WitFoo-Artifact ::: action=block ::: message={"spamScore":0,"phishScore":100,"threatsInfoMap":[{"threatID":"4227b6da3e22986aa2fad3b8d416c2e42064b8a13aaf940e06ad5ef027baad73","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/4227b6da3e22986aa2fad3b8d416c2e42064b8a13aaf940e06ad5ef027baad73","threatTime":"2023-09-14T12:18:22.000Z","threat":"vedgoved.com","campaignID":null,"threatType":"url"}],"messageTime":"2023-09-14T12:22:10.000Z","impostorScore":0,"malwareScore":0,"cluster":"umbrella_hosted","subject":"2023 Budget Spreadsheet Updates","quarantineFolder":"Phish","quarantineRule":"inbound_phish","policyRoutes":["default_inbound","yanroute"],"modulesRun":["av","dkimv","spf","spam","dmarc","pdr","urldefense"],"messageSize":14419,"headerFrom":"Harry Owner <harry@vedgoved.com>","headerReplyTo":"Harry Owner <harry@vedgoved.com>","fromAddress":["harry@vedgoved.com"],"ccAddresses":[],"replyToAddress":["fb42c054aa52cad2a2de29209777d961@vedgoved.com>"],"toAddresses":["shurtik@umbrella.bank"],"xmailer":null,"messageParts":[{"disposition":"inline","sha256":"328fd94edf2a7d0b7dff25ae6811d3bcc30e0aa1238895cf33cc0a59f76f313f","md5":"c62fc829f798f8b3e09b030793fdebe3","filename":"text.html","sandboxStatus":null,"oContentType":"text/html","contentType":"text/html"},{"disposition":"inline","sha256":"b537549dfeb7721209862a2ed66859e63446ca439701d2311a8363933cbd69a5","md5":"e750e89d0be503430be8b2558cb9c6e4","filename":"text.txt","sandboxStatus":null,"oContentType":"text/plain","contentType":"text/plain"}],"completelyRewritten":false,"id":"55a39dd7-834f-8eb6-db32-c20013a238a8","QID":"3t2y8frqgq-1","GUID":"kP5cvlmpEiCt_OS7HS6USt7TEs8KcHY9","sender":"harry@vedgoved.com","recipient":["shurtik@umbrella.bank"],"senderIP":"206.151.121.243","messageID":"<4ukzh3kzv0li.FahGdNhocPki9Yc70ocu7Q2@tracking.vedgoved.com>"} ::: fileHash=<4ukzh3kzv0li.FahGdNhocPki9Yc70ocu7Q2@tracking.vedgoved.com> ::: fileName=from: harry@vedgoved.com subj: 2023 Budget Spreadsheet Updates ::: serverIP=206.151.121.243 ::: emailFrom=harry@vedgoved.com ::: created_at=2023-09-14T12:22:10.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=2023 Budget Spreadsheet Updates ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-09-14T12:22:10.000Z ::: emailSendingServer=206.151.121.243 ::: pipelineEntrypoint=dispatch
{
    "action": "block",
    "emailfrom": "harry@vedgoved.com",
    "emailsendingserver": "15.235.99.139",
    "emailsubject": "2023 Budget Spreadsheet Updates",
    "filehash": "<4ukzh3kzv0li.FahGdNhocPki9Yc70ocu7Q2@tracking.vedgoved.com>",
    "filename": "from: harry@vedgoved.com subj: 2023 Budget Spreadsheet Updates",
    "message": "WitFoo-Artifact ::: action=block ::: message={\"spamScore\":0,\"phishScore\":100,\"threatsInfoMap\":[{\"threatID\":\"4227b6da3e22986aa2fad3b8d416c2e42064b8a13aaf940e06ad5ef027baad73\",\"threatStatus\":\"active\",\"classification\":\"phish\",\"threatUrl\":\"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/4227b6da3e22986aa2fad3b8d416c2e42064b8a13aaf940e06ad5ef027baad73\",\"threatTime\":\"2023-09-14T12:18:22.000Z\",\"threat\":\"vedgoved.com\",\"campaignID\":null,\"threatType\":\"url\"}],\"messageTime\":\"2023-09-14T12:22:10.000Z\",\"impostorScore\":0,\"malwareScore\":0,\"cluster\":\"umbrella_hosted\",\"subject\":\"2023 Budget Spreadsheet Updates\",\"quarantineFolder\":\"Phish\",\"quarantineRule\":\"inbound_phish\",\"policyRoutes\":[\"default_inbound\",\"yanroute\"],\"modulesRun\":[\"av\",\"dkimv\",\"spf\",\"spam\",\"dmarc\",\"pdr\",\"urldefense\"],\"messageSize\":14419,\"headerFrom\":\"Harry Owner <harry@vedgoved.com>\",\"headerReplyTo\":\"Harry Owner <harry@vedgoved.com>\",\"fromAddress\":[\"harry@vedgoved.com\"],\"ccAddresses\":[],\"replyToAddress\":[\"fb42c054aa52cad2a2de29209777d961@vedgoved.com>\"],\"toAddresses\":[\"shurtik@umbrella.bank\"],\"xmailer\":null,\"messageParts\":[{\"disposition\":\"inline\",\"sha256\":\"328fd94edf2a7d0b7dff25ae6811d3bcc30e0aa1238895cf33cc0a59f76f313f\",\"md5\":\"c62fc829f798f8b3e09b030793fdebe3\",\"filename\":\"text.html\",\"sandboxStatus\":null,\"oContentType\":\"text/html\",\"contentType\":\"text/html\"},{\"disposition\":\"inline\",\"sha256\":\"b537549dfeb7721209862a2ed66859e63446ca439701d2311a8363933cbd69a5\",\"md5\":\"e750e89d0be503430be8b2558cb9c6e4\",\"filename\":\"text.txt\",\"sandboxStatus\":null,\"oContentType\":\"text/plain\",\"contentType\":\"text/plain\"}],\"completelyRewritten\":false,\"id\":\"55a39dd7-834f-8eb6-db32-c20013a238a8\",\"QID\":\"3t2y8frqgq-1\",\"GUID\":\"kP5cvlmpEiCt_OS7HS6USt7TEs8KcHY9\",\"sender\":\"harry@vedgoved.com\",\"recipient\":[\"shurtik@umbrella.bank\"],\"senderIP\":\"206.151.121.243\",\"messageID\":\"<4ukzh3kzv0li.FahGdNhocPki9Yc70ocu7Q2@tracking.vedgoved.com>\"} ::: fileHash=<4ukzh3kzv0li.FahGdNhocPki9Yc70ocu7Q2@tracking.vedgoved.com> ::: fileName=from: harry@vedgoved.com subj: 2023 Budget Spreadsheet Updates ::: serverIP=206.151.121.243 ::: emailFrom=harry@vedgoved.com ::: created_at=2023-09-14T12:22:10.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=2023 Budget Spreadsheet Updates ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-09-14T12:22:10.000Z ::: emailSendingServer=206.151.121.243 ::: pipelineEntrypoint=dispatch",
    "messagetype": "email_protection_event",
    "productids": [
        32
    ],
    "senderhost": "kafka.precinct",
    "sensitivity": "normal",
    "severitycode": 2,
    "severitylabel": "critical",
    "sourceinfo": "unknown",
    "starttimeutc": "2023-09-14T12:22:10.000Z",
    "tags": [
        "proofpoint_protect",
        "email_protection_event"
    ],
    "vendorcode": "blocked_message",
    "streamName": "proofpoint_protect",
    "serverIP": "206.151.121.243"
}