https://token.onelogin.com-token-auth.com/XV2tOM2VtWTJZekoxZWxGM1JGaG5XVGRoZUVoVk9XdFZOVFkxYzFwWmVtMUVPVGR4TTFWUk9FZ3JWVTVIYlhkcWVGbG1jSHByTTI1V05ISm9RMmRCTkVwYVozTnljVXh1TjBkUGRWQTBiSGxsV2tKcWJWZENibVJNVWtsdEswdFpSeTlUZDJWcFprdzNZWEZSTjJKeVRFMVZhMnRDTjJwYUwxUjJWM0JDUW1jM2NXMTBUbkZEUm1KeVVqSmlRM1Y0U25aNFpuRjFhV04xWjNoRk9WSkhVVlYxYmxBMVpGSXhNakZGUFMwdFpuaFNURUZsWm5abldISk9VSFJKVjBKbFMwVnBkejA5LS1lYzdkYjAyZTg1N2VlZTc1NDc3MGIyOTI5ZWE5OWY3YWUwMjY1Njk1?cid=1401956454

Last Checked: Dec 14, 2022, 16:23 EST

IP Address: 50.19.12.15
ASN #: AS14618 AMAZON-AES, US
Location: Unknown, Unknown, Unknown
URL Reputation:
  • Unknown This URL is not identified as malicious in the PhishTank Database.
  • Unknown PhishCheck thinks this URL is likely not a phish.
  • Unknown OpenPhish: URL not in feed.

Other submissions on 50.19.12.15:

Other submissions on com-token-auth.com:

  • https://2fa.com-token-auth.com/XbmV6Um84SmNQRU9UdWVQdkJlNG5KUDNNR3NNYmF1Q0dCVkZjSUlqcnVaNDl3aEoyQng4eDBaRWJUQ2pBZnltMmZtZ1lKMWNGOHhsTVJkUGlQYlJMcEVBMjFJdVV0R3AvT0hIVUUrcDJab21nNlhnaW5uWDR0V0xEeHQ1OUNZNUlmTGVNNDdrYTZQdGNldjg5WDJhVWQ0bXl3c3FGbnZiS0cyY0IzWnFjOEtLa3B0T3hKc0E3UmlOZ0lnYjZWbFVLYWtSWGZWT3BOak5xZkxQNm5xVm4tLTBTVDdoZHVJUGNHMXNjZFktLTVhbTJITVM5bkJHak5oYkVMSDRBVmc9PQ==?cid=1927018232

  • https://2fa.com-token-auth.com/XSExObEgxRXNvbElJMXFqSkNRcVZzZTUwQUdTKzNYZG1oaVRBUER3U0ZqNlpZRUZSdHR6RVZZK0xrcFZqSzVIelN2TGVGZkJGd2JOYVhEdlFNazU0V1BmOVNjWThwVlJRTFpjZWJVOGptL2JvUXlSVHovSC9qMXBRRXZkM2xTT3V1K2dVbExNVWlqaDRLa0JtVUJUaC95NStOaGloejZCU1laMVNKNmQ2MkhaS29NWjFUSnhnaWk3M3c2dXhuVzdjREYxc1J4aWRqVHBNKzN6V0ViST0tLUZtVFFYWDdkMFpqRWpnaUItLUVEUWlMWHdEeUJWRzdObXo4THlEK1E9PQ==?cid=1927278508

  • https://token.onelogin.com-token-auth.com/XTUZKVVkyVXhNemt5VTB0UmVtZHJhVzVCTTFJeE9USTNObVJpWTFOcWQzRk1XRUpVVEc1Q1JFYzVaR2QzZEdad1REaEZPR1YwY1RoNFVVTlhPWGQ0Wnl0aVVHTmhiMHR6Ums1SVNUQXZSV1J4VFVGc2N6Vk5PQzlhZEd0V1NVY3piek4wUzFaWWIwTjBMMWg0Y1haSFUzZG1TSEZEVTBSTVQwUnljaXRFWWtZNWFGaHJPRk15S3psNVVXSTBlbFZqY1ZkWlJubE1UV05RY25ZM09EQktUa2RJTUhCamJESjVkbXhJTTNaT04yTlpVRGRVV214V01YaGhZa1pxVkVVeUxTMVRaM2hWU0RKcFNEUkxkVXBZT1hZclQyOTRaVzFCUFQwPS0tMzE5MzQyOTQ4NDNjOWVkOWUyOWIyMTEyY2U2OTdkY2Y1ZTZjODVmMw==?cid=1825870521

  • https://2fa.com-token-auth.com/XVFhwd2VESXJVMVpTY1hBMWVGRk5ibWRqWTA1cmFGSmtTbTE1U2xRNFNGUTJVbkZ5VWpKUlFWVnNhbGM0WlVvdldEZEdaRXBQZVRCMldrbHdhekZ4ZUdGaFpWa3dZelpwUms5U2JWTnpWbXhtVGtOSU0wODVRbWR4TVROTUsxQnNVR1JqU1ZKclJGQllSVm96ZG1sM05rOTJUVk5aTHpGMFNFNTVWVTFJZDNFd2JqTjFWVGQ1UnlzckwxUkxWbTByVlZkWmFsQXdTR3huZEdRNWRYRXpUMXBtTm5sTVkyd3pORGR0Tm5SNldrSkRibWhKVVhGSWVFbHlXWGN3TVdZdkxTMXdLMHBHUW5aTlYyb3haVVJpTlZsVWFDOUhOMDFSUFQwPS0tNGNjNTQ4MDUwMDBhZjZhNjFjNzI4M2RhZDEzYzU1ZTIyMjg3ZTk4Yw==?cid=1842958819

  • https://2fa.com-token-auth.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?cid=1842149096

  • https://2fa.com-token-auth.com/XTkU0clRqUktSemxvWTNoMWEydFVVMnRuVEU1WE9YaDZia0pxU0ZCa05HNDBZMk4xVVhCSGRGQk5ORlprVHpoYVFWWk1SVnBLU0RsU2RrVldMMnB6ZDFacVJrY3dkbHBITUZab1VtSlZNRVk1UmpaNmFVMUNOa0pSVkdsRkx5czBWVWhVVmpSVk9WWkJhVUpQTmpSTGRFRjZXVmcwT1d0WmFtcG5hak4xWmpGd1JrOWtjbWRTUXpOblpWSXZNSGRFYW5wSVZrazJTVUZ1TWs1Q1l6bDRSWGQzYXpCSlUwWlpPQ3Q0UzBKb1dEVnhXVFJwVlc1WU0wbEhaa3BOYUZOckxTMXNlVTF1ZVZKNVNVeDNVME0yVERSYWRUSlVlbUZCUFQwPS0tMTJkMWJjYTQ1YmNmYjQyMmRlYmIxNWFkMzEyMzA5M2UxZDI5YzcwMw==?cid=1851262104

  • https://token.onelogin.com-token-auth.com/XTjFneFVWQkNSRTl1YVhoRlZEZENWMVJyVlVsRmEydDNObUZIVUhZNFpUQXlZMUZFTHpGQ2NsRnRkVFpKY0ROeGNHaHNheTh2ZFUxbE5uUnJNRzFXVVRORk9XeHJXalk1YTNoaGFrbDFRVU5zZGpObGExZzJSVEZxUVV0NVZtSnZWRWQ2VW1NM05IWnNORGhDY0VoVWMxVTVRelpKUm1sWk1ISnZWVk5YWlVaemRrcE1lVmRvWkRBeU9HWnJSRXM1Vkd0bU1uUjRWbFJ5WjB3MlpGbHdPVTU0WTBjd1IzSTNUR2x5Ymk5bVVGaE9hRWN2SzJjMU4xVkplQzlOVlVwQkxTMXRUVUpTY1RGdU5FeENlazgwTlUxdU5ucHdhRmhSUFQwPS0tODgyNTg1NzJiYjIxNmJhMTdjOThhMzI4Mzg3ZmM3NjEyN2I0OWEyNQ==?cid=1478463045

  • https://token.onelogin.com-token-auth.com/XTjFneFVWQkNSRTl1YVhoRlZEZENWMVJyVlVsRmEydDNObUZIVUhZNFpUQXlZMUZFTHpGQ2NsRnRkVFpKY0ROeGNHaHNheTh2ZFUxbE5uUnJNRzFXVVRORk9XeHJXalk1YTNoaGFrbDFRVU5zZGpObGExZzJSVEZxUVV0NVZtSnZWRWQ2VW1NM05IWnNORGhDY0VoVWMxVTVRelpKUm1sWk1ISnZWVk5YWlVaemRrcE1lVmRvWkRBeU9HWnJSRXM1Vkd0bU1uUjRWbFJ5WjB3MlpGbHdPVTU0WTBjd1IzSTNUR2x5Ymk5bVVGaE9hRWN2SzJjMU4xVkplQzlOVlVwQkxTMXRUVUpTY1RGdU5FeENlazgwTlUxdU5ucHdhRmhSUFQwPS0tODgyNTg1NzJiYjIxNmJhMTdjOThhMzI4Mzg3ZmM3NjEyN2I0OWEyNQ==?cid=1478463045

  • https://2fa.com-token-auth.com/XT0RWV0swZExOa2t6Y1Rkb1oxQjFWelEzVUdONFVVdHRUbk13TW5CSllVNUpVR28xTHpGa2RucGxaMWR6VDNKd01HMWxPWFIwV0ZRMlFpczRNWEIzZWtVd05VVjRlRVpTVm1adFlqSkJNRVpUVGxjd2VtNXFWVU0zWjB4ak9YQmxjRU0yTUhKR01VRm1PRU4zZGtsM01YZFJkVWhVUVdvd2RWSnBTaXRsV1VreU9GbzJUamh2ZG5Wb0swNXBObWxpVjJJelNuSlZSblk1YTJ0elRHVkNaa2xOYkc1RGEwOVJVbGswUFMwdFNYQXZMMmRCV20xeVozTndkRTlpU1V0TU5sSnRaejA5LS02N2M1YTMzMDZmZDVhMjBiMjJlNzEwMGQ4ZmQzOTk3ZTNkYzc0YjJi?cid=1486936167

  • https://2fa.com-token-auth.com/XUjJaU1Z6WXJiazFZWjFOSWIzVkVNa1JoWW1WelNGUnJSRVk0TVRGNlVEaFVXa2R4VDFSbFpXRXpTRmM1U1VnellrWjVOV3hKY0U1SlZYcHNRbWhsUzJoTWIxUkhSRlkzU0ZkMVIybHVjV3h5TTJrNFZHRnBTelJ1Y0VkMFNUVnRiV2hCWjBwMlJVcFhZbGhGZW1KMU4wNHhPRzVHVjNKRVQyNVpTbFpZZERCc1UyOW5WbVZOS3l0NFZIQXphbEI2UnpBeFRGRnRWVGxuUlVkR1l6aDJNMU12UVd0bFlqZHpjbk4zUFMwdFJIbG9XWEZQUTFKdk0xRnBXV1pzWTJ4MU1YcFdRVDA5LS1hMzkyMmUyYmZkNzUwNjRhZjc5MTRiN2MwNzAwNzAwOWQ0NDhmZGVm?cid=1486936153

Previous checks:

                               Domain Name: com-token-auth.com
Registry Domain ID: 2046352684_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.amazon.com
Registrar URL: https://registrar.amazon.com
Updated Date: 2022-12-13T19:37:05.734Z
Creation Date: 2016-07-25T21:06:57Z
Registrar Registration Expiration Date: 2023-07-25T21:06:57Z
Registrar: Amazon Registrar, Inc.
Registrar IANA ID: 468
Registrar Abuse Contact Email: abuse@amazonaws.com
Registrar Abuse Contact Phone: +1.2067406200
Reseller:
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: On behalf of com-token-auth.com owner
Registrant Organization: Whois Privacy Service
Registrant Street: P.O. Box 81226
Registrant City: Seattle
Registrant State/Province: WA
Registrant Postal Code: 98108-1226
Registrant Country: US
Registrant Phone: +1.2065771368
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: owner-9892383@com-token-auth.com.whoisprivacyservice.org
Registry Admin ID:
Admin Name: On behalf of com-token-auth.com administrative contact
Admin Organization: Whois Privacy Service
Admin Street: P.O. Box 81226
Admin City: Seattle
Admin State/Province: WA
Admin Postal Code: 98108-1226
Admin Country: US
Admin Phone: +1.2065771368
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: admin-9892383@com-token-auth.com.whoisprivacyservice.org
Registry Tech ID:
Tech Name: On behalf of com-token-auth.com technical contact
Tech Organization: Whois Privacy Service
Tech Street: P.O. Box 81226
Tech City: Seattle
Tech State/Province: WA
Tech Postal Code: 98108-1226
Tech Country: US
Tech Phone: +1.2065771368
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: tech-9892383@com-token-auth.com.whoisprivacyservice.org
Name Server: ns-1247.awsdns-27.org
Name Server: ns-1673.awsdns-17.co.uk
Name Server: ns-264.awsdns-33.com
Name Server: ns-749.awsdns-29.net
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2022-12-13T19:37:05.977Z <<<

For more information on Whois status codes, please visit https://www.icann.org/resources/pages/epp

By submitting a query to the Amazon Registrar, Inc. WHOIS database, you agree to abide by the following terms. The data in Amazon Registrar, Inc.'s WHOIS database is provided by Amazon Registrar, Inc. for the sole purpose of assisting you in obtaining information about domain name accuracy. You agree to use this data only for lawful purposes and further agree not to use this data for any unlawful purpose or to: (1) enable, allow, or otherwise support the transmission by email, telephone, or facsimile of commercial advertising or unsolicited bulk email, or (2) enable high volume, automated, electronic processes to collect or compile this data for any purpose, including mining this data for your own personal or commercial purposes. Amazon Registrar, Inc. reserves the right to restrict or terminate your access to the data if you fail to abide by these terms of use. Amazon Registrar, Inc. reserves the right to modify these terms at any time.

Visit Amazon Registrar, Inc. at https://registrar.amazon.com
Contact information available here: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-contact-support.html

© 2022, Amazon.com, Inc., or its affiliates


                             
  • GET
    200 OK

    https://secured-login.net/img/500-stu.png

<html xmlns="http://www.w3.org/1999/xhtml" style="" class=" js flexbox flexboxlegacy canvas canvastext webgl no-touch geolocation postmessage no-websqldatabase indexeddb hashchange history draganddrop websockets rgba hsla multiplebgs backgroundsize borderimage borderradius boxshadow textshadow opacity cssanimations csscolumns cssgradients no-cssreflections csstransforms csstransforms3d csstransitions fontface generatedcontent video audio localstorage sessionstorage webworkers applicationcache svg inlinesvg smil svgclippaths"><head><meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers.">
  <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com.">
  <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible">
  <meta name="robots" content="noindex, nofollow">

  
  <script src="/assets/application-443cdd66ea00ec9e32b7cb18f4b2510e97e3bf25d427b4e35bccc08dfac941b8.js"></script>
  <script src="/packs/js/vendor-b9c1f98093c70be12eea.js"></script>
  <script src="/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js"></script>

  <script>
//<![CDATA[
window.gon={};gon.locale="en";
//]]>
</script>

    <link rel="stylesheet" media="all" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css">

  <style type="text/css">body {
	background-color: #306075;
}
audio { 
   display:none;
}

audio::-internal-media-controls-download-button {
    display:none;
}
audio::-webkit-media-controls-enclosure {
    overflow:hidden;
}
audio::-webkit-media-controls-panel {
    width: calc(100% + 33px);
}  

#video {
    position: fixed;
    top: 50%;
    left: 50%;
    width: 100%;
    height: auto;
    z-index: -100;
    -ms-transform: translateX(-50%) translateY(-50%);
    -moz-transform: translateX(-50%) translateY(-50%);
    -webkit-transform: translateX(-50%) translateY(-50%);
    transform: translateX(-50%) translateY(-50%);
    background-size: cover; 
}
</style></head>
  

<body><iframe allow="autoplay" controls="" id="audio" src="phished.mp3" style="display:none"></iframe>
<audio autoplay="autoplay" controls=""><source src="https://helpimg.s3.amazonaws.com/LP_videos/hook.wav" type="audio/wav"></audio>

<video autoplay="" id="video" loop="" muted=""><source src="https://helpimg.s3.amazonaws.com/LP_videos/You've_Been_Phished.mp4" type="video/mp4"></video>




</body></html>

                             

Screenshot: