# PhishingSpike

- [JSON representation](https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/PhishingSpike#SCHEMA_REPRESENTATION)

Alert for a spike in user reported phishing.

> [!WARNING]
> **Warning** : This type has been deprecated. Use [MailPhishing](https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/MailPhishing) instead.

<br />

| JSON representation |
|---|
| ``` { "domainId": { object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/DomainId`) }, "maliciousEntity": { object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/MaliciousEntity`) }, "messages": [ { object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/GmailMessageInfo`) } ], "isInternal": boolean } ``` |

| Fields ||
|---|---|
| `domainId` | ``object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/DomainId`)`` The domain ID. |
| `maliciousEntity` | ``object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/MaliciousEntity`)`` The entity whose actions triggered a Gmail phishing alert. |
| `messages[]` | ``object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/GmailMessageInfo`)`` The list of messages contained by this alert. |
| `isInternal` | `boolean` If `true`, the email originated from within the organization. |