Voltar para todas as discussões
What exactly does anomalies detected mean?
coreyternio
a year ago
valid:true
block:true
disposable:false
domain:"test.com
text:"Highly suspicious"
reason:"Anomalies detected"
risk:75
mx_host:"mx.test.com"
possible_typo:
mx_ip:"123.123.123.123"
mx_info:"Using MX pointer mx.testcom m DNS with priority: 30"
last_changed_at:“2023-05-13T03:21:34+02:00”
Junte-se à discussão - adicione o comentário abaixo:
Efetue login / inscreva-se para postar novos comentários
We are using many signals or indicators when evaluating domains and e-mails. Anything from domain info, honeypots, registrar information, threat intel, etc.
The “text” and “reason” is basically just a text-based information about why we have flagged the email/domain as invalid, or why it should be blocked.
“Anomalies detected” just means that we found “something” that looks odd. We actually updated that now for test.com, updating the info to it being blacklisted.
The most important field is the “block” value, which is if we suggest you block it or not, either because it’s invalid, or bad/disposable/malicious.