whois.handle: PROOFPOINT-NET-NORTH-AMERICA
whois.name: Proofpoint, Inc.
whois.cidrs: 148.163.128.0/19
whois.created: 2014-06-13T00:00:00.000000
whois.updated: 2020-05-29T00:00:00.000000
whois.allocation_type: ALLOCATION
whois.handle: PROOF
whois.name: Proofpoint, Inc.
whois.street: 925 W Maude Ave
whois.city: Sunnyvale
whois.state: CA
whois.postal_code: 94085
whois.country: US
whois.handle: PAA19-ARIN
whois.name: Proofpoint ARIN Abuse
whois.email: abuse@proofpoint.com
whois.handle: NETWO2061-ARIN
whois.name: Network Operations
whois.email: arin-management@proofpoint.com
whois.handle: NETWO2061-ARIN
whois.name: Network Operations
whois.email: arin-management@proofpoint.com
services.protocol: SMTP
services.transport_protocol: TCP
services.scan_time: 2025-07-28T08:26:20.790057
services.banner: 554 Blocked - see https://ipcheck.proofpoint.com/?ip=206.168.34.44
  
services.value: email
services.banner: 554 Blocked - see https://ipcheck.proofpoint.com/?ip=206.168.34.44
  
services.ehlo: 250-mx0a-00019b01.pphosted.com Hello unused-space.coop.net [206.168.34.44] (may be forged), pleased to meet you
  250 ENHANCEDSTATUSCODES
  
services.start_tls: 500 5.5.1 Command unrecognized: "STARTTLS"
  
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T23:31:41.647510
services.banner: HTTP/1.1 403 Forbidden
  Date:  <REDACTED>
  Server:  
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  Last-Modified: Fri, 11 Apr 2025 19:47:44 GMT
  ETag: "898-63285f9d83800"
  Accept-Ranges: bytes
  Content-Length: 2200
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  X-Content-Type-Options: nosniff
  Expect-CT: max-age=86400, enforce
  Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'
  Content-Type: text/html; charset=UTF-8
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.ja4s: t120300_c030_bec8bdbaef8a
services.names: securemail.semtribe.com www.securemail.semtribe.com
services.issuer_dn: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com\, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
services.common_name: Go Daddy Secure Certificate Authority - G2
services.country: US
services.locality: Scottsdale
services.province: Arizona
services.organization: GoDaddy.com, Inc.
services.organizational_unit: http://certs.godaddy.com/repository/
services.subject_dn: CN=securemail.semtribe.com
services.common_name: securemail.semtribe.com
services.scan_time: 2025-07-23T04:14:55.017444
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T23:31:41.647510
services.uri: https://148.163.134.52/
services.protocol: HTTP/1.1
services.status_reason: Forbidden
services.key: Server
services.key: Accept-Ranges
services.headers: bytes
services.key: Strict-Transport-Security
services.headers: max-age=31536000; includeSubDomains
services.key: X-Frame-Options
services.headers: SAMEORIGIN
services.key: X-XSS-Protection
services.headers: 1; mode=block
services.key: Content-Length
services.headers: 2200
services.key: Content-Security-Policy
services.headers: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'
services.key: X-Content-Type-Options
services.headers: nosniff
services.key: Content-Type
services.headers: text/html; charset=UTF-8
services.key: Date
services.headers: <REDACTED>
services.key: ETag
services.headers: "898-63285f9d83800"
services.key: Expect-CT
services.headers: max-age=86400, enforce
services.key: Last-Modified
services.headers: Fri, 11 Apr 2025 19:47:44 GMT
services.html_tags: <title>Forbidden</title>
services.body: <!DOCTYPE html>
  <html>
  	<!--
  	  Copyright (c) 2004-2025 by Proofpoint, Inc.  All Rights Reserved.
  
  	  See the file COPYRIGHT for details on copyright notices for
  	  licensed components used in this product.
  
  	  See the file src/opensource/OPENSOURCE for details on copyright notices
  	  required by Open Source components used in this product.
  
  	  Proofpoint, Proofpoint Protection Server, MLX Engine, and the Proofpoint
  	  logos are trademarks or registered trademarks of Proofpoint, Inc.
  	-->
  	<head>
  		<!-- Note:  this html page need to be at least 512 byte for IE to display its content. -->
  		<title>Forbidden</title>
  		<style type="text/css"><!--
  		body
  		{
  			background-color: #F2F2F2;
  			font-family: Lucida Grande, Arial, Helvetica, sans-serif;
  			font-size: 8pt;
  		}
  		div.outerMessageBoxFrame
  		{
  			background-color: #FFFFFF;
  			border-color: #CCCCCC;
  			border-style: solid;
  			border-width: 1px;
  			padding: 1px;
  			margin-top: 100px;
  			margin-left: 100px;
  			margin-right: 100px;
  		}
  		div.messageTitleBar
  		{
  			background-color: #EEEEEE;
  			color: #333333;
  			font-size: 12pt;
  			font-weight: bold;
  			padding-left: 1em;
  			padding-top: 0.5ex;
  			padding-bottom: 0.5ex;
  		}
  		div.messageContentArea
  		{
  			padding-top: 5ex;
  			padding-bottom: 5ex;
  			padding-left: 1.5em;
  			padding-right: 1.5em;
  		}
  		div.htmlErrorMessageArea
  		{
  			margin-left: 1.5em;
  			margin-right: 1.5em;
  			padding-top: 0.5ex;
  			padding-bottom: 0.5ex;
  			text-align: right;
  			border-top-width: 1px;
  			border-top-style: solid;
  			border-top-color: #CCCCCC;
  		}
  		span.htmlErrorMessage
  		{
  			color: #CCCCCC;
  		}
  		div.copyrightStatementArea
  		{
  			color:rgba(0, 0, 0, 0.5);
  			text-align: center;
  		}
  		-->
  		</style>
  	</head>
  	<body>
  		<div class="outerMessageBoxFrame">
  			<div class="messageTitleBar">
  				Forbidden
  			</div>
  			<div class="messageContentArea">
  				<p>
  					You do not have permission to access this page.
  				</p>
  			</div>
  			<div class="htmlErrorMessageArea">
  				<span class="htmlErrorMessage">
  					HTTP Error 403
  				</span>
  			</div>
  		</div>
  		<div class="copyrightStatementArea">
  			Copyright &copy; 2009-2025 Proofpoint, Inc.  All rights reserved.
  		</div>
  	</body>
  </html>
  
  
services.body_hash_sha1: sha1:8a75f885d6b07efd2069008ddd9b0af9851ae4ba
services.supported_versions: HTTP/1.1
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T10:10:47.331240
services.banner: HTTP/1.1 302 Found
  Date:  <REDACTED>
  Server:  
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  Location: https://148.163.134.52:10000/admin
  Cache-Control: max-age=0
  Expires: Sun, 27 Jul 2025 10:11:00 GMT
  Content-Length: 218
  Content-Type: text/html; charset=iso-8859-1
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.fingerprint_sha256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
services.subject_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.issuer_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.fingerprint_sha256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.subject_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.ja4s: t120300_c030_bec8bdbaef8a
services.version: TLSv1_2
services.ja4s: t120300_c030_bec8bdbaef8a
services.names: *.gslb.pphosted.com *.pphosted.com pphosted.com
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.common_name: Sectigo RSA Organization Validation Secure Server CA
services.country: GB
services.locality: Salford
services.province: Greater Manchester
services.organization: Sectigo Limited
services.subject_dn: C=US, ST=California, O=Proofpoint\, Inc., CN=*.pphosted.com
services.common_name: *.pphosted.com
services.country: US
services.province: California
services.organization: Proofpoint, Inc.
services.scan_time: 2025-07-15T23:35:22.725322
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T10:10:47.331240
services.uri: https://148.163.134.52:10000/
services.protocol: HTTP/1.1
services.status_reason: Found
services.key: Location
services.headers: https://148.163.134.52:10000/admin
services.key: Server
services.key: Strict-Transport-Security
services.headers: max-age=31536000; includeSubDomains
services.key: Expires
services.headers: Sun, 27 Jul 2025 10:11:00 GMT
services.key: Content-Length
services.headers: 218
services.key: Cache-Control
services.headers: max-age=0
services.key: Content-Type
services.headers: text/html; charset=iso-8859-1
services.key: Date
services.headers: <REDACTED>
services.html_tags: <title>302 Found</title>
services.body: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
  <html><head>
  <title>302 Found</title>
  </head><body>
  <h1>Found</h1>
  <p>The document has moved <a href="https://148.163.134.52:10000/admin">here</a>.</p>
  </body></html>
  
services.body_hash_sha1: sha1:6d79b4ccc97b729c8ccc9f2a10901a96f3d07d25
services.supported_versions: HTTP/1.1
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T18:08:07.991765
services.banner: HTTP/1.1 302 Found
  Date:  <REDACTED>
  Server:  
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  Set-Cookie: ppsquerystring=;path=/; domain=.148.163.134.52;Secure;SameSite=None;HttpOnly;expires=Sat, 01-Jan-2000 00:00:00 GMT
  Set-Cookie: sid_saml=ADMf5bdf75f970832b8363f9af468c446649c05074265cb4ecf4ce0fed9411e96bf;path=/; domain=.148.163.134.52;Secure;SameSite=None;HttpOnly
  Set-Cookie: pps_magic=Po7OADG4TsNIsPcyr9jP19ZqweR39y1lyJPiReYjjrk;path=/; domain=.148.163.134.52;Secure;SameSite=None
  Location: https://148.163.134.52:10001/admin
  Cache-Control: max-age=0
  Expires: Sun, 27 Jul 2025 18:08:16 GMT
  Content-Length: 218
  Content-Type: text/html; charset=iso-8859-1
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.fingerprint_sha256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
services.subject_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.issuer_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.fingerprint_sha256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.subject_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.ja4s: t120300_c030_bec8bdbaef8a
services.version: TLSv1_2
services.ja4s: t120300_c030_bec8bdbaef8a
services.names: *.gslb.pphosted.com *.pphosted.com pphosted.com
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.common_name: Sectigo RSA Organization Validation Secure Server CA
services.country: GB
services.locality: Salford
services.province: Greater Manchester
services.organization: Sectigo Limited
services.subject_dn: C=US, ST=California, O=Proofpoint\, Inc., CN=*.pphosted.com
services.common_name: *.pphosted.com
services.country: US
services.province: California
services.organization: Proofpoint, Inc.
services.scan_time: 2025-07-26T22:45:05.716220
services.path: /admin
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T18:08:07.991765
services.uri: https://148.163.134.52:10001/admin
services.protocol: HTTP/1.1
services.status_reason: Found
services.key: Location
services.headers: https://148.163.134.52:10001/admin
services.key: Server
services.key: Strict-Transport-Security
services.headers: max-age=31536000; includeSubDomains
services.key: Expires
services.headers: Sun, 27 Jul 2025 18:08:16 GMT
services.key: Content-Length
services.headers: 218
services.key: Cache-Control
services.headers: max-age=0
services.key: Content-Type
services.headers: text/html; charset=iso-8859-1
services.key: Date
services.headers: <REDACTED>
services.key: Set-Cookie
services.headers: ppsquerystring=;path=/; domain=.148.163.134.52;Secure;SameSite=None;HttpOnly;expires=Sat, 01-Jan-2000 00:00:00 GMT sid_saml=ADMf5bdf75f970832b8363f9af468c446649c05074265cb4ecf4ce0fed9411e96bf;path=/; domain=.148.163.134.52;Secure;SameSite=None;HttpOnly pps_magic=Po7OADG4TsNIsPcyr9jP19ZqweR39y1lyJPiReYjjrk;path=/; domain=.148.163.134.52;Secure;SameSite=None
services.html_tags: <title>302 Found</title>
services.body: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
  <html><head>
  <title>302 Found</title>
  </head><body>
  <h1>Found</h1>
  <p>The document has moved <a href="https://148.163.134.52:10001/admin">here</a>.</p>
  </body></html>
  
services.body_hash_sha1: sha1:3c2228ce12ab2050c6ab392536a6ec4885a9a61c
services.supported_versions: HTTP/1.1
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-28T08:52:25.276555
services.banner: HTTP/1.1 301 Moved Permanently
  Date:  <REDACTED>
  Server:  
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  Location: https://00019b01.pphosted.com:10020/v1/samlauth?ret=https://00019b01.pphosted.com:10020/euweb/login
  Cache-Control: max-age=0
  Expires: Mon, 28 Jul 2025 08:52:26 GMT
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  X-Content-Type-Options: nosniff
  Expect-CT: max-age=86400, enforce
  Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'
  Content-Length: 0
  Content-Type: text/plain; charset=UTF-8
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.fingerprint_sha256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
services.subject_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.issuer_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.fingerprint_sha256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.subject_dn: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.ja4s: t120300_c030_bec8bdbaef8a
services.version: TLSv1_2
services.ja4s: t120300_c030_bec8bdbaef8a
services.names: *.gslb.pphosted.com *.pphosted.com pphosted.com
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
services.common_name: Sectigo RSA Organization Validation Secure Server CA
services.country: GB
services.locality: Salford
services.province: Greater Manchester
services.organization: Sectigo Limited
services.subject_dn: C=US, ST=California, O=Proofpoint\, Inc., CN=*.pphosted.com
services.common_name: *.pphosted.com
services.country: US
services.province: California
services.organization: Proofpoint, Inc.
services.scan_time: 2025-07-27T13:11:38.898793
services.path: /euweb/login
services.endpoint_type: HTTP
services.scan_time: 2025-07-28T08:52:25.276555
services.uri: https://148.163.134.52:10020/euweb/login
services.protocol: HTTP/1.1
services.status_reason: Moved Permanently
services.key: Location
services.headers: https://00019b01.pphosted.com:10020/v1/samlauth?ret=https://00019b01.pphosted.com:10020/euweb/login
services.key: Expect-CT
services.headers: max-age=86400, enforce
services.key: Server
services.key: Strict-Transport-Security
services.headers: max-age=31536000; includeSubDomains
services.key: X-Frame-Options
services.headers: SAMEORIGIN
services.key: Content-Length
services.headers: 0
services.key: X-Content-Type-Options
services.headers: nosniff
services.key: Content-Type
services.headers: text/plain; charset=UTF-8
services.key: Date
services.headers: <REDACTED>
services.key: X-XSS-Protection
services.headers: 1; mode=block
services.key: Expires
services.headers: Mon, 28 Jul 2025 08:52:26 GMT
services.key: Cache-Control
services.headers: max-age=0
services.key: Content-Security-Policy
services.headers: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'
services.supported_versions: HTTP/1.1
[binary data, 35 values, 872 bytes]