMZ1F1TmNhbEw4eAS2__;!!AD8y5q2f9OQ!70AtLZuwRdpKjZno-wycwa9R6RwtCkjiKaibGcieZW1fj4izRTFkOIL_C6diN-gFqg$

  • https://urldefense.com/v3/__https:/www.facebook.com/email_notification_feedback/?is_useful=1&next_href=https*3A*2F*2Fwww.facebook.com*2Fn*2F*3Fnotifications*252F*26aref*3D1623796454325847*26medium*3Demail*26mid*3D5c4d54942fb85G5aff5a1e428bG5c4d592d8fe57G32b*26bcode*3D2.1623796456.AbwWvhp2sp8nXQ16dPA*26n_m*3Deoin.mulligan*2540docusign.com&ndid=5c4d54942fb85G5aff5a1e428bG5c4d592d8fe57G32b__;JSUlJSUlJSUlJSUlJSUlJSUl!!BN3BN5aqUA!u1eSsp55W1hL0I6oJrJWobo1LaMB_hOzsPw-ESROS9LaIJURD-sD2HJVe4TuuJRe2_1d$

  • https://urldefense.com/v3/__https:/delighted.com/e/en/u/mYaL2C9zRGaKh0S2PbUmiwDz/3ftxTPac__;!!MajgCvY!XDiDYiFXhLJObid2cw-IA4e-lCqAEn0Mc0izV5zdTosjHXgN1f6FmfHj6hWpE5Qs$

Other submissions on urldefense.com:

  • https://urldefense.com/v3/__https://zorobranddev.sjc1.qualtrics.com/jfe/form/SV_er3jZNvOe0wSa8u?Q_DL=0mAzM6qSFMNrXab_er3jZNvOe0wSa8u_CGC_ZSHac2NsXW2YM67&Q_CHL=email__;!!MajgCvY!UPeX-KcIYpIGr22J3IS_tQ3kjNHjmOPiVcVeWocbAe1C44ya_guOgeLQBRUMmYy16T0$

  • https://urldefense.com/v3/__http:/xo53y.mjt.lu/lnk/AV0AAAw-ebEAAAAAAAAAAErcdGIAAAAA8r0AAAAAABEPkgBhSeCPoAfdM5B_RyyNCvQBvqTA-QAQuf0/1/WrUY6cdNGbxj2t5Pqt3Kxg/aHR0cHM6Ly9iaXQubHkvQ2FydGFNSVRFUzIwMjAtRVM__;!!HNzSFpc-7g!OM1WXl5Jdz2nJJCYdu_dY5_asMn2DomgJ4cLKNXFkDmjm4jOVddkvBcJ4A8hbQ$

  • https://urldefense.com/v3/__https://app.apollo.io/www.wepurchasefleets.com__;!!PZMNXUo!LFaj5GRHuFbECFuHj6BRbrvtvEQbYRouNhMlLCg3q0F2SCxTxvloUjV29oZ9DvuZ$

  • https://urldefense.com/v3/__http:/www.hactl.com/__;!!OK14_Ng!iyc3rqvCJIFTmHltGtvfEpzMPXhUYQXM5Ze0w6R8pOGdrcIP4mwMtbxQRVl7uMH9HA$

  • https://urldefense.com/v3/__https://linklink.mystrikingly.com/__;!!NI2rKV_i!sVrtHtnwEJcenvxfLMep66AZXNfzpUu_PK9-v5vvUp4-eIBjRI8dZQI2JjsdLlCpLQ$

  • https://urldefense.com/v3/__https://johnholland.sharepoint.com/sites/pc/PRS-17774?e=1*3Ae6dadd1178294fc48b23a88dcf64b0e9__;JQ!!MHMB8HWD!DKUqhn8muQwstRFtqtf7b8sjsLeTntE0WFVuizIwyTVGe8E3BtNyrIgPtxR6aL0$

