| Country | Blocked | Share |
|---|---|---|
| United States (US) | 238 | 76.3% |
| The Netherlands (NL) | 24 | 7.7% |
| Taiwan (TW) | 18 | 5.8% |
| United Kingdom (GB) | 18 | 5.8% |
| France (FR) | 14 | 4.5% |
Based on emails that reached the content filter. MTA-level blocks (RBL, GeoIP) are not included.
| Domain | Blocked | Avg Score | Volume |
|---|---|---|---|
| [redacted] | 27 | 54.8 | |
| gmail.com | 27 | 60.5 | |
| optimalhealth.food | 16 | 69.4 | |
| lowes.com | 14 | 89.9 | |
| juliVCB.com | 9 | 108.0 | |
| hotmail.com | 9 | 71.6 | |
| outlook.com | 7 | 53.4 | |
| karincacivata.com | 6 | 84.2 |
| Score | Sender | Subject |
|---|---|---|
| 251.85 | DHL Express <info@astspa.cl> | DHL On Demand Delivery |
| 243.6 | DHL Express <info@astspa.cl> | DHL On Demand Delivery |
| 239.307 | "Roundcube Support [redacted]" | office@[redacted] Please confirm to conti |
| 230.247 | "Roundcube Support [redacted].co | megan@[redacted] Please confirm to con |
| 218.367 | "Roundcube Support [redacted]" <wigster@ | customer.care@[redacted] Please confirm to continu |
| CVE | Vendor / Product | Ransomware |
|---|---|---|
| CVE-2012-1854 | Microsoft Visual Basic for Applications (VBA) Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution. | Unknown |
| CVE-2025-60710 | Microsoft Windows Microsoft Windows contains a link following vulnerability that allows for privilege escalation | Unknown |
| CVE-2023-21529 | Microsoft Exchange Server Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. | Unknown |
| CVE-2023-36424 | Microsoft Windows Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation | Unknown |
| CVE-2020-9715 | Adobe Acrobat Adobe Acrobat contains a use-after-free vulnerability that allows for code execution | Unknown |
| CVE-2026-21643 | Fortinet FortiClient EMS Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. | Unknown |
| CVE-2026-34621 | Adobe Acrobat and Reader Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. | Unknown |
Top threat types:
unknown: 5020 email-related indicators of compromise in the last 24 hours.
| Malware Family | IOCs | Severity |
|---|---|---|
| XWorm | 8 | High |
| Vidar | 8 | High |
| Remvio | 3 | Medium |
| Stealc | 1 | Low |