WitFoo-Artifact ::: action=block ::: message={"spamScore":100,"phishScore":100,"threatsInfoMap":[{"threatID":"9e02c281448414c9d938d07e68e7b5d006c0bcf96f06485ab481b167a36c19cb","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/9e02c281448414c9d938d07e68e7b5d006c0bcf96f06485ab481b167a36c19cb","threatTime":"2023-11-30T07:41:27.000Z","threat":"cloudflare-ipfs.com/ipfs/bafkreiabbo6sj3rd6t5bpez56drw4ugp5pcycr6uxc7gdzr3s6k4hfg7gm","campaignID":null,"threatType":"url"}],"messageTime":"2023-11-30T18:38:20.000Z","impostorScore":0,"malwareScore":0,"cluster":"oscorp_hosted","subject":"oscorp.bank VoiceMail Notification To rsujeeth","quarantineFolder":"Phish","quarantineRule":"inbound_phish","policyRoutes":["default_inbound","oscorp_from","yanroute"],"modulesRun":["access","av","spf","spam","dmarc","pdr","urldefense"],"messageSize":4726,"headerFrom":"oscorp.bank VoiceMail<rsujeeth@oscorp.bank>","headerReplyTo":null,"fromAddress":["rsujeeth@oscorp.bank"],"ccAddresses":[],"replyToAddress":[],"toAddresses":["rsujeeth@oscorp.bank"],"xmailer":null,"messageParts":[{"disposition":"inline","sha256":"141a3479887cddc02ac9b365ea4219df145ac53f09e9da98b5353fa77336d9d6","md5":"0aa8679179dd7b7a5b2618236e973c64","filename":"text.html","sandboxStatus":null,"oContentType":"text/html","contentType":"text/html"}],"completelyRewritten":false,"id":"15d2e057-1e7a-4025-52e7-1f09a67173aa","QID":"3unvwk8rc4-1","GUID":"6MUhwVkx6uLlKVvoQSUaMhb5WVi83LA-","sender":"rsujeeth@oscorp.bank","recipient":["rsujeeth@oscorp.bank"],"senderIP":"8.81.18.111","messageID":"<20231130183733.584B6D8B3DB3AD5E@oscorp.bank>"} ::: fileHash=<20231130183733.584B6D8B3DB3AD5E@oscorp.bank> ::: fileName=from: rsujeeth@oscorp.bank subj: oscorp.bank VoiceMail Notification To rsujeeth ::: serverIP=8.81.18.111 ::: emailFrom=rsujeeth@oscorp.bank ::: created_at=2023-11-30T18:38:20.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=oscorp.bank VoiceMail Notification To rsujeeth ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-11-30T18:38:20.000Z ::: emailSendingServer=8.81.18.111 ::: pipelineEntrypoint=dispatch
{
    "action": "block",
    "emailfrom": "rsujeeth@calprivate.bank",
    "emailsendingserver": "106.75.169.6",
    "emailsubject": "calprivate.bank VoiceMail Notification To rsujeeth",
    "filehash": "<20231130183733.584B6D8B3DB3AD5E@calprivate.bank>",
    "filename": "from: rsujeeth@calprivate.bank subj: calprivate.bank VoiceMail Notification To rsujeeth",
    "message": "WitFoo-Artifact ::: action=block ::: message={\"spamScore\":100,\"phishScore\":100,\"threatsInfoMap\":[{\"threatID\":\"9e02c281448414c9d938d07e68e7b5d006c0bcf96f06485ab481b167a36c19cb\",\"threatStatus\":\"active\",\"classification\":\"phish\",\"threatUrl\":\"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/9e02c281448414c9d938d07e68e7b5d006c0bcf96f06485ab481b167a36c19cb\",\"threatTime\":\"2023-11-30T07:41:27.000Z\",\"threat\":\"cloudflare-ipfs.com/ipfs/bafkreiabbo6sj3rd6t5bpez56drw4ugp5pcycr6uxc7gdzr3s6k4hfg7gm\",\"campaignID\":null,\"threatType\":\"url\"}],\"messageTime\":\"2023-11-30T18:38:20.000Z\",\"impostorScore\":0,\"malwareScore\":0,\"cluster\":\"oscorp_hosted\",\"subject\":\"oscorp.bank VoiceMail Notification To rsujeeth\",\"quarantineFolder\":\"Phish\",\"quarantineRule\":\"inbound_phish\",\"policyRoutes\":[\"default_inbound\",\"oscorp_from\",\"yanroute\"],\"modulesRun\":[\"access\",\"av\",\"spf\",\"spam\",\"dmarc\",\"pdr\",\"urldefense\"],\"messageSize\":4726,\"headerFrom\":\"oscorp.bank VoiceMail<rsujeeth@oscorp.bank>\",\"headerReplyTo\":null,\"fromAddress\":[\"rsujeeth@oscorp.bank\"],\"ccAddresses\":[],\"replyToAddress\":[],\"toAddresses\":[\"rsujeeth@oscorp.bank\"],\"xmailer\":null,\"messageParts\":[{\"disposition\":\"inline\",\"sha256\":\"141a3479887cddc02ac9b365ea4219df145ac53f09e9da98b5353fa77336d9d6\",\"md5\":\"0aa8679179dd7b7a5b2618236e973c64\",\"filename\":\"text.html\",\"sandboxStatus\":null,\"oContentType\":\"text/html\",\"contentType\":\"text/html\"}],\"completelyRewritten\":false,\"id\":\"15d2e057-1e7a-4025-52e7-1f09a67173aa\",\"QID\":\"3unvwk8rc4-1\",\"GUID\":\"6MUhwVkx6uLlKVvoQSUaMhb5WVi83LA-\",\"sender\":\"rsujeeth@oscorp.bank\",\"recipient\":[\"rsujeeth@oscorp.bank\"],\"senderIP\":\"8.81.18.111\",\"messageID\":\"<20231130183733.584B6D8B3DB3AD5E@oscorp.bank>\"} ::: fileHash=<20231130183733.584B6D8B3DB3AD5E@oscorp.bank> ::: fileName=from: rsujeeth@oscorp.bank subj: oscorp.bank VoiceMail Notification To rsujeeth ::: serverIP=8.81.18.111 ::: emailFrom=rsujeeth@oscorp.bank ::: created_at=2023-11-30T18:38:20.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=oscorp.bank VoiceMail Notification To rsujeeth ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-11-30T18:38:20.000Z ::: emailSendingServer=8.81.18.111 ::: pipelineEntrypoint=dispatch",
    "messagetype": "email_protection_event",
    "productids": [
        32
    ],
    "senderhost": "kafka.precinct",
    "sensitivity": "normal",
    "severitycode": 2,
    "severitylabel": "critical",
    "sourceinfo": "unknown",
    "starttimeutc": "2023-11-30T18:38:20.000Z",
    "tags": [
        "proofpoint_protect",
        "email_protection_event"
    ],
    "vendorcode": "blocked_message",
    "streamName": "proofpoint_protect",
    "serverIP": "8.81.18.111"
}