English

Within the commercial generic top-level domain (.com), 'us-phishalarm-ewt.proofpoint.com' is registered, featuring subdomain 'us-phishalarm-ewt'. Its registrable label 'proofpoint' stretches across 10 characters with 4 vowels and six consonants. Word splitting yields two words: proof, point. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

application/x-www-form-urlencoded; charset=UTF-8

5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55

1806630d0565b42d29af0a4f3e6b6470f36b5458e59bb8734a599de747f7813c

12d38d9e3bfba166f4bc77d30a650473599dca2594b2f8608adf4ca2ce0308d3

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

MarkMonitor Inc.

PROOFPOINT.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Data Services Northern Virginia

Amazon EC2 Network Operations

AMAZON-IAD


        window.ewtGlobals = {
            traceId: "5d6f8dd1-b3b0-48bd-98ea-2956614ee4a7",
            workflowUrl: "https://us-phishalarm-ewt.securityeducation.com/api/Workflow/ProcessWorkflow",
            decryptedParams: "?messageId=%3C6F24135907586E4D06317B257A4C6F24%4072GL4YRH0%3E&userEmailAddress=esther.chan%40donnakaran.com.hk&clusterId=giii_hosted&companyId=8840&customerId=a3febac2-46ab-45a8-00g5-a713-298e6118e048",
            brandName: "Report Suspicious",
            viewMessage: ""
        }
        window.phaAppSettings = {
            AppId: "07163d0f-e49c-4dbf-b456-fd51c4b70d20",
            EntraUrl: "https://login.microsoftonline.com/common", // GCC isn't supported yet
            EncryptedState: "CeJ71Q!BzRQNhPaNE1Bv9DnmUnbU5xKCMi0jgEds2Yyamns9mKl4va__35a7LIxAJL8pqd06MBWWCdpDp1il-qUwcsGD--RNgAqr8zRig$" // This is the EWT params for the landing page to redirect to after M365 auth
        }
        window.m365AuthData = {
            Reporter: "", // from query string or null
            M365AuthFailed: false, // This will be true if M365 auth failed in another page, false otherwise (including empty)
            M365AuthRedirect: false // true for the M365 auth redirect landing page, false otherwise
        }
    

JQuery

Report Suspicious

✅ Low Risk - https://us-phishalarm-ewt.proofpoint.com/EWT/v1/CeJ71Q!BzRQNhPaNE1Bv9DnmUnbU5xKCMi0jgEds2Yyamns9mKl4va__35a7LIxAJL8pqd06MBWWCdpDp1il-qUwcsGD--RNgAqr8zRig$

Requests	IP Address	Location	AS Autonomous System
4	98.87.118.52Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
3	54.237.79.31Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
7	2	-	-

Security Scan Report: us-phishalarm-ewt.proofpoint.com

Summary

AI Security Verdict

Not Assessed

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History