https://urldefense.com/v3/__https://2fa.com-token-auth.com/XVlRCb1QwWnJUa2xKUW5VMWJXWnpPVGhsZUhsQ2NubzFORkZNWlUxYUwxVlZhMU5KTTJ0emJ6Z3pjbTFtZVdoSFQyVm9ha1Z4YmxrNVRGRkhZMDFXY2s0d1VpOVRWVGxqVjBrdlYxSklaell6TUhoVVJYcDZWMnMwTkhOVlIxazBWbEJHTm1SalNFdzBUVkJFVlZGdEsxSllXak5wUTB0VGNuaExSMWgyWkRoMkwyMXBjbEJ4TlROUVpGQjZkVkpRY3pkRk1qRjRRV3hJTm1WUWJVSnJlWE5MYUVrMGFYTnhNM05DUkc5RFUydHJVbk00VkRsamFFYzJlSGt6WWxGVk1XdFJhM0Z3YUVNM1JuSXJObVpsSzNWR1pHRjVRVDA5TFMxQ1NHRnpTV1p2UlU0d1lVTk5NR1YwUjNCbFRFSjNQVDA9LS1hZTRmMGM3MzRmMzVmMDQ0ZjJhN2M0ODRmODMwM2JjYTg0NGZiZWMx?cid=1514799074__;!!EJ3n55FBLexp1rhr!8S0yWIQgCy55YEFXGF-C9tWJYwr7eEDL5eMhoESlAP7po6BIHoUMdt9qEJNk4-y4nYrKHnMGSvbBr50iNEOl8OfoyLbnmjCrRIcH$

Last Checked: Mar 22, 2023, 05:42 EDT

IP Address: 35.80.202.17
ASN #: AS16509 AMAZON-02, US
Location: Unknown, Unknown, Unknown
URL Reputation:
  • Unknown This URL is not identified as malicious in the PhishTank Database.
  • Unknown PhishCheck thinks this URL is likely not a phish.
  • Unknown OpenPhish: URL not in feed.

Other submissions on 35.80.202.17:

  • https://urldefense.com/v3/__https://incrementacrm.com/api/link/f59ae1f0b71116523a35db2f41d50454/?url=https*3A*2F*2Fforms.office.com*2FPages*2FResponsePage.aspx*3Fid*3Do8GsgLef-UWVMXN6NzA5rMIaBcYDsVhEqyu_LQaGCkFURVJMVzJMUTNSSzVURlBYR1FWUkhEUVBJSi4u__;JSUlJSUlJQ!!OOnBcYQ!JTRY5OsWpdSCRHmpWVzCZbmeG4lxVulNBAUPZLI_7EtOepinFVr0gqr9VjA8o2h20dZCrARCzhJ9ORHWi3jFYz6yqhwYuQ$

  • https://urldefense.com/v3/__https://eedu.fa.em3.oraclecloud.com:443/hcmUI/faces/deeplink?objType=WLF_LEARN_ENROLLMENT&action=NONE&objKey=assignmentRecordId*3D300001636471454__;JQ!!IF02HbLKfvgGAZjM2hVeUw!YGRBS5-XqOEd6E6oopO4rFORv6KkJTGNSbgd5-9c_LFNimNL543QebLylB-VOHxo63uMzeYvDZZzwAQfQuLysIWbykcH77DJWt8ztXuJt6s6F3w$

  • https://urldefense.com/v3/__https://securemail.smarshbusinesscloud.com/login.html?msgUserId=41ef881189343e0d&enterprise=cid_13727_emg&rrRegcode=yTBRT9cS&locale=en_US__;!!OOnBcYQ!NmH4FWO1OZx5O4GHpKZnh8qBSWjXIlD17Gx2R31sdos9Gyfdf4O0gjaUU4p1qKz_k_LQoGuGZ9fNSlzcHl6b0QPjqK3emVSf8rg$

