https://http.www.secure.kb4.io/XTjFkQmN5OU1kbWgzVG01SmRYZDZaelZCYVVOT2FETndTRmRoZDB4VE1WWlVOMkoxTVZCSmNHbGpUVGRpVXpCVVdFaGthR0owSzBsSlJUTlNPRGRRV2xwUU1VUTRTWHBPV1ZaUmNWTjZNRzVQYUhOVFJ6TjZXalJQYXpSdGRreERRMEZyTmtOeU4wZzNVMlZwY1RaRGIwdDRUazByZUhWMk9USjRkVXRGTUdOQlUyNDNOV2RCWVVscFowTlJZV2c0TjNKeGIyRk9PRFppVGxKa1ZWcGhibEU0VW1Gek5WYzJOWFEwYzNrck9VeFhLMlU0T1VKYVFtOUpiM0o0T0VFekxTMXFLemRQYVZWaVJscGpTM2QzVTFWV2VGRnZURGgzUFQwPS0tZTkyNWI5MzAyMTJhNWU5YWYxYzI0MjhiZmZlYTEwZWI0ZmYyN2UzNA==?cid=1831480827

Last Checked: Dec 09, 2023, 11:02 EST

IP Address: 50.17.70.120
ASN #: AS14618 AMAZON-AES, US
Location: Ashburn, Virginia, US
URL Reputation:
  • Unknown This URL is not identified as malicious in the PhishTank Database.
  • Unknown PhishCheck thinks this URL is likely not a phish.
  • Unknown OpenPhish: URL not in feed.

Other submissions on 50.17.70.120:

Other submissions on kb4.io:

  • https://us-api.mimecast.com.kb4.io/XYWc4VUZncGlQZy9HV2h0aFlNS2V6clNpNURJNlpRbnU1K1BRaHNadXB6QzJEak80czZZTXEyUURieExpbW9MaUkzd2ROQkdWcERPaFNQSUNKT0JqWlpMMjBic2JWdVUrelQvUExUcUY3N2ZzVVg2bkNGazVMMEZOenFrL3FzTTQ0YWk0cVFSNFhhTXJKd0RLczg0Z2Yza3dVUlVrVXpYVTVFSkhlMUNYZXQvMXBtVVhZQk9TdkZ5Si0tOUdZTGtsUHJwa3JSRDIrQi0tM3o1MFp4Um9UMU5uR29vSk9GcWIxZz09?cid=2023290678

  • https://http.www.secure.kb4.io/XUWtOVGNtMW1lbUoyUVd0MU9EUllPV3RSZFdORkt6ZHhOWFJITVRkMWIxRnRURlp0ZURscFExSlFTVUprWVhoak1sbHRTazV0Y2pScU9Ea3pkSGM0YldaUlRUbDZhRVZNZVc4dmNYSjRhRXgzYjJZMGJIZHFTV1p5VDJOeGFUY3pibGxYVlUxWU5XbFJia0YyYW05U0wwZFBSREJWVm1aS1prRnZTVXhwVEU1VVQyRkRkSFozWWxCek1Xa3lTVXBSVVV4ak5GSnlUWEZaTUhsdVdXUldTekZ0WmpKbGMwdFFXVVJMV1UxaWNIQm9halpwTkVoclVtMWhXVkozUzFSNUxTMVlkSFZMWkdGelpsQkhlVlJpTW1ST2RVYzRhbmRCUFQwPS0tNzYyNjUwNDFhMmRiMGRkNzQwYzRmMTA2M2FjMzNmNTY4NjE4NGJiNw==?cid=1797449471

  • https://http.www.secure.kb4.io/XUWtOVGNtMW1lbUoyUVd0MU9EUllPV3RSZFdORkt6ZHhOWFJITVRkMWIxRnRURlp0ZURscFExSlFTVUprWVhoak1sbHRTazV0Y2pScU9Ea3pkSGM0YldaUlRUbDZhRVZNZVc4dmNYSjRhRXgzYjJZMGJIZHFTV1p5VDJOeGFUY3pibGxYVlUxWU5XbFJia0YyYW05U0wwZFBSREJWVm1aS1prRnZTVXhwVEU1VVQyRkRkSFozWWxCek1Xa3lTVXBSVVV4ak5GSnlUWEZaTUhsdVdXUldTekZ0WmpKbGMwdFFXVVJMV1UxaWNIQm9halpwTkVoclVtMWhXVkozUzFSNUxTMVlkSFZMWkdGelpsQkhlVlJpTW1ST2RVYzRhbmRCUFQwPS0tNzYyNjUwNDFhMmRiMGRkNzQwYzRmMTA2M2FjMzNmNTY4NjE4NGJiNw==?cid=1797449471

  • https://online-banking.kb4.io/XVUM5MWMyNDVaVWR1VmpGVlRYZFFPR3htVlZOdlNuY3pNM0ExUjNBdlJVSjViMDRyU2xZNWNYcFVSVTVFVFZWM1IxUTJVMFpLY2t3MlpHSnJlVWh2ZFVsV1ZIUkhSVlY0VlROUFQzUm9jRkoxT1c1V1ZubDZSbEF6Ykc5U1JVYzRVRE5wU25sRVNHODRVVFZhWW5Ca2FEY3JOREV6UkRjclVISmFhRXcxTjBkeGNtWnVPR0pJUVRCeVJFeFNjV2hDTDJOck9Wa3JaMVF3V1dwbVRXaDZjRU5OV2paMGVGWk1kVzlaYVZCbFpVVnpOMDVoWnpWRlRWUlZNa3N2THk5b0xTMU9NM0V3TjFFdlV6SnpSMmxrY1ZCNVQyTjZjMnRuUFQwPS0tNTY4NGI4MDI1ZjdiNmE1M2JmMzc3ZTExNjFjYjliYjI1YjA5YmY3NQ==?cid=1828948326

  • https://us-api.mimecast.com.kb4.io/XTVROamRGVnFVeTlXYW5ObGJIZ3dkMUEzTVRSRVFXaHhRMk4wYkd4aU5uQnljRkpCTTNoYVUzTkdXaXMwTlU1SVFVWlhWa00zVVZZNGJuZzRhV1ZsY1d4UGNVaHpMM0pKWVhoSVpsVTJNVzV3V2tNemEzQk9iV3RUWVVOaFJtNVlkVFY2T1Vod2JrcGtPWHBIT0hRd1VqRnhaR3g1TlcxRlNWWTRSbWRFTTBkM1lpOXJaV3hVTWpOUE1GWTNkRkJ4TjBwVmNVUnNWalJCYm1KRFlXczVUWFJDUVZGTk9UWkxaRmd3UFMwdFpFUTNabTlwVWtSemJUWjZiREJ2UTJsUFRVUTJRVDA5LS05ZjFjNTYzODFmNWNhMWJlZTBhNDljMDUxODcyNjk2ODZmMzJlZjg1?cid=1367477067

  • https://online-banking.kb4.io/XYURBMVRtUnRRM295TUV0V2NXRndZM0pVWjBWRmRIWmpURVJaUzJWdlRVNUxabGhzY0VaVVRVcENiRmhTVEVoSU1WZFJWaXR0YTJKQlFqQjBSMDl4WVc5bVYyNTBVekphYVV0MFMxVm1UWEZyWTA1NFVFZHZVV05zVVRacmR6bG1iQ3RhVTNkblNWTkJXbGs5TFMwNFowdGxTazVOZFhwdFlVcFZXVFEwVlRsYU9YRlJQVDA9LS1iYWJkZDhjZTljYzMxZThmMTkzZTU5YmQ2NTdmZGUzZGVkM2M5YWYz?cid=1395630317

  • https://en-us.secureconnection.moneytransaction.kb4.io/XVG1oalZWSTFZV1pCUldkSWRTOXNUa1J0UzBkdUt6ZHZTVWRWUkdWdldrNHhUalpDUmpocU9XbFFWWGxEZVZFdmRscHlNMDFKTlhKcU5WSXhSRWhKVjNNdlJrVldUekpHWmpaaGFqaFdPSFpIZEc1dlVtVnZiVE12T1U1VlRVWkxka3B4UWpGS1JuQjNVRXgxWTFrMWJWRmFRM29yTm10NVFWWkNaa3R0TjJrNVREQmlkbUZKWjBGNmMwVjBOMmxSWm1aamRVbHhlVXBtVVVjdmJEQkhPV0Z3V2t4Q04yVkxTMUZSUFMwdFpUbFZOMnM0V2xwek5GVmxjbFZFVVZoUmJIZDJaejA5LS1hMWEwOTVkM2JjYTgyNzdlMjRhYTUxYmEyMmExY2I4MTU3M2Y5NWJh?cid=1472882552

  • http://https.www.secure.kb4.io/

  • https://en-eu.secureconnection.moneytransaction.kb4.io/XVFZWV1Z6aHhOR2d3T1c1WVpuTkJNMFJYVUhoWVVrbFZZbXQzWm1Nd09YbEpZV3RxTDJsbFNIbFZOVXBIYzBsSFNsVnBjell2ZG1reVMycFNNWEpZTmxScFluaHVVR0Z2WXpWcFRXazBiVmRXVlU5SllUUlhTRUpqTDJaRlRVVkhjVTlGWTBJck5qUjFVRXhITkdKNGFETlZRVE5yTldOVldYZExWRGR1VFU4MVRrb3dlVmtyWXpWcUsyOUhSVlptVGsxUFRrRTVabWRzYUZJMldXOWtNV040Vkd0T2FubHRUMnd3Umt4TWRUUjBhVlI1WVZoVWNXdGlkRzEyTDI1eExTMVdkR05wZDFoS1NXaFJjVUZTTjI0MWJEWXhiMFJuUFQwPS0tODhlZWQ5NTAzMWYyOTdjNTMyMjU0M2IzN2JlZWVjMmJlODUyMmJjMw==?cid=161279397

  • https://securemail.kb4.io/

Previous checks:

                               Domain Name: kb4.io
Registry Domain ID: D503300000040480095-LRMS
Registrar WHOIS Server: whois.gandi.net
Registrar URL: http://www.gandi.net
Updated Date: 2023-10-31T02:03:44Z
Creation Date: 2013-12-04T17:33:42Z
Registrar Registration Expiration Date: 2024-12-04T18:33:42Z
Registrar: GANDI SAS
Registrar IANA ID: 81
Registrar Abuse Contact Email: abuse@support.gandi.net
Registrar Abuse Contact Phone: +33.170377661
Reseller: Amazon Registrar, Inc.
Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Domain Status: 
Domain Status: 
Domain Status: 
Domain Status: 
Registry Registrant ID: REDACTED FOR PRIVACY
Registrant Name: REDACTED FOR PRIVACY
Registrant Organization: KnowBe4
Registrant Street: REDACTED FOR PRIVACY
Registrant City: REDACTED FOR PRIVACY
Registrant State/Province: Florida
Registrant Postal Code: REDACTED FOR PRIVACY
Registrant Country: US
Registrant Phone: REDACTED FOR PRIVACY
Registrant Phone Ext:
Registrant Fax: REDACTED FOR PRIVACY
Registrant Fax Ext:
Registrant Email: 801eb1dddb4872a618b4888d23e58dfd-10359464@contact.gandi.net
Registry Admin ID: REDACTED FOR PRIVACY
Admin Name: REDACTED FOR PRIVACY
Admin Organization: REDACTED FOR PRIVACY
Admin Street: REDACTED FOR PRIVACY
Admin City: REDACTED FOR PRIVACY
Admin State/Province: REDACTED FOR PRIVACY
Admin Postal Code: REDACTED FOR PRIVACY
Admin Country: REDACTED FOR PRIVACY
Admin Phone: REDACTED FOR PRIVACY
Admin Phone Ext:
Admin Fax: REDACTED FOR PRIVACY
Admin Fax Ext:
Admin Email: 801eb1dddb4872a618b4888d23e58dfd-10359464@contact.gandi.net
Registry Tech ID: REDACTED FOR PRIVACY
Tech Name: REDACTED FOR PRIVACY
Tech Organization: REDACTED FOR PRIVACY
Tech Street: REDACTED FOR PRIVACY
Tech City: REDACTED FOR PRIVACY
Tech State/Province: REDACTED FOR PRIVACY
Tech Postal Code: REDACTED FOR PRIVACY
Tech Country: REDACTED FOR PRIVACY
Tech Phone: REDACTED FOR PRIVACY
Tech Phone Ext:
Tech Fax: REDACTED FOR PRIVACY
Tech Fax Ext:
Tech Email: 801eb1dddb4872a618b4888d23e58dfd-10359464@contact.gandi.net
Name Server: NS-2035.AWSDNS-62.CO.UK
Name Server: NS-337.AWSDNS-42.COM
Name Server: NS-829.AWSDNS-39.NET
Name Server: NS-1422.AWSDNS-49.ORG
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2023-12-09T16:02:24Z <<<

