WitFoo-Artifact ::: action=block ::: message={"spamScore":100,"phishScore":100,"threatsInfoMap":[{"threatID":"c510dc80b51bf31829485290cbfbb70437dd9fcc72f97860e231a638a6bfef08","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/c510dc80b51bf31829485290cbfbb70437dd9fcc72f97860e231a638a6bfef08","threatTime":"2023-12-05T21:14:38.000Z","threat":"https://www.richelieu.com/newsflash/redirect.php?code=7OW516fmfNDxMzA2OTgz&urlRedirect=https://utamafilter.com/.mugcw//ZWxhcnNvbkBjYWxwcml2YXRlLmJhbms=","campaignID":null,"threatType":"url"}],"messageTime":"2023-12-05T21:12:02.000Z","impostorScore":0,"malwareScore":0,"cluster":"stark_hosted","subject":"Completed: Doc require e-SlGNATURE from You The CFO elarson","quarantineFolder":"Phish","quarantineRule":"inbound_phish","policyRoutes":["default_inbound"],"modulesRun":["av","dkimv","spf","spam","dmarc","pdr","urldefense"],"messageSize":88756,"headerFrom":"\"Docs-Online Shared Via-Notificatios@Calprivate.bank\" <daniel.hansen@lykkab.se>","headerReplyTo":null,"fromAddress":["daniel.hansen@lykkab.se"],"ccAddresses":[],"replyToAddress":[],"toAddresses":["elarson@stark.bank"],"xmailer":null,"messageParts":[{"disposition":"attstarked","sha256":"1d89231c1a6ee429854f63cstarkd77bbe22ede30b331a5be65f88afcd22feff67","md5":"d94db6123ad120826a0108f42c7c617f","filename":"ae7bc9e39a74d6d337f40bd867f6039f.png","sandboxStatus":null,"oContentType":"image/png","contentType":"image/png"},{"disposition":"inline","sha256":"c082ac823923f72299ba8cb5e1c4303f0576d1b8de73eb1a2f48519a8672eef4","md5":"0520f2d552d9d6387b667e39173a4215","filename":"text.html","sandboxStatus":null,"oContentType":"text/html","contentType":"text/html"}],"completelyRewritten":false,"id":"22026a34-63c1-bac5-6a24-21ffced9de78","QID":"3utauy00r9-1","GUID":"cqug0vtG9rBQm0O7w1M60LWkMLi2qosE","sender":"0106018c3bd2cfc0-41ed1046-3931-4d87-bf0c-cecefd2bc40f-000000@ap-northeast-1.amazonses.com","recipient":["elarson@stark.bank"],"senderIP":"70.47.5.223","messageID":"<0106018c3bd2cfc0-41ed1046-3931-4d87-bf0c-cecefd2bc40f-000000@ap-northeast-1.amazonses.com>"} ::: fileHash=<0106018c3bd2cfc0-41ed1046-3931-4d87-bf0c-cecefd2bc40f-000000@ap-northeast-1.amazonses.com> ::: fileName=from: 0106018c3bd2cfc0-41ed1046-3931-4d87-bf0c-cecefd2bc40f-000000@ap-northeast-1.amazonses.com subj: Completed: Doc require e-SlGNATURE from You The CFO elarson ::: serverIP=70.47.5.223 ::: emailFrom=0106018c3bd2cfc0-41ed1046-3931-4d87-bf0c-cecefd2bc40f-000000@ap-northeast-1.amazonses.com ::: created_at=2023-12-05T21:12:02.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=Completed: Doc require e-SlGNATURE from You The CFO elarson ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-12-05T21:12:02.000Z ::: emailSendingServer=70.47.5.223 ::: pipelineEntrypoint=dispatch
Product: Protect
Vendor: ProofPoint