Back to All Discussions
What exactly does anomalies detected mean?
coreyternio
vor einem Jahr
valid:true
block:true
disposable:false
domain:"test.com
text:"Highly suspicious"
reason:"Anomalies detected"
risk:75
mx_host:"mx.test.com"
possible_typo:
mx_ip:"123.123.123.123"
mx_info:"Using MX pointer mx.testcom m DNS with priority: 30"
last_changed_at:“2023-05-13T03:21:34+02:00”
Join in the discussion - add comment below:
Login / Signup to post new comments
We are using many signals or indicators when evaluating domains and e-mails. Anything from domain info, honeypots, registrar information, threat intel, etc.
The “text” and “reason” is basically just a text-based information about why we have flagged the email/domain as invalid, or why it should be blocked.
“Anomalies detected” just means that we found “something” that looks odd. We actually updated that now for test.com, updating the info to it being blacklisted.
The most important field is the “block” value, which is if we suggest you block it or not, either because it’s invalid, or bad/disposable/malicious.