It wasn't a glitch. It was a registration bomb attack. The victim's spam filter didn't catch a single one, because every email was technically legitimate.
Your email provider won't protect you from this. Here's what happens, and why it works.
An attacker enters your email into a script that signs you up to thousands of websites, newsletters, and services simultaneously.
Confirmation emails start arriving: "Verify your account", "Welcome!", "Confirm your subscription". Hundreds per minute.
10,000+ emails. Your real messages are buried. Spam filters pass every one, because each email is individually legitimate.
500,000 emails. Your email is unusable. Critical messages lost. Business operations halted.
Traditional email security wasn't built for this. Here's what they miss.
Each email is a real confirmation from a real service. Gmail, Outlook, and every spam filter on the market will pass them through.
The emails come from thousands of legitimate services on different IPs. Blocking IPs means blocking real companies like Spotify and LinkedIn.
By the time you write a filter rule, 50,000 more emails have arrived. The attack evolves faster than any human can respond.
Six layers of defence between attackers and your inbox. Each one catches what the others miss.
Reject spoofed and unauthenticated senders on sight
Self-learning analysis of headers, subjects, and content
Throttle suspicious sending patterns per-ASN and per-sender
Defer unknown senders. Legit servers retry; bots don't. Kills 80-90% of bomb traffic.
Burst detection for confirmation-pattern floods from unique first-time senders
Score at the network level. Attackers rotate IPs but rarely switch ASNs. The foundation that makes everything else smarter.
Same attack. Completely different outcome.
Figures below assume MX Moat was in place before the attack started.
If your inbox is buried right now, the situation is different — and so is what we can honestly promise.
Your MX record points to our relay. All inbound mail passes through us before it reaches your inbox.
A whitelist is built from your existing contacts. Your inbox works again. Every rejected email is archived and in a daily report, so nothing disappears without a trace.
Fine-tuning the full scoring system while an attack is running is genuinely difficult. We do it, but it takes time to calibrate without disrupting legitimate mail. The whitelist holds you together in the meantime.
No software. No migration. No downtime.
Point your domain's MX record to MX Moat. We give you the exact values.
All inbound mail passes through our 6-layer filtering system before it reaches your inbox.
Legitimate email is delivered normally to your provider: Office 365, Gmail, or any other.
• Before yourdomain.com MