Malicious Sending Behavior Detection

Platform Configuration — Fill These In to Match Your ESP

This skill uses example thresholds by default. Fill in your platform's actual policies below so the investigation triggers and risk signals match how your ESP works.

• Max contacts for new accounts (before review): [e.g., 10,000]
• Bounce rate lock threshold: [e.g., 5% hard bounce rate]
• Suspicious upgrade window: [e.g., high-tier upgrade within 7 days of signup]
• Support/ticketing system: [e.g., Zendesk, Freshdesk, custom]

What You Are Looking For

The Classic Spammer Arrives with a pre-built list. Wants to blast as many emails as possible before getting caught. Signals: Math does not work. Instant scaling. Evasive about list source. No real opt-in flow. Aggressive and threatening. Sketchy content (crypto, get-rich-quick, vague proposals).