hxxps://app[.]customerthermometer[.]com/?template=log_feedback&hash=0e53c36e&embed_data=dGVtcGVyYXR1cmVfaWQ9MSZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el[.]smith%40dobbstruckgroup[.]com%2C%20dpyott%40ibtr[.]com%2C%20PS_Implementation%40ibtr[.]com%2C%20benefits%40dobbstruckgroup[.]com%2C%20Heather[.]Goucher%40dobbstruckgroup[.]com%2C%20Emily[.]Gladding%40dobbstruckgroup[.]com%2C%20DobbsTruck%40lockton[.]com%2C%20Maria[.]Chandler%40dobbstruckgroup[.]com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr[.]com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= UrlLocation Body UrlDomain app[.]customerthermometer[.]com Type EmailUrlInfo  Jun 27, 2024 11[:]18[:]21 PM 28 {"SPF"[:]"pass","DKIM"[:]"pass","DMARC"[:]"pass","CompAuth"[:]"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 caitlin[.]marshall@lockton[.]com John Nichting  209[.]222[.]82[.]70 ibtr[.]com RE[:] Dobbs[:] PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-14171542612656701212 Jun 27, 2024 11[:]18[:]06 PM Jun 27, 2024 11[:]18[:]06 PM  hxxps://app[.]customerthermometer[.]com/?template=log_feedback&hash=fcc73d65&embed_data=dGVtcGVyYXR1cmVfaWQ9MiZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=PS_Implementation%40ibtr[.]com%2C%20jo-el[.]smith%40dobbstruckgroup[.]com%2C%20benefits%40dobbstruckgroup[.]com%2C%20Heather[.]Goucher%40dobbstruckgroup[.]com%2C%20Emily[.]Gladding%40dobbstruckgroup[.]com%2C%20DobbsTruck%40lockton[.]com%2C%20Maria[.]Chandler%40dobbstruckgroup[.]com%2C%20jnichting%40ibtr[.]com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr[.]com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app[.]customerthermometer[.]com EmailUrlInfo  Jun 27, 2024 11[:]18[:]21 PM 28 {"SPF"[:]"pass","DKIM"[:]"pass","DMARC"[:]"pass","CompAuth"[:]"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 caitlin[.]marshall@lockton[.]com John Nichting  209[.]222[.]82[.]70 ibtr[.]com RE[:] Dobbs[:] PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-10824189425356178361 Jun 27, 2024 11[:]18[:]06 PM Jun 27, 2024 11[:]18[:]06 PM  hxxps://app[.]customerthermometer[.]com/?template=log_feedback&hash=0e53c36e&embed_data=dGVtcGVyYXR1cmVfaWQ9MSZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=PS_Implementation%40ibtr[.]com%2C%20jo-el[.]smith%40dobbstruckgroup[.]com%2C%20benefits%40dobbstruckgroup[.]com%2C%20Heather[.]Goucher%40dobbstruckgroup[.]com%2C%20Emily[.]Gladding%40dobbstruckgroup[.]com%2C%20DobbsTruck%40lockton[.]com%2C%20Maria[.]Chandler%40dobbstruckgroup[.]com%2C%20jnichting%40ibtr[.]com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr[.]com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app[.]customerthermometer[.]com EmailUrlInfo  Jun 27, 2024 11[:]18[:]21 PM 28 {"SPF"[:]"pass","DKIM"[:]"pass","DMARC"[:]"pass","CompAuth"[:]"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 caitlin[.]marshall@lockton[.]com John Nichting  209[.]222[.]82[.]70 ibtr[.]com RE[:] Dobbs[:] PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-10856145036414552468 Jun 27, 2024 11[:]18[:]06 PM Jun 27, 2024 11[:]18[:]06 PM  hxxps://app[.]customerthermometer[.]com/?template=log_feedback&hash=8dc11be8&embed_data=dGVtcGVyYXR1cmVfaWQ9NCZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el[.]smith%40dobbstruckgroup[.]com%2C%20PS_Implementation%40ibtr[.]com%2C%20benefits%40dobbstruckgroup[.]com%2C%20Heather[.]Goucher%40dobbstruckgroup[.]com%2C%20Emily[.]Gladding%40dobbstruckgroup[.]com%2C%20DobbsTruck%40lockton[.]com%2C%20Maria[.]Chandler%40dobbstruckgroup[.]com%2C%20jnichting%40ibtr[.]com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr[.]com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app[.]customerthermometer[.]com EmailUrlInfo  Jun 27, 2024 11[:]18[:]21 PM 28 {"SPF"[:]"pass","DKIM"[:]"pass","DMARC"[:]"pass","CompAuth"[:]"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 caitlin[.]marshall@lockton[.]com John Nichting  209[.]222[.]82[.]70 ibtr[.]com RE[:] Dobbs[:] PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-5405023903204328167 Jun 27, 2024 11[:]18[:]06 PM Jun 27, 2024 11[:]18[:]06 PM  hxxps://app[.]customerthermometer[.]com/?template=log_feedback&hash=3f161e39&embed_data=dGVtcGVyYXR1cmVfaWQ9MyZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el[.]smith%40dobbstruckgroup[.]com%2C%20PS_Implementation%40ibtr[.]com%2C%20benefits%40dobbstruckgroup[.]com%2C%20Heather[.]Goucher%40dobbstruckgroup[.]com%2C%20Emily[.]Gladding%40dobbstruckgroup[.]com%2C%20DobbsTruck%40lockton[.]com%2C%20Maria[.]Chandler%40dobbstruckgroup[.]com%2C%20jnichting%40ibtr[.]com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr[.]com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app[.]customerthermometer[.]com EmailUrlInfo  Jun 27, 2024 11[:]18[:]21 PM 28 {"SPF"[:]"pass","DKIM"[:]"pass","DMARC"[:]"pass","CompAuth"[:]"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 