  • https://urldefense.com/v3/__http://links.myitcontent.com/redir/61483495a304ff7e69908ff1/eyJjIjoiZDk5ZmNjY2Q5NTliNDQwYzQ5ODA4YjViMTg1ZWQzZTBjYWE3Yzc4NCIsInNjIjoiNjE1MWIwNmFmNTdlNGJhOWI4NzY3NGQzIiwidSI6IjVkNzY2MGMxMzA2NWQ4NDQ0MTEwYjI2ZCJ9/?_ze=ekurtzberg@enengineering.com&email=ekurtzberg@enengineering.com__;!!J0YUtvGQYzQetw!_nu9jJrex4sCYcRedK3azrqv7r9To9vGBDmLr9W-2ZgNJnvCch8g5W9TMwJUbI1PMrJRxA$

  • https://urldefense.com/v3/__http://brand-cheap.ru/__;!!BN3BN5aqUA!sEMaKvYXKM2Uu706jV6dVAeAOi7AGqRm05ekabCjkiW6JU61qbnW50pyE-Yhu6zoDdp1nA$

  • https://urldefense.com/v3/__https:/lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDAsInVyaSI6ImJwMjpjbGljayIsImJ1bGxldGluX2lkIjoiMjAyMTEwMTguNDc1NDAxNTEiLCJ1cmwiOiJodHRwczovL3d3dy50cmVhc3VyeS5nb3YvdGlndGEvbWFuYWdlbWVudC9tYW5hZ2VtZW50X2Z5MjAyMi5wZGYifQ.Xt-6j-OvnJXaYZlGEWfGAImOTpzPxqR1jvrCfdQHujk/s/5145361/br/114195220308-l__;!!P4DYikUpKfxn!f33uroc0Zu3g5zLfNhtib2X41qGCll_Jc1LrziJmdHor_7KDD5O5uUKqic2soY1Mrz_qbY1C$

  • https://urldefense.com/v3/__http://link.email.dynect.net/link.php?DynEngagement=true&H=NHOkGrDLOAaDCI80WAVIg8k9WH7D2504PCZjFQA*2FwSXUWe5z3X*2FiLsrJCLJu0KRC5dp1*2BQX56XMRX05lzG75qwSQqufdDJMZp6fKmITzqPyL01poMrcvhxlvkwtnoE9U&G=0&R=https*3A*2F*2Fwww.compliancetrain.com*2Fwebinardetails*2F2021-Employee-Handbooks-Issue&I=20210915152743.000000008c5e*40mail6-71-ussnn1&X=&V=3&S=79NfvK17KJceDunbo_t4lMmqg8StHg-jVxnfQgv6TBM__;JSUlJSUlJSUl!!HYthtcT8!On8JuWRJZIAZXU8w9HPxfwnWSpRb06ep2ODz3FgQVWefV5BTHv1mWlWv5zofWDnQ$

Previous checks:

                               fgets: Connection reset by peer

                             
  • GET
    200 OK

    https://tracking-protection.cdn.mozilla.net/base-fingerprinting-track-digest256/1626811449

  • GET
    200 OK

    http://detectportal.firefox.com/canonical.html

  • GET
    200 OK

    http://detectportal.firefox.com/success.txt?ipv4

  • GET
    200 OK

    http://detectportal.firefox.com/success.txt?ipv6

  • GET
    200 OK

    https://tracking-protection.cdn.mozilla.net/base-cryptomining-track-digest256/1604686195

  • GET
    302 Found

    https://urldefense.com/v3/__https://ladwp.us.onbmc.com/arsys/servlet/ViewFormServlet?form=NTE*3ANotifier&server=onbmc-s&eid=NTS000006314932__;JQ!!MajgCvY!S4Nhldu1op2cGICiTndSPTmtpJnPP5Favs9QVlG1GO4oUMHGZN1suE1ekKHe75Pem7M$

