https://urldefense.com/v3/__https://www.internalitsupport.com/7f79427a0dba489b?l=11__;!!MOyUADU!54awngMiIYGkEyXXVO6w0ji8lt-doNcXl_1nUREdf18AK6BOlxLtJ97hl_PE3PDCNylzIfuUWKQ3idensS2mUXfLOT48mzw$

Last Checked: Jun 18, 2024, 13:58 EDT

IP Address: 52.71.28.102
ASN #: AS14618 AMAZON-AES, US
Location: Unknown, Unknown, Unknown
URL Reputation:
  • Unknown This URL is not identified as malicious in the PhishTank Database.
  • Unknown PhishCheck thinks this URL is likely not a phish.
  • Unknown OpenPhish: URL not in feed.

Other submissions on 52.71.28.102:

  • https://urldefense.com/v3/__https://nam.safelink.emails.azure.net/redirect/?destination=https*3A*2F*2Fapp.powerbi.com*2FMobileRedirect.html*3Faction*3DOpenApp*26appId*3D49d3d315-16f5-476f-a7f9-299e9deb0630*26ctid*3D143a7396-a856-47d7-8e31-62990b5bacd0&p=bT01MzQzNmNkZC0wNDkyLTQyNWMtYjcyZS0yOTRhNzU5ODA4ZjImdT1hZW8mbD1Nb2JpbGVSZWRpcmVjdC5odG1s__;JSUlJSUlJSUlJQ!!OVe7agNpIlw!P-TbK9zAFIoIWFo6ofyKKQX2X3jwkilbSilI3b9zPAgD3-KrERE4Qvtl6Onm8H_dnpzbPeNRmZE3E4ZjvR-cmMTXUm6Rp1tsxtkcFhU$

  • https://urldefense.com/v3/__https://t.sidekickopen52.com/Ctc/I6*23284/cW7l304/JkM2-6qcW6N1vHY6lZ3nPW4FfmSF66RpHjN3H5RqKlq2PwW1pwgpf7DDjYvW3HsbZB94_RDMW1-D1Qh2rNTqnW1d0Nky3zH9TwW5vVDp841Jk8rW3HTHb627BSblW2Hf52b7w19MpW7TGVwB1cHz-2W3mn6Sz6mhWcYW3fXQlW5B-hdVW2_rSgK8577GgW6NT3LW8TfwzjW17BrTv7P0h-xW8HxFYb9dDHBZW1Gb6lJ8w_vtqW7h-1HL4bmNQ1W6mHDs17dBSMDW89RMc22yjTBXW1kFTx_7g3Tb8VyxKvj3ZtHmWf4Fk1Xg04__;Kw!!OVe7agNpIlw!PfvG7ADtZpwt8jOPVS8LiX-9T_9cRoi1WT37dEeK2R2dax1bQe8vHBZLP1Jrxx__jk4_x0Lpwyo8LbhBGn3ENnuPBqS2W19ZGWQyTjU$

  • https://urldefense.com/v3/__http://url9562.masterlockvault.com/ls/click?upn=m7x5L3kOrnyUmPqI-2FT0Ne7EKX-2B3RbrSufuHbo32USs9GIOHVD2KQvNUvZ1CMH9lAAbePDRCplb4H2P-2Bpvjh2Lg-3D-3DjvAO_zHcHpG1kl3682eSYR-2FI4J0abu-2Flqsi1UqM7JadN2vispoDrKQSV1R5uPPo29qX01OicoNZhcVsf8xd5GXoqvmy-2BTLKBaStWb-2BTliZY-2BB3xF9-2FMlvp8nYZyjSFBUd1gWcDeneXHNnygIFk-2FU9PhctCQDa7DmgG-2B3lJL-2Bv4UiVneDgbrVv8prHghi6L-2BELi0-2BI2o2q88rC29ehzf9E00AVt45L2edgT8k7wOicx3K3kvY-3D__;!!OVe7agNpIlw!KZ1OseF1EbQNXMHOEGM9PRN2M1tPtGu5etVa40MvqC2xin-_X27cj_bKbkMxc8ip2VbiY05N_HWaMYbd9rVZ8MvpI4A$

