WitFoo-Artifact ::: action=block ::: message={"spamScore":0,"phishScore":0,"threatsInfoMap":[{"threatID":"e91cc0e3b9d16b0434e32e7480ee0ff37ef568b79c96955b096294d5f71da7a7","threatStatus":"active","classification":"toad","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/e91cc0e3b9d16b0434e32e7480ee0ff37ef568b79c96955b096294d5f71da7a7","threatTime":"2023-01-25T14:07:08.000Z","threat":"tansydoms2389@gmail.com:p05kd7wEBW2XnHRMJxiW5dog_t28arr1","campaignID":null,"threatType":"messageText"}],"messageTime":"2023-01-25T14:07:07.000Z","impostorScore":0,"malwareScore":100,"cluster":"umbrella_hosted","subject":"Automatic renewal of your Geek Account occurs.","quarantineFolder":"Malware","quarantineRule":"inbound_malware","policyRoutes":["default_inbound"],"modulesRun":["av","zerohour","dkimv","spf","spam","dmarc","pdr","urldefense"],"messageSize":2012422,"headerFrom":"tansy doms <tansydoms2389@gmail.com>","headerReplyTo":null,"fromAddress":["tansydoms2389@gmail.com"],"ccAddresses":[],"replyToAddress":[],"toAddresses":[],"xmailer":null,"messageParts":[{"disposition":"inline","sha256":"c1044a967553ff6f89ed92b9e7523f361787514e64ab89fd0e2a9e6b4cff848b","md5":"65e99838f0f2c132d25520682cf7a357","filename":"text.txt","sandboxStatus":null,"oContentType":"text/plain","contentType":"text/plain"},{"disposition":"attumbrellaed","sha256":"c658fc99cc48198b66110acebf0911485016b4a29267133191170477f8cbe2f1","md5":"2f26f5e31b609b11a0339fb34afb4e80","filename":"billing invoice details.jpg","sandboxStatus":null,"oContentType":"image/jpeg","contentType":"image/jpeg"},{"disposition":"inline","sha256":"9d26f671d09456e9da1bea2640e8ff963a24b2ea0e2f2aa872cc8c6477b0ee91","md5":"e45e0e9fb03f921077021da700e8261d","filename":"text.html","sandboxStatus":null,"oContentType":"text/html","contentType":"text/html"}],"completelyRewritten":false,"id":"a1eb162c-66b9-7f0c-48b9-c82d835fcc5b","QID":"3n8csyh9bw-1","GUID":"p05kd7wEBW2XnHRMJxiW5dog_t28arr1","sender":"tansydoms2389@gmail.com","recipient":["pcifelli@umbrella.bank"],"senderIP":"132.67.35.27","messageID":"<CAGB_Tti508US5hw-1D2S1aaXppg_G2rp4S_agx2HOpWVVt4R1g@mail.gmail.com>"} ::: fileHash=<CAGB_Tti508US5hw-1D2S1aaXppg_G2rp4S_agx2HOpWVVt4R1g@mail.gmail.com> ::: fileName=from: tansydoms2389@gmail.com subj: Automatic renewal of your Geek Account occurs. ::: serverIP=132.67.35.27 ::: emailFrom=tansydoms2389@gmail.com ::: created_at=2023-01-25T14:07:07.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=Automatic renewal of your Geek Account occurs. ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-01-25T14:07:07.000Z ::: emailSendingServer=132.67.35.27 ::: pipelineEntrypoint=dispatch
Product: Protect
Vendor: ProofPoint