WitFoo-Artifact ::: action=block ::: message={"spamScore":100,"phishScore":0,"threatsInfoMap":[{"threatID":"cf02c3d1291a2cb83d6c9574deb1c283bdadb6566466d5c3d562cf51b13f49fc","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/cf02c3d1291a2cb83d6c9574deb1c283bdadb6566466d5c3d562cf51b13f49fc","threatTime":"2022-12-23T00:42:34.000Z","threat":"cf02c3d1291a2cb83d6c9574deb1c283bdadb6566466d5c3d562cf51b13f49fc","campaignID":null,"threatType":"attstarkment"}],"messageTime":"2022-12-23T00:43:26.000Z","impostorScore":0,"malwareScore":0,"cluster":"stark_hosted","subject":"Invoice 65148-22374 from Sandiegoprivatebank Payroll","quarantineFolder":"Attstarkment Defense","quarantineRule":"threat","policyRoutes":["default_inbound"],"modulesRun":["av","zerohour","spf","sandbox","spam","dmarc","urldefense"],"messageSize":19556,"headerFrom":"Invoices <mike@h2-eco.com>","headerReplyTo":null,"fromAddress":["mike@h2-eco.com"],"ccAddresses":[],"replyToAddress":[],"toAddresses":["pazzi@sandiegoprivatebank.net"],"xmailer":null,"messageParts":[{"disposition":"inline","sha256":"603f79620465b42be108dcaa0972d8e3e6f0a7ba5bb3c84d1407cb5713fa51fb","md5":"4e446711caee9c8dbda023d4ac0306dc","filename":"text.html","sandboxStatus":"NOT_SUPPORTED","oContentType":"text/html","contentType":"text/html"},{"disposition":"inline","sha256":"688787fbb991b11b4e767d01c6da762e35a9aa8fdf3b2e74bf44d658f04c3067","md5":"ec92700e9dd452ac45503ce6e98f11a3","filename":"text.txt","sandboxStatus":"NOT_SUPPORTED","oContentType":"text/plain","contentType":"text/plain"},{"disposition":"attstarked","sha256":"cf02c3d1291a2cb83d6c9574deb1c283bdadb6566466d5c3d562cf51b13f49fc","md5":"15d4a43388af02eb8ed6407657ea2c78","filename":"wire confirmation-thursday221026-242137 ‮‮‮fdp.htm","sandboxStatus":"THREAT","oContentType":"text/html","contentType":"text/html"}],"completelyRewritten":false,"id":"cedbf104-5c2e-03e8-9d31-93d9f05fef1c","QID":"3mhagya1g7-1","GUID":"rD_ncbBy8ikO0B_yIWrWl1n5rjXxlCdy","sender":"mike@h2-eco.com","recipient":["pazzi@sandiegoprivatebank.net"],"senderIP":"29.155.238.2","messageID":"<ec0f4efd45686dec4715e0813d170b64@WIN-WRT8O9JM5Y>"} ::: fileHash=<ec0f4efd45686dec4715e0813d170b64@WIN-WRT8O9JM5Y> ::: fileName=from: mike@h2-eco.com subj: Invoice 65148-22374 from Sandiegoprivatebank Payroll ::: serverIP=29.155.238.2 ::: emailFrom=mike@h2-eco.com ::: created_at=2022-12-23T00:43:26.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=Invoice 65148-22374 from Sandiegoprivatebank Payroll ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2022-12-23T00:43:26.000Z ::: emailSendingServer=29.155.238.2 ::: pipelineEntrypoint=dispatch
Product: Protect
Vendor: ProofPoint