  • https://urldefense.com/v3/__https://venmo.com/identity/verify_email?v=3&code=ab68e24f32bb37ec7a266536b325d779301a529e20263616b715ba31d76e58af__;!!OOnBcYQ!IbIgzxEseFXt2ohfH_NFx3PWbaF0dWlNyl_K-GSIGNSefvk9kJbjzsvlVT1NUJs4xVrEu9RO279yAb_C$

  • https://urldefense.com/v3/__https://mjz9f.app.link/00p7DmIbwyb__;!!OOnBcYQ!P7XMPhHLRp1-dk3QM050gPHqPZ0Iqp4U9jel_pU2BZFdJ6hcD-_WwzYV9DH-ipBHg_F46YGoZ7tY9V1A_FQ$

  • https://urldefense.com/v3/__https://xsbmu.app.link/NUQOnKUsuyb__;!!OOnBcYQ!LshEi5v0Np_B46RE0TrcojoWb6NTlYcMbDS6Exsk84fe5ShFCQUOgsctq6fnI0zDQeSx8RJX6yBVEX5ETi-HL-ZHIsjW$

  • https://urldefense.com/v3/__https://fc.eu.linkedover.com/ac4853/9eb56a89-5907-43ce-b39f-2f8cc032c323/?__;!!EAvW5M_HCdSncw!MUqGGHCJ4kKXWWNdh09pPUwXlQy_JdG6-UeHfN6-YR3N8BHDGnilRlQfTHDk_NunDFKCJdTaVLC89Y_Tt3WnnrwNlC97CjwRZYxqfdk$

  • https://urldefense.com/v3/__https://www.business-services.org/1736b2f2248a499d?l=42__;!!KxydHg!SZm3lJoQtfxqLNou2S3s2YPTZRGuweW-O2-Qd4KD4GxctIIr2TaiOZP8uG4g3zVtZL9eZdX11Oc9K_plDHZDk79BFExLx5F2b3nfe6A9$

  • https://urldefense.com/v3/__https://docsend.com/view/m34g7grnuxgkh5vf__;!!OOnBcYQ!PGAjN1NrpYfPnUY-q9I6ooYiIi4cn5TC6VfjStQ0Q1lav9OUakoXzpbM7gzEJBhQLW43fOHziA$

  • https://urldefense.com/v3/__https://issuu.com/1002010110/docs/mead_o_brien_inc?fr=sMjhmMjU5OTE0MjM__;!!OOnBcYQ!MbSPKVIOoZbSkjQT9Ch6eCW3vQjdXW9f-iTygLu18kZnMKrLehPeyXaMSU150GTL3p90l94c0DdpD-Q$

Other submissions on urldefense.com:

  • https://urldefense.com/v3/__https://seslinks-eu.it-internal-support.co.uk/CL0/https:*2F*2Fcloud.metacompliance.com*2FView*2FLink*3FQvXNdn*2FDpfwvmLFMw8XPTJepThN*2FWgux1QzIYBpIXFPjYmy7qE12jyVsh680728FicL5EBJZcZsP*2FHuHzfMWp*2F5O*2B*2FopdI8Q*2Bilq1oDaaK*2BosDYtdKM6KoTYbu4nO*2FGeSQCs*2F1juTPRCixZqhIofs4whfD1X2u9esbdFk4n376o=/1/01020187b27e908a-c1ddf1af-c090-46e8-a12b-2d9b924d6c03-000000/NSVY3FlQM9nToQCtxDjX5g-ULmYH7hvx9r4dZg-Iy9k=297__;JSUlJSUlJSUlJSUlJSUl!!FV2k9Gfstw!FgvZ0Pod9Un4PAXuiNkgKLx2TVn9D1WPe7fFKsinxQ67aAmGn78LrIGdZoH99YQCOiQxLpWP1U9T64H1vEJkbM0mg8iPO7faXA$

