https://na01.safelinks.protection.outlook.com.url.protected-forms.com/XT1VZNWNGRm9PRVF2T1ZJMVRUY3hZbUpDT1VvM2RVeGpWbmRWT1hCb1NHdGlaVVV2ZUU1RGFtRTJSamxOVlZOQ1dtTjJOalJPWmpreVJGSTVhbWxwTkdwVk1uWktWRWxUV1ZNMkwwdGxlazV1TkhadlMwaDNVRWg2Y3pOemNYSnZPSGhTY1RKQk5HVk5lWFpNVDFjMVZIWnZhVmxuUlhobU5sbFlhM2REYXpGWFRGVlhaVWRsUm1kcVdsaGtRbTkyZG5wb1RteHRVMlpqTldoQmQxcG5SSFp2Y0ZOaGREVlJkRWxDZG5NdmJsaFZielUwWkV4RE55czFRWEpQWTJ4a0xTMWpZVXBvTHpCR1VXcFRjblZKWWpscVlXRm1USHBSUFQwPS0tZmVkZjE3MzI4Njc2ZmZjM2IzZmQyOWJiOGM4YWJjZmEyYzg2YTJiOQ==?cid=1427540990

Last Checked: Jan 04, 2023, 12:38 EST

IP Address: 18.214.252.32
ASN #: AS14618 AMAZON-AES, US
Location: Unknown, Unknown, Unknown
URL Reputation:
  • Unknown This URL is not identified as malicious in the PhishTank Database.
  • Unknown PhishCheck thinks this URL is likely not a phish.
  • Unknown OpenPhish: URL not in feed.

Other submissions on 18.214.252.32:

Other submissions on protected-forms.com:

  • https://webconference.protected-forms.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?cid=1728288454

  • https://webconference.protected-forms.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?cid=1728288551

  • https://protected-forms.com/pages/3eceb49de0d9229204c34c97df54ba96/XWkVKdlNVTmxSVGxEVVdWaVEwUmxNamh6UlhJMWF6SlZaMlJUWkRjdk1YSlVPR2R0UmtoQlREZzBXbEZzUkVaRVoyNTRhV1ZTYm5nd1IwRnNkMjVwUWxkNlZqUmxaRUZOT1hGRlQzaFhjakZHVEV4blptTmthVlJRYjJ4SlR6aFdaRXBEZGpZMVMwc3ZSVGR6U2s5Q1FsWXhhMk5LTUhrM1UyMVdiMGhXUkhZMloydFdNMU00V1d0b1ZUWmFhM1pqTm1kaFMyOXhXWEpzYTFSRVN5OHpTakpFUTFGTmJ6QnplRzF6TjBOWVFtTmxkbEprWWpKU015OXZaM053UjFwV0xTMWFhRkpMUkROd1REQkhkRVkxVnk5MGJXNTBRMHhuUFQwPS0tZWJiOTE0Y2FiMWMwYjg0ODBmYzY4NmVlNDljYjM2MTA5ZjhmZDUwYw==

  • https://safe-site.protected-forms.com/XdXJwsPWh0dHyBzOi8vc2bFmZS1zdgaXRljLnByb3RlgY3vRlZC1mb3Jtcy5jb20vscGFnZXMvMjA0YTI3OTljM2M0JmVtYWlsX3RlbXBsYXRlX2lkPTUwNDQ1MjgmYWN0aW9uPXByZXZpZXcmdXNlcl9pZD03NTU2OTkxNQ==

  • https://na01.safelinks.protection.outlook.com.url.protected-forms.com/XWjJadFZsZGxiWGN6VW1GT01YQldUV0ZRWkVOWFRFWndkMlUyVEVkVlpWZzNlR2czYlV0aVMzVkhWblZQYlhaRlIyODVRMGhvUm05d1VWQnpiazEzV0ROTGVXbHhkRFpMZUROdVpIVk5OemxCVVcxWFlXbzRNVzR6Ym1GNlNsWjNhRTVLVW1GdmFYbzNUR1l5Ymt4Q2R6UXhSV3gyZUhCR1RHTlZTbHB4YzJKNU5YbEZaVkV2UVV0c05FeFZWVUZPZWxOb2RsaHZlazFxUWxCWmR6SXZRV2RxT0hKMFVqWlZMMWRCUFMwdGVsSnJVblZ2T1hOb2JYVllhalpoYnpKelRWRXdaejA5LS02YTBiODU2NWU1N2Y2YWViMjljMDVmYzZjNDY0ZWNlZjE3NjdkNzVl?cid=1680076385

  • https://webconference.protected-forms.com/XWTNReFJYZzRRekJCWldnNVRtVTBkM0Z2UTA1WU4yaFJablEyWldGTGNHbGpkM05CTjB0UWVHeHVlVGRQWWpSbFdEWkhhWFZLVkRackwwb3hTbmw0ZGpsWU5tZ3hkVWRWT1daME1VNUJjRTltYzBSVlpYRmhVRTF6V1VOb1JIcFJXalZUYkd0Tk5FMWtZVEE5TFMxamVteFRhMkp1VnpZd0wzTjFLMmx2VTBGNGRWSm5QVDA9LS0zNDNlZTMxNGU3MWFiOWE2OThlMjkyZDI1NGEzMWFlOTc4MWZiZThh?cid=1568211598>

  • https://webconference.protected-forms.com/XWTNReFJYZzRRekJCWldnNVRtVTBkM0Z2UTA1WU4yaFJablEyWldGTGNHbGpkM05CTjB0UWVHeHVlVGRQWWpSbFdEWkhhWFZLVkRackwwb3hTbmw0ZGpsWU5tZ3hkVWRWT1daME1VNUJjRTltYzBSVlpYRmhVRTF6V1VOb1JIcFJXalZUYkd0Tk5FMWtZVEE5TFMxamVteFRhMkp1VnpZd0wzTjFLMmx2VTBGNGRWSm5QVDA9LS0zNDNlZTMxNGU3MWFiOWE2OThlMjkyZDI1NGEzMWFlOTc4MWZiZThh?cid=1568211598

  • http://webconference.protected-forms.com/

  • https://covid19.protected-forms.com/XWjI0MVpIcGFNakl4Y205MlNUazBPVlU0Tmt4WlFUTjFVSEUzY0ROMlZHVlZkRFpQY1U5M0wwUk1SakowVWs1T1V6bE1Oa281UmtvMWMwTlZPRWMxTmpkV1VtUlRhekp2YzNoRGExWlBWMUpxVkRWSk5IZzBNVmx5TlV4MVpGUk9URFJYSzJveksyNDFOMmhhZHpOVGMzUkxVVWhRV1RsUVlUQktVVkZTVVdOdVRYbHlTVk5RVW1Obk1HcHZZMnBoVEdzd1ZqaHpSVzh3YTA1RFFrZHJVazlCTWt0V0x6WmtUR3hyUFMwdFEzaFRjVmxzZUVwT2NGSTJZMkZVYWpKVlUxTkpVVDA5LS1jN2Y2ZjZhNGM3YWJkZTEzMDAyMDZlMzMxN2UwMjAzNzQ1ZGQwOWQ0?cid=1578317734

  • https://na01.safelinks.protection.outlook.com.url.protected-forms.com/XWVo3LzZxeEtLNnRDcjc4UVhvNW9DVy9MMlJZaUVTVXo4QnZsajRQQnMzUkNTN29ES0N0MjZHeGV3d3EzV2FuSmh5VnNTbFF3VTdSdjErYnNGWGU3OTd1Q3djNWFtd3c0M1R6eHVRNnJoQ0tzdzQzbDg2VmlWaWxXUmdaZkVLMXBQeHpaZzg1SGR4RDJUQi90R2pBdzlXZVNIUCtRWHI4TGxXWEtZTGh3M0JMU0xWZy9qWFZQZFRIOXB3PT0tLS9HSXNyWkdpZjlIVHFqbmUtLVg0ZmdGWFVuUXVpN2RETWwrbnVOZmc9PQ==?cid=1951636566

Previous checks:

                               Domain Name: protected-forms.com
Registry Domain ID: 1930364589_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.amazon.com
Registrar URL: https://registrar.amazon.com
Updated Date: 2022-11-07T20:29:32.551Z
Creation Date: 2015-05-19T15:29:03Z
Registrar Registration Expiration Date: 2023-05-19T15:29:03Z
Registrar: Amazon Registrar, Inc.
Registrar IANA ID: 468
Registrar Abuse Contact Email: abuse@amazonaws.com
Registrar Abuse Contact Phone: +1.2067406200
Reseller:
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: On behalf of protected-forms.com owner
Registrant Organization: Whois Privacy Service
Registrant Street: P.O. Box 81226
Registrant City: Seattle
Registrant State/Province: WA
Registrant Postal Code: 98108-1226
Registrant Country: US
Registrant Phone: +1.2065771368
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: owner-330666@protected-forms.com.whoisprivacyservice.org
Registry Admin ID:
Admin Name: On behalf of protected-forms.com administrative contact
Admin Organization: Whois Privacy Service
Admin Street: P.O. Box 81226
Admin City: Seattle
Admin State/Province: WA
Admin Postal Code: 98108-1226
Admin Country: US
Admin Phone: +1.2065771368
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: admin-330666@protected-forms.com.whoisprivacyservice.org
Registry Tech ID:
Tech Name: On behalf of protected-forms.com technical contact
Tech Organization: Whois Privacy Service
Tech Street: P.O. Box 81226
Tech City: Seattle
Tech State/Province: WA
Tech Postal Code: 98108-1226
Tech Country: US
Tech Phone: +1.2065771368
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: tech-330666@protected-forms.com.whoisprivacyservice.org
Name Server: ns-114.awsdns-14.com
Name Server: ns-1464.awsdns-55.org
Name Server: ns-1856.awsdns-40.co.uk
Name Server: ns-831.awsdns-39.net
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2022-11-07T20:29:32.797Z <<<

For more information on Whois status codes, please visit https://www.icann.org/resources/pages/epp

By submitting a query to the Amazon Registrar, Inc. WHOIS database, you agree to abide by the following terms. The data in Amazon Registrar, Inc.'s WHOIS database is provided by Amazon Registrar, Inc. for the sole purpose of assisting you in obtaining information about domain name accuracy. You agree to use this data only for lawful purposes and further agree not to use this data for any unlawful purpose or to: (1) enable, allow, or otherwise support the transmission by email, telephone, or facsimile of commercial advertising or unsolicited bulk email, or (2) enable high volume, automated, electronic processes to collect or compile this data for any purpose, including mining this data for your own personal or commercial purposes. Amazon Registrar, Inc. reserves the right to restrict or terminate your access to the data if you fail to abide by these terms of use. Amazon Registrar, Inc. reserves the right to modify these terms at any time.

Visit Amazon Registrar, Inc. at https://registrar.amazon.com
Contact information available here: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-contact-support.html

© 2023, Amazon.com, Inc., or its affiliates


                             
  • GET
    200 OK

    https://login.strongencryption.org/assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png

<html xmlns="http://www.w3.org/1999/xhtml" style="" class=" js flexbox flexboxlegacy canvas canvastext webgl no-touch geolocation postmessage no-websqldatabase indexeddb hashchange history draganddrop websockets rgba hsla multiplebgs backgroundsize borderimage borderradius boxshadow textshadow opacity cssanimations csscolumns cssgradients no-cssreflections csstransforms csstransforms3d csstransitions fontface generatedcontent video audio localstorage sessionstorage webworkers applicationcache svg inlinesvg smil svgclippaths"><head><meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers.">
  <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com.">
  <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible">
  <meta name="robots" content="noindex, nofollow">

  
  <script src="/assets/application-443cdd66ea00ec9e32b7cb18f4b2510e97e3bf25d427b4e35bccc08dfac941b8.js"></script>
  <script src="/packs/js/vendor-b9c1f98093c70be12eea.js"></script>
  <script src="/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js"></script>

  <script>
//<![CDATA[
window.gon={};gon.locale="en";
//]]>
</script>

    <link rel="stylesheet" media="all" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css">
    <link rel="stylesheet" media="all" href="/assets/sei-modal-298c1edd0166bef9cbaf6b85083b95d5819753f027d6a841658c738f21e84e49.css">
    <link rel="stylesheet" media="all" href="/assets/sei-tooltip-1ae0d1e9729436272a0cdfaf2325f9aacea7d6f89787d08056eda54a1910752d.css">
    <link rel="stylesheet" media="all" href="/assets/sei-flag-68d13d784ca9a21935d3004d873a9d547a5992deb153f1069c517f83cb514c7a.css">

    <script>
//<![CDATA[

      $(document).ready(function() {
        $("#template_preview").hide();
        $("#template_preview").clone().appendTo("#template_sei");
        $("#template_sei #template_preview").show();
        $("x-sei").addClass('sei-flag');
        $("x-sei").tooltip();
        $("x-sei:not(#sei-footer)").attr('tabindex', 0);
        $("x-sei[generic='true']").tooltip('destroy');
        $("#template_sei a").click(function( event ) { event.preventDefault(); });
        $("#template_sei a:has(x-sei)").attr('tabindex', -1);
      });

//]]>
</script>

  </head>
  
<body><div style="height:100%; background-color:#ffffff; color:#ffffff; text-align:center; padding: 20px 20px 20px 20px;">
<div style="min-height:65px; background-color:#ffffff; color:#ffffff; text-align:center; border-radius: 10px 10px 0px 0px;"><img src="https://www.knowbe4.com/hs-fs/hubfs/Knowbe4_Dec2015/Logos/KB4-logo.png" style="padding: 0px 0px 20px; float: left;"><img alt="" src="https://i.ibb.co/4MPGZ6w/Capture.jpg" style="width: 220px; height: 71px; float: right;"></div>
&nbsp;

<div style="height:100%; background-color:#f16622; color:#ffffff; text-align:center; padding: 20px 20px 20px 20px;"><span style="font-size:32pt; font-family: 'Open Sans', sans-serif;"><strong>Oops! Hiciste click en un&nbsp;correo simulado&nbsp;de phishing.</strong></span><br>
<br>
<span style="font-size:24pt; font-family: 'Open Sans', sans-serif;">Por favor revisa&nbsp;los Indicadores de Ingeniería Social que aparecen en el correo del que acabas de hacer click. Siempre revisa estos&nbsp;indicadores y detente a pensar antes de hacer click!<br>
<br>
Para ver los detalles de cada indicador desplace el cursor sobre las banderas rojas:</span> <div id="template_sei"><div id="template_preview" style="">
    <div class="modal-dialog">
    <div class="modal-content">
      <div class="modal-header">
        <div><strong>From:&nbsp;</strong><x-sei title="" class="sei-flag" data-original-title="¿Conoce a este remitente?" tabindex="0">F. G.</x-sei> &lt;<x-sei title="" class="sei-flag" data-original-title="El dominio del correo electrónico es extraño o sospechoso." tabindex="0">FranciscoGonzalez@arcor.onlineemail.latam</x-sei>&gt;</div>
        <div><strong><span id="modal-reply-to-label">Reply-to:&nbsp;</span></strong> F. G. &lt;FranciscoGonzalez@arcor.onlineemail.latam&gt;</div>
        <div><strong>Subject:&nbsp;</strong> <x-sei title="" class="sei-flag" data-original-title="La línea del asunto muestra una “respuesta” a algo que usted nunca envió o solicitó." tabindex="0">Re: Se adjunta su cotización.</x-sei></div>

        <div id="modal-attachment-type" class="modal-attachment-type">
          <i class="fa fa-paperclip"></i> <x-sei title="" class="sei-flag" data-original-title="El archivo adjunto tiene una extensión de archivo potencialmente peligrosa." tabindex="0">Cotización-Arcor-3</x-sei>.docx
        </div>

      </div>
      <div class="watermark top">
        <h1>CR1427540990</h1>
      </div>
      <div id="modal-body" class="modal-body">
        <div class="watermark left">
          <h1>CR1427540990</h1>
        </div>
        <div>
          Hola ADRIAN:<br>
<br>
Se adjunta la cotización firmada. Gracias por el descuento.<br>
<br>
Atentamente,<br>
<br>
Francisco González<br>
Gerente General, Arcor<br>
<br>
--<br>
<br>
<br>
El viernes a las 2:44 p. m., ADRIANALVAREZ ORELLANA&nbsp;&lt;adrian.alvarez@cempro.com&gt;&nbsp; escribió:<br>
<br>
Estimado Rafael:&nbsp;<br>
<br>
Esta es la cotización que discutimos por teléfono. Pude obtener para usted un descuento importante con respecto a la cotización anterior.<br>
<br>
Sírvase firmarla y devolverla. ¡Gracias por preferirnos!<br>
<br>
Atentamente,<br>
<br>
ADRIAN&nbsp;ALVAREZ ORELLANA<br>
adrian.alvarez@cempro.com<br>
&nbsp;
        </div>
        <div class="watermark right">
          <h1>CR1427540990</h1>
        </div>
      </div>

    </div><!-- /.modal-content -->
    </div>
</div></div></div>

<div style="min-height:50px; background-color:#676767; color:#ffffff; text-align:center; padding: 20px 20px 20px 20px; border-radius: 0px 0px 10px 10px;"><span style="font-size:14pt; font-family: 'Open Sans', sans-serif;">POR FAVOR TOMAR EN CUENTA:</span><br>
<span style="font-size:10pt; font-family: 'Open Sans', sans-serif;">Este mensaje proviene de KnowBe4, INC y no de la organización cuyo nombre se menciona en el cuerpo de este correo, ya que dicha organización no tiene asociación con KnowBe4, INC y tampoco endorsa sus servicios. El propósito de este mensaje es demostrar como los ataques de phishing pueden aparecer en correos electrónicos que aparentemente son de organizaciones de renombre.</span></div>
</div>



<div id="template_preview" style="display: none;">
    <div class="modal-dialog">
    <div class="modal-content">
      <div class="modal-header">
        <div><strong>From:&nbsp;</strong><x-sei title="" class="sei-flag" data-original-title="¿Conoce a este remitente?" tabindex="0">F. G.</x-sei> &lt;<x-sei title="" class="sei-flag" data-original-title="El dominio del correo electrónico es extraño o sospechoso." tabindex="0">FranciscoGonzalez@arcor.onlineemail.latam</x-sei>&gt;</div>
        <div><strong><span id="modal-reply-to-label">Reply-to:&nbsp;</span></strong> F. G. &lt;FranciscoGonzalez@arcor.onlineemail.latam&gt;</div>
        <div><strong>Subject:&nbsp;</strong> <x-sei title="" class="sei-flag" data-original-title="La línea del asunto muestra una “respuesta” a algo que usted nunca envió o solicitó." tabindex="0">Re: Se adjunta su cotización.</x-sei></div>

        <div id="modal-attachment-type" class="modal-attachment-type">
          <i class="fa fa-paperclip"></i> <x-sei title="" class="sei-flag" data-original-title="El archivo adjunto tiene una extensión de archivo potencialmente peligrosa." tabindex="0">Cotización-Arcor-3</x-sei>.docx
        </div>

      </div>
      <div class="watermark top">
        <h1>CR1427540990</h1>
      </div>
      <div id="modal-body" class="modal-body">
        <div class="watermark left">
          <h1>CR1427540990</h1>
        </div>
        <div>
          Hola ADRIAN:<br>
<br>
Se adjunta la cotización firmada. Gracias por el descuento.<br>
<br>
Atentamente,<br>
<br>
Francisco González<br>
Gerente General, Arcor<br>
<br>
--<br>
<br>
<br>
El viernes a las 2:44 p. m., ADRIANALVAREZ ORELLANA&nbsp;&lt;adrian.alvarez@cempro.com&gt;&nbsp; escribió:<br>
<br>
Estimado Rafael:&nbsp;<br>
<br>
Esta es la cotización que discutimos por teléfono. Pude obtener para usted un descuento importante con respecto a la cotización anterior.<br>
<br>
Sírvase firmarla y devolverla. ¡Gracias por preferirnos!<br>
<br>
Atentamente,<br>
<br>
ADRIAN&nbsp;ALVAREZ ORELLANA<br>
adrian.alvarez@cempro.com<br>
&nbsp;
        </div>
        <div class="watermark right">
          <h1>CR1427540990</h1>
        </div>
      </div>

    </div><!-- /.modal-content -->
    </div>
</div>



</body></html>

                             

Screenshot: