WitFoo-Artifact ::: action=block ::: message={"spamScore":0,"phishScore":0,"threatsInfoMap":[{"threatID":"b9bd5548ebb4c4e0ef5e08cae4b918564f12602c2a762cb21dd50e4e3b6fcb14","threatStatus":"active","classification":"phish","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/b9bd5548ebb4c4e0ef5e08cae4b918564f12602c2a762cb21dd50e4e3b6fcb14","threatTime":"2023-12-31T17:16:08.000Z","threat":"https://google.com/amp/ip65.ip-147-135-76.us/QUZmNFFVeCthaWRYeDhHeTBDL1UwSExqTGd1bmlRS0tzN2hlenVta0NWYW1jM1Y3UWJDbTIrVG9nRllmTGhtM3VjUzNEZTRVK2tKUFQyUFZXYU4xZWc9PQ__","campaignID":null,"threatType":"url"},{"threatID":"3a855ae13a0bc00b7c43dc6b958d04f4167925172bd026a2f36b43582ca9feba","threatStatus":"active","classification":"toad","threatUrl":"https://threatinsight.proofpoint.com/4a6c87e3-5385-8727-3248-aa120bda900c/threat/email/3a855ae13a0bc00b7c43dc6b958d04f4167925172bd026a2f36b43582ca9feba","threatTime":"2023-12-31T17:14:41.000Z","threat":"ados@jollygardner.co.uk:xNv3osTJ8Pr4aV8vJrzHMQWFjLnoWry0","campaignID":null,"threatType":"messageText"}],"messageTime":"2023-12-31T17:14:34.000Z","impostorScore":0,"malwareScore":100,"cluster":"oscorp_hosted","subject":"We were unable to deliver your package... Reschedule your delivery date....","quarantineFolder":"Malware","quarantineRule":"inbound_malware","policyRoutes":["default_inbound"],"modulesRun":["av","spf","spam","dmarc","pdr","urldefense"],"messageSize":44225,"headerFrom":"Track Trace<ados@jollygardner.co.uk>","headerReplyTo":null,"fromAddress":["ados@jollygardner.co.uk"],"ccAddresses":[],"replyToAddress":[],"toAddresses":[],"xmailer":null,"messageParts":[{"disposition":"inline","sha256":"342e0c14dcaa15b4c63806117ec1c9ed2a0940777d38f883ef89abff622ad914","md5":"2a37174bb3319301c13d13a9c0b42edb","filename":"text.html","sandboxStatus":null,"oContentType":"text/html","contentType":"text/html"}],"completelyRewritten":false,"id":"03996824-efe2-0303-84e2-d07d471a425e","QID":"3vajfg0bgt-1","GUID":"xNv3osTJ8Pr4aV8vJrzHMQWFjLnoWry0","sender":"v1afrlhsaxxtali@hmnaGCu.jollygardner.co.uk","recipient":["ltrego@sandiegoprivatebank.net"],"senderIP":"199.242.139.62","messageID":"<qpgjmvdg-gpzm-gpzm-gpzm-rcyhya2mfiri@AM7EUR06FT012.eop-eur06.prod.protection.outlook.com>"} ::: fileHash=<qpgjmvdg-gpzm-gpzm-gpzm-rcyhya2mfiri@AM7EUR06FT012.eop-eur06.prod.protection.outlook.com> ::: fileName=from: v1afrlhsaxxtali@hmnaGCu.jollygardner.co.uk subj: We were unable to deliver your package... Reschedule your delivery date.... ::: serverIP=199.242.139.62 ::: emailFrom=v1afrlhsaxxtali@hmnaGCu.jollygardner.co.uk ::: created_at=2023-12-31T17:14:34.000Z ::: streamName=proofpoint_protect ::: vendorCode=blocked_message ::: messageType=email_protection_event ::: emailSubject=We were unable to deliver your package... Reschedule your delivery date.... ::: pipelineName=proofpoint_protect ::: severityCode=2 ::: startTimeUTC=2023-12-31T17:14:34.000Z ::: emailSendingServer=199.242.139.62 ::: pipelineEntrypoint=dispatch
Product: Protect
Vendor: ProofPoint