WitFoo-Artifact ::: fqdn=cab8fsphak15dd000010y57568uuxhcx6.oast.live ::: action=BLOCKED ::: message={"originId":410614338,"originType":"AD Users","internalIp":"61.107.8.127","externalIp":"132.36.219.16","categories":["Malware","Infrastructure and Content Delivery Networks"],"tags":[],"destination":"cab8fsphak15dd000010y57568uuxhcx6.oast.live","originLabel":"nighthawk","actionTaken":"BLOCKED","datetime":"2022-05-31T21:31:53.000Z"} ::: clientIP=61.107.8.127 ::: serverIP=132.36.219.16 ::: userName=nighthawk ::: created_at=2022-05-31T21:31:53.000Z ::: streamName=OpenDNS Detection ::: vendorCode=MalwareInfrastructure and Content Delivery Networks ::: messageType=firewall_action ::: pipelineName=OpenDNS Detection ::: severityCode=2 ::: startTimeUTC=2022-05-31T21:31:53.000Z ::: serverHostname=cab8fsphak15dd000010y57568uuxhcx6.oast.live ::: pipelineEntrypoint=dispatch
Product: Umbrella
Vendor: Cisco