whois.handle: PROOFPOINT-NET-NORTH-AMERICA
whois.name: Proofpoint, Inc.
whois.cidrs: 67.231.144.0/20
whois.created: 2009-05-20T00:00:00.000000
whois.updated: 2020-05-29T00:00:00.000000
whois.allocation_type: ALLOCATION
whois.handle: PROOF
whois.name: Proofpoint, Inc.
whois.street: 925 W Maude Ave
whois.city: Sunnyvale
whois.state: CA
whois.postal_code: 94085
whois.country: US
whois.handle: PAA19-ARIN
whois.name: Proofpoint ARIN Abuse
whois.email: abuse@proofpoint.com
whois.handle: NETWO2061-ARIN
whois.name: Network Operations
whois.email: arin-management@proofpoint.com
whois.handle: NETWO2061-ARIN
whois.name: Network Operations
whois.email: arin-management@proofpoint.com
services.protocol: SMTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T23:25:35.674392
services.banner: 554 Blocked - see https://ipcheck.proofpoint.com/?ip=167.94.145.104
  
services.value: email
services.banner: 554 Blocked - see https://ipcheck.proofpoint.com/?ip=167.94.145.104
  
services.ehlo: 250-mx0f-006eb301.gpphosted.com Hello [167.94.145.104], pleased to meet you
  250 ENHANCEDSTATUSCODES
  
services.start_tls: 500 5.5.1 Command unrecognized: "STARTTLS"
  
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T11:02:34.417448
services.banner: HTTP/1.1 302 Found
  Date:  <REDACTED>
  Server:  
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  Set-Cookie: sid=ADMb5298fa18333b3770f6f9cea8aade4fe3f3da2ee225d4b57914cfc04731f9872;path=/; domain=.67.231.155.162;Secure;SameSite=Lax;HttpOnly
  Set-Cookie: pps_magic=XuLPqSNnNqF2rFgtxDpT%20aaOjafq0MjxvesT2i1nFKk;path=/; domain=.67.231.155.162;Secure;SameSite=Lax
  Set-Cookie: ppsquerystring=;path=/; domain=.67.231.155.162;Secure;SameSite=Lax;HttpOnly;expires=Sat, 01-Jan-2000 00:00:00 GMT
  Location: https://67.231.155.162:10000/admin
  Cache-Control: max-age=0
  Expires: Sun, 27 Jul 2025 11:02:35 GMT
  Content-Length: 218
  Content-Type: text/html; charset=iso-8859-1
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.fingerprint_sha256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
services.subject_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.issuer_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.fingerprint_sha256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.subject_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.ja4s: t120300_c030_bec8bdbaef8a
services.version: TLSv1_2
services.ja4s: t120300_c030_bec8bdbaef8a
services.names: *.gpphosted.com *.gslb.gpphosted.com *.gslb.pphosted.com *.pphosted.com gpphosted.com pphosted.com
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.common_name: Sectigo RSA Organization Validation Secure Server CA
services.country: GB
services.locality: Salford
services.province: Greater Manchester
services.organization: Sectigo Limited
services.subject_dn: C=US, ST=California, O=Proofpoint\, Inc., CN=*.gpphosted.com
services.common_name: *.gpphosted.com
services.country: US
services.province: California
services.organization: Proofpoint, Inc.
services.scan_time: 2025-07-27T11:34:28.963750
services.path: /admin
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T11:02:34.417448
services.uri: https://67.231.155.162:10000/admin
services.protocol: HTTP/1.1
services.status_reason: Found
services.key: Location
services.headers: https://67.231.155.162:10000/admin
services.key: Server
services.key: Strict-Transport-Security
services.headers: max-age=31536000; includeSubDomains
services.key: Expires
services.headers: Sun, 27 Jul 2025 11:02:35 GMT
services.key: Content-Length
services.headers: 218
services.key: Cache-Control
services.headers: max-age=0
services.key: Content-Type
services.headers: text/html; charset=iso-8859-1
services.key: Date
services.headers: <REDACTED>
services.key: Set-Cookie
services.headers: sid=ADMb5298fa18333b3770f6f9cea8aade4fe3f3da2ee225d4b57914cfc04731f9872;path=/; domain=.67.231.155.162;Secure;SameSite=Lax;HttpOnly pps_magic=XuLPqSNnNqF2rFgtxDpT%20aaOjafq0MjxvesT2i1nFKk;path=/; domain=.67.231.155.162;Secure;SameSite=Lax ppsquerystring=;path=/; domain=.67.231.155.162;Secure;SameSite=Lax;HttpOnly;expires=Sat, 01-Jan-2000 00:00:00 GMT
services.html_tags: <title>302 Found</title>
services.body: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
  <html><head>
  <title>302 Found</title>
  </head><body>
  <h1>Found</h1>
  <p>The document has moved <a href="https://67.231.155.162:10000/admin">here</a>.</p>
  </body></html>
  
services.body_hash_sha1: sha1:4e9805cc4e6f15c296b62b35a65a848337e1fcc4
services.supported_versions: HTTP/1.1
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T19:10:39.127968
services.banner: HTTP/1.1 200 OK
  Date:  <REDACTED>
  Server:  
  pragma: no-cache
  Expires: Tue, 12 Oct 2021 23:59:59 UTC
  Cache-Control: no-store, max-age=0;
  Set-Cookie: PPSAUTH=0feb4f4fe1d6f6f613348a77577a0796; path=/; secure; HttpOnly
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  X-Content-Type-Options: nosniff
  Expect-CT: max-age=86400, enforce
  Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'
  Content-Length: 5295
  Content-Type: text/html; charset=UTF-8
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.fingerprint_sha256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
services.subject_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.issuer_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.fingerprint_sha256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.subject_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.ja4s: t120300_c030_bec8bdbaef8a
services.version: TLSv1_2
services.ja4s: t120300_c030_bec8bdbaef8a
services.names: *.gpphosted.com *.gslb.gpphosted.com *.gslb.pphosted.com *.pphosted.com gpphosted.com pphosted.com
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.common_name: Sectigo RSA Organization Validation Secure Server CA
services.country: GB
services.locality: Salford
services.province: Greater Manchester
services.organization: Sectigo Limited
services.subject_dn: C=US, ST=California, O=Proofpoint\, Inc., CN=*.gpphosted.com
services.common_name: *.gpphosted.com
services.country: US
services.province: California
services.organization: Proofpoint, Inc.
services.scan_time: 2025-07-16T00:20:25.021990
services.path: /euweb/login
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T19:10:39.127968
services.uri: https://67.231.155.162:10020/euweb/login
services.protocol: HTTP/1.1
services.status_reason: OK
services.key: Expect-CT
services.headers: max-age=86400, enforce
services.key: Server
services.key: Strict-Transport-Security
services.headers: max-age=31536000; includeSubDomains
services.key: X-Frame-Options
services.headers: SAMEORIGIN
services.key: Content-Length
services.headers: 5295
services.key: X-Content-Type-Options
services.headers: nosniff
services.key: Content-Type
services.headers: text/html; charset=UTF-8
services.key: pragma
services.headers: no-cache
services.key: Date
services.headers: <REDACTED>
services.key: Set-Cookie
services.headers: PPSAUTH=0feb4f4fe1d6f6f613348a77577a0796; path=/; secure; HttpOnly
services.key: X-XSS-Protection
services.headers: 1; mode=block
services.key: Expires
services.headers: Tue, 12 Oct 2021 23:59:59 UTC
services.key: Cache-Control
services.headers: no-store, max-age=0;
services.key: Content-Security-Policy
services.headers: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'
services.html_tags: <TITLE>Proofpoint Protection Server</TITLE> <META http-equiv="Content-Type" content="text/html; charset=UTF-8">
services.body: 
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  	
  	
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  <!DOCTYPE html public "-//W3C//DTD HTML 4.0 Transitional//en">
  <HTML><HEAD>
  	<TITLE>Proofpoint Protection Server</TITLE>		<LINK href="/euweb/stylesheet?templateid=0&v=" rel="stylesheet" type="text/css">	<META http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </HEAD>
  
  
  <SCRIPT>
  
  
  function getElement(elName) { var d = document; if(d.getElementById) { return d.getElementById(elName); } else if(d.layers) { return d.layers[elName]; } else if (d.all) { return d.all[elname];} return null; }
  function onChangeUsername() { clearError(); }
  function onChangePassword() { clearError(); }
  function clearError() { getElement("error").innerHTML = ""; }
  function setError(_text) {
  	getElement("error").innerHTML = '<FONT COLOR=red>'+_text+'</FONT>';
  }
  
  
  function setFocus() {
  	var _f = document.form_login; 
  	
  	if (_f.newpassword && (_f.newpassword.value == "")) { try {_f.newpassword.focus();} catch(e) {} }
  	else if (_f.username) { if (_f.username.value == "") { try {_f.username.focus();} catch(e) {}} else { try {_f.password.focus();} catch(e) {} } }
  }
  
  function onInit() {
  	if (getElement('username')) {
  		if (getElement('username').value == "" && getUsername()!=0) {
  			getElement('username').value=getUsername();
  		}
  	}
  	getElement("form_login").className="block_on";
  	setFocus();
  
  }
  
  function getUsername() {
  if (document.cookie.length>0)
    {
    var cookie_name='PPSUSER';
    var user_start=document.cookie.indexOf(cookie_name+"=");
    if(user_start!=-1) { 
       user_start=user_start + cookie_name.length+1; 
       user_end=document.cookie.indexOf(";",user_start);
      if (user_end==-1) user_end=document.cookie.length;
      return unescape(document.cookie.substring(user_start,user_end));
     } 
   }
  return 0;
  }
  
  function setUsername() {
  if(getElement('remember_me') && getElement('remember_me').checked == 1) {
  var expdate=new Date();
  var expafter=9999;
  expdate.setDate(expdate.getDate()+expafter);
  document.cookie="PPSUSER="+escape(getElement("username").value)+";expires="+expdate.toGMTString(); 
   }
  return true;
  }
  
  </SCRIPT>
  <BODY CLASS="pps_body" TOPMARGIN=0 LEFTMARGIN=0 MARGINHEIGHT=0 MARGINWIDTH=0 ONLOAD="onInit()">
  <TABLE CLASS="pps_background" WIDTH=100% HEIGHT=100% BORDER=0 CELLPADDING=0 CELLSPACING=0>
  <NOSCRIPT><TR VALIGN=TOP><TD>Javascript must be enabled in order for you to use Proofpoint End User Application.</TD></TR></NOSCRIPT>
  <TR ID=loginpage VALIGN=MIDDLE><TD ALIGN=CENTER>
  <FORM NAME=form_login METHOD=post ID=form_login ACTION="https://006eb301.gpphosted.com:10020/euweb/login" CLASS="block_off">
  	<TABLE WIDTH=470 HEIGHT=180 CELLPADDING=0 CELLSPACING=0 STYLE="border:1px solid #CCCCCC;">
  		<TR><TD><TR CLASS=pps_heading><TD COLSPAN=2 CLASS=pps_heading_left VALIGN=TOP>Login		</TD></TR>
  		<TR>
  			<TD VALIGN=TOP>
  			<TABLE CLASS='pps_side_bar' WIDTH=100% HEIGHT=100% CELLPADDING=0 CELLSPACING=4><TR>
  			<TD><IMG SRC="/images/authenticate.gif" WIDTH=90 HEIGHT=90 BORDER=0></TD>
  			<TD><TABLE BORDER=0 CELLPADDING=0 CELLSPACING=0 WIDTH="100%" HEIGHT="100%">
  				<TR VALIGN=MIDDLE HEIGHT=30><TD COLSPAN=4 ALIGN=CENTER CLASS=pps_text>						<IMG SRC="/euweb/logo?templateid=0&i=0&v=" BORDER=0>					<HR>
  				</TD></TR>
  														<TR VALIGN=MIDDLE HEIGHT=25><TD COLSPAN=4 ALIGN=CENTER CLASS=pps_text ID=error NAME=error><FONT COLOR=red></FONT></TD></TR>
  						<TR VALIGN=TOP HEIGHT=25>
  							<TD WIDTH=30>&nbsp;</TD><TD CLASS=pps_text>Username:</TD><TD CLASS=pps_text ALIGN=RIGHT><INPUT TYPE=TEXT NAME=username ID=username VALUE="" STYLE="width:170px;" MAXLENGTH=128 ONKEYPRESS="onChangeUsername()"></TD><TD WIDTH=30>&nbsp;</TD>
  						</TR>
  						<TR VALIGN=TOP HEIGHT=25>
  							<TD>&nbsp;</TD><TD CLASS=pps_text>Password:</TD><TD CLASS=pps_text ALIGN=RIGHT><INPUT TYPE=PASSWORD NAME=password ID=password STYLE="width:170px;"  MAXLENGTH=128 ONKEYPRESS="onChangePassword()" AUTOCOMPLETE=off></TD>
  						</TR>
  	                                        
  						<TR><TD>&nbsp;</TD></TR>						<TR><TD>&nbsp;</TD></TR>
  	
  						<TR VALIGN=MIDDLE HEIGHT=25><TD COLSPAN=4 ALIGN=CENTER CLASS=pps_text><INPUT TYPE=SUBMIT VALUE="Login"></TD></TR>												<TR HEIGHT=30 VALIGN=bottom><TD COLSPAN=4 ALIGN=CENTER CLASS=pps_poweredby>By logging in, you agree to our<A ID=privacy_link NAME=privacy_link CLASS=hyperlink REL="noopener noreferrer" TARGET="_blank" HREF="https://www.proofpoint.com/us/privacy-policy"> Privacy Policy</A></TD></TR>				<TR HEIGHT=30 VALIGN=bottom><TD COLSPAN=4 ALIGN=CENTER CLASS=pps_poweredby>Powered by Proofpoint Protection Server</TD></TR>			
  			</TABLE></TD><TD WIDTH=20>&nbsp;</TD></TR>
  			</TABLE>
  	</TD></TR></TABLE>
  	<INPUT TYPE=HIDDEN NAME=allparams ID=allparams VALUE="">
  	<INPUT TYPE=HIDDEN NAME=locale ID=locale VALUE="">
  	<INPUT TYPE=HIDDEN NAME="at" ID="at" VALUE="">
          
          <INPUT TYPE=HIDDEN NAME=account ID=account VALUE="">
          
          <INPUT TYPE=HIDDEN NAME=exec ID=exec VALUE="">
          
          <INPUT TYPE=HIDDEN NAME=cmd ID=cmd VALUE="">
          
          <INPUT TYPE=HIDDEN NAME=msg_id ID=msg_id VALUE="">
          
          <INPUT TYPE=HIDDEN NAME=entry ID=entry VALUE="">
          </FORM>
  </TD></TR></TABLE>
  </BODY>
  </HTML>
  
services.name: https://67.231.155.162:10020/favicon.ico
services.body_hash_sha1: sha1:9fa78972bf55351366b2f25235db7e4e5b9ed6c9
services.supported_versions: HTTP/1.1
[binary data, 21 values, 524 bytes]