hxxps://training[.]thinkific[.]com/api/sso/v2/sso/jwt?jwt={"typ"[:]"JWT","alg"[:]"HS256"}{"iat"[:]1592856054,"jti"[:]"1592856054/98efdb7efeb92663959977bf59ae2c4c590d","first_name"[:]"isabel","last_name"[:]"vazquez","email"[:]"isabel@gmc360[.]com[.]mx","provider"[:]"OMNIAUTH_SSO","has_write_access"[:]false}[.]v6KVU5zYCxN7h43xOQydWWNfh0Av6FT1FqUILwv7FE8&return_to=[//]homesalesmedina[.]com/wp-admin/kusla/auth/then/nnn/mmm/guest@outlook[.]com

Sharing

Target

https://training.thinkific.com/api/sso/v2/sso/jwt?jwt={"typ":"JWT","alg":"HS256"}{"iat":1592856054,"jti":"1592856054/98efdb7efeb92663959977bf59ae2c4c590d","first_name":"isabel","last_name":"vazquez","email":"[email protected]","provider":"OMNIAUTH_SSO","has_write_access":false}.v6KVU5zYCxN7h43xOQydWWNfh0Av6FT1FqUILwv7FE8&return_to=//homesalesmedina.com/wp-admin/kusla/auth/then/nnn/mmm/[email protected]

Score

8^/10

phishing

A potential corporate email address has been identified in the URL: //homesalesmedina.com/wp-admin/kusla/auth/then/nnn/mmm/[email protected]
phishing