  • GET
    200 OK

    http://detectportal.firefox.com/canonical.html

  • GET
    200 OK

    http://detectportal.firefox.com/success.txt?ipv4

  • GET
    200 OK

    http://detectportal.firefox.com/success.txt?ipv6

  • GET
    200 OK

    https://tracking-protection.cdn.mozilla.net/social-tracking-protection-facebook-digest256/1604686195

  • GET
    200 OK

    https://tracking-protection.cdn.mozilla.net/social-tracking-protection-linkedin-digest256/1564526481

  • GET
    200 OK

    https://tracking-protection.cdn.mozilla.net/social-tracking-protection-twitter-digest256/1604686195

  • GET
    302

    https://ladwp.us.onbmc.com/arsys/servlet/ViewFormServlet?form=NTE%3ANotifier&server=onbmc-s&eid=NTS000006314932

  • GET
    200

    https://chi-rsso1.onbmc.com/rsso/start?goto=https%3A%2F%2Fladwp.us.onbmc.com%2Farsys%2Fservlet%2FViewFormServlet%3Fform%3DNTE%253ANotifier%26server%3Donbmc-s%26eid%3DNTS000006314932&tenant=ladwp.us.onbmc.com@ladwp-prod&form=NTE%3ANotifier&server=onbmc-s&eid=NTS000006314932

  • POST
    0 Timed out waiting for a response.

    https://chi-rsso1.onbmc.com/rsso/start

  • https://urldefense.com/v3/__https://ladwp.us.onbmc.com/arsys/servlet/ViewFormServlet?form=NTE*3ANotifier&server=onbmc-s&eid=NTS000006314932__;JQ!!MajgCvY!S4Nhldu1op2cGICiTndSPTmtpJnPP5Favs9QVlG1GO4oUMHGZN1suE1ekKHe75Pem7M$ https://ladwp.us.onbmc.com/arsys/servlet/ViewFormServlet?form=NTE%3ANotifier&server=onbmc-s&eid=NTS000006314932
  • https://ladwp.us.onbmc.com/arsys/servlet/ViewFormServlet?form=NTE%3ANotifier&server=onbmc-s&eid=NTS000006314932 https://chi-rsso1.onbmc.com/rsso/start?goto=https%3A%2F%2Fladwp.us.onbmc.com%2Farsys%2Fservlet%2FViewFormServlet%3Fform%3DNTE%253ANotifier%26server%3Donbmc-s%26eid%3DNTS000006314932&tenant=ladwp.us.onbmc.com@ladwp-prod&form=NTE%3ANotifier&server=onbmc-s&eid=NTS000006314932
<html lang="en"><head>
    <title>Hash Handler</title>
    <meta http-equiv="Content-Type" content="text/html;charset=utf-8">
    <script type="text/javascript">
        function submitForm() {
            var hashHandlerForm = document.getElementById('hashHandlerForm');
            if (window.location.hash) {
                var hashHandlerInput = document.getElementById('goto');
                if (hashHandlerInput) {
                    hashHandlerInput.value += window.location.hash;
                }
            }
            hashHandlerForm.submit();
        }

        window.onload = submitForm;
    </script>
</head>
<body>
<form id="hashHandlerForm" action="/rsso/start" method="post">
    <input type="hidden" name="url_hash_handler" value="true">
    
    
            <input type="hidden" id="goto" name="goto" value="https://ladwp.us.onbmc.com/arsys/servlet/ViewFormServlet?form=NTE%3ANotifier&amp;server=onbmc-s&amp;eid=NTS000006314932">
    
            <input type="hidden" id="tenant" name="tenant" value="ladwp.us.onbmc.com@ladwp-prod">
    
            <input type="hidden" id="form" name="form" value="NTE:Notifier">
    
            <input type="hidden" id="server" name="server" value="onbmc-s">
    
            <input type="hidden" id="eid" name="eid" value="NTS000006314932">
    
</form>


</body></html>

                             

Screenshot: