WitFoo-Artifact ::: action=block ::: message={"spamScore":100,"phishScore":100,"threatsInfoMap":[{"threatID":"f80add900f55706c26f794cfdcc5306b9134850e687a71ed86302345eceada0b","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/f80add900f55706c26f794cfdcc5306b9134850e687a71ed86302345eceada0b","threatTime":"2023-12-25T07:47:00.000Z","threat":"http://ssl.yxjs.work/","campaignID":null,"threatType":"url"},{"threatID":"59959f50aab80c0a0d3c6372aeda327805c3bbc7ab98ccde44321b1c2eabc86a","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/59959f50aab80c0a0d3c6372aeda327805c3bbc7ab98ccde44321b1c2eabc86a","threatTime":"2023-12-12T22:43:47.000Z","threat":"https://ssl.yxjs.work","campaignID":null,"threatType":"url"},{"threatID":"fdbe19d6886c27ded090f2ca7c655787d71f5e0e1961134ad60e654a1a612e45","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/fdbe19d6886c27ded090f2ca7c655787d71f5e0e1961134ad60e654a1a612e45","threatTime":"2023-12-25T07:45:57.000Z","threat":"ssl.yxjs.work/","campaignID":null,"threatType":"url"},{"threatID":"6f93ff23d16f269e42fa9474baa3900819b99d78ae1ccfcec2ecc8a93d1d0919","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/6f93ff23d16f269e42fa9474baa3900819b99d78ae1ccfcec2ecc8a93d1d0919","threatTime":"2023-12-12T22:45:30.000Z","threat":"yxjs.work","campaignID":null,"threatType":"url"},{"threatID":"17dc447493c748dd75c402cb97286f09145ad05bfec523fc3ce7ab59380c8e43","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/17dc447493c748dd75c402cb97286f09145ad05bfec523fc3ce7ab59380c8e43","threatTime":"2023-12-14T11:01:38.000Z","threat":"https://ssl.yxjs.work/","campaignID":null,"threatType":"url"}],"messageTime":"2023-12-16T05:05:11.000Z","impostorScore":0,"malwareScore":0,"cluster":"umbrella_hosted","subject":"尊敬的pbcapital.com用户","quarantineFolder":"Phish","quarantineRule":"inbound_phish","policyRoutes":["default_inbound","umbrella_from"],"modulesRun":["access","av","dkimv","spf","spam","dmarc","pdr","urldefense"],"messageSize":11705,"headerFrom":"<gsdpnojlrgmh@ruwvh.pbcapital.com>","headerReplyTo":null,"fromAddress":["gsdpnojlrgmh@ruwvh.pbcapital.com"],"ccAddresses":[],"replyToAddress":[],"toAddresses":["tsam@pbcapital.com"],"xmailer":"Iwern Ftcipssigt 11.0","messageParts":[{"disposition":"inline","sha256":"1b538190ad79e28d716dacd90f7d2f490a5dba15597e3f2151ed952d8d45e23c","md5":"623bfecc0cde1937b9e8c9fed54de7c5","filename":"text.html","sandboxStatus":null,"oContentType":"text/html","contentType":"text/html"}],"completelyRewritten":false,"id":"4a745b21-ab96-1b6e-e2c3-c07a35ef942d","QID":"3v14wg007w-1","GUID":"VOzCNoLOiX-nEXYo31_IJfExbzV1-j4P","sender":"gsdpnojlrgmh@ruwvh.pbcapital.com","recipient":["tsam@pbcapital.com"],"senderIP":"77.35.2.87","messageID":"<b27ac7b14450cb6b14fb779b197786a3@ruwvh.pbcapital.com>"} ::: fileHash=<b27ac7b14450cb6b14fb779b197786a3@ruwvh.pbcapital.com> ::: fileName=from: gsdpnojlrgmh@ruwvh.pbcapital.com subj: 尊敬的pbcapital.com用户 ::: serverIP=77.35.2.87 ::: emailFrom=gsdpnojlrgmh@ruwvh.pbcapital.com ::: created_at=2023-12-16T05:05:11.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=尊敬的pbcapital.com用户 ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-12-16T05:05:11.000Z ::: emailSendingServer=77.35.2.87 ::: pipelineEntrypoint=dispatch
Product: Protect
Vendor: ProofPoint