WitFoo-Artifact ::: action=block ::: message={"spamScore":0,"phishScore":100,"threatsInfoMap":[{"threatID":"e852dc28c88004993758775a565b583d5bea8163daf55ce57c25e7c06463a522","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/e852dc28c88004993758775a565b583d5bea8163daf55ce57c25e7c06463a522","threatTime":"2023-10-03T00:59:19.000Z","threat":"https://tracker.club-os.com/campaign/click?msgId=&test=true&target=https://helloupstatesc.com/wp-imagee/authh/1xubze/bXZpY3RvcmlhQGNhbHByaXZhdGUuYmFuaw==/bXZpY3RvcmlhQGNhbHByaXZhdGUuYmFuaw==","campaignID":null,"threatType":"url"},{"threatID":"99e847f90fea9b8e6ca245744e9fcc068fdae5b08a190343fd1c4667de17ac49","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/99e847f90fea9b8e6ca245744e9fcc068fdae5b08a190343fd1c4667de17ac49","threatTime":"2023-10-03T00:59:24.000Z","threat":"https://tracker.club-os.com/campaign/click?msgId=&test=true&target=https://highlandnoodles.net/wp-to/terrace/nqc4c2/bXZpY3RvcmlhQGNhbHByaXZhdGUuYmFuaw==/bXZpY3RvcmlhQGNhbHByaXZhdGUuYmFuaw==","campaignID":null,"threatType":"url"}],"messageTime":"2023-10-03T00:58:13.000Z","impostorScore":0,"malwareScore":0,"cluster":"acme_hosted","subject":"Important mvictoria Notification Monday, October 2, 2023 ❗️","quarantineFolder":"Phish","quarantineRule":"inbound_phish","policyRoutes":["default_inbound","allow_relay"],"modulesRun":["av","spf","spam","dmarc","urldefense"],"messageSize":17759,"headerFrom":"\"Notification Request|Calprivate\" <jay@stitchfab.com>","headerReplyTo":null,"fromAddress":["jay@stitchfab.com"],"ccAddresses":[],"replyToAddress":[],"toAddresses":["mvictoria@acme.bank"],"xmailer":null,"messageParts":[{"disposition":"inline","sha256":"ca4f3c27f44c3b16c0d65ef3591842d889ea85e0280090ff109fb314623a3153","md5":"195715b6fdb2322d970ce5facb50ef44","filename":"text.txt","sandboxStatus":null,"oContentType":"text/html","contentType":"text/html"},{"disposition":"inline","sha256":"3562d84388f2af69c05fd326ea09e794690be48d4854ab95d5fc7ccecf354208","md5":"ae59aa38de24836a8f26433f68f6116c","filename":"text.html","sandboxStatus":null,"oContentType":"text/html","contentType":"text/html"}],"completelyRewritten":false,"id":"3d0c304e-d8fd-8d8e-3417-c8c4005e4eeb","QID":"3tej2c8ywg-1","GUID":"p6LI4s5WfjQy1k8Fe6HObSPgCNPfU4p0","sender":"jay@stitchfab.com","recipient":["mvictoria@acme.bank"],"senderIP":"133.1.154.219","messageID":"<020320231010205B71C98EB0$5C03224520@stitchfab.com>"} ::: fileHash=<020320231010205B71C98EB0$5C03224520@stitchfab.com> ::: fileName=from: jay@stitchfab.com subj: Important mvictoria Notification Monday, October 2, 2023 ❗️ ::: serverIP=133.1.154.219 ::: emailFrom=jay@stitchfab.com ::: created_at=2023-10-03T00:58:13.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=Important mvictoria Notification Monday, October 2, 2023 ❗️ ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-10-03T00:58:13.000Z ::: emailSendingServer=133.1.154.219 ::: pipelineEntrypoint=dispatch
{
    "action": "block",
    "emailfrom": "jay@stitchfab.com",
    "emailsendingserver": "40.107.92.74",
    "emailsubject": "Important mvictoria Notification Monday, October 2, 2023 \u2757\ufe0f",
    "filehash": "<020320231010205B71C98EB0$5C03224520@stitchfab.com>",
    "filename": "from: jay@stitchfab.com subj: Important mvictoria Notification Monday, October 2, 2023 \u2757\ufe0f",
    "message": "WitFoo-Artifact ::: action=block ::: message={\"spamScore\":0,\"phishScore\":100,\"threatsInfoMap\":[{\"threatID\":\"e852dc28c88004993758775a565b583d5bea8163daf55ce57c25e7c06463a522\",\"threatStatus\":\"active\",\"classification\":\"phish\",\"threatUrl\":\"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/e852dc28c88004993758775a565b583d5bea8163daf55ce57c25e7c06463a522\",\"threatTime\":\"2023-10-03T00:59:19.000Z\",\"threat\":\"https://tracker.club-os.com/campaign/click?msgId=&test=true&target=https://helloupstatesc.com/wp-imagee/authh/1xubze/bXZpY3RvcmlhQGNhbHByaXZhdGUuYmFuaw==/bXZpY3RvcmlhQGNhbHByaXZhdGUuYmFuaw==\",\"campaignID\":null,\"threatType\":\"url\"},{\"threatID\":\"99e847f90fea9b8e6ca245744e9fcc068fdae5b08a190343fd1c4667de17ac49\",\"threatStatus\":\"active\",\"classification\":\"phish\",\"threatUrl\":\"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/99e847f90fea9b8e6ca245744e9fcc068fdae5b08a190343fd1c4667de17ac49\",\"threatTime\":\"2023-10-03T00:59:24.000Z\",\"threat\":\"https://tracker.club-os.com/campaign/click?msgId=&test=true&target=https://highlandnoodles.net/wp-to/terrace/nqc4c2/bXZpY3RvcmlhQGNhbHByaXZhdGUuYmFuaw==/bXZpY3RvcmlhQGNhbHByaXZhdGUuYmFuaw==\",\"campaignID\":null,\"threatType\":\"url\"}],\"messageTime\":\"2023-10-03T00:58:13.000Z\",\"impostorScore\":0,\"malwareScore\":0,\"cluster\":\"acme_hosted\",\"subject\":\"Important mvictoria Notification Monday, October 2, 2023 \u2757\ufe0f\",\"quarantineFolder\":\"Phish\",\"quarantineRule\":\"inbound_phish\",\"policyRoutes\":[\"default_inbound\",\"allow_relay\"],\"modulesRun\":[\"av\",\"spf\",\"spam\",\"dmarc\",\"urldefense\"],\"messageSize\":17759,\"headerFrom\":\"\\\"Notification Request|Calprivate\\\" <jay@stitchfab.com>\",\"headerReplyTo\":null,\"fromAddress\":[\"jay@stitchfab.com\"],\"ccAddresses\":[],\"replyToAddress\":[],\"toAddresses\":[\"mvictoria@acme.bank\"],\"xmailer\":null,\"messageParts\":[{\"disposition\":\"inline\",\"sha256\":\"ca4f3c27f44c3b16c0d65ef3591842d889ea85e0280090ff109fb314623a3153\",\"md5\":\"195715b6fdb2322d970ce5facb50ef44\",\"filename\":\"text.txt\",\"sandboxStatus\":null,\"oContentType\":\"text/html\",\"contentType\":\"text/html\"},{\"disposition\":\"inline\",\"sha256\":\"3562d84388f2af69c05fd326ea09e794690be48d4854ab95d5fc7ccecf354208\",\"md5\":\"ae59aa38de24836a8f26433f68f6116c\",\"filename\":\"text.html\",\"sandboxStatus\":null,\"oContentType\":\"text/html\",\"contentType\":\"text/html\"}],\"completelyRewritten\":false,\"id\":\"3d0c304e-d8fd-8d8e-3417-c8c4005e4eeb\",\"QID\":\"3tej2c8ywg-1\",\"GUID\":\"p6LI4s5WfjQy1k8Fe6HObSPgCNPfU4p0\",\"sender\":\"jay@stitchfab.com\",\"recipient\":[\"mvictoria@acme.bank\"],\"senderIP\":\"133.1.154.219\",\"messageID\":\"<020320231010205B71C98EB0$5C03224520@stitchfab.com>\"} ::: fileHash=<020320231010205B71C98EB0$5C03224520@stitchfab.com> ::: fileName=from: jay@stitchfab.com subj: Important mvictoria Notification Monday, October 2, 2023 \u2757\ufe0f ::: serverIP=133.1.154.219 ::: emailFrom=jay@stitchfab.com ::: created_at=2023-10-03T00:58:13.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=Important mvictoria Notification Monday, October 2, 2023 \u2757\ufe0f ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-10-03T00:58:13.000Z ::: emailSendingServer=133.1.154.219 ::: pipelineEntrypoint=dispatch",
    "messagetype": "email_protection_event",
    "productids": [
        32
    ],
    "senderhost": "kafka.precinct",
    "sensitivity": "normal",
    "severitycode": 2,
    "severitylabel": "critical",
    "sourceinfo": "unknown",
    "starttimeutc": "2023-10-03T00:58:13.000Z",
    "tags": [
        "proofpoint_protect",
        "email_protection_event"
    ],
    "vendorcode": "blocked_message",
    "streamName": "proofpoint_protect",
    "serverIP": "133.1.154.219"
}