English

The domain 'us-phishalarm-ewt.proofpoint.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'us-phishalarm-ewt'. The second-level label 'proofpoint' is 10 characters long with four vowels and six consonants. It segments into two words: proof, point. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

html/35/af/35afe0fc-041a-4719-843a-838565a4ddb2.html.gz

application/x-www-form-urlencoded; charset=UTF-8

5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55

1806630d0565b42d29af0a4f3e6b6470f36b5458e59bb8734a599de747f7813c

d3f6b729217587a113334d741e0b7a1b32995179ab15ea08b0fe4f96ecf9a0f5

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

MarkMonitor Inc.

PROOFPOINT.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-USEAST-11


        window.ewtGlobals = {
            traceId: "7278531b-eac3-45fb-9a1b-fab0a9b73c3f",
            workflowUrl: "https://us-phishalarm-ewt.securityeducation.com/api/Workflow/ProcessWorkflow",
            decryptedParams: "?messageId=%3C003501dd0e60%24039785a4%2470eaa8a7%40hciebu%3E&userEmailAddress=martin.yiu%40donnakaran.com.hk&clusterId=giii_hosted&companyId=8840&customerId=a3febac2-46ab-45a8-00g5-a713-298e6118e048",
            brandName: "Report Suspicious",
            viewMessage: ""
        }
        window.phaAppSettings = {
            AppId: "07163d0f-e49c-4dbf-b456-fd51c4b70d20",
            EntraUrl: "https://login.microsoftonline.com/common", // GCC isn't supported yet
            EncryptedState: "CeJ71Q!BlRQ-NP6FG0LlHDt2SjZHfD11Z_EgaCO8dH4FDeUkAxbzMcMriKX36TEbR2hMu9G67k-3xv9jJUrC5gf5xsaclNlNcA$" // This is the EWT params for the landing page to redirect to after M365 auth
        }
        window.m365AuthData = {
            Reporter: "", // from query string or null
            M365AuthFailed: false, // This will be true if M365 auth failed in another page, false otherwise (including empty)
            M365AuthRedirect: false // true for the M365 auth redirect landing page, false otherwise
        }
    

JQuery

Report Suspicious

✅ Low Risk - https://us-phishalarm-ewt.proofpoint.com/EWT/v1/CeJ71Q!BlRQ-NP6FG0LlHDt2SjZHfD11Z_EgaCO8dH4FDeUkAxbzMcMriKX36TEbR2hMu9G67k-3xv9jJUrC5gf5xsaclNlNcA$

Requests	IP Address	Location	AS Autonomous System
4	54.237.79.31Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
3	98.87.118.52Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
7	2	-	-

Security Scan Report: us-phishalarm-ewt.proofpoint.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History