Domain > upgrade.flightstatalert.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-10-10	34.196.64.201 (ClassC)
2025-10-14	44.199.53.160 (ClassC)
2025-11-20	3.221.109.62 (ClassC)

HTTP/1.1 200 OKDate: Thu, 20 Nov 2025 12:26:08 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; modeblockX-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originVary: AcceptETag: W/c0623a98220d6586761a01bc71f85279Cache-Control: max-age0, private, must-revalidateX-Request-Id: 040bd7d8-4fb9-43a4-b9f9-9ca818b6a2c6X-Runtime: 0.002293X-Host-Info: lw-prod-us-i-047d94679f90a9622X-Host-Info: ; a5d4beebed48add373d581d47e25764447bea056Server: ThreatSim-Web-ServerAccess-Control-Allow-Origin: *

!DOCTYPE html>html langen>head>	meta charsetUTF-8>	title>Proofpoint Security Awareness Training/title>	meta nameviewport contentwidthdevice-width, initial-scale1>	style>		* {			box-sizing: border-box;			margin: 0;			padding: 0;		}		html { height: 100%; }		body {			background: #F5F5F5;			background: linear-gradient(#DDD,#CCC);			height: 100%;			padding: 100px 0;			display: flex;			flex-direction: column;			justify-content: center;			align-items: center;		}		a { color: #ED8B1E; }		.content {			background: white;			box-shadow: 0 8px 0 -3px rgba(0,0,0,0.2);			font-family: Calibri, Lato, Helvetica, Arial, sans-serif;			font-size: 18px;			line-height: 160%;			margin: 0 auto;			max-width: 800px;			padding: 30px;		}		p { margin-bottom: 20px; }		.logo {			display: flex;			justify-content: center;			margin: 0 auto 30px;		}		.logo-styling {			border-right: 1px solid black;    		padding-right: 5px;			max-height: 40px;    		max-width: 194px;		}		.logo-text-styling {			margin-left: 5px;			text-align: left;			line-height: 1;			font-size: 20px;			font-weight: bold;			color: #333333;		}	/style>	script typetext/javascript>		window.do_not_detect_java   true;		window.tracking_id  infopage;	/script>	script src/assets/ajax/libs/jquery/1.11.0/jquery.min.js>/script>/head>body>	div classcontent>		span classlogo>			img classlogo-styling src/assets/psat_logo.png>			span classlogo-text-styling>Phishingbr>Simulation/span>		/span>		p>Hi! This web site belongs to a hrefhttps://www.proofpoint.com/us>Proofpoint Security Awareness Training/a>. This domain is used to teach employees how to recognize and avoid phishing attacks. This page is here to let you know that this is not a malicious web page. The email that led you here was likely sent by your employer as part of a training program./p>		p>If you have questions, you can contact your employer’s IT help desk. If you still have questions you can contact us at a hrefmailto:wst-support@proofpoint.com>wst-support@proofpoint.com/a>. /p>	/div>/body>script src/assets/all.js?ginfopage>/script>/html>

Port 443

HTTP/1.1 200 OKDate: Thu, 20 Nov 2025 12:26:09 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; modeblockX-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originVary: AcceptETag: W/c0623a98220d6586761a01bc71f85279Cache-Control: max-age0, private, must-revalidateX-Request-Id: c1fef5a6-9af8-433d-a6a5-9f8e1a8c4d98X-Runtime: 0.002078X-Host-Info: lw-prod-us-i-0d023ff16a7338bc8X-Host-Info: ; a5d4beebed48add373d581d47e25764447bea056Server: ThreatSim-Web-ServerAccess-Control-Allow-Origin: *

Subdomains

Date	Domain	IP
swa.flightstatalert.com	2025-09-29	52.6.154.71
upgrade.flightstatalert.com	2025-11-20	3.221.109.62
bonus.flightstatalert.com	2024-01-12	44.214.3.253
southwest.flightstatalert.com	2025-10-11	52.72.230.203
www.flightstatalert.com	2024-11-25	44.217.151.146
didyoutakeaflightrecently.flightstatalert.com	2024-08-06	34.194.202.7

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > upgrade.flightstatalert.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains