WitFoo-Artifact ::: fqdn=packagefees.info ::: action=BLOCKED ::: message={"originId":410612426,"originType":"AD Users","internalIp":"101.240.203.174","externalIp":"211.78.35.125","categories":["Malware","Phishing"],"tags":[],"destination":"packagefees.info","originLabel":"nighthawk","actionTaken":"BLOCKED","datetime":"2023-04-10T15:30:47.000Z"} ::: clientIP=101.240.203.174 ::: serverIP=211.78.35.125 ::: userName=nighthawk ::: created_at=2023-04-10T15:30:47.000Z ::: streamName=OpenDNS Detection ::: vendorCode=MalwarePhishing ::: messageType=firewall_action ::: pipelineName=OpenDNS Detection ::: severityCode=2 ::: startTimeUTC=2023-04-10T15:30:47.000Z ::: serverHostname=packagefees.info ::: pipelineEntrypoint=dispatch
Product: Umbrella
Vendor: Cisco