For more information on Whois status codes, please visit
https://www.icann.org/epp

Reseller Email: 
Reseller URL: 

Personal data access and use are governed by French law, any use for the purpose of unsolicited mass commercial advertising as well as any mass or automated inquiries (for any intent other than the registration or modification of a domain name) are strictly forbidden. Copy of whole or part of our database without Gandi's endorsement is strictly forbidden.
A dispute over the ownership of a domain name may be subject to the alternate procedure established by the Registry in question or brought before the courts.
For additional information, please contact us via the following form:
 https://www.gandi.net/support/contacter/mail/

                             
  • GET
    200 OK

    https://helpimg.s3.amazonaws.com/landing_pages/skull.png

<html xmlns="http://www.w3.org/1999/xhtml" style="" class=" js flexbox flexboxlegacy canvas canvastext webgl no-touch geolocation postmessage no-websqldatabase indexeddb hashchange history draganddrop websockets rgba hsla multiplebgs backgroundsize borderimage borderradius boxshadow textshadow opacity cssanimations csscolumns cssgradients no-cssreflections csstransforms csstransforms3d csstransitions fontface generatedcontent video audio localstorage sessionstorage webworkers applicationcache svg inlinesvg smil svgclippaths"><head><meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers.">
  <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com.">
  <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible">
  <meta name="robots" content="noindex, nofollow">

  
  <script src="/assets/application-c18ef490f7df87a1fe962c883f1599745babcdc18904f0c06c0bc07177b7d27f.js"></script>
  <script src="/packs/js/vendor-007c8c8a7e4ec26fc3ba.js"></script>
  <script src="/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js"></script>

  <script>
//<![CDATA[
window.gon={};gon.locale="en";
//]]>
</script>

    <link rel="stylesheet" media="all" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css">

  <style type="text/css">body, html {
height: 100%;
margin: 0;
font: 400 15px/1.8 trade-gothic,sans-serif;
color: #777;
}

html {
scroll-behavior: smooth;
}

.skull {
position: relative;
opacity: 0.65;
background-attachment: fixed;
background-position: center;
background-repeat: no-repeat;
background-size: cover;
background-image: url("https://helpimg.s3.amazonaws.com/landing_pages/skull.png");
min-height: 100%;
}

.skull-text {
font-family: trade-gothic,sans-serif;
font-size: 9rem;
font-style: italic;
font-weight: 700;
color: #fff; 
text-align: center; 
padding-top: 5%;
}

.border a {
text-decoration:none;
color: #000;  
}

.caption {
position: absolute;
left: 0;
top: 50%;
width: 100%;
text-align: center;
color: #000;
}

.caption span.border {
background-color: #fff;
color: #000;
padding: 20px;
font-size: 1.5em;
letter-spacing: 10px;
text-transform: uppercase;
}

.header-text {
font-family: trade-gothic,sans-serif;
font-size: 2em;
color: #707070;
font-weight: bold;
text-transform: uppercase;
text-align: center;
margin: 3% auto 0 auto;
}

.header-table {
width: 100%;
padding-top: 30px;
border-collapse: collapse;
}

.container {
width: 60vw;
margin: 0px auto;
display: block;
}

.subheader-text {
font-family: helvetica;
font-size: 1em;
color: #707070;
font-weight: 500;
text-align: left;
padding: 30px 0px;
}

.footer {
width: 100%;
margin:40px auto;
}

.disclaimer {
left: 0;
bottom: 0;
width: 100%;
background-color: #ffffff;
color: #707070;
text-align: left;
font-family: helvetica;
font-size: 11px
}

.KB4-logo img {
width: 80px;
height: auto;
float: left;
margin-right: 15px;
}


.remember-text{
font-size: 1.5em;
font-family: helvetica;
color: #707070;
font-weight: 500;
text-align: center;
padding: 20px 0px;
}
.rule-number-1 {font-size: 1.75em;font-family: 'Open Sans', sans-serif;font-weight: 300;text-align: center;color: #f98a8b;}
.rule-number-2 {font-size: 1.75em;font-family: 'Open Sans', sans-serif;font-weight: 300;text-align: center;color: #f98a8b;}
.rule-number-3 {font-size: 1.75em;font-family: 'Open Sans', sans-serif;font-weight: 300;text-align: center;color: #f98a8b;}
.rule-container {border: 1px solid #e2e2e2;border-radius: 11px;padding: 15px;min-height: 200px;height: auto;}
.rule-text {font-family: 'Open Sans', sans-serif;font-weight: normal;text-align: center;color: #676767;margin: 20px auto;font-size: 1.25em;}
.rule-container:hover {box-shadow: inset 0 0 0 3px #f98a8b;transition: 300ms;border: 0px; background: #f98a8b; color: #ffffff;}
.rule-container:hover .rule-text {color: #ffffff;}
.rule-container:hover .rule-number-1 {color: #ffffff;}
.rule-container:hover .rule-number-2 {color: #ffffff;}
.rule-container:hover .rule-number-3 {color: #ffffff;}

@media only screen and (max-device-width: 1024px) {
.skull {
background-attachment: scroll;
}
}
</style></head>
  

<body><div class="skull" id="skull">
<div class="skull-text">PWNED.</div>

<div class="caption"><span class="border">Your personal files were ENCRYPTED and will be destroyed in 24 hours unless you pay our ransom</span><br>
<span class="border" style="line-height: 10;">- <a href="#rules">SCROLL FOR FURTHER INSTRUCTIONS</a> -</span></div>
</div>

<div class="container" id="rules">
<div class="header-text">THIS WAS JUST A TEST.</div>

<div class="subheader-text">This was a simulated phishing test that was sent to you by your organization. Your files were NOT encrypted and will NOT be destroyed. But if this had been a real attack, cybercriminals could have stolen your sensitive information and then corrupted, destroyed, held for ransom, or even sold that information online.</div>

<div class="remember-text">Remember these three rules to stay safe online:</div>

<table width="100%">
	<tbody>
		<tr>
			<td width="30%" valign="top">
			<div class="rule-container">
			<div class="rule-number-1">01</div>

			<div class="rule-text">Always stop, look, and think before you click!</div>
			</div>
			</td>
			<td>&nbsp;</td>
			<td width="30%" valign="top">
			<div class="rule-container">
			<div class="rule-number-2">02</div>

			<div class="rule-text">Check for red flags that indicate a phishing attack is happening.</div>
			</div>
			</td>
			<td>&nbsp;</td>
			<td width="30%" valign="top">
			<div class="rule-container">
			<div class="rule-number-3">03</div>

			<div class="rule-text">Verify suspicious emails with the sender through a different medium.</div>
			</div>
			</td>
		</tr>
	</tbody>
</table>

<div class="footer">
<hr style="border: 0.5px solid #e2e2e2; margin-bottom: 20px;">
<div class="KB4-logo"><a href="https://www.knowbe4.com" target="_blank" title="KnowBe4"><img alt-text="KnowBe4 Logo" src="https://cdn2.hubspot.net/hubfs/241394/html_file/files/img/KB4-logo.png"></a></div>

<div class="disclaimer">
<p>Please Note: This message came from KnowBe4, Inc. and not from the company whose name is mentioned in the body of the email message, as the company has no association with KnowBe4, Inc. and does not endorse the services of KnowBe4, Inc. The purpose of this message is to demonstrate how phishing attacks can come in emails that deceptively appear to be from reputable companies.</p>
</div>
</div>
</div>




</body></html>

                             

Screenshot: