E-HAWK Blog

Fight registration fraud and high risk transactions.

Tagging is used to score specific emails, emaildomains,TLDs, domains, names, IPs, CIDRs, and device fingerprints as good, bad, or to skip scoring. Items tagged as Bad will add negative scoring to the risk area, Good tags add positive scoring, and Do Not Score will set the item score to zero.

Read about the new Tag API usage and specs.

 

September 29th, 2015

Posted In: Feed-API, Releases and Updates, TAG-API, Vetting-API

Are you interested in the domain age? If it is parked? Suspended? Try adding timeout=no to your vets for additional domain and website analysis and testing. Some of the areas we test for include:

Website status: Under Construction, Default Template, Suspicious Content, Under Construction, Directory Listing Denied, Suspended, Index Listing, Access Denied, Response Code such as 404, 401, etc.

Domain status: Parked, Parked with Ads, Parked For Sale, Unverified, Invalid Host or Subdomain, Expired, Suspended, Invalid Host, etc.

Scores for all of these risk hits can be customized and any hits are also listed in the JSON response. For example: domain”:{“score_details”:[“Parked for Sale”]} tells you the domain is for sale.

January 10th, 2015

Posted In: Feed-API

We have always believed that leveraging community information on known spam offenders, bots, phishers, and cyber criminals gives our customers the best chance for rapid identification and stopping bad actors from being able to inflict damage on multiple organizations.  We built our service with enhanced data sharing with the goal of providing significant improvement of detection for all involved. And in a strong and successful community, it is important to give some and hopefully get more in return.

The data so far is very exciting and illustrates the power of shared intel on bad actors.

Screen Shot 2014-05-15 at 8.55.26 AM

 

The results so far:

  • 38% of hits come from data that was submitted by the same company, i.e. company A submits information on a bad IP and later that IP tried to sign-up again with company A.
  • 61% of hits come from other companies, i.e. Company A submits information on a bad IP and later that IP tried to sign-up again with company B, C, or D. This means that for every 1 data item a company adds to the pooled data, they get 2x in return from the others in the community.
  • 85% of hits are incremental, meaning that 85% of the registrations tagged as very high risk are from community data only. The IP is clean, not listed on any blacklists, the email has no other bad history, etc.

Overall these results are very promising and show the power of community. By sharing intel anonymously and securely, we are making it harder for bad actors to inflict damage on multiple organizations.

May 15th, 2014

Posted In: Community, Feed-API, General News

Tags:

Leave a Comment

Our new interactive online vetting page is now available. For manual vetting, this is an easy-to-use form designed to work on desktops, tablets, and mobile devices.

The form includes all necessary fields for vetting as well as feedback buttons. Customers can also use the form to submit bad actors to the E-HAWK Community database.

web_vetting_form

December 15th, 2013

Posted In: Feed-API, Vetting-API

Tags: ,

Leave a Comment

stop_bad_actors_button

The Feed-API makes it easy to add data on bad actors such as phone numbers, email, domains, IPs, and other information to our community database. You can add a

group of data (several items that together define a bad actor) with a single post using Incidents or add individual elements (such as a known bad IP) with direct calls. Our goal is to build Bad Actor Fingerprint Profiles.
Leveraging community information on known spam offenders, bots, phishers, and cyber criminals gives the community and our customers the best chance for rapid identification and stopping bad actors from being able to inflict damage on multiple organizations. Many of the leading ESPs, ISPs, and large corporations are working with us to help identify patterns and trends of these cyber criminals.

Our bad actor database is growing rapidly, learning, and helping keep these miscreants from doing damage. Help build this community. STOP BAD ACTORS. Email stop_bad_actors@e-hawk.net today.

July 31st, 2013

Posted In: Feed-API, Releases and Updates

Tags:



© Copyright 2013 by E-HAWK. All Rights Reserved.