Phishcheck 2.0 beta - Details - https://token.onelogin.com-token-auth.com/XTjFneFVWQkNSRTl1YVhoRlZEZENWMVJyVlVsRmEydDNObUZIVUhZNFpUQXlZMUZFTHpGQ2NsRnRkVFpKY0ROeGNHaHNheTh2ZFUxbE5uUnJNRzFXVVRORk9XeHJXalk1YTNoaGFrbDFRVU5zZGpObGExZzJSVEZxUVV0NVZtSnZWRWQ2VW1NM05IWnNORGhDY0VoVWMxVTVRelpKUm1sWk1ISnZWVk5YWlVaemRrcE1lVmRvWkRBeU9HWnJSRXM1Vkd0bU1uUjRWbFJ5WjB3MlpGbHdPVTU0WTBjd1IzSTNUR2x5Ymk5bVVGaE9hRWN2SzJjMU4xVkplQzlOVlVwQkxTMXRUVUpTY1RGdU5FeENlazgwTlUxdU5ucHdhRmhSUFQwPS0tODgyNTg1NzJiYjIxNmJhMTdjOThhMzI4Mzg3ZmM3NjEyN2I0OWEyNQ==?cid=1478463045

https://token.onelogin.com-token-auth.com/XTjFneFVWQkNSRTl1YVhoRlZEZENWMVJyVlVsRmEydDNObUZIVUhZNFpUQXlZMUZFTHpGQ2NsRnRkVFpKY0ROeGNHaHNheTh2ZFUxbE5uUnJNRzFXVVRORk9XeHJXalk1YTNoaGFrbDFRVU5zZGpObGExZzJSVEZxUVV0NVZtSnZWRWQ2VW1NM05IWnNORGhDY0VoVWMxVTVRelpKUm1sWk1ISnZWVk5YWlVaemRrcE1lVmRvWkRBeU9HWnJSRXM1Vkd0bU1uUjRWbFJ5WjB3MlpGbHdPVTU0WTBjd1IzSTNUR2x5Ymk5bVVGaE9hRWN2SzJjMU4xVkplQzlOVlVwQkxTMXRUVUpTY1RGdU5FeENlazgwTlUxdU5ucHdhRmhSUFQwPS0tODgyNTg1NzJiYjIxNmJhMTdjOThhMzI4Mzg3ZmM3NjEyN2I0OWEyNQ==?cid=1478463045

Last Checked: Feb 17, 2023, 15:29 EST

Check another URL

IP Address:	52.71.211.122
ASN #:	AS14618 AMAZON-AES, US
Location:	Unknown, Unknown, Unknown
URL Reputation:	Unknown This URL is not identified as malicious in the PhishTank Database. Unknown PhishCheck thinks this URL is likely not a phish. Unknown OpenPhish: URL not in feed.

Other submissions on 52.71.211.122:

https://ftp.phishing.guru/XYlM4MVJGWjBXbUY2WVZweWRFRTFiMjh6VkU5aE1WTmxZV2xuVlZKeE1GSklSa1ZtUVdGSmFHRmpXRFpGY1dvMVZHdGxkaTlpYkdSSEsyaHFXR2RvTjB0dVdUWlRVVE5oSzJsUVNEWnVjRVJSZUVsWU1rcFNkRmhCV0VaS1UzRkxjRzEyTkZkdGJFZ3dWa0l4UWtkWFZFdGlVMGRvTVRWWmJ5dFpTM053TVdoalRYaFhXRlJwVFVnclJXeDNkblZHSzNaMmRYVlhlSEZWV2k5cU1VNXNaWFZ4ZVhObWJWRjVVbVk0UFMwdE9Xd3dUVWh0UzFZMlR6QmhUM2s1ZVc1NGJFOWpkejA5LS05M2E4MjQ5OGQ5ODNhMmQ0MzgwMzI1ZDU1OTNkY2IwNGMwMDY4ZjUy?cid=1478319276

Details

Other submissions on com-token-auth.com:

https://token.onelogin.com-token-auth.com/XV2tOM2VtWTJZekoxZWxGM1JGaG5XVGRoZUVoVk9XdFZOVFkxYzFwWmVtMUVPVGR4TTFWUk9FZ3JWVTVIYlhkcWVGbG1jSHByTTI1V05ISm9RMmRCTkVwYVozTnljVXh1TjBkUGRWQTBiSGxsV2tKcWJWZENibVJNVWtsdEswdFpSeTlUZDJWcFprdzNZWEZSTjJKeVRFMVZhMnRDTjJwYUwxUjJWM0JDUW1jM2NXMTBUbkZEUm1KeVVqSmlRM1Y0U25aNFpuRjFhV04xWjNoRk9WSkhVVlYxYmxBMVpGSXhNakZGUFMwdFpuaFNURUZsWm5abldISk9VSFJKVjBKbFMwVnBkejA5LS1lYzdkYjAyZTg1N2VlZTc1NDc3MGIyOTI5ZWE5OWY3YWUwMjY1Njk1?cid=1401956454

Details
https://2fa.com-token-auth.com/XT0RWV0swZExOa2t6Y1Rkb1oxQjFWelEzVUdONFVVdHRUbk13TW5CSllVNUpVR28xTHpGa2RucGxaMWR6VDNKd01HMWxPWFIwV0ZRMlFpczRNWEIzZWtVd05VVjRlRVpTVm1adFlqSkJNRVpUVGxjd2VtNXFWVU0zWjB4ak9YQmxjRU0yTUhKR01VRm1PRU4zZGtsM01YZFJkVWhVUVdvd2RWSnBTaXRsV1VreU9GbzJUamh2ZG5Wb0swNXBObWxpVjJJelNuSlZSblk1YTJ0elRHVkNaa2xOYkc1RGEwOVJVbGswUFMwdFNYQXZMMmRCV20xeVozTndkRTlpU1V0TU5sSnRaejA5LS02N2M1YTMzMDZmZDVhMjBiMjJlNzEwMGQ4ZmQzOTk3ZTNkYzc0YjJi?cid=1486936167

Details
https://2fa.com-token-auth.com/XUjJaU1Z6WXJiazFZWjFOSWIzVkVNa1JoWW1WelNGUnJSRVk0TVRGNlVEaFVXa2R4VDFSbFpXRXpTRmM1U1VnellrWjVOV3hKY0U1SlZYcHNRbWhsUzJoTWIxUkhSRlkzU0ZkMVIybHVjV3h5TTJrNFZHRnBTelJ1Y0VkMFNUVnRiV2hCWjBwMlJVcFhZbGhGZW1KMU4wNHhPRzVHVjNKRVQyNVpTbFpZZERCc1UyOW5WbVZOS3l0NFZIQXphbEI2UnpBeFRGRnRWVGxuUlVkR1l6aDJNMU12UVd0bFlqZHpjbk4zUFMwdFJIbG9XWEZQUTFKdk0xRnBXV1pzWTJ4MU1YcFdRVDA5LS1hMzkyMmUyYmZkNzUwNjRhZjc5MTRiN2MwNzAwNzAwOWQ0NDhmZGVm?cid=1486936153

Details
https://2fa.com-token-auth.com/XT1RJMlRHd3dNVTE1Ym5oNWNFYzJTMDF1Vmt0R2JIaDRWRm92TkhwWFIweENhVVJsV2pWRmRIWktjekZ2VUZweFVtVlFPSGxvYkc1MFR5dHdiM1pzT0cxdU1HNTBkbGRsTVZoaWRHSkhLM0ZhTjFndlR6TnFRVlJtYW5sRVRHWlhhWFpOV0hkbWFEWk5MMVJ5ZEhObk1teHdkRE5NYjI1R2RrWXdSMFJXWVRSbllVNXpNVVpHWldaVlNYRlZSMDQxWlhOd1prUjZhREpTVDBFeWRIQm9aVTlaWTNKaVV6UnFaVGhuUFMwdGVGRk1RMmQxVDJ4T0sweHJaSGhKV2tVeU1rNVhaejA5LS0wOGMzZjJlYzMyMWI0MmRmZDMzNjVmNDQ2NzBkMmQ2NGE3OWU1MDU3?cid=1486936045

Details
http://2fa.com-token-auth.com/

Details
http://2fa.com-token-auth.com/

Details
http://2fa.com-token-auth.com/

Details
https://2fa.com-token-auth.com/XVm5KelVGTkljRmh5V25kMk9TdHBXVVkyZW5weGRuaFhiMDFQZEc5cVRIZG1SblZRYjFwdk9FRnNiVEp6YXpsM05tODJaVmxGZFVveU56bGxkVGN6U0Vwc1JtMW9jRkp1VFc4MmRuTXpZVXBIYTNGNWRrdHVaMDVSZUZGS09XcGtVelUwT1VGSFdFUndTR05xUVc5SVRrVm9jMUJaT1dRM1pVcDZRMUkxU0c0NFZtVkRiVEZJTDNaUmVWSkdZVkJvWkVnemFVdHlkRWRTV0N0NGVtbHFNVEV2ZFd0Nk1FOTRaRFpSUFMwdE1FVlNLMVlyYjJWVWVXRTNPVzlTYUhocVNGSTBVVDA5LS00NDcyZThkMzczNWJkMTdjODc0MWEyMzA0MzU3MzFmYzgwYzAwZDA3?cid=1522423802

Details
https://2fa.com-token-auth.com/XWVhWRU5IcHVhMFpJYjNkc1QxaGFZVXBOZURBclZpc3JZMFJHVkdFeVJGVnZiMGN3V2xoeWJUVldiVTlNUW5KdU9IbHpNVFEzVTBoWU9IUk9UR1JWTkhocVlsaHZlSGt6YkUxb1VtOVZhVXdyVWpoNVptbGlSWGxaUTBWMGVqQkxTRGhvVlNzdmF6ZFNaa2RrVEN0bmNXVlpNSE5GZVdOYVJUSlZPR0k1ZG5OSWNXSjRaRVZyZEZGTGEwMVpTMkowVDJSUVZVOXRNbE5uU0ZOb2NGRjRPVWw1YjFCcmJWSXJiSE5GUFMwdFJFeFdRbEZhTkVKWVJWb3JlVGhMV2xOeE1HdFNVVDA5LS1kOTM2N2U3NGYzNmRlOWU3ODhmYjdmOTVmY2Y0YmY2NDZjNjQ0YTc3?cid=1522307386

Details
https://2fa.com-token-auth.com/XVUVWaWEzSldWM2gwTjJkRWNYTkdjRXhIYlU5YU9WbG1VM1ZPTDBNNGVHdDJjV2N3YjBVNVVtSk1TWEZrUm1wT2RVRnRTekJ5TlZORlZVRXplRFJCVTJRNVIxVkdkMmhXTWxsT2JYTm5kWEJVVFd0clNXUlRUMUppWlZKdU5WbENRaTlYYkZOMlVrVm1VV3hDYjJoUFYwbFdRMDFhWTA1eE9VRllRMncxWW1NNFJYYzRlR3QwTkRNclNtODNkek42U2tWSk1sRmxhVm95Y1hwNWJHbGlhRXhMT0hGeE5YcFdibWhWUFMwdFNFMHpRbTloUzBsS01FaEZZMEp6VHpsclRuVkxVVDA5LS1kYTU3MTQ2YzY5OTFjNjdkNTllYTJiZjcwNWJkOTFjNWQ0ZGNiNzAz?cid=1522392060

Details

Previous checks:

Feb 17, 2023, 15:28 EST

View

                               Domain Name: com-token-auth.com
Registry Domain ID: 2046352684_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.amazon.com
Registrar URL: https://registrar.amazon.com
Updated Date: 2022-12-26T21:02:18Z
Creation Date: 2016-07-25T21:06:57Z
Registrar Registration Expiration Date: 2023-07-25T21:06:57Z
Registrar: Amazon Registrar, Inc.
Registrar IANA ID: 468
Registrar Abuse Contact Email: abuse@amazonaws.com
Registrar Abuse Contact Phone: +1.2067406200
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Registry Registrant ID: Not Available From Registry
Registrant Name: On behalf of com-token-auth.com owner
Registrant Organization: Identity Protection Service
Registrant Street: PO Box 786
Registrant City: Hayes
Registrant State/Province: Middlesex
Registrant Postal Code: UB3 9TR
Registrant Country: GB
Registrant Phone: +44.1483307527
Registrant Phone Ext:
Registrant Fax: +44.1483304031
Registrant Fax Ext:
Registrant Email: 8bc64aec-31a4-45cd-90ae-d989bededeca@identity-protect.org
Registry Admin ID: Not Available From Registry
Admin Name: On behalf of com-token-auth.com owner
Admin Organization: Identity Protection Service
Admin Street: PO Box 786
Admin City: Hayes
Admin State/Province: Middlesex
Admin Postal Code: UB3 9TR
Admin Country: GB
Admin Phone: +44.1483307527
Admin Phone Ext:
Admin Fax: +44.1483304031
Admin Fax Ext:
Admin Email: 8bc64aec-31a4-45cd-90ae-d989bededeca@identity-protect.org
Registry Tech ID: Not Available From Registry
Tech Name: On behalf of com-token-auth.com owner
Tech Organization: Identity Protection Service
Tech Street: PO Box 786
Tech City: Hayes
Tech State/Province: Middlesex
Tech Postal Code: UB3 9TR
Tech Country: GB
Tech Phone: +44.1483307527
Tech Phone Ext:
Tech Fax: +44.1483304031
Tech Fax Ext:
Tech Email: 8bc64aec-31a4-45cd-90ae-d989bededeca@identity-protect.org
Name Server: NS-264.AWSDNS-33.COM
Name Server: NS-749.AWSDNS-29.NET
Name Server: NS-1673.AWSDNS-17.CO.UK
Name Server: NS-1247.AWSDNS-27.ORG
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2023-02-17T20:29:01Z <<<
For more information on Whois status codes, please visit https://icann.org/epp

By submitting a query to the Amazon Registrar, Inc. WHOIS database, you
agree to abide by the following terms. The data in Amazon Registrar, Inc.'s
WHOIS database is provided by Amazon Registrar, Inc. for the sole purpose of
assisting you in obtaining information about domain name accuracy. You agree
to use this data only for lawful purposes and further agree not to use this
data for any unlawful purpose or to: (1) enable, allow, or otherwise support
the transmission by email, telephone, or facsimile of commercial advertising
or unsolicited bulk email, or (2) enable high volume, automated, electronic
processes to collect or compile this data for any purpose, including mining
this data for your own personal or commercial purposes. Amazon Registrar, Inc.
reserves the right to restrict or terminate your access to the data if you fail
to abide by these terms of use. Amazon Registrar, Inc. reserves the right
to modify these terms at any time.

Visit Amazon Registrar, Inc. at https://registrar.amazon.com

Contact information available here:
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-contact-support.html

© 2020, Amazon.com, Inc., or its affiliates

GET

200 OK

https://secured-login.net/favicon.ico

<html xmlns="http://www.w3.org/1999/xhtml" style="" class=" js flexbox flexboxlegacy canvas canvastext webgl no-touch geolocation postmessage no-websqldatabase indexeddb hashchange history draganddrop websockets rgba hsla multiplebgs backgroundsize borderimage borderradius boxshadow textshadow opacity cssanimations csscolumns cssgradients no-cssreflections csstransforms csstransforms3d csstransitions fontface generatedcontent video audio localstorage sessionstorage webworkers applicationcache svg inlinesvg smil svgclippaths"><head><meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers.">
  <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com.">
  <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible">
  <meta name="robots" content="noindex, nofollow">

  
  <script src="/assets/application-8ef660db16caa56d18ac163aada1c6c07689144544990b05f95c4c79e460a682.js"></script>
  <script src="/packs/js/vendor-b9c1f98093c70be12eea.js"></script>
  <script src="/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js"></script>

  <script>
//<![CDATA[
window.gon={};gon.locale="en";
//]]>
</script>

    <link rel="stylesheet" media="all" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css">

  <style type="text/css">* {

  box-sizing: border-box;
}

body {
  margin: 5% 0;
  font-family: Helvetica, sans-serif;
  /* Change the background color of the landing page by replacing #1cbc9b with the hex code of your desired background color. */
  background: url("https://www.montclair.edu/responsive-media/cache/admissions/wp-content/uploads/sites/2/2018/06/36278269_10156251152690428_8429989438666309632_o.jpg.5.1x.generic.jpg") no-repeat center center fixed; 
  -webkit-background-size: cover;
  -moz-background-size: cover;
  -o-background-size: cover;
  background-size: cover;
 
}

.content-container {
  width: 80vw;
  margin: auto;
  background: #dcdcdc;
  box-shadow: 10px 10px 10px rgba(0, 0, 0, 0.3);
  border-radius: 15px;
  padding: 20px;
}
.content-container-small {
  width: 75vw;
  background: #f8f8ff;
  box-shadow: 15px 15px 15px rgba(0, 0, 0, 0.3);
  border-radius: 15px;
  padding: 20px;
}

.content-container-small1 {
  max-width: 100;
  background: #383838;
  box-shadow: 15px 15px 15px rgba(0, 0, 0, 0.3);
  border-radius: 15px;
  padding: 20px;
}
.content-container-small2 {
  width: 65vw;
  margin: auto;
  box-shadow: 15px 15px 15px rgba(0, 0, 0, 0.3);
  border-radius: 15px;
  padding: 20px;
  background: url("https://photos.smugmug.com/photos/i-bzH8PrH/0/X3/i-bzH8PrH-X3.jpg");
-webkit-background-size: cover;
  -moz-background-size: cover;
  -o-background-size: cover;
  background-size: cover;
}

.column {
  object-fit: fill;
  width: 50%;
  padding: 20px;
}

.row:after {
  content: "";
  display: table;
  clear: both;
}

.header-container {
  margin: 2%;
  color: 000;
  word-wrap:break-word;
  
}

.header {
  font-size: 3em;
  font-weight: bold;
/* Change the header text (IT Emails from Montclair State University) color of the landing page by replacing #1cbc9b with the hex code of your desired header color. */
  color: #1cbc9b;
}
.subheader{
  font-size: 1em;
  color: #707070;
  line-height: 1.5;
}

.column img {
  width: 100%;
}

.text-container {
  color: #707070;
  word-wrap:break-word;
  padding: 0 1em;
  font-size:1em;
  height: auto;
}


ul li {
  margin-top: 20px;
}


@media screen and (max-width: 600px) {
  .column {
    width: 100%;
  }
}
</style></head>
  

<body><div class="content-container">
<div class="header-container">
<div class="content-container-small1">
<center><img src="https://www.montclair.edu/program-management-office/wp-content/uploads/sites/42/2019/08/OIT-Banner.png" style="width: 65%; border-width: 5px; border-style: solid; margin-left: 165px; margin-right: 165px;"></center>
</div>

<h1 style="text-align: center;"><strong><img alt="" src="https://www.montclair.edu/information-technology/wp-content/uploads/sites/168/2020/08/2-Mail.png" style="height: 110px; width: 110px; float: left;" width="110" height="110">&nbsp; <span style="font-size:72px;"><span style="color:#000000;">ATTENTION</span></span><img alt="" src="https://www.montclair.edu/information-technology/wp-content/uploads/sites/168/2020/08/2-Mail.png" style="height: 110px; width: 110px; float: right;" width="110" height="110"></strong></h1>

<div style="text-align: center;"><span style="font-size:26px;">You are seeing this page because the message<br>
you just clicked on is a <strong>controlled phishing test</strong> being performed by Information Technology as part of our campus cybersecurity awareness program</span><span style="font-size:26px;">.</span><br>
<br>
&nbsp;
<hr></div>
&nbsp;

<div class="content-container-small">
<div class="header" style="text-align: center;"><span style="color:#000000;"><u>Phishing Indicators</u></span></div>

<div class="row">
<center>
<table style="width:600px;" cellspacing="1" cellpadding="1" border="0" align="center">
	<tbody>
		<tr>
			<td style="text-align: center;"><br>
			<br>
			<span style="font-size:11pt; font-variant:normal; white-space:pre-wrap"><span style="font-family:Arial"><span style="color:#000000"><span style="font-weight:400"><span style="font-style:normal"><span style="text-decoration:none"><span style="border:none"><span style="display:inline-block"><span style="overflow:hidden"><span style="width:624px"><span style="height:304px"><img src="https://lh3.googleusercontent.com/UmrrY2uy5vFTVp64DjZmCPC7XGpb2LJnYwNgkRgEUqjlQMDMslRty-13S5tkbVPNROHS4itTSvn7rKtNd2WBIK6aEytcj0Rl4XA8ZiomK5LdKoNJzH2bCHVHTka_cYATiBCvQSEPiOqchxuizONZsmw" style="width: 1000px; height: 488px;" width="1000" height="488"></span></span></span></span></span></span></span></span></span></span></span><br>
			&nbsp;</td>
		</tr>
	</tbody>
</table>
</center>
</div>
<!-- Change URL to Change Image https://www.linkpicture.com/q/Final_5.jpg -->

<div class="text-container">
<ul>
	<li><span style="font-size:22px;"><em><strong>Check both display name AND email address.&nbsp;Attackers often attempt to distract the recipient to appear to come from someone of authority such as your HR department or University president.</strong></em></span></li>
	<li><span style="font-size:22px;"><em><strong>Do not trust links or attachments in email, use your mouse pointer to hover over a link to view the actual web address which should appear at the bottom of the browser window or in a pop-up.</strong></em></span></li>
	<li><span style="font-size:22px;"><em><strong>Be aware of multiple spelling and grammatical errors. Legitimate business communications are taken seriously and usually do not have spelling mistakes or poor grammar .</strong></em></span></li>
</ul>
</div>
</div>

<div style="text-align: center;">&nbsp;
<hr><br>
<span style="font-size:26px;">Beyond this phishing test message, if you ever suspect you have fallen for a <strong>legitimate phishing attempt and provided personal information, sensitive University information, account credentials or downloaded suspicious content</strong>, please contact your <a href="https://www.montclair.edu/information-technology/it-service-desk/academic-unit-support/">local academic technology team</a> or the IT Service Desk immediately at (973) 655-7971, option 1, or by email at <a href="mailto:itservicedesk@montclair.edu">itservicedesk@montclair.edu</a></span><br>
<br>
<br>
<br>
<span style="font-size:26px;"><strong>If this had been a real phishing message, clicking on the link could have led to a compromise to your account, computer, personal information, and/or University data.</strong> Therefore, it is imperative that you review the following information regarding how to identify and protect yourself against potential phishing messages:<br>
<strong><a href="http://www.montclair.edu/information-technology/security/phishing/">http://www.montclair.edu/information-technology/security/phishing/</a></strong></span></div>

<div style="text-align: center;"><br>
<br>
<br>
<span style="font-size:26px;">If you know that you used or provided your NetID account information (username and password) in response to a phishing scam, the most important step you can take is to immediately <strong>change your NetID password </strong>using the<strong> NetID Account Form</strong> at: <strong><a href="https://netid.montclair.edu">https://netid.montclair.edu</a></strong></span> &nbsp;</div>
</div>
</div>




</body></html>

Last Checked: Feb 17, 2023, 15:29 EST

Other submissions on 52.71.211.122:

Other submissions on com-token-auth.com:

Previous checks:

Screenshot: