WitFoo-Artifact ::: action=block ::: message={"spamScore":0,"phishScore":0,"threatsInfoMap":[{"threatID":"d63481b008ff004260f6a52d39c4be7317cd8086c60d7b0f901c910ebb20ba13","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/d63481b008ff004260f6a52d39c4be7317cd8086c60d7b0f901c910ebb20ba13","threatTime":"2023-12-03T21:13:34.000Z","threat":"www.google.com/amp/s/premiercardiology.net/","campaignID":null,"threatType":"url"}],"messageTime":"2023-11-30T01:42:32.000Z","impostorScore":0,"malwareScore":0,"cluster":"acme_hosted","subject":"Complete with DocuSign: Recruitment Agreement -  - Nov 2023","quarantineFolder":null,"quarantineRule":null,"policyRoutes":["default_inbound"],"modulesRun":["spf","dmarc","pdr"],"messageSize":21715,"headerFrom":"dse@NA2.docusign.com","headerReplyTo":null,"fromAddress":["dse@NA2.docusign.com"],"ccAddresses":["rsowers@acme.bank"],"replyToAddress":[],"toAddresses":["rsowers@acme.bank"],"xmailer":null,"messageParts":[{"disposition":"attacmeed","sha256":"a256b1364865039dafdefa33bebee87444684f5d09dafdf53680dcfc8b61ffed","md5":"7d46f290820b751b085dbbe86fddbca0","filename":"email_powerbylogo.png","sandboxStatus":null,"oContentType":"image/png","contentType":"image/png"},{"disposition":"attacmeed","sha256":"0a8fe17e3bf3f295a2744acmedd995b5d425c28fcdddfb96389e8c7f0ae735a89","md5":"fe14601288e6d32833c945cee39379bb","filename":"icon-downloadapp-18x18@2x.png","sandboxStatus":null,"oContentType":"image/png","contentType":"image/png"},{"disposition":"attacmeed","sha256":"8415bfc2dc70e1575a3c5bd5235d2512876edb6e55fa1651373c15e9db03fb3b","md5":"38025d34d4b0d3349a90217cb6d0fcba","filename":"docgeneric-white.png","sandboxStatus":null,"oContentType":"image/png","contentType":"image/png"},{"disposition":"inline","sha256":"f5fe3b9e40999bfd2cc54fb2e9669096708300af30397da0b020eaa34c440141","md5":"076d6d974965b846a863bd49595ac4b2","filename":"text.html","sandboxStatus":null,"oContentType":"text/html","contentType":"text/html"}],"completelyRewritten":false,"id":"c26019d5-c987-d1d3-5a7c-67f2188fb8c1","QID":"3unvwk8eaj-1","GUID":"rLAeL94WuFW1C7PfDIqF8HO3LjTwvpcG","sender":"dse@NA2.docusign.com","recipient":["rsowers@acme.bank"],"senderIP":"236.3.236.187","messageID":"<29112023194229617GGh77pfXqRRd12097@basecones.com>"} ::: fileHash=<29112023194229617GGh77pfXqRRd12097@basecones.com> ::: fileName=from: dse@NA2.docusign.com subj: Complete with DocuSign: Recruitment Agreement -  - Nov 2023 ::: serverIP=236.3.236.187 ::: emailFrom=dse@NA2.docusign.com ::: created_at=2023-11-30T01:42:32.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=Complete with DocuSign: Recruitment Agreement -  - Nov 2023 ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-11-30T01:42:32.000Z ::: emailSendingServer=236.3.236.187 ::: pipelineEntrypoint=dispatch
Product: Protect
Vendor: ProofPoint