WitFoo-Artifact ::: fqdn=cab8fsphak15dd000010y57568uuxhcx6.oast.live ::: action=BLOCKED ::: message={"originId":410614338,"originType":"AD Users","internalIp":"206.251.79.138","externalIp":"248.218.66.201","categories":["Malware","Infrastructure and Content Delivery Networks"],"tags":[],"destination":"cab8fsphak15dd000010y57568uuxhcx6.oast.live","originLabel":"janedoe","actionTaken":"BLOCKED","datetime":"2022-05-31T21:31:53.000Z"} ::: clientIP=206.251.79.138 ::: serverIP=248.218.66.201 ::: userName=janedoe ::: created_at=2022-05-31T21:31:53.000Z ::: streamName=OpenDNS Detection ::: vendorCode=MalwareInfrastructure and Content Delivery Networks ::: messageType=firewall_action ::: pipelineName=OpenDNS Detection ::: severityCode=2 ::: startTimeUTC=2022-05-31T21:31:53.000Z ::: serverHostname=cab8fsphak15dd000010y57568uuxhcx6.oast.live ::: pipelineEntrypoint=dispatch
Product: Umbrella
Vendor: Cisco