WitFoo-Artifact ::: action=block ::: message={"spamScore":0,"phishScore":100,"threatsInfoMap":[{"threatID":"ebcc380463853a3c83a43399c0675c3f649fa7d0238d36fd4598cdb703e567a0","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/ebcc380463853a3c83a43399c0675c3f649fa7d0238d36fd4598cdb703e567a0","threatTime":"2023-03-21T10:16:23.000Z","threat":"ebcc380463853a3c83a43399c0675c3f649fa7d0238d36fd4598cdb703e567a0","campaignID":null,"threatType":"attoscorpment"}],"messageTime":"2023-03-21T10:17:25.000Z","impostorScore":0,"malwareScore":0,"cluster":"oscorp_hosted","subject":"Voicemail Transcription Message on March 21, 2023, 6:15:57 PM ","quarantineFolder":"Attoscorpment Defense","quarantineRule":"threat","policyRoutes":["default_inbound","oscorp_from"],"modulesRun":["access","av","zerohour","spf","sandbox","spam","dmarc","urldefense"],"messageSize":2250066,"headerFrom":"\"Calprivate-ISF Caller\" <security@oscorp.bank>","headerReplyTo":null,"fromAddress":["security@oscorp.bank"],"ccAddresses":[],"replyToAddress":[],"toAddresses":["security@oscorp.bank"],"xmailer":null,"messageParts":[{"disposition":"attoscorped","sha256":"ebcc380463853a3c83a43399c0675c3f649fa7d0238d36fd4598cdb703e567a0","md5":"087abe3ee83a6f58f832b7b33d510560","filename":"☎**?0113202023.htm.","sandboxStatus":"THREAT","oContentType":"text/html","contentType":"text/html"}],"completelyRewritten":false,"id":"4b21ab0e-56a7-b4f5-e4c4-053b18b99c05","QID":"3pex22g7k9-1","GUID":"ZWYhopSc7nUjt2wVLEyfdZXzAt3JHpO8","sender":"security@oscorp.bank","recipient":["security@oscorp.bank"],"senderIP":"100.76.101.123","messageID":"<15f00a8b-65c4-ce0a-c3eb-e875ef99b6f2@oscorp.bank>"} ::: fileHash=<15f00a8b-65c4-ce0a-c3eb-e875ef99b6f2@oscorp.bank> ::: fileName=from: security@oscorp.bank subj: Voicemail Transcription Message on March 21, 2023, 6:15:57 PM  ::: serverIP=100.76.101.123 ::: emailFrom=security@oscorp.bank ::: created_at=2023-03-21T10:17:25.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=Voicemail Transcription Message on March 21, 2023, 6:15:57 PM  ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-03-21T10:17:25.000Z ::: emailSendingServer=100.76.101.123 ::: pipelineEntrypoint=dispatch
Product: Protect
Vendor: ProofPoint