[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-25 UTC."],[],[],null,["# MailPhishing\n\n- [JSON representation](#SCHEMA_REPRESENTATION)\n\nProto for all phishing alerts with common payload. Supported types are any of the following:\n\n- User reported phishing\n- User reported spam spike\n- Suspicious message reported\n- Phishing reclassification\n- Malware reclassification\n- Gmail potential employee spoofing\n\n| JSON representation |\n|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| ``` { \"domainId\": { object (/workspace/admin/alertcenter/reference/rest/v1beta1/DomainId) }, \"maliciousEntity\": { object (/workspace/admin/alertcenter/reference/rest/v1beta1/MaliciousEntity) }, \"messages\": [ { object (/workspace/admin/alertcenter/reference/rest/v1beta1/GmailMessageInfo) } ], \"isInternal\": boolean, \"systemActionType\": enum (/workspace/admin/alertcenter/reference/rest/v1beta1/SystemActionType) } ``` |\n\n| Fields ||\n|--------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `domainId` | `object (`[DomainId](/workspace/admin/alertcenter/reference/rest/v1beta1/DomainId)`)` The domain ID. |\n| `maliciousEntity` | `object (`[MaliciousEntity](/workspace/admin/alertcenter/reference/rest/v1beta1/MaliciousEntity)`)` The entity whose actions triggered a Gmail phishing alert. |\n| `messages[]` | `object (`[GmailMessageInfo](/workspace/admin/alertcenter/reference/rest/v1beta1/GmailMessageInfo)`)` The list of messages contained by this alert. |\n| `isInternal` | `boolean` If `true`, the email originated from within the organization. |\n| `systemActionType` | `enum (`[SystemActionType](/workspace/admin/alertcenter/reference/rest/v1beta1/SystemActionType)`)` System actions on the messages. |"]]
