WitFoo-Artifact ::: action=block ::: message={"spamScore":100,"phishScore":100,"threatsInfoMap":[{"threatID":"4227b6da3e22986aa2fad3b8d416c2e42064b8a13aaf940e06ad5ef027baad73","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/4227b6da3e22986aa2fad3b8d416c2e42064b8a13aaf940e06ad5ef027baad73","threatTime":"2023-09-14T12:18:22.000Z","threat":"vedgoved.com","campaignID":null,"threatType":"url"}],"messageTime":"2023-09-14T12:40:21.000Z","impostorScore":0,"malwareScore":0,"cluster":"acme_hosted","subject":"2023 Budget Spreadsheet Updates","quarantineFolder":"Phish","quarantineRule":"inbound_phish","policyRoutes":["default_inbound"],"modulesRun":["av","dkimv","spf","spam","dmarc","pdr","urldefense"],"messageSize":14419,"headerFrom":"Harry Owner <harry@vedgoved.com>","headerReplyTo":"Harry Owner <harry@vedgoved.com>","fromAddress":["harry@vedgoved.com"],"ccAddresses":[],"replyToAddress":["fb42c054aa52cad2a2de29209777d961@vedgoved.com>"],"toAddresses":["cruiz@acme.bank"],"xmailer":null,"messageParts":[{"disposition":"inline","sha256":"6246d4c4a6bbe319abd14c1352b717bcdd44a381ef7f7fcb17a8d284f7dfc1a1","md5":"6ab16d12492c31f4f0d67624d65b0453","filename":"text.txt","sandboxStatus":null,"oContentType":"text/plain","contentType":"text/plain"},{"disposition":"inline","sha256":"df71312738141f9890a9328d5be78626806bf49c9b8c7c0e81e31b16526eddaf","md5":"c098fd8936fbd3d7ac4dfda6f6f35d88","filename":"text.html","sandboxStatus":null,"oContentType":"text/html","contentType":"text/html"}],"completelyRewritten":false,"id":"b716cac6-0beb-a009-52f7-dce9e4b15db8","QID":"3t2y8frqnt-1","GUID":"JzcH68YS8VUW4cML9dlyxZqjnChmjbgP","sender":"harry@vedgoved.com","recipient":["cruiz@acme.bank"],"senderIP":"106.89.84.133","messageID":"<4ukzh3kzv0li.kR97SCtUaIKYtSsqIz6_1Q2@tracking.vedgoved.com>"} ::: fileHash=<4ukzh3kzv0li.kR97SCtUaIKYtSsqIz6_1Q2@tracking.vedgoved.com> ::: fileName=from: harry@vedgoved.com subj: 2023 Budget Spreadsheet Updates ::: serverIP=106.89.84.133 ::: emailFrom=harry@vedgoved.com ::: created_at=2023-09-14T12:40:21.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=2023 Budget Spreadsheet Updates ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-09-14T12:40:21.000Z ::: emailSendingServer=106.89.84.133 ::: pipelineEntrypoint=dispatch
{
    "action": "block",
    "emailfrom": "harry@vedgoved.com",
    "emailsendingserver": "15.235.99.139",
    "emailsubject": "2023 Budget Spreadsheet Updates",
    "filehash": "<4ukzh3kzv0li.kR97SCtUaIKYtSsqIz6_1Q2@tracking.vedgoved.com>",
    "filename": "from: harry@vedgoved.com subj: 2023 Budget Spreadsheet Updates",
    "message": "WitFoo-Artifact ::: action=block ::: message={\"spamScore\":100,\"phishScore\":100,\"threatsInfoMap\":[{\"threatID\":\"4227b6da3e22986aa2fad3b8d416c2e42064b8a13aaf940e06ad5ef027baad73\",\"threatStatus\":\"active\",\"classification\":\"phish\",\"threatUrl\":\"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/4227b6da3e22986aa2fad3b8d416c2e42064b8a13aaf940e06ad5ef027baad73\",\"threatTime\":\"2023-09-14T12:18:22.000Z\",\"threat\":\"vedgoved.com\",\"campaignID\":null,\"threatType\":\"url\"}],\"messageTime\":\"2023-09-14T12:40:21.000Z\",\"impostorScore\":0,\"malwareScore\":0,\"cluster\":\"acme_hosted\",\"subject\":\"2023 Budget Spreadsheet Updates\",\"quarantineFolder\":\"Phish\",\"quarantineRule\":\"inbound_phish\",\"policyRoutes\":[\"default_inbound\"],\"modulesRun\":[\"av\",\"dkimv\",\"spf\",\"spam\",\"dmarc\",\"pdr\",\"urldefense\"],\"messageSize\":14419,\"headerFrom\":\"Harry Owner <harry@vedgoved.com>\",\"headerReplyTo\":\"Harry Owner <harry@vedgoved.com>\",\"fromAddress\":[\"harry@vedgoved.com\"],\"ccAddresses\":[],\"replyToAddress\":[\"fb42c054aa52cad2a2de29209777d961@vedgoved.com>\"],\"toAddresses\":[\"cruiz@acme.bank\"],\"xmailer\":null,\"messageParts\":[{\"disposition\":\"inline\",\"sha256\":\"6246d4c4a6bbe319abd14c1352b717bcdd44a381ef7f7fcb17a8d284f7dfc1a1\",\"md5\":\"6ab16d12492c31f4f0d67624d65b0453\",\"filename\":\"text.txt\",\"sandboxStatus\":null,\"oContentType\":\"text/plain\",\"contentType\":\"text/plain\"},{\"disposition\":\"inline\",\"sha256\":\"df71312738141f9890a9328d5be78626806bf49c9b8c7c0e81e31b16526eddaf\",\"md5\":\"c098fd8936fbd3d7ac4dfda6f6f35d88\",\"filename\":\"text.html\",\"sandboxStatus\":null,\"oContentType\":\"text/html\",\"contentType\":\"text/html\"}],\"completelyRewritten\":false,\"id\":\"b716cac6-0beb-a009-52f7-dce9e4b15db8\",\"QID\":\"3t2y8frqnt-1\",\"GUID\":\"JzcH68YS8VUW4cML9dlyxZqjnChmjbgP\",\"sender\":\"harry@vedgoved.com\",\"recipient\":[\"cruiz@acme.bank\"],\"senderIP\":\"106.89.84.133\",\"messageID\":\"<4ukzh3kzv0li.kR97SCtUaIKYtSsqIz6_1Q2@tracking.vedgoved.com>\"} ::: fileHash=<4ukzh3kzv0li.kR97SCtUaIKYtSsqIz6_1Q2@tracking.vedgoved.com> ::: fileName=from: harry@vedgoved.com subj: 2023 Budget Spreadsheet Updates ::: serverIP=106.89.84.133 ::: emailFrom=harry@vedgoved.com ::: created_at=2023-09-14T12:40:21.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=2023 Budget Spreadsheet Updates ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-09-14T12:40:21.000Z ::: emailSendingServer=106.89.84.133 ::: pipelineEntrypoint=dispatch",
    "messagetype": "email_protection_event",
    "productids": [
        32
    ],
    "senderhost": "kafka.precinct",
    "sensitivity": "normal",
    "severitycode": 2,
    "severitylabel": "critical",
    "sourceinfo": "unknown",
    "starttimeutc": "2023-09-14T12:40:21.000Z",
    "tags": [
        "proofpoint_protect",
        "email_protection_event"
    ],
    "vendorcode": "blocked_message",
    "streamName": "proofpoint_protect",
    "serverIP": "106.89.84.133"
}