WitFoo-Artifact ::: action=block ::: message={"spamScore":0,"phishScore":100,"threatsInfoMap":[{"threatID":"3e4e6a2e4640691a0007b2a0a24c6ed9a9420f68987bbf6770e8179b8e57a6dc","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/3e4e6a2e4640691a0007b2a0a24c6ed9a9420f68987bbf6770e8179b8e57a6dc","threatTime":"2023-04-11T16:38:23.000Z","threat":"3e4e6a2e4640691a0007b2a0a24c6ed9a9420f68987bbf6770e8179b8e57a6dc","campaignID":null,"threatType":"attoscorpment"}],"messageTime":"2023-04-11T20:37:16.000Z","impostorScore":0,"malwareScore":0,"cluster":"oscorp_hosted","subject":"New Message from KM_C550i For llovins@oscorp.bank ","quarantineFolder":"Attoscorpment Defense","quarantineRule":"threat","policyRoutes":["default_inbound","oscorp_from"],"modulesRun":["access","av","spf","sandbox","spam","dmarc","pdr","urldefense"],"messageSize":1417757,"headerFrom":"Calprivate FreePBX Phone System <llovins@oscorp.bank>","headerReplyTo":null,"fromAddress":["llovins@oscorp.bank"],"ccAddresses":[],"replyToAddress":[],"toAddresses":["llovins@oscorp.bank"],"xmailer":null,"messageParts":[{"disposition":"attoscorped","sha256":"3e4e6a2e4640691a0007b2a0a24c6ed9a9420f68987bbf6770e8179b8e57a6dc","md5":"ffe6af14ac132697a751a7431fd5fda6","filename":" ??km_c550i_04112023.htm.","sandboxStatus":"THREAT","oContentType":"text/html","contentType":"text/html"}],"completelyRewritten":false,"id":"88da4035-17b5-f4d5-d634-70566e27fb06","QID":"3pu6nj1856-1","GUID":"sGFySDxcJ4jgD_zO05JqNsHICvxFJsY3","sender":"llovins@oscorp.bank","recipient":["llovins@oscorp.bank"],"senderIP":"81.246.215.43","messageID":"<b10a2c2e-3a1c-e8a0-4f68-603fbde6ad62@oscorp.bank>"} ::: fileHash=<b10a2c2e-3a1c-e8a0-4f68-603fbde6ad62@oscorp.bank> ::: fileName=from: llovins@oscorp.bank subj: New Message from KM_C550i For llovins@oscorp.bank  ::: serverIP=81.246.215.43 ::: emailFrom=llovins@oscorp.bank ::: created_at=2023-04-11T20:37:16.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=New Message from KM_C550i For llovins@oscorp.bank  ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-04-11T20:37:16.000Z ::: emailSendingServer=81.246.215.43 ::: pipelineEntrypoint=dispatch
Product: Protect
Vendor: ProofPoint