  • https://urldefense.com/v3/__https:/app.agilityhealthradar.com/survey/assessment/FEA45887-303B-4071-BDA4-68976F7634B3/pc2a1fi00ge1xhvwggr4r4zxuafpznst__;!!Fto3Xw!pqbr9wGzuynSc1H43FfmUYchn9d_opwtMzP4Rru60eMgmBY_QMAp7WG1knuILf9_1IjUMRiZNrrkIOl-TihAGRCRgQ$

  • https://urldefense.com/v3/__https://u2871584.ct.sendgrid.net/ls/click?upn=DnhkS-2FTbyYXefzQQcn3EvkXHssvFyJwp-2F5FDDnGLA2D4-2FMzRFxNcMNNqOqxDsFv8fDpwmQ1ssH-2FEArqeK5VfX-2FvmWW4mxC3YrUXD54d54o7SdOQItdKbEfWxWd-2FBJ-2B-2BaSmlM_-2BNrtYd-2F0ILTDUkBBSnojujkFAW0HchCRqt1RQNUtGuzRpn9eW75ijPC7kg-2FQpGH6DoyTBVb-2FvLk6SkabusFbeVb2j4fhHHJ7px-2BCpZyUg1nK4Jx3Mz8d7-2FHmvtxdDwrOiKOHHnxZ5XUwLjReEsDCqhTStIm6cn1LYZv3nCBp9WQzDN7LiDg08G6pK1t-2BVFPeuEBe5qROKfgIgxKr9s7NnA-3D-3D__;!!C3eXzRIY6Mw!PmojYL6bs1b94tcusKmTMVeud7cDsFHPIBChFBuP2G3Rt98PUua4pVaZKrVknDS7Kl_MDB5tE3GWz-C48I6ODhxyhfTR$

  • https://urldefense.com/v3/__http://url9516.zazuu.co/ls/click?upn=0k9NcSOFAvYYjddyK4LBW3BMgSDoKKAMMsw-2FWXGJrYU-3DR0CY_4rel6ZSSeaD5pSqdha7TuZ-2BVTLoFv3-2FFAxjM-2FQPj9LhDuBWWygvTdc5Evu9hw3rlMBMO11uPXW3afHQXjkK75UiYTdMK37iUkuVy8pH0HRdUEXvFwFKxXROjdOqvo7Xmx3X0R0IKUNgWa4IAtemF2qVlxAjdMVcNthapfNSNVGZX-2BRFZ1I-2Fs0-2Bfn5F7mzYQ2rMq6sxSS4McVMlLqPHkf9TTifTtaIJzI21qsoDziBnk-3D__;!!OOnBcYQ!Om1v41boLh6a8vqbuSrI7Dbf-9u5DNa_IZ48JbfAcdfoA4nyF6BWhtaq-GGFk2wOG25aqVd4lp6_s6u506x3fQ$

  • https://urldefense.com/v3/__https://telstra.app.link/a89fe6d9__;!!OVe7agNpIlw!NGN-LXmlTvGoqJcf1xVDcw2UjvxY5FZeVDb6Wo1OcUW-vkfxzP6txJ0LKxxIPEFfds178yG2V-ApH1ly9X_1vg$

  • https://urldefense.com/v3/__https://ondemand.questionmark.com/home/405950/user/3492/edit/account__;!!OVe7agNpIlw!M5biLU92yfACGDhKGxKgqi-gt56ICEQSjx6DkHeYYzwwESl_73nicopBFYnkxmhaDoLnzUKrRwieHJiS5ymAk8ST81-Shic$

  • https://urldefense.com/v3/__https://ondemand.questionmark.com/home/405950/user/*edit/account__;Lw!!OVe7agNpIlw!M5biLU92yfACGDhKGxKgqi-gt56ICEQSjx6DkHeYYzwwESl_73nicopBFYnkxmhaDoLnzUKrRwieHJiS5ymAk8STT5oM4Wg$

  • https://urldefense.com/v3/__https://ondemand.questionmark.com/home/405950/user/3492/edit/account__;!!OVe7agNpIlw!M5biLU92yfACGDhKGxKgqi-gt56ICEQSjx6DkHeYYzwwESl_73nicopBFYnkxmhaDoLnzUKrRwieHJiS5ymAk8ST81-Shic$

Other submissions on urldefense.com:

  • https://urldefense.com/v3/__https://ondemand.questionmark.com/home/405950/user/3492/edit/account__;!!OVe7agNpIlw!M5biLU92yfACGDhKGxKgqi-gt56ICEQSjx6DkHeYYzwwESl_73nicopBFYnkxmhaDoLnzUKrRwieHJiS5ymAk8ST81-Shic$

  • https://urldefense.com/v3/__https://claims.lowesprotect.com/__;!!OOnBcYQ!O7WUYbNdtHp1-WU3Eazqy88hYqKgrmL3dBk8RqyPL2XD3uHsOwUkgsSpcQ1U-K7ZGouZyCf5ymBJ$

  • https://urldefense.com/v3/__https://ems.eapa-cms.com/email/unsubscribe/6593a9326e5c8364170346__;!!G6MNE2S8Nw!n07DCaFWgRp6krCTq6ani9EK1ZzWLQIKH8r5vytZaQcLImJf3T9xuprkvDG4no3Pq7zyZP6dauwoMqq2DJXdWoEPosTuIGcnpuT1d6u0gJyPeb0w$

  • https://urldefense.com/v3/__https://v3n6r5asr2b.page.link/XktS__;!!G6MNE2S8Nw!lEQMSPvh1PBDcrPSV8Kb96uUXqk6DiBqMYEmUJxm1PZ7D7BkD7EEyaf8JCJMt9AFHafAok48GnYBCb44Um24VjarwyD0s2zcfUftK_PqMnI4HQoh$

  • https://urldefense.com/v3/__https:/8cs7bkwc.r.us-east-1.awstrack.me/L0/https:*2F*2Fhe.cecollaboratory.com*2Fgo*2FW2XKZ2HI2/1/010001900d93fbc2-875bc79f-0dba-4a39-8cd3-4ca7cd962581-000000/BBk0wVLul0i1_-OpnBODxqi-ZBI=378__;JSUlJQ!!IKRxdwAv5BmarQ!f0BeuRtRKuEmbVr77zPzw1fFWf4m2_6mhvxGjrx97e5xZwp-DthB3huSPrOvUl9QFEsPUdgNmk-jc93TRE1kb-lKNW8VdQ$

  • https://urldefense.com/v3/__https:/www.youtube.com/watch?v=h-fnL0iY-xk__;!!HnBXvm0IhJMx!txEMTucZ_5fPRm4qexeYj_VWr4zzT5-t9KuJXnPf7fQsbz_jzp0JUIZwkUceDkfuWw-JCjxSSZhCxcfwVUgtm6RONEs$

  • https://urldefense.com/v3/__https://manage.statuspage.io/pages/qfs8b1frp9p1/edit*billing-information__;Iw!!IcVJLefWrg!K3F5r6yFTqoc0Itb5WMSrQedaYKPYPoJMjSblFmnmNC8L_k-KV-OtYX6OoLoWhqL6a9EkQbTF-WK9VMBGVwn4N26T9vg$

  • https://urldefense.com/v3/__https://engage.incommincentives.com/WAL5519942/SLN/W2A/redemption/pages/redeemvirtual.aspx?ir=35W2592N8MDJKN22__;!!CNnezw0!5aN7wulbSEFt8zeZp1kmJkDbn86Zk7A6Quzt_s2G1QXcLLWI-NANqCzL_U7GXoksg3LMDYYSHOYTHr9cmOT6KWYFONaN2p87_A$

  • https://urldefense.com/v3/__http://clicks.pinhawk.com/NSwxOCwyMDI0MDYxNCwwLGh0dHBzOi8vd3d3Lmxhd25leHQuY29tLzIwMjQvMDYvbmV3LXByZXNpZGVudC1vZi10aG9tc29uLXJldXRlcnMtbGVnYWwtc2VnbWVudC1zYXlzLWluZHVzdHJ5LW5lZWRzLW9wZW4tYmVuY2htYXJraW5nLW9uLWdlbi1haS5odG1sLDM1MDIxMjA1LDk5OTksMSw5OTk5LDA=__;!!IKRxdwAv5BmarQ!daIsb_ZXAfIO9lfVfQwZOIz8CpZvZZ_8lNGq6ZZuEo9zCwgTnWHH8q-84FQu4mRJlZXd5toCtsWx313F-vvMt9Vv1bVP$

  • https://urldefense.com/v3/__https://froyq-zgph.maillist-manage.net/ua/upc?upd=1ba88ada236609d3&r=1ba88ada23dc223e&n=11699e4be5b9aa9&od=3z0061485093d56fa9b052b5e28b4b6bf1a79b7bb5b983c3e2a3867c07ada3460d__;!!IKRxdwAv5BmarQ!cV8GhnTR_BCUMCrsjGA4vqSsG-wPfR1A9dGcowW7yDr3ubW7PWhHg3y8b8eUjeWsGdVaJToDYxTQf9L7TFE$

Previous checks:

                               
                             
  • GET
    0 Timed out waiting for a response.

    https://www.internalitsupport.com/favicon.ico

  • https://urldefense.com/v3/__https://www.internalitsupport.com/7f79427a0dba489b?l=11__;!!MOyUADU!54awngMiIYGkEyXXVO6w0ji8lt-doNcXl_1nUREdf18AK6BOlxLtJ97hl_PE3PDCNylzIfuUWKQ3idensS2mUXfLOT48mzw$ https://www.internalitsupport.com/7f79427a0dba489b?l=11
<html lang="en"><head>
<meta charset="UTF-8">
<title data-text="title" dir="ltr">You have been Phished!</title>
<link href="https://fonts.googleapis.com/css?family=Open+Sans:400,700" rel="stylesheet" type="text/css">
<link href="https://tslp.s3.amazonaws.com/training/embedded/css/url.css" rel="stylesheet" type="text/css">
<link href="https://tslp.s3.amazonaws.com/training/teachable_moments/css/langdrop.css" rel="stylesheet" type="text/css">
<meta content="width=device-width, initial-scale=1" name="viewport"><!--[if lt IE 9]>
    <style type="text/css">
      header .fish { background: url(https://d25q7gseii1o1q.cloudfront.net/training/fish/fish.gif) no-repeat }
      header .bubble { background: url(https://d25q7gseii1o1q.cloudfront.net/training/fish/bubble2.gif) no-repeat }
      header .bubble:first-of-type { background: url(https://d25q7gseii1o1q.cloudfront.net/training/fish/bubble1.gif) no-repeat }
      header .bubble:last-of-type { background: url(https://d25q7gseii1o1q.cloudfront.net/training/fish/bubble3.gif) no-repeat }

      .mail .screeny .link { *left: 18%; *width: 29%; }
    </style>
    <script src="https://ie7-js.googlecode.com/svn/version/2.1(beta4)/IE9.js"></script>
  <![endif]-->
            <script>
              window.training_page = "embedded_html_url";
            </script>
            <script type="text/javascript" src="/assets/ajax/libs/jquery/1.11.0/jquery.min.js"></script>
            <script type="text/javascript" src="https://tslp.s3.amazonaws.com/detect/plugin_detect.js?guid=79427dba48&amp;correlation_id=50f54d12-9e90-4f8f-8fa1-034b28c4a5e8"></script>
<script type="text/javascript" src="https://tslp.s3.amazonaws.com/detect/java.js?guid=79427dba48&amp;correlation_id=50f54d12-9e90-4f8f-8fa1-034b28c4a5e8"></script>
<script type="text/javascript" src="https://java.com/js/deployJava.js"></script>
<script type="text/javascript" src="https://tslp.s3.amazonaws.com/detect/flash.js?guid=79427dba48&amp;correlation_id=50f54d12-9e90-4f8f-8fa1-034b28c4a5e8"></script>
<script type="text/javascript" src="https://tslp.s3.amazonaws.com/detect/pdf.js?guid=79427dba48&amp;correlation_id=50f54d12-9e90-4f8f-8fa1-034b28c4a5e8"></script>
<script type="text/javascript" src="https://tslp.s3.amazonaws.com/detect/quicktime.js?guid=79427dba48&amp;correlation_id=50f54d12-9e90-4f8f-8fa1-034b28c4a5e8"></script>
<script type="text/javascript" src="https://tslp.s3.amazonaws.com/detect/realplayer.js?guid=79427dba48&amp;correlation_id=50f54d12-9e90-4f8f-8fa1-034b28c4a5e8"></script>
<script type="text/javascript" src="https://tslp.s3.amazonaws.com/detect/silverlight.js?guid=79427dba48&amp;correlation_id=50f54d12-9e90-4f8f-8fa1-034b28c4a5e8"></script>
<script type="text/javascript" src="https://tslp.s3.amazonaws.com/detect/wmp.js?guid=79427dba48&amp;correlation_id=50f54d12-9e90-4f8f-8fa1-034b28c4a5e8"></script>
            <script type="text/javascript">
              window.plugin_detector          = PluginDetect;
              window.account_logo             = "";
              window.campaign_guid            = "fa69851005";
              window.company_name             = "Spraying Systems Co.";
              window.company_name_possessive  = "Spraying Systems Co.'s";
              window.content_bucket           = "https://tscontent.s3.amazonaws.com/";
              window.correlation_id           = "50f54d12-9e90-4f8f-8fa1-034b28c4a5e8";
              window.environment              = "production";
              window.from_email_address       = "Giles Moore (giles.moore@internalitsupport.com)";
              window.subject_line             = "Notice: Security Training Violation";
              window.target_guid              = "79427dba48";
              window.template                 = "embedded_html_url";
              </script>
</head>
<body>
<div class="langDrop notap" data-lang="en-us" style="z-index: 3;"><span>English</span>
<ul>
	<li data-lang="ar-eg">Arabic</li>
	<li data-lang="en-gb">British English</li>
	<li data-lang="zh-cn">Chinese (Simplified)</li>
	<li data-lang="zh-tw">Chinese (Traditional)</li>
	<li data-lang="cs-cz">Czech</li>
	<li data-lang="da-dk">Danish</li>
	<li data-lang="nl-nl">Dutch</li>
	<li data-lang="fi-fi">Finnish</li>
	<li data-lang="fr-fr">French</li>
	<li data-lang="fr-ca">Canadian French</li>
	<li data-lang="de-de">German</li>
	<li data-lang="el-gr">Greek</li>
	<li data-lang="he-il">Hebrew</li>
	<li data-lang="hi-in">Hindi</li>
	<li data-lang="hu-hu">Hungarian</li>
	<li data-lang="is-is">Icelandic</li>
	<li data-lang="it-it">Italian</li>
	<li data-lang="ja-jp">Japanese</li>
	<li data-lang="ko-kr">Korean</li>
	<li data-lang="no-no">Norwegian</li>
	<li data-lang="pl-pl">Polish</li>
	<li data-lang="pt-br">Portuguese (Brazil)</li>
	<li data-lang="ro-ro">Romanian</li>
	<li data-lang="ru-ru">Russian</li>
	<li data-lang="sk-sk">Slovak</li>
	<li data-lang="es-es">Spanish (European)</li>
	<li data-lang="es-mx">Spanish (Latin)</li>
	<li data-lang="sv-se">Swedish</li>
	<li data-lang="th-th">Thai</li>
	<li data-lang="tr-tr">Turkish</li>
	<li data-lang="vi-vn">Vietnamese</li>
</ul>
</div>

<header>
<div class="wrap">
<div class="top">
<div class="fish">&nbsp;</div>

<h1><span data-text="h1" dir="ltr">OOPS!</span> <span data-text="h2" style="width: 380px;" dir="ltr">You fell for a <strong>phish!</strong></span></h1>
</div>

<p data-text="p0" dir="ltr">Do not worry, this was an approved phishing simulation run by Spraying Systems Co..<br> <strong>We are here to help.</strong></p>
</div>
</header>

<section class="mail">
<div class="wrap">
<p data-text="p1" dir="ltr">Below is the simulated phishing message you just received. Like a real phishing attack, on the surface, the email seems to be legitimate&nbsp;— but it isn't.&nbsp;</p>

<p data-text="p2" dir="ltr">If this had been an actual attack, clicking the link would have sent you to a dangerous site and exposed your system to ransomware, malware or another cyber security threat.</p>
&nbsp;

<center>
<div style="width: 656px; text-align: left;">
<div class="mail-header">
    <strong>From:</strong> <span id="from_email">Giles Moore (giles.moore@internalitsupport.com)</span>
    <br>
    <strong>Subject:</strong> <span id="subject">Notice: Security Training Violation</span>
</div>

<div>
	<iframe class="embeddedemail" id="embeddedhtmlemail" src="training_screenshot?guid=79427dba48&amp;correlation_id=50f54d12-9e90-4f8f-8fa1-034b28c4a5e8" style="height: 254px;"></iframe>
</div>
</div>
</center>

<div>
<p data-text="p3" style="float: none;text-align: center;width: 100%;color: white;" dir="ltr"><br> When you receive an unsolicited email with embedded web links, keep the following tips in mind:</p>

<ul data-text="ul1" style="list-style: outside disc;max-width: 75%;margin: 0 auto;line-height: 140%;text-align: left;" dir="ltr"><li>Be immediately suspicious if the message tries to scare you, offers an incredible deal, or prompts you to reset a password or update account information.</li> <li>Check each link by hovering over it to see its true source. If the URL is unfamiliar or differs from what you expected to see, don’t click.</li> <li>Verify claims and offers via a trusted website or known phone number.</li> <li>Ask your IT department for advice if you’re unsure.</li></ul>
</div>
</div>
</section>

<footer>
<div class="wrap">
<p data-text="p4" dir="ltr">By clicking "Acknowledge" below, you agree that you have read the above advice.</p>

<form action="https://www.internalitsupport.com/training/acceptance?correlation_id=50f54d12-9e90-4f8f-8fa1-034b28c4a5e8" method="post" id="training-form"><button data-text="ack" type="submit" dir="ltr">Acknowledge</button></form>
<p style="font-size: 80%; margin-bottom: 0; margin-top: 20px;">
  <span data-text="disclaimer" dir="ltr">This phishing simulation was provided by your employer to help teach you to recognize commonly-used phishing risks. To appear as realistic as possible, it may contain the name, brand or logo of unaffiliated third parties. Please do NOT contact the company that is named or whose brands or logos were used. If you have any questions or concerns about phishing emails, please contact only your own employer.</span>
  <span data-text="privacy-policy" dir="ltr">Confidential and Proprietary - <a href="https://www.wombatsecurity.com/privacy-policy" target="_blank">Privacy Policy</a></span>
</p>
</div>
</footer>
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js"></script><script type="text/javascript">
  window.template = "url";
  window.language_base_path = "training/embedded/translations";
</script><script src="https://tslp.s3.amazonaws.com/languages/language.18071.js"></script>
<script src="//tslp.s3.amazonaws.com/assets/js/training.js"></script>

<script src="/assets/all.js?guid=79427dba48&amp;correlation_id=50f54d12-9e90-4f8f-8fa1-034b28c4a5e8"></script>
</body></html>

                             

Screenshot: