Bulk Email Account Creation via Free Provider

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•5

This rule detects bulk email account creation attempts on free email providers ProtonMail and Tutanota. It triggers when a client makes 3 or more HTTP requests within 60 seconds to the signup page of either protonmail.com or tutanota.com.