whois.handle: PROOF
whois.name: Proofpoint, Inc.
whois.cidrs: 205.220.160.0/19
whois.created: 2019-01-24T00:00:00.000000
whois.updated: 2024-11-08T00:00:00.000000
whois.allocation_type: ALLOCATION
whois.handle: PROOF
whois.name: Proofpoint, Inc.
whois.street: 925 W Maude Ave
whois.city: Sunnyvale
whois.state: CA
whois.postal_code: 94085
whois.country: US
whois.handle: PAA19-ARIN
whois.name: Proofpoint ARIN Abuse
whois.email: abuse@proofpoint.com
whois.handle: NETWO2061-ARIN
whois.name: Network Operations
whois.email: arin-management@proofpoint.com
whois.handle: NETWO2061-ARIN
whois.name: Network Operations
whois.email: arin-management@proofpoint.com
services.protocol: SMTP
services.transport_protocol: TCP
services.scan_time: 2025-07-28T03:46:55.612158
services.banner: 220 mx0a-00604702.pphosted.com ESMTP mfa-m0311335
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
services.fingerprint_sha256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
services.subject_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.issuer_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.fingerprint_sha256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.subject_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.ja4s: t120200_c02f_344b4dce5a52
services.names: *.gslb.pphosted.com *.pphosted.com pphosted.com
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.common_name: Sectigo RSA Organization Validation Secure Server CA
services.country: GB
services.locality: Salford
services.province: Greater Manchester
services.organization: Sectigo Limited
services.subject_dn: C=US, ST=California, O=Proofpoint\, Inc., CN=*.pphosted.com
services.common_name: *.pphosted.com
services.country: US
services.province: California
services.organization: Proofpoint, Inc.
services.value: email
services.banner: 220 mx0a-00604702.pphosted.com ESMTP mfa-m0311335
  
services.ehlo: 250-mx0a-00604702.pphosted.com Hello [167.94.145.107], pleased to meet you
  250-ENHANCEDSTATUSCODES
  250-PIPELINING
  250-8BITMIME
  250-SIZE 157286400
  250 STARTTLS
  
services.start_tls: 220 2.0.0 Ready to start TLS
  
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T22:51:18.265808
services.banner: HTTP/1.1 403 Forbidden
  Date:  <REDACTED>
  Server:  
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  Last-Modified: Fri, 11 Apr 2025 19:47:44 GMT
  ETag: "898-63285f9d83800"
  Accept-Ranges: bytes
  Content-Length: 2200
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  X-Content-Type-Options: nosniff
  Expect-CT: max-age=86400, enforce
  Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'
  Content-Type: text/html; charset=UTF-8
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.ja4s: t120300_c030_bec8bdbaef8a
services.version: TLSv1_2
services.ja4s: t120300_c030_bec8bdbaef8a
services.names: m0311334.ppops.net
services.issuer_dn: CN=m0311334.ppops.net
services.common_name: m0311334.ppops.net
services.subject_dn: CN=m0311334.ppops.net
services.common_name: m0311334.ppops.net
services.scan_time: 2025-07-27T22:44:50.095008
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T22:51:18.265808
services.uri: https://205.220.167.238/
services.protocol: HTTP/1.1
services.status_reason: Forbidden
services.key: Server
services.key: Accept-Ranges
services.headers: bytes
services.key: Strict-Transport-Security
services.headers: max-age=31536000; includeSubDomains
services.key: X-Frame-Options
services.headers: SAMEORIGIN
services.key: X-XSS-Protection
services.headers: 1; mode=block
services.key: Content-Length
services.headers: 2200
services.key: Content-Security-Policy
services.headers: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'
services.key: X-Content-Type-Options
services.headers: nosniff
services.key: Content-Type
services.headers: text/html; charset=UTF-8
services.key: Date
services.headers: <REDACTED>
services.key: ETag
services.headers: "898-63285f9d83800"
services.key: Expect-CT
services.headers: max-age=86400, enforce
services.key: Last-Modified
services.headers: Fri, 11 Apr 2025 19:47:44 GMT
services.html_tags: <title>Forbidden</title>
services.body: <!DOCTYPE html>
  <html>
  	<!--
  	  Copyright (c) 2004-2025 by Proofpoint, Inc.  All Rights Reserved.
  
  	  See the file COPYRIGHT for details on copyright notices for
  	  licensed components used in this product.
  
  	  See the file src/opensource/OPENSOURCE for details on copyright notices
  	  required by Open Source components used in this product.
  
  	  Proofpoint, Proofpoint Protection Server, MLX Engine, and the Proofpoint
  	  logos are trademarks or registered trademarks of Proofpoint, Inc.
  	-->
  	<head>
  		<!-- Note:  this html page need to be at least 512 byte for IE to display its content. -->
  		<title>Forbidden</title>
  		<style type="text/css"><!--
  		body
  		{
  			background-color: #F2F2F2;
  			font-family: Lucida Grande, Arial, Helvetica, sans-serif;
  			font-size: 8pt;
  		}
  		div.outerMessageBoxFrame
  		{
  			background-color: #FFFFFF;
  			border-color: #CCCCCC;
  			border-style: solid;
  			border-width: 1px;
  			padding: 1px;
  			margin-top: 100px;
  			margin-left: 100px;
  			margin-right: 100px;
  		}
  		div.messageTitleBar
  		{
  			background-color: #EEEEEE;
  			color: #333333;
  			font-size: 12pt;
  			font-weight: bold;
  			padding-left: 1em;
  			padding-top: 0.5ex;
  			padding-bottom: 0.5ex;
  		}
  		div.messageContentArea
  		{
  			padding-top: 5ex;
  			padding-bottom: 5ex;
  			padding-left: 1.5em;
  			padding-right: 1.5em;
  		}
  		div.htmlErrorMessageArea
  		{
  			margin-left: 1.5em;
  			margin-right: 1.5em;
  			padding-top: 0.5ex;
  			padding-bottom: 0.5ex;
  			text-align: right;
  			border-top-width: 1px;
  			border-top-style: solid;
  			border-top-color: #CCCCCC;
  		}
  		span.htmlErrorMessage
  		{
  			color: #CCCCCC;
  		}
  		div.copyrightStatementArea
  		{
  			color:rgba(0, 0, 0, 0.5);
  			text-align: center;
  		}
  		-->
  		</style>
  	</head>
  	<body>
  		<div class="outerMessageBoxFrame">
  			<div class="messageTitleBar">
  				Forbidden
  			</div>
  			<div class="messageContentArea">
  				<p>
  					You do not have permission to access this page.
  				</p>
  			</div>
  			<div class="htmlErrorMessageArea">
  				<span class="htmlErrorMessage">
  					HTTP Error 403
  				</span>
  			</div>
  		</div>
  		<div class="copyrightStatementArea">
  			Copyright &copy; 2009-2025 Proofpoint, Inc.  All rights reserved.
  		</div>
  	</body>
  </html>
  
  
services.body_hash_sha1: sha1:8a75f885d6b07efd2069008ddd9b0af9851ae4ba
services.supported_versions: HTTP/1.1
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-28T03:04:41.423870
services.banner: HTTP/1.1 302 Found
  Date:  <REDACTED>
  Server:  
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  Set-Cookie: pps_magic=HwcGcRfuzuLawsEbzS6ghnKZK9k4nemm2NfG%20EveBIc;path=/; domain=.205.220.167.238;Secure;SameSite=None
  Set-Cookie: sid=ADM1b853e2dddac56ad7b052076d8a5e3fb3c5ecb60a4ab8206ee27ef8e448fd356;path=/; domain=.205.220.167.238;Secure;SameSite=None;HttpOnly
  Set-Cookie: ppsquerystring=;path=/; domain=.205.220.167.238;Secure;SameSite=None;HttpOnly;expires=Sat, 01-Jan-2000 00:00:00 GMT
  Location: https://205.220.167.238:10000/admin
  Cache-Control: max-age=0
  Expires: Mon, 28 Jul 2025 03:04:48 GMT
  Content-Length: 219
  Content-Type: text/html; charset=iso-8859-1
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.fingerprint_sha256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
services.subject_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.issuer_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.fingerprint_sha256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.subject_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.ja4s: t120300_c030_bec8bdbaef8a
services.version: TLSv1_2
services.ja4s: t120300_c030_bec8bdbaef8a
services.names: *.gslb.pphosted.com *.pphosted.com pphosted.com
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.common_name: Sectigo RSA Organization Validation Secure Server CA
services.country: GB
services.locality: Salford
services.province: Greater Manchester
services.organization: Sectigo Limited
services.subject_dn: C=US, ST=California, O=Proofpoint\, Inc., CN=*.pphosted.com
services.common_name: *.pphosted.com
services.country: US
services.province: California
services.organization: Proofpoint, Inc.
services.scan_time: 2025-07-15T23:51:04.276094
services.path: /admin
services.endpoint_type: HTTP
services.scan_time: 2025-07-28T03:04:41.423870
services.uri: https://205.220.167.238:10000/admin
services.protocol: HTTP/1.1
services.status_reason: Found
services.key: Location
services.headers: https://205.220.167.238:10000/admin
services.key: Server
services.key: Strict-Transport-Security
services.headers: max-age=31536000; includeSubDomains
services.key: Expires
services.headers: Mon, 28 Jul 2025 03:04:48 GMT
services.key: Content-Length
services.headers: 219
services.key: Cache-Control
services.headers: max-age=0
services.key: Content-Type
services.headers: text/html; charset=iso-8859-1
services.key: Date
services.headers: <REDACTED>
services.key: Set-Cookie
services.headers: pps_magic=HwcGcRfuzuLawsEbzS6ghnKZK9k4nemm2NfG%20EveBIc;path=/; domain=.205.220.167.238;Secure;SameSite=None sid=ADM1b853e2dddac56ad7b052076d8a5e3fb3c5ecb60a4ab8206ee27ef8e448fd356;path=/; domain=.205.220.167.238;Secure;SameSite=None;HttpOnly ppsquerystring=;path=/; domain=.205.220.167.238;Secure;SameSite=None;HttpOnly;expires=Sat, 01-Jan-2000 00:00:00 GMT
services.html_tags: <title>302 Found</title>
services.body: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
  <html><head>
  <title>302 Found</title>
  </head><body>
  <h1>Found</h1>
  <p>The document has moved <a href="https://205.220.167.238:10000/admin">here</a>.</p>
  </body></html>
  
services.body_hash_sha1: sha1:53946a0d51fafc0b82c8c1ec0a871fb6ad0ec6e0
services.supported_versions: HTTP/1.1
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T14:50:00.667664
services.banner: HTTP/1.1 302 Found
  Date:  <REDACTED>
  Server:  
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  Set-Cookie: sid_saml=ADMc716135e030d24bd2d30a6d7ad0b40b21eab52ba52c15dc90118273d9dde87e7;path=/; domain=.205.220.167.238;Secure;SameSite=None;HttpOnly
  Set-Cookie: pps_magic=YmhOgJLRfr%205odEV6K0woHFKPiyGMvlSBDF75pxzfMA;path=/; domain=.205.220.167.238;Secure;SameSite=None
  Set-Cookie: ppsquerystring=;path=/; domain=.205.220.167.238;Secure;SameSite=None;HttpOnly;expires=Sat, 01-Jan-2000 00:00:00 GMT
  Location: https://205.220.167.238:10001/admin
  Cache-Control: max-age=0
  Expires: Sun, 27 Jul 2025 14:50:03 GMT
  Content-Length: 219
  Content-Type: text/html; charset=iso-8859-1
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.fingerprint_sha256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
services.subject_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.issuer_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.fingerprint_sha256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.subject_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.ja4s: t120300_c030_bec8bdbaef8a
services.version: TLSv1_2
services.ja4s: t120300_c030_bec8bdbaef8a
services.names: *.gslb.pphosted.com *.pphosted.com pphosted.com
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.common_name: Sectigo RSA Organization Validation Secure Server CA
services.country: GB
services.locality: Salford
services.province: Greater Manchester
services.organization: Sectigo Limited
services.subject_dn: C=US, ST=California, O=Proofpoint\, Inc., CN=*.pphosted.com
services.common_name: *.pphosted.com
services.country: US
services.province: California
services.organization: Proofpoint, Inc.
services.scan_time: 2025-07-27T03:22:50.931136
services.path: /admin
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T14:50:00.667664
services.uri: https://205.220.167.238:10001/admin
services.protocol: HTTP/1.1
services.status_reason: Found
services.key: Location
services.headers: https://205.220.167.238:10001/admin
services.key: Server
services.key: Strict-Transport-Security
services.headers: max-age=31536000; includeSubDomains
services.key: Expires
services.headers: Sun, 27 Jul 2025 14:50:03 GMT
services.key: Content-Length
services.headers: 219
services.key: Cache-Control
services.headers: max-age=0
services.key: Content-Type
services.headers: text/html; charset=iso-8859-1
services.key: Date
services.headers: <REDACTED>
services.key: Set-Cookie
services.headers: sid_saml=ADMc716135e030d24bd2d30a6d7ad0b40b21eab52ba52c15dc90118273d9dde87e7;path=/; domain=.205.220.167.238;Secure;SameSite=None;HttpOnly pps_magic=YmhOgJLRfr%205odEV6K0woHFKPiyGMvlSBDF75pxzfMA;path=/; domain=.205.220.167.238;Secure;SameSite=None ppsquerystring=;path=/; domain=.205.220.167.238;Secure;SameSite=None;HttpOnly;expires=Sat, 01-Jan-2000 00:00:00 GMT
services.html_tags: <title>302 Found</title>
services.body: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
  <html><head>
  <title>302 Found</title>
  </head><body>
  <h1>Found</h1>
  <p>The document has moved <a href="https://205.220.167.238:10001/admin">here</a>.</p>
  </body></html>
  
services.body_hash_sha1: sha1:2e550a389acdb4546825827a09938af2ffea85a6
services.supported_versions: HTTP/1.1
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T10:52:05.041295
services.banner: HTTP/1.1 301 Moved Permanently
  Date:  <REDACTED>
  Server:  
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  Location: https://00604702.pphosted.com:10020/v1/samlauth?ret=https://00604702.pphosted.com:10020/euweb/login
  Cache-Control: max-age=0
  Expires: Sun, 27 Jul 2025 10:52:06 GMT
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  X-Content-Type-Options: nosniff
  Expect-CT: max-age=86400, enforce
  Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'
  Content-Length: 0
  Content-Type: text/plain; charset=UTF-8
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.fingerprint_sha256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
services.subject_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.issuer_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.fingerprint_sha256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.subject_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.ja4s: t120300_c030_bec8bdbaef8a
services.version: TLSv1_2
services.ja4s: t120300_c030_bec8bdbaef8a
services.names: *.gslb.pphosted.com *.pphosted.com pphosted.com
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.common_name: Sectigo RSA Organization Validation Secure Server CA
services.country: GB
services.locality: Salford
services.province: Greater Manchester
services.organization: Sectigo Limited
services.subject_dn: C=US, ST=California, O=Proofpoint\, Inc., CN=*.pphosted.com
services.common_name: *.pphosted.com
services.country: US
services.province: California
services.organization: Proofpoint, Inc.
services.scan_time: 2025-07-20T02:09:12.186299
services.path: /euweb/login
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T10:52:05.041295
services.uri: https://205.220.167.238:10020/euweb/login
services.protocol: HTTP/1.1
services.status_reason: Moved Permanently
services.key: Location
services.headers: https://00604702.pphosted.com:10020/v1/samlauth?ret=https://00604702.pphosted.com:10020/euweb/login
services.key: Expect-CT
services.headers: max-age=86400, enforce
services.key: Server
services.key: Strict-Transport-Security
services.headers: max-age=31536000; includeSubDomains
services.key: X-Frame-Options
services.headers: SAMEORIGIN
services.key: Content-Length
services.headers: 0
services.key: X-Content-Type-Options
services.headers: nosniff
services.key: Content-Type
services.headers: text/plain; charset=UTF-8
services.key: Date
services.headers: <REDACTED>
services.key: X-XSS-Protection
services.headers: 1; mode=block
services.key: Expires
services.headers: Sun, 27 Jul 2025 10:52:06 GMT
services.key: Cache-Control
services.headers: max-age=0
services.key: Content-Security-Policy
services.headers: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'
services.supported_versions: HTTP/1.1
[binary data, 39 values, 968 bytes]