caitlin[.]marshall@lockton[.]com John Nichting  209[.]222[.]82[.]70 ibtr[.]com RE[:] Dobbs[:] PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-15727622803227529492 Jun 27, 2024 11[:]18[:]06 PM Jun 27, 2024 11[:]18[:]06 PM  hxxps://app[.]customerthermometer[.]com/?template=log_feedback&hash=fcc73d65&embed_data=dGVtcGVyYXR1cmVfaWQ9MiZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el[.]smith%40dobbstruckgroup[.]com%2C%20PS_Implementation%40ibtr[.]com%2C%20benefits%40dobbstruckgroup[.]com%2C%20Heather[.]Goucher%40dobbstruckgroup[.]com%2C%20Emily[.]Gladding%40dobbstruckgroup[.]com%2C%20DobbsTruck%40lockton[.]com%2C%20Maria[.]Chandler%40dobbstruckgroup[.]com%2C%20jnichting%40ibtr[.]com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr[.]com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app[.]customerthermometer[.]com EmailUrlInfo  Jun 27, 2024 11[:]18[:]21 PM 28 {"SPF"[:]"pass","DKIM"[:]"pass","DMARC"[:]"pass","CompAuth"[:]"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 caitlin[.]marshall@lockton[.]com John Nichting  209[.]222[.]82[.]70 ibtr[.]com RE[:] Dobbs[:] PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-14796391293090807557 Jun 27, 2024 11[:]18[:]06 PM Jun 27, 2024 11[:]18[:]06 PM  hxxps://app[.]customerthermometer[.]com/?template=log_feedback&hash=0e53c36e&embed_data=dGVtcGVyYXR1cmVfaWQ9MSZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el[.]smith%40dobbstruckgroup[.]com%2C%20PS_Implementation%40ibtr[.]com%2C%20benefits%40dobbstruckgroup[.]com%2C%20Heather[.]Goucher%40dobbstruckgroup[.]com%2C%20Emily[.]Gladding%40dobbstruckgroup[.]com%2C%20DobbsTruck%40lockton[.]com%2C%20Maria[.]Chandler%40dobbstruckgroup[.]com%2C%20jnichting%40ibtr[.]com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr[.]com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app[.]customerthermometer[.]com EmailUrlInfo  Jun 27, 2024 11[:]18[:]21 PM 28 {"SPF"[:]"pass","DKIM"[:]"pass","DMARC"[:]"pass","CompAuth"[:]"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 caitlin[.]marshall@lockton[.]com John Nichting  209[.]222[.]82[.]70 ibtr[.]com RE[:] Dobbs[:] PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-9593092833455664601 Jun 27, 2024 11[:]18[:]06 PM Jun 27, 2024 11[:]18[:]06 PM  hxxps://app[.]customerthermometer[.]com/?template=log_feedback&hash=8dc11be8&embed_data=dGVtcGVyYXR1cmVfaWQ9NCZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el[.]smith%40dobbstruckgroup[.]com%2C%20dpyott%40ibtr[.]com%2C%20PS_Implementation%40ibtr[.]com%2C%20benefits%40dobbstruckgroup[.]com%2C%20Heather[.]Goucher%40dobbstruckgroup[.]com%2C%20Emily[.]Gladding%40dobbstruckgroup[.]com%2C%20DobbsTruck%40lockton[.]com%2C%20Maria[.]Chandler%40dobbstruckgroup[.]com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr[.]com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app[.]customerthermometer[.]com EmailUrlInfo  Jun 27, 2024 11[:]18[:]21 PM 28 {"SPF"[:]"pass","DKIM"[:]"pass","DMARC"[:]"pass","CompAuth"[:]"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 caitlin[.]marshall@lockton[.]com John Nichting  209[.]222[.]82[.]70 ibtr[.]com RE[:] Dobbs[:] PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-13369532173994518724 Jun 27, 2024 11[:]18[:]06 PM Jun 27, 2024 11[:]18[:]06 PM  hxxps://app[.]customerthermometer[.]com/?template=log_feedback&hash=3f161e39&embed_data=dGVtcGVyYXR1cmVfaWQ9MyZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el[.]smith%40dobbstruckgroup[.]com%2C%20dpyott%40ibtr[.]com%2C%20PS_Implementation%40ibtr[.]com%2C%20benefits%40dobbstruckgroup[.]com%2C%20Heather[.]Goucher%40dobbstruckgroup[.]com%2C%20Emily[.]Gladding%40dobbstruckgroup[.]com%2C%20DobbsTruck%40lockton[.]com%2C%20Maria[.]Chandler%40dobbstruckgroup[.]com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr[.]com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app[.]customerthermometer[.]com EmailUrlInfo  Jun 27, 2024 11[:]18[:]21 PM 28 {"SPF"[:]"pass","DKIM"[:]"pass","DMARC"[:]"pass","CompAuth"[:]"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 caitlin[.]marshall@lockton[.]com John Nichting  209[.]222[.]82[.]70 ibtr[.]com RE[:] Dobbs[:] PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-9167947029304208473 Jun 27, 2024 11[:]18[:]06 PM Jun 27, 2024 11[:]18[:]06 PM  hxxps://app[.]customerthermometer[.]com/?template=log_feedback&hash=fcc73d65&embed_data=dGVtcGVyYXR1cmVfaWQ9MiZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el[.]smith%40dobbstruckgroup[.]com%2C%20dpyott%40ibtr[.]com%2C%20PS_Implementation%40ibtr[.]com%2C%20benefits%40dobbstruckgroup[.]com%2C%20Heather[.]Goucher%40dobbstruckgroup[.]com%2C%20Emily[.]Gladding%40dobbstruckgroup[.]com%2C%20DobbsTruck%40lockton[.]com%2C%20Maria[.]Chandler%40dobbstruckgroup[.]com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr[.]com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app[.]customerthermometer[.]com EmailUrlInfo

Sharing

Copy URL

Twitter E-mail

General

Target

https://app.customerthermometer.com/?template=log_feedback&hash=0e53c36e&embed_data=dGVtcGVyYXR1cmVfaWQ9MSZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20dpyott%40ibtr.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= UrlLocation Body UrlDomain app.customerthermometer.com Type EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-14171542612656701212 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=fcc73d65&embed_data=dGVtcGVyYXR1cmVfaWQ9MiZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=PS_Implementation%40ibtr.com%2C%20jo-el.smith%40dobbstruckgroup.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-10824189425356178361 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=0e53c36e&embed_data=dGVtcGVyYXR1cmVfaWQ9MSZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=PS_Implementation%40ibtr.com%2C%20jo-el.smith%40dobbstruckgroup.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-10856145036414552468 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=8dc11be8&embed_data=dGVtcGVyYXR1cmVfaWQ9NCZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-5405023903204328167 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=3f161e39&embed_data=dGVtcGVyYXR1cmVfaWQ9MyZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-15727622803227529492 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=fcc73d65&embed_data=dGVtcGVyYXR1cmVfaWQ9MiZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-14796391293090807557 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=0e53c36e&embed_data=dGVtcGVyYXR1cmVfaWQ9MSZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-9593092833455664601 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=8dc11be8&embed_data=dGVtcGVyYXR1cmVfaWQ9NCZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20dpyott%40ibtr.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-13369532173994518724 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=3f161e39&embed_data=dGVtcGVyYXR1cmVfaWQ9MyZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20dpyott%40ibtr.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-9167947029304208473 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=fcc73d65&embed_data=dGVtcGVyYXR1cmVfaWQ9MiZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20dpyott%40ibtr.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo
Sample

240627-2mqlksxhpl

Score

8^/10

phishing

Behavioral task

behavioral1

Sample

https://app.customerthermometer.com/?template=log_feedback&hash=0e53c36e&embed_data=dGVtcGVyYXR1cmVfaWQ9MSZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20dpyott%40ibtr.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= UrlLocation Body UrlDomain app.customerthermometer.com Type EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-14171542612656701212 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=fcc73d65&embed_data=dGVtcGVyYXR1cmVfaWQ9MiZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=PS_Implementation%40ibtr.com%2C%20jo-el.smith%40dobbstruckgroup.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-10824189425356178361 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=0e53c36e&embed_data=dGVtcGVyYXR1cmVfaWQ9MSZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=PS_Implementation%40ibtr.com%2C%20jo-el.smith%40dobbstruckgroup.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-10856145036414552468 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=8dc11be8&embed_data=dGVtcGVyYXR1cmVfaWQ9NCZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-5405023903204328167 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=3f161e39&embed_data=dGVtcGVyYXR1cmVfaWQ9MyZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-15727622803227529492 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=fcc73d65&embed_data=dGVtcGVyYXR1cmVfaWQ9MiZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-14796391293090807557 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=0e53c36e&embed_data=dGVtcGVyYXR1cmVfaWQ9MSZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-9593092833455664601 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=8dc11be8&embed_data=dGVtcGVyYXR1cmVfaWQ9NCZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20dpyott%40ibtr.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-13369532173994518724 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=3f161e39&embed_data=dGVtcGVyYXR1cmVfaWQ9MyZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20dpyott%40ibtr.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-9167947029304208473 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=fcc73d65&embed_data=dGVtcGVyYXR1cmVfaWQ9MiZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20dpyott%40ibtr.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo

Resource

win10v2004-20240611-en

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  https://app.customerthermometer.com/?template=log_feedback&hash=0e53c36e&embed_data=dGVtcGVyYXR1cmVfaWQ9MSZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20dpyott%40ibtr.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= UrlLocation Body UrlDomain app.customerthermometer.com Type EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-14171542612656701212 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=fcc73d65&embed_data=dGVtcGVyYXR1cmVfaWQ9MiZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=PS_Implementation%40ibtr.com%2C%20jo-el.smith%40dobbstruckgroup.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-10824189425356178361 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=0e53c36e&embed_data=dGVtcGVyYXR1cmVfaWQ9MSZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=PS_Implementation%40ibtr.com%2C%20jo-el.smith%40dobbstruckgroup.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-10856145036414552468 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=8dc11be8&embed_data=dGVtcGVyYXR1cmVfaWQ9NCZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-5405023903204328167 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=3f161e39&embed_data=dGVtcGVyYXR1cmVfaWQ9MyZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-15727622803227529492 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=fcc73d65&embed_data=dGVtcGVyYXR1cmVfaWQ9MiZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-14796391293090807557 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=0e53c36e&embed_data=dGVtcGVyYXR1cmVfaWQ9MSZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com%2C%20jnichting%40ibtr.com&f=&l=&c=&c1=Denise%20Pyott&c2=dpyott%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-9593092833455664601 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=8dc11be8&embed_data=dGVtcGVyYXR1cmVfaWQ9NCZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20dpyott%40ibtr.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-13369532173994518724 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=3f161e39&embed_data=dGVtcGVyYXR1cmVfaWQ9MyZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20dpyott%40ibtr.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo  Jun 27, 2024 11:18:21 PM 28 {"SPF":"pass","DKIM":"pass","DMARC":"pass","CompAuth":"pass"} Blocked Quarantine 3966825189 Inbound dee6147a-4853-4d1b-5acc-08dc96d14b28 [email protected] John Nichting  209.222.82.70 ibtr.com RE: Dobbs: PlanSource Data Imports - Due 6/25/24 1 dee6147a-4853-4d1b-5acc-08dc96d14b28 dee6147a-4853-4d1b-5acc-08dc96d14b28-9167947029304208473 Jun 27, 2024 11:18:06 PM Jun 27, 2024 11:18:06 PM  https://app.customerthermometer.com/?template=log_feedback&hash=fcc73d65&embed_data=dGVtcGVyYXR1cmVfaWQ9MiZ0aGVybW9tZXRlcl9pZD0xODkwMzcmbnBzX3JhdGluZz0%3D&e=jo-el.smith%40dobbstruckgroup.com%2C%20dpyott%40ibtr.com%2C%20PS_Implementation%40ibtr.com%2C%20benefits%40dobbstruckgroup.com%2C%20Heather.Goucher%40dobbstruckgroup.com%2C%20Emily.Gladding%40dobbstruckgroup.com%2C%20DobbsTruck%40lockton.com%2C%20Maria.Chandler%40dobbstruckgroup.com&f=&l=&c=&c1=John%20Nichting&c2=jnichting%40ibtr.com&c3=&c4=&c5=&c6=&c7=&c8=&c9=&c10= Body app.customerthermometer.com EmailUrlInfo
Score

5^/10
- Probable phishing domain
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

Sharing

General

Malware Config

Targets

Probable phishing domain

MITRE ATT&CK Matrix ATT&CK v13

Tasks

static1

urlscan1

behavioral1