https://webconference.protected-forms.com/XZFd4dWRuQnNWbVl5TTNCWVpYbGxaMGREUVZKNU5sbFlOak5pUVRGbmFWa3pSM0JzTjNGc1ZrWTNWWFpLYWpkMmFHSk5kMFEzVDJWUldtODVaWEJXWmpneGRGQmxkelF4WmtWWFlVZEVRbXRTYmpSNVExcG5hV2RTWlRsVFdFNHhlbkEyU21WUFFtSTNVekpDWm01NE1HczFjV05NYTJKTVZtVndZbGRuYnpaRlUwSk9TVlkxS3l0S1ZYQm1LM0ZIVjNVdmVrYzNVekJSWjNaUVYyMUJPVTFLU0RGUmVtMU9XVlpqUFMwdFMyNXVMek15YkVJMVNUWTNkWE1yWlRaR1puUkNaejA5LS1mYTc4NDBiNTM3OWUzOWExMDJlOGQ0ZTBmYTQ4NjU1MTRlOThmNGNl?cid=1503191370

Last Checked: Mar 10, 2023, 17:21 EST

IP Address: 54.157.75.32
ASN #: AS14618 AMAZON-AES, US
Location: Unknown, Unknown, Unknown
URL Reputation:
  • Unknown This URL is not identified as malicious in the PhishTank Database.
  • Unknown PhishCheck thinks this URL is likely not a phish.
  • Unknown OpenPhish: URL not in feed.

Other submissions on 54.157.75.32:

Other submissions on protected-forms.com:

  • https://na01.safelinks.protection.outlook.com.url.protected-forms.com/XUjNOUFNGRmxhVFF5VjBKWksyZHNZV2RxU2xSWGQzQXlhR0U1YjJGVlowUXhVRkZJZEVWQ0swb3ZSVzV2VUZZdk1uWmxlRzR5UTA5a2NrWkRlbGh6VUU1QlZYaHFXbk5OUjBGd1ZWQlpUa3hEY1c5WmRrSldZMlZaWjFKMldWUm5abGtyYTAxTVkzQkhTMEZEVm5CeVQxSTVkRlZ5UkVoNFNrczJXakpyUW05WVZtMDVWSEp1VDNSeE5EQnZjRk5YVFdWdmFYQkNaMUZUVXpkWU5FOXljRlZwWkhSM1QwbExNRVJ6UFMwdFoyOVpaRmhwUzNnNWJ6ZzBaRzVUU2xONFFXWnpVVDA5LS1lMmM5ZjM3ZTZjNzcyYzRkYmJjMzA5NWYwMjdiMjg1N2VjY2I0NTFh?cid=1425928585

  • https://na01.safelinks.protection.outlook.com.url.protected-forms.com/XT1VZNWNGRm9PRVF2T1ZJMVRUY3hZbUpDT1VvM2RVeGpWbmRWT1hCb1NHdGlaVVV2ZUU1RGFtRTJSamxOVlZOQ1dtTjJOalJPWmpreVJGSTVhbWxwTkdwVk1uWktWRWxUV1ZNMkwwdGxlazV1TkhadlMwaDNVRWg2Y3pOemNYSnZPSGhTY1RKQk5HVk5lWFpNVDFjMVZIWnZhVmxuUlhobU5sbFlhM2REYXpGWFRGVlhaVWRsUm1kcVdsaGtRbTkyZG5wb1RteHRVMlpqTldoQmQxcG5SSFp2Y0ZOaGREVlJkRWxDZG5NdmJsaFZielUwWkV4RE55czFRWEpQWTJ4a0xTMWpZVXBvTHpCR1VXcFRjblZKWWpscVlXRm1USHBSUFQwPS0tZmVkZjE3MzI4Njc2ZmZjM2IzZmQyOWJiOGM4YWJjZmEyYzg2YTJiOQ==?cid=1427540990

  • https://webconference.protected-forms.com/XT1ZOR2FtVkljbXh6V0ZJckswZDRZV0ozV2xoTFVFWlNZalF3ZFRsSlQzSlRaVlprVGpaelFXUnFaM2R4VDBnM2JYRjBVMVl2TTFOdmNuUklUa2hvWXpjM2FrWmxkMHRESzBKMmJtcGxPV2xFWjI5c05ubG1jVTlVYW01SFNtNXZTWE55YTBoUU9XaFhOblJhWjBGMmR6QndOa1U1ZW1wT1JYSmliRzFSYmpZelZWaHJWRnB6V0UxTWNqVjFSbWwzZDFwdWJWazBXbTR2V0d4NloyVkdSSEpRTmtGQmNHUjVWSFEwUFMwdGVsTndWalV4TUZBMGVsaDNiV1UxZG1NelFuSklaejA5LS0zNDM0NDgzYTUyMTIwZDhiZTQxNmY2ZmI4Y2M5NzEzNTdlMjE4ZjEw?cid=1281461385

  • https://safe-site.protected-forms.com/

  • https://safe-site.protected-forms.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

  • https://webconference.protected-forms.com/XZDFkcVRrbFVlbkZvWms4MU5FRk1ZVk5UYW5OR1VFMDJORGxJWlVSS1YyRk9kMlV4VlUxa1lrRjRWRzVPVlZSUGJXSnpWMXBLT1ROd1NFSTRaVzExYVdKMGEzZFBjekUyYUZGVWExSk1iR1ZCTnpCRVdWQkVaVFYwYkZOeEt6QmFNMEl4TTAxUU4wVllRVFpIY210UlJHOUtaMUJsUXpZdlpVMVlUVGRKYVZwU1RqQlRWVWRqY2xKclUxRkphbVZ1WTJOMGIyUnZkWEp3VkU0MVNGZGljSFJTWVdoQmNEVlNUV2RSUFMwdGQwRmxXbkpFTVdWT1RGSk9jVzkxTTJwRk1HUnJRVDA5LS1hYzg4YmJiMWY1NTRlZDI2OTg5NzJhNTNhODc4YWNjYmU3OWY4YmZk?cid=1448526316

  • http://covid19.protected-forms.com/

  • https://covid19.protected-forms.com/XTm1kdlQxaFpaM2RGVW5WU1JGcDVkU3R6TkRScEswcEJVbmhETTBkRVNXdEdZakZTVEVWeU1tcG5lSEpLU25aV1JGZGxOV1JwSzNSMlJIQlVkVFJ2VlM4M2RHeHlhRGR4WkRoaVlXSnZjbGh6UVc0d2NGUmFhRmcwVkc1WVYxWmhaV2RYT1M5V1pFdEVRMkpPZVUxeWFWRTJNVGwwTDFOVE5tWnVSa0ZQVDNRNU5HeFhXbkJGY2tkQ1pHUldMelpSYm1ZMFJtYzRNSHBSZEZsWlozUm1TQzl1TjNvcmVIZEZaVFZsZVVoeFdHRXJMMHczTmpjMFpqbExXVEF5ZHpaRUxTMVBlVzlzUWxSeVFteFhNMnBLWmtOdFQwSlNRemRSUFQwPS0tZTkxYWJlNDFkY2Q2ZGNhYTM5NzQ2NTI4ZGMyM2UyY2VjZDAxZDFkMw==?cid=1454897613

  • https://na01.safelinks.protection.outlook.com.url.protected-forms.com/XY3pSWE5tVXZhMXB5ZFZSQlRFcGFhekZHYmxONVpFbGxSRU51V1RsbU5tczBhbVZHSzJSelVtOVVibTlKYjBWaFYyVkNRa042Y1hkV1duUktUV05TVUdremJUZ3JZMGxyYkhwRU5EZFdlREl5YkZCaldXMDBSMWxwZWtWVldGcFBTV0Y0VW1sNFZETklVWEpXWkdOM2QzVnlhbkUyVTNoQ05WcHVNVFZSUzNaemIyTnJMMFZHV0dJclpuTmtZa1ZyTm1rdlkwUnZSM1kzZVZvMmVEUkdOR3hoZWswcmJYTTBaVVYzUFMwdFoycHBiME5ZWm1Jd2RFUkRaM1oxYUVzMlYwNXlVVDA5LS00OWZhZDY3YTA5YzBkM2Y2MTA4OTgzZTBkMGIxNjMzMjVjYmU5MjYz?cid=1453273164

  • https://webconference.protected-forms.com/XVGxRd2RVaHhkSE5yZFdOamFGVnRUVEV6WkVZMWMzZDZlVlJJWWxWNVFYWTNORzkzYjAxMU9GaEdkbXhGU1cwNEx6QXJSbUpTYWtoU1dFaHVWa0Y2V1ZkbFYyeHVVRVEwU25ORlRtbzNXbFF3VEZCblFsaFNWR1JoWW5BMmVWTkhLMHRXWkd4Q2NFTXdjWEJ0Y21ab1kyaGFZbWt4YkdKUWMwNTRVWGg0UlZnM1VYbFJWMUpVZHpCRVMzQklhbVJsY1hWcmEwMW1ReTlMZEdKS2NFSmhkRE0zYUdkbFlsaE9MMDF2UFMwdFYyODJPRnBaY0daVGR6VTNOVkJGZERrNUwwbG9VVDA5LS02MzhjMjcxYzdkZjlkZWI2ZGI3ZWYwZjQyOTY4NTQ1MWQ3N2RiOGJl?cid=1474620189

Previous checks:

                               Domain Name: protected-forms.com
Registry Domain ID: 1930364589_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.amazon.com
Registrar URL: https://registrar.amazon.com
Updated Date: 2023-01-04T22:07:44Z
Creation Date: 2015-05-19T15:29:03Z
Registrar Registration Expiration Date: 2023-05-19T15:29:03Z
Registrar: Amazon Registrar, Inc.
Registrar IANA ID: 468
Registrar Abuse Contact Email: abuse@amazonaws.com
Registrar Abuse Contact Phone: +1.2067406200
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Registry Registrant ID: Not Available From Registry
Registrant Name: On behalf of protected-forms.com owner
Registrant Organization: Identity Protection Service
Registrant Street: PO Box 786
Registrant City: Hayes
Registrant State/Province: Middlesex
Registrant Postal Code: UB3 9TR
Registrant Country: GB
Registrant Phone: +44.1483307527
Registrant Phone Ext:
Registrant Fax: +44.1483304031
Registrant Fax Ext:
Registrant Email: 4caf488c-f60a-48cc-97bf-a94b6e63a3e3@identity-protect.org
Registry Admin ID: Not Available From Registry
Admin Name: On behalf of protected-forms.com owner
Admin Organization: Identity Protection Service
Admin Street: PO Box 786
Admin City: Hayes
Admin State/Province: Middlesex
Admin Postal Code: UB3 9TR
Admin Country: GB
Admin Phone: +44.1483307527
Admin Phone Ext:
Admin Fax: +44.1483304031
Admin Fax Ext:
Admin Email: 4caf488c-f60a-48cc-97bf-a94b6e63a3e3@identity-protect.org
Registry Tech ID: Not Available From Registry
Tech Name: On behalf of protected-forms.com owner
Tech Organization: Identity Protection Service
Tech Street: PO Box 786
Tech City: Hayes
Tech State/Province: Middlesex
Tech Postal Code: UB3 9TR
Tech Country: GB
Tech Phone: +44.1483307527
Tech Phone Ext:
Tech Fax: +44.1483304031
Tech Fax Ext:
Tech Email: 4caf488c-f60a-48cc-97bf-a94b6e63a3e3@identity-protect.org
Name Server: NS-114.AWSDNS-14.COM
Name Server: NS-831.AWSDNS-39.NET
Name Server: NS-1856.AWSDNS-40.CO.UK
Name Server: NS-1464.AWSDNS-55.ORG
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2023-03-10T22:21:32Z <<<
For more information on Whois status codes, please visit https://icann.org/epp

By submitting a query to the Amazon Registrar, Inc. WHOIS database, you
agree to abide by the following terms. The data in Amazon Registrar, Inc.'s
WHOIS database is provided by Amazon Registrar, Inc. for the sole purpose of
assisting you in obtaining information about domain name accuracy. You agree
to use this data only for lawful purposes and further agree not to use this
data for any unlawful purpose or to: (1) enable, allow, or otherwise support
the transmission by email, telephone, or facsimile of commercial advertising
or unsolicited bulk email, or (2) enable high volume, automated, electronic
processes to collect or compile this data for any purpose, including mining
this data for your own personal or commercial purposes. Amazon Registrar, Inc.
reserves the right to restrict or terminate your access to the data if you fail
to abide by these terms of use. Amazon Registrar, Inc. reserves the right
to modify these terms at any time.

Visit Amazon Registrar, Inc. at https://registrar.amazon.com

Contact information available here:
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-contact-support.html

© 2020, Amazon.com, Inc., or its affiliates


                             
  • GET
    200 OK

    https://secured-login.net/assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png

  • http://info.ndbh.com/l/609291/2023-01-20/6fttr/609291/1674244060gr56S7Rq/Lucet_header_logo.png http://storage.pardot.com/609291/1674244060gr56S7Rq/Lucet_header_logo.png
  • http://storage.pardot.com/609291/1674244060gr56S7Rq/Lucet_header_logo.png https://storage.pardot.com/609291/1674244060gr56S7Rq/Lucet_header_logo.png
<html xmlns="http://www.w3.org/1999/xhtml" style="" class=" js flexbox flexboxlegacy canvas canvastext webgl no-touch geolocation postmessage no-websqldatabase indexeddb hashchange history draganddrop websockets rgba hsla multiplebgs backgroundsize borderimage borderradius boxshadow textshadow opacity cssanimations csscolumns cssgradients no-cssreflections csstransforms csstransforms3d csstransitions fontface generatedcontent video audio localstorage sessionstorage webworkers applicationcache svg inlinesvg smil svgclippaths"><head><meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers.">
  <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com.">
  <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible">
  <meta name="robots" content="noindex, nofollow">

  
  <script src="/assets/application-8ef660db16caa56d18ac163aada1c6c07689144544990b05f95c4c79e460a682.js"></script>
  <script src="/packs/js/vendor-b9c1f98093c70be12eea.js"></script>
  <script src="/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js"></script>

  <script>
//<![CDATA[
window.gon={};gon.locale="en";
//]]>
</script>

    <link rel="stylesheet" media="all" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css">
    <link rel="stylesheet" media="all" href="/assets/sei-modal-298c1edd0166bef9cbaf6b85083b95d5819753f027d6a841658c738f21e84e49.css">
    <link rel="stylesheet" media="all" href="/assets/sei-tooltip-1ae0d1e9729436272a0cdfaf2325f9aacea7d6f89787d08056eda54a1910752d.css">
    <link rel="stylesheet" media="all" href="/assets/sei-flag-68d13d784ca9a21935d3004d873a9d547a5992deb153f1069c517f83cb514c7a.css">

    <script>
//<![CDATA[

      $(document).ready(function() {
        $("#template_preview").hide();
        $("#template_preview").clone().appendTo("#template_sei");
        $("#template_sei #template_preview").show();
        $("x-sei").addClass('sei-flag');
        $("x-sei").tooltip();
        $("x-sei:not(#sei-footer)").attr('tabindex', 0);
        $("x-sei[generic='true']").tooltip('destroy');
        $("#template_sei a").click(function( event ) { event.preventDefault(); });
        $("#template_sei a:has(x-sei)").attr('tabindex', -1);
      });

//]]>
</script>

  </head>
  
<body><div style="text-align: center;"><img alt="" src="http://info.ndbh.com/l/609291/2023-01-20/6fttr/609291/1674244060gr56S7Rq/Lucet_header_logo.png"></div>
&nbsp;

<h1 style="text-align: center;"><span style="font-family:Arial,Helvetica,sans-serif;"><span style="color:#f58220;">Oops! You clicked on a simulated "phishing" email</span></span></h1>

<h1 style="text-align: center;"><span style="font-family:Arial,Helvetica,sans-serif;">If this would have been a real phishing email, clicking the link could have led to your computer being infected with a virus or malware, your account being compromised or Lucet's&nbsp;data being stolen.</span></h1>

<h2 style="text-align: center;"><br>
<span style="font-family:Arial,Helvetica,sans-serif;">Always Remember</span></h2>

<h1 style="text-align: center;"><span style="color:#f58220;"><strong>STOP-LOOK-THINK</strong></span></h1>

<h3 style="text-align: center;"><span style="font-family:Arial,Helvetica,sans-serif;">- Where you expecting an email from the sender?&nbsp;<br>
- Are the links going to the correct websites?<br>
Is the email "enticing" you to click a link or take an action?</span></h3>

<h2 style="text-align: center;"><span style="font-family:Arial,Helvetica,sans-serif;"><strong>Look at the email you recevied below<br>
Review the "Red Flags" in the email</strong></span></h2>

<h3 style="text-align: center;"><span style="font-family:Arial,Helvetica,sans-serif;"><strong>(hover over the red underline to learn what you missed)</strong></span></h3>

<div style="text-align: center;"><span style="font-family:Arial,Helvetica,sans-serif;"><div id="template_sei"><div id="template_preview" style="">
    <div class="modal-dialog">
    <div class="modal-content">
      <div class="modal-header">
        <div><strong>From:&nbsp;</strong>Microsoft &lt;<x-sei title="" class="sei-flag" data-original-title="Email domain is spoofing a popular website or well-known organization." tabindex="0">message@microsoft-communication.com</x-sei>&gt;</div>
        <div><strong><span id="modal-reply-to-label">Reply-to:&nbsp;</span></strong> Microsoft &lt;message.3oz96@ndbh.2fa.com-token-auth.com&gt;</div>
        <div><strong>Subject:&nbsp;</strong> Encrypted message</div>


      </div>
      <div class="watermark top">
        <h1>CR1503191370</h1>
      </div>
      <div id="modal-body" class="modal-body">
        <div class="watermark left">
          <h1>CR1503191370</h1>
        </div>
        <div>
          <div style="font-family:Arial; width:600px;">
<img alt="Microsoft Logo." src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/96/Microsoft_logo_%282012%29.svg/1200px-Microsoft_logo_%282012%29.svg.png" style="width: 150px; height: 32px; margin-bottom: 30px;" width="150">
<p style="font-size:26px; font-weight:bold; color:#0371cd;">ENCRYPTED MESSAGE</p>

<p><x-sei title="" class="sei-flag" data-original-title="Shocking content to entice you to click link or open attachment." tabindex="0">Someone at Lucet  has shared an encrypted email with you</x-sei>.</p>

<table width="100%" cellspacing="0" cellpadding="0" border="0">
	<tbody>
		<tr>
			<td>
			<table cellspacing="0" cellpadding="0" border="0">
				<tbody>
					<tr>
						<td style="padding:8px 18px;border-radius:0px;" bgcolor="#0371cd"><x-sei title="" class="sei-flag" data-original-title="Hover over the link. Link does not take you to the site the email content says it will." tabindex="0"><a href="http://preview.training.knowbe4.com/XYVdGc2MzWk5NbFJHYjAxWllqUmFLMjAzZFZWVlRuUklXRGRCYW1oUllWWTFXRE5NVEhacU1HZHpURmg2TWpkdU9HWnBlbnBtU3k5U2JITjVNVE41WkRWdldsQnpNVU51VGxSUVNFeENUMkp0TVRkNFZHc3llSEZOVEdOU1pIVTRObTlZTm1rNFJIQndZa054WjAxcVJURjVaMjFUTUhKd1ZsRTVRVWxOU0ZaTWF6UkdjelZuUXpSNmRVdDRSV05rTldrclJGSTRabGxQVlRkbFQzRjNMM0p5Wkd4UFJ6TnVlbUUzVFVjMllrWTBhVXAzY1ZSVFMxQk1MMDVYY0VSaU5ITlVWa2cyU1RkdlRtRTNOMmxXZWtWd1JXZHJRVFJRU2pkd1Z6aGtVbFJRTHpseFVEQnNiMFZOWkVWS2VqaG9UM1YxWm5OS1NHTnNXWEF5TURKTlowVklVbkZxYzNwUlF5dG1hRFI2TlZGR05IaGhPRkY2UW5FNFdqWmFaVUpzV21reVZVWk1PVTVOTkZoVllWaG1hVE5UWVUxYVZtMVZTbEYySzFkWFpIQm9aVkJJVW1KbVN6VnpRVGhDTm5kSFUyTlNOMWRZWWxGbVNVOHpUR3AzY0dkVlVYazNTaTluVDFKQk9VaFBTa1YxZUUxaGFFUk9PRVJOZGpZeWJFUlhMUzAwVFVwSEswMXpZVTVXTm5KclUwTjNiMjFrVldKblBUMD0tLWQ1ZWFhNWU3ZWM5ZGYxYjA2YzY0YzhlOTgxMmEyZGVhYzZmMWU5YzQ="><span style="font-size:16px;font-family:Helvetica , Arial , sans-serif;font-weight:normal;color:#ffffff;text-decoration:none;display:inline-block;">Unlock Message</span></a></x-sei></td>
					</tr>
				</tbody>
			</table>
			</td>
		</tr>
	</tbody>
</table>

<div style="margin:1px;">&nbsp;</div>

<p><strong>UNENCRYPTED INTRODUCTION</strong><br>
To view my encrypted message, you'll need to verify your identity.</p>

<p>The secure message expires in 24 hours.</p>

<p><strong>CONFIDENTIALITY NOTICE:</strong> The information contained in this electronic mail message may be privileged and is confidential information intended for the sole use of the addressee above. If you are neither the intended recipient nor the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any disclosure, copying, distribution or the taking of any action in reliance on the contents of this information is strictly prohibited.</p>
</div>

        </div>
        <div class="watermark right">
          <h1>CR1503191370</h1>
        </div>
      </div>

    </div><!-- /.modal-content -->
    </div>
</div></div></span><br>
<br>
&nbsp;</div>

<h2 style="text-align: center;"><span style="font-family:Arial,Helvetica,sans-serif;">"When in doubt -&nbsp;TOSS IT OUT"</span></h2>

<h2 style="text-align: center;"><span style="font-family:Arial,Helvetica,sans-serif;"><strong>Delete any suspicous email or report them by clicking&nbsp; the "Phish Alert" Button within the email&nbsp;&nbsp;</strong></span></h2>

<h3 style="text-align: center;"><span style="font-family:Arial,Helvetica,sans-serif;">There are a thousand ways that cyber criminals will try to trick you, and only one way to stay safe:</span></h3>

<h2 style="text-align: center;">&nbsp;</h2>

<h1 style="text-align: center;"><span style="font-family:Arial,Helvetica,sans-serif;"><span style="color:#f58220;">STAY ALERT</span><span style="color:#ff0000;">&nbsp;</span></span></h1>

<h2 style="text-align: center;"><span style="font-family:Arial,Helvetica,sans-serif;"><span style="color:#f58220;"><u><em><strong>YOU</strong></em></u></span><span style="color:#ff0000;"> </span>are the last line of defense!</span></h2>



<div id="template_preview" style="display: none;">
    <div class="modal-dialog">
    <div class="modal-content">
      <div class="modal-header">
        <div><strong>From:&nbsp;</strong>Microsoft &lt;<x-sei title="" class="sei-flag" data-original-title="Email domain is spoofing a popular website or well-known organization." tabindex="0">message@microsoft-communication.com</x-sei>&gt;</div>
        <div><strong><span id="modal-reply-to-label">Reply-to:&nbsp;</span></strong> Microsoft &lt;message.3oz96@ndbh.2fa.com-token-auth.com&gt;</div>
        <div><strong>Subject:&nbsp;</strong> Encrypted message</div>


      </div>
      <div class="watermark top">
        <h1>CR1503191370</h1>
      </div>
      <div id="modal-body" class="modal-body">
        <div class="watermark left">
          <h1>CR1503191370</h1>
        </div>
        <div>
          <div style="font-family:Arial; width:600px;">
<img alt="Microsoft Logo." src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/96/Microsoft_logo_%282012%29.svg/1200px-Microsoft_logo_%282012%29.svg.png" style="width: 150px; height: 32px; margin-bottom: 30px;" width="150">
<p style="font-size:26px; font-weight:bold; color:#0371cd;">ENCRYPTED MESSAGE</p>

<p><x-sei title="" class="sei-flag" data-original-title="Shocking content to entice you to click link or open attachment." tabindex="0">Someone at Lucet  has shared an encrypted email with you</x-sei>.</p>

<table width="100%" cellspacing="0" cellpadding="0" border="0">
	<tbody>
		<tr>
			<td>
			<table cellspacing="0" cellpadding="0" border="0">
				<tbody>
					<tr>
						<td style="padding:8px 18px;border-radius:0px;" bgcolor="#0371cd"><x-sei title="" class="sei-flag" data-original-title="Hover over the link. Link does not take you to the site the email content says it will." tabindex="0"><a href="http://preview.training.knowbe4.com/XYVdGc2MzWk5NbFJHYjAxWllqUmFLMjAzZFZWVlRuUklXRGRCYW1oUllWWTFXRE5NVEhacU1HZHpURmg2TWpkdU9HWnBlbnBtU3k5U2JITjVNVE41WkRWdldsQnpNVU51VGxSUVNFeENUMkp0TVRkNFZHc3llSEZOVEdOU1pIVTRObTlZTm1rNFJIQndZa054WjAxcVJURjVaMjFUTUhKd1ZsRTVRVWxOU0ZaTWF6UkdjelZuUXpSNmRVdDRSV05rTldrclJGSTRabGxQVlRkbFQzRjNMM0p5Wkd4UFJ6TnVlbUUzVFVjMllrWTBhVXAzY1ZSVFMxQk1MMDVYY0VSaU5ITlVWa2cyU1RkdlRtRTNOMmxXZWtWd1JXZHJRVFJRU2pkd1Z6aGtVbFJRTHpseFVEQnNiMFZOWkVWS2VqaG9UM1YxWm5OS1NHTnNXWEF5TURKTlowVklVbkZxYzNwUlF5dG1hRFI2TlZGR05IaGhPRkY2UW5FNFdqWmFaVUpzV21reVZVWk1PVTVOTkZoVllWaG1hVE5UWVUxYVZtMVZTbEYySzFkWFpIQm9aVkJJVW1KbVN6VnpRVGhDTm5kSFUyTlNOMWRZWWxGbVNVOHpUR3AzY0dkVlVYazNTaTluVDFKQk9VaFBTa1YxZUUxaGFFUk9PRVJOZGpZeWJFUlhMUzAwVFVwSEswMXpZVTVXTm5KclUwTjNiMjFrVldKblBUMD0tLWQ1ZWFhNWU3ZWM5ZGYxYjA2YzY0YzhlOTgxMmEyZGVhYzZmMWU5YzQ="><span style="font-size:16px;font-family:Helvetica , Arial , sans-serif;font-weight:normal;color:#ffffff;text-decoration:none;display:inline-block;">Unlock Message</span></a></x-sei></td>
					</tr>
				</tbody>
			</table>
			</td>
		</tr>
	</tbody>
</table>

<div style="margin:1px;">&nbsp;</div>

<p><strong>UNENCRYPTED INTRODUCTION</strong><br>
To view my encrypted message, you'll need to verify your identity.</p>

<p>The secure message expires in 24 hours.</p>

<p><strong>CONFIDENTIALITY NOTICE:</strong> The information contained in this electronic mail message may be privileged and is confidential information intended for the sole use of the addressee above. If you are neither the intended recipient nor the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any disclosure, copying, distribution or the taking of any action in reliance on the contents of this information is strictly prohibited.</p>
</div>

        </div>
        <div class="watermark right">
          <h1>CR1503191370</h1>
        </div>
      </div>

    </div><!-- /.modal-content -->
    </div>
</div>



</body></html>

                             

Screenshot: