High-Risk Email URL Clicks (Nation-State Domains)

Matthew Metcalf@mattmetcalf059

•updated Sep 8, 2025•4•1•72

Detects when a user’s Outlook successfully connects to a high-risk nation-state domain (e.g., .ru, .cn, .kp, .ir) correlated to an email they received, highlighting potential exposure to malicious content.