> Danger can spot email accounts that have just been created by scammers to use as temporary addresses.
> It does this by checking if the email is registered on 20 apps and services in real-time.
So if my email isn't registered on those, does it mean you'll flag me?
edit: yes, turns out it adds 50 points to your risk score, and not being in any breaches adds another 5 (breach check doesnt seem to work properly? i dont know what it uses as a source)
so my business email would be 50+5 points meaning high risk
also apparently having 5+ digits in your email adds 5 points to your risk score too, which I don't really understand the reasoning for
i tried a disposable email (from the top result from google) and it wasn't flagged, and 4 more from different high ranking sites and only 2 got flagged so you probably want to improve that
and my ISP is also flagged as a "known threat" for some reason, even though it's a completely normal large residential isp
Business emails are harder to screen using this method but your understanding is correct, it is flagged as high risk because of not being found on those sites.
We'll check the disposable email sources, thanks for your feedback on that.
Some ISPs do show as a risk, even genuine residential. We can tweak the thresholds over time. We keep an eye on this.
I don’t really understand why certain residential ISPs carry a higher risk score. In some cases the consumer doesn’t have much or any choice over their provider. What’s the reasoning behind this?
I agree it would not be the consumer's fault or responsibility, but in terms of deciding on the overall probability of risk in a profile, some residential ISPs do have proportionately more bad traffic than others.
We don't attribute a high number of points to this because it doesn't deserve a high weighting but it's probably right to factor it into the score.
Having said that it's early days for us and we're still tweaking/testing.
> It does this by checking if the email is registered on 20 apps and services in real-time.
So if my email isn't registered on those, does it mean you'll flag me?
edit: yes, turns out it adds 50 points to your risk score, and not being in any breaches adds another 5 (breach check doesnt seem to work properly? i dont know what it uses as a source)
so my business email would be 50+5 points meaning high risk
also apparently having 5+ digits in your email adds 5 points to your risk score too, which I don't really understand the reasoning for
i tried a disposable email (from the top result from google) and it wasn't flagged, and 4 more from different high ranking sites and only 2 got flagged so you probably want to improve that
and my ISP is also flagged as a "known threat" for some reason, even though it's a completely normal large residential isp