  • https://urldefense.com/v3/__https://seslinks-eu.it-internal-support.co.uk/CL0/https:*2F*2Fcloud.metacompliance.com*2FView*2FLink*3FQvXNdn*2FDpfwvmLFMw8XPTJepThN*2FWgux1QzIYBpIXFPjYmy7qE12jyVsh680728FicL5EBJZcZsP*2FHuHzfMWp*2F5O*2B*2FopdI8Q*2Bilq1oDaaK*2BosDYtdKM6KoTYbu4nO*2FGeSQCs*2F1juTPRCixZqhIofs4whfD1X2u9esbdFk4n376o=/1/01020187b27e908a-c1ddf1af-c090-46e8-a12b-2d9b924d6c03-000000/NSVY3FlQM9nToQCtxDjX5g-ULmYH7hvx9r4dZg-Iy9k=297__;JSUlJSUlJSUlJSUlJSUl!!FV2k9Gfstw!FgvZ0Pod9Un4PAXuiNkgKLx2TVn9D1WPe7fFKsinxQ67aAmGn78LrIGdZoH99YQCOiQxLpWP1U9T64H1vEJkbM0mg8iPO7faXA$

  • https://urldefense.com/v3/__https://issuu.com/1002010110/docs/mead_o_brien_inc?fr=sMjhmMjU5OTE0MjM__;!!OOnBcYQ!MbSPKVIOoZbSkjQT9Ch6eCW3vQjdXW9f-iTygLu18kZnMKrLehPeyXaMSU150GTL3p90l94c0DdpD-Q$

  • https://urldefense.com/v3/__http://app.information.maileva.com/e/er?s=782268955&lid=1370&elqTrackId=A38976F0388490B0C655AA22C4645AD5&elq=aeab45996b744e4ba9ff8d62157d2ecc&elqaid=2727&elqat=1__;!!HnBXvm0IhJMx!t35Nvw3w85LLniCeyLlUpAQBs1m7pkrNV0JHilvaNP4Wn-NhrYN5VQCOF_rpZ_Wg7BT0o3CIDa-iX1VkwwEc2x3PBLoZW7z1$

  • https://urldefense.com/v3/__https://bit.ly/3KZFWKx__;!!OOnBcYQ!PfwLuxbcUEy8DKssGro62PQy3bgd3M00pMShoRalnvi1V_hRTSnohqslmxHwnyy3XVXn8zdkFwQNNIx6wRYTQ-s$

  • https://urldefense.com/v3/__https://ncv.microsoft.com/maOpxTHIol__;!!NKFkS5A_Mh5FNg!JlzasPMB8TLDEg348wpkT2PGVTZyaZVppPze5EsXbzJLHk-Fnj604LNHCRHupTk0G2Mj12-Qmkl1PQA8ZIEXAcaw$

  • https://urldefense.com/v3/__https://drive.google.com/file/d/1VdVKlhlORB0TKUztmMuyl7KPr8dox7CI__;!!OOnBcYQ!J4ZOec8cDuPSV2m7qiByEj4j5fzUYQHFFKTcad6xdXTyUBWfxXmObCme7EaRjFrTVFgiNkQPQk4i-RJMGZGpOrJ4RslSkQ$

  • https://urldefense.com/v3/__https://f835p00s.r.us-east-1.awstrack.me/L0/https:*2F*2Faws.amazon.com*2Fevents*2Fcloud-day-prague*2F*3Ftrk=0903d551-965a-4b92-a895-cbd42a91162f*26sc_channel=el/1/0100018a61385a5a-04a6a228-07e6-443c-bdad-004354013045-000000/pY0jvIzINh2Id8-Kve0k7ls1Jrs=337__;JSUlJSUlJQ!!OzAIPA!CulGdhItCDwbzzM7l5GWnI-TPzOnNNHCEfFlth4rioAZIfMJnh9aY5SRs5iKuLBvtjDAcfSXyI_bAmRLvA$

  • https://urldefense.com/v3/__https://epic.mycenturahealth.org/MCH/s/W3FTHRTN64QMQUZIW43R4XXKWQ/Activate__;!!OOnBcYQ!JWd3BZi3AIvWvVETj3dl3q_zE0DwYgpa3UE8ijmHd-NFc3DlfdRFu3ouQ8uPaH6YFLlpkmKzZ_bKqX-6pZs57fDUpg$

  • https://urldefense.com/v3/__https:/fwtracksfmint.freshworks.com/ls/click?upn=U4IV2-2Fn9GFffZDpRnEik14LJh1igv3foQgZUGBJzI7t5zVsOY2t3ce-2Bs7O3uPSZeviWAhRWbiYNa-2FwsmzX3gdPWX4J2N-2FLvxQYgyeS8TaasvQrV3Z2SDtmmyf5Tsy6PIf3VHsB5CRgAtCuNWrq82GUcKtdnjxUZ0yM21B51QQfccnlWcGw5h8BPKp3UwL-2BVD2v06yRNw72cK0v-2FN4BX1gA-3D-3DLEoK_LdY-2FLXqqh5nGLlHFoc5mYGcTLP3w7G3R5EthHw4NTrGa-2FVW0f73YuMOgjy5nA-2F-2BDlFtO48Eux78Tk1eruejSruDM9J-2B7AbQDCTVksfZebHI7K-2B-2F29JxboT1HxCVy2quwtB1t38F16dAYu68Id0w9pMwZ5WxsIuXguM-2BXTOn6EFp77R56rf9InNORndCJCPRJST47WgWDZth1gsUADGVZFsCpQoca-2Bee8-2B5lT-2FnjLziyJGuHQOQMYPfKGM8NZyzNzdU95EzzGiS-2BQp-2BQOir82PlUhkHYkq7cknRPnuK3Pix097CP1wzDDaza6RYKtkhQuvcf435BzyM2v6W-2F9lTNyp-2FMDGQwaMnF9Sbhz8OKPStATkCLiB77c5s2W4Zxb67DP01clWwMMPDCrNcuknO9k-2BjIf1ek7iQOGpR-2FkhBP-2BWJEYi0zj-2BxccbrdBHXDl7KQzqh6FlSCIPbZ0bPZUbwgmNMPSz4tF47gkg6tnCXCDCV9uT-2BagBtLDDsFfEgeFO3kWFeEcyM7ci8-2FBVoz0gt1z9R-2FM-2F7KFTEzKsAZluVaOHqL3EIxKP94b1pJ2tn-2FV3QulJ2ihYH7I-2BP2V3ZZCtHe27DDVYGw9CJg7z4YA6xR721eryP2oiYwQ6oTZmz-2FSIwZ25f9zVmT8N7T7JWQAO-2BIuGUjWHucppd8S9WmvFc7j7MD-2FJeL7cWpqm9hgK2Cl-2FU9wrXRIZFV0NPnlVEOZTOs1brYk-2BMRahFhfqWT8iOQQ8fgy1MJja-2FgLHzbI2GID0d-2BqnGBO6BQL6NRvUSryLXptOVnLWpg29K5eufnThI8pZVhHPLhpMN2yf6LEfOzTfi-2FstbtuE9jSnMmeP-2Fh9CGJCslFptyIkFH1K6lXwlKyekhOEdZOBxJ8GDFbF0SBQBFZaS9Ff-2Bv5v-2BORBRSTSA-2BtzLnzp-2F2p9NQnLN0W3O7doA0qFWMoyCkDSwpSQLqqFFlhwVW9NORligqInA4vGFHL3SgM79HeAgE0EDpFndDZGo9lyV6rNVC00-2FtUUaSIP18g9zIJmLweCwOG4n4ZMGxvAA00t8OWrIMRd3ZV-2FtkIGPWMG64KUoK27QRMq8zvxYn7ZAwT9qxsDKko06zbm14b7vCiPnLb5yR3rmh2jQjw5kPnQfZ4dTM6qzZu-2BApohbagZ0FrgHmCFMq-2BG9o6Gi3M5G5hr8lMLUJ5zyHGvW-2FN5o9mwzWVQ3qgQufiHmK2rIb-2BGIDqyuN2zRO61MDI6SfSFYIS-2BAQPqjYpCMTX-2B90llGr7fv9p6h-2FaVYk3LVRYTjB1DAQcyywV837SfycFB79rYVg-3D-3D__;!!MVdjS0DT0ElZVmQSbQ!iVk5v5gVs2bRnchPSvmEdWI_dNwC_nOyD9v_sQfVa5T6RDKRW9MNwtrRFwbedn_FpZCDYhEzSNLNiorXJrAZo6GxDFvrdtILghJR0m1Ozg%24

Previous checks:

                               
                             
  • GET
    0 Timed out waiting for a response.

    https://auth.gfx.ms/16.000.26252.00/favicon.ico?v=2

  • https://urldefense.com/v3/__https://2fa.com-token-auth.com/XVlRCb1QwWnJUa2xKUW5VMWJXWnpPVGhsZUhsQ2NubzFORkZNWlUxYUwxVlZhMU5KTTJ0emJ6Z3pjbTFtZVdoSFQyVm9ha1Z4YmxrNVRGRkhZMDFXY2s0d1VpOVRWVGxqVjBrdlYxSklaell6TUhoVVJYcDZWMnMwTkhOVlIxazBWbEJHTm1SalNFdzBUVkJFVlZGdEsxSllXak5wUTB0VGNuaExSMWgyWkRoMkwyMXBjbEJ4TlROUVpGQjZkVkpRY3pkRk1qRjRRV3hJTm1WUWJVSnJlWE5MYUVrMGFYTnhNM05DUkc5RFUydHJVbk00VkRsamFFYzJlSGt6WWxGVk1XdFJhM0Z3YUVNM1JuSXJObVpsSzNWR1pHRjVRVDA5TFMxQ1NHRnpTV1p2UlU0d1lVTk5NR1YwUjNCbFRFSjNQVDA9LS1hZTRmMGM3MzRmMzVmMDQ0ZjJhN2M0ODRmODMwM2JjYTg0NGZiZWMx?cid=1514799074__;!!EJ3n55FBLexp1rhr!8S0yWIQgCy55YEFXGF-C9tWJYwr7eEDL5eMhoESlAP7po6BIHoUMdt9qEJNk4-y4nYrKHnMGSvbBr50iNEOl8OfoyLbnmjCrRIcH$ https://2fa.com-token-auth.com/XVlRCb1QwWnJUa2xKUW5VMWJXWnpPVGhsZUhsQ2NubzFORkZNWlUxYUwxVlZhMU5KTTJ0emJ6Z3pjbTFtZVdoSFQyVm9ha1Z4YmxrNVRGRkhZMDFXY2s0d1VpOVRWVGxqVjBrdlYxSklaell6TUhoVVJYcDZWMnMwTkhOVlIxazBWbEJHTm1SalNFdzBUVkJFVlZGdEsxSllXak5wUTB0VGNuaExSMWgyWkRoMkwyMXBjbEJ4TlROUVpGQjZkVkpRY3pkRk1qRjRRV3hJTm1WUWJVSnJlWE5MYUVrMGFYTnhNM05DUkc5RFUydHJVbk00VkRsamFFYzJlSGt6WWxGVk1XdFJhM0Z3YUVNM1JuSXJObVpsSzNWR1pHRjVRVDA5TFMxQ1NHRnpTV1p2UlU0d1lVTk5NR1YwUjNCbFRFSjNQVDA9LS1hZTRmMGM3MzRmMzVmMDQ0ZjJhN2M0ODRmODMwM2JjYTg0NGZiZWMx?cid=1514799074
<html xmlns="http://www.w3.org/1999/xhtml" style="" class=" js flexbox flexboxlegacy canvas canvastext webgl no-touch geolocation postmessage no-websqldatabase indexeddb hashchange history draganddrop websockets rgba hsla multiplebgs backgroundsize borderimage borderradius boxshadow textshadow opacity cssanimations csscolumns cssgradients no-cssreflections csstransforms csstransforms3d csstransitions fontface generatedcontent video audio localstorage sessionstorage webworkers applicationcache svg inlinesvg smil svgclippaths"><head><meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers.">
  <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com.">
  <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible">
  <meta name="robots" content="noindex, nofollow">

  
  <script src="/assets/application-b997eee3d3006f4636da383097d88d2b466bb49a9b0e60a22f8a8c3d6529ec14.js"></script>
  <script src="/packs/js/vendor-33f2a97e6f3a670a76a5.js"></script>
  <script src="/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js"></script>

  <script>
//<![CDATA[
window.gon={};gon.locale="en";
//]]>
</script>

    <link rel="stylesheet" media="all" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css">

  <script class="jsbin" src="http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js"></script><link href="https://auth.gfx.ms/16.000.26252.00/favicon.ico?v=2" rel="shortcut icon"><link href="https://adfsprod40.everis.com/adfs/portal/css/style.css?id=341562E0634F29D004DCB868F8C7616763EA0427B0D093999B67942DCED59602" rel="stylesheet"><style type="text/css">body {
            background-image: url(https://adfsprod40.everis.com/adfs/portal/illustration/illustration.jpg?id=3FBE6B4B7691FEE74B99E31299D49709F760BA95B0373FDA362364853BCB3C8C);
background-color: inherit;
            background-repeat: no-repeat;
            background-size: cover;
            height: 100%;
            width: 100%;
            -webkit-background-size: cover;
            -moz-background-size: cover;
            -o-background-size: cover;
        }
</style></head>
  




<body><div id="content">
<div id="header"><img alt="NTTData" class="logoImage" id="companyLogo" src="https://secureservercdn.net/45.40.145.151/9e6.f60.myftpupload.com/wp-content/uploads/2018/09/NTTD_Logo.jpg?time=1638447021"></div>

<div id="workArea">
<div class="groupMargin" id="authArea">
<div id="loginArea">
<div class="groupMargin" id="loginMessage">Login with your corporate account</div>

<form action="/pages/MOCK" autocomplete="off" id="loginForm" method="post">
<div id="formsAuthenticationArea">
<div id="userNameArea"><input autocomplete="off" class="text fullWidth" id="uname" name="uname" placeholder="someone@example.com" type="email"></div>

<div id="passwordArea"><input autocomplete="off" class="text fullWidth" id="password" name="password" placeholder="Password" type="password"></div>

<div class="submitMargin" id="submissionArea"><input id="logon" name="logon" type="submit" value="Login"></div>
</div>
<input type="hidden" name="email_template_id" value="4498740"><input type="hidden" name="encoded_payload" value="XVlRCb1QwWnJUa2xKUW5VMWJXWnpPVGhsZUhsQ2NubzFORkZNWlUxYUwxVlZhMU5KTTJ0emJ6Z3pjbTFtZVdoSFQyVm9ha1Z4YmxrNVRGRkhZMDFXY2s0d1VpOVRWVGxqVjBrdlYxSklaell6TUhoVVJYcDZWMnMwTkhOVlIxazBWbEJHTm1SalNFdzBUVkJFVlZGdEsxSllXak5wUTB0VGNuaExSMWgyWkRoMkwyMXBjbEJ4TlROUVpGQjZkVkpRY3pkRk1qRjRRV3hJTm1WUWJVSnJlWE5MYUVrMGFYTnhNM05DUkc5RFUydHJVbk00VkRsamFFYzJlSGt6WWxGVk1XdFJhM0Z3YUVNM1JuSXJObVpsSzNWR1pHRjVRVDA5TFMxQ1NHRnpTV1p2UlU0d1lVTk5NR1YwUjNCbFRFSjNQVDA9LS1hZTRmMGM3MzRmMzVmMDQ0ZjJhN2M0ODRmODMwM2JjYTg0NGZiZWMx"><input type="hidden" id="final_redirect_url" name="final_redirect_url" value="https://https.protected-forms.com/pages/c3955b1c48a">
</form>

<div class="groupMargin" id="introduction">
<p>To change your password, click <a href="#">here</a></p>
</div>
</div>
</div>
</div>
</div>

<footer>&nbsp;</footer>




</body></html>

                             

Screenshot: