返回所有讨论
What exactly does anomalies detected mean?
coreyternio
1年前
valid:true
block:true
disposable:false
domain:"test.com
text:"Highly suspicious"
reason:"Anomalies detected"
risk:75
mx_host:"mx.test.com"
possible_typo:
mx_ip:"123.123.123.123"
mx_info:"Using MX pointer mx.testcom m DNS with priority: 30"
last_changed_at:“2023-05-13T03:21:34+02:00”
加入讨论 - 在下面添加评论：
登录/注册以发布新的评论
We are using many signals or indicators when evaluating domains and e-mails. Anything from domain info, honeypots, registrar information, threat intel, etc.
The “text” and “reason” is basically just a text-based information about why we have flagged the email/domain as invalid, or why it should be blocked.
“Anomalies detected” just means that we found “something” that looks odd. We actually updated that now for test.com, updating the info to it being blacklisted.
The most important field is the “block” value, which is if we suggest you block it or not, either because it’s invalid, or bad/disposable/malicious.