Joseph Brennan Fri, 19 Oct 2018 12:43:38 -0700
KHOP_DYNAMIC hits on hostnames like mx0b-00145802.pphosted.com. Proofpoint addresses are always mail servers, not dynamic end-user lines.
-- Joseph Brennan Lead, Email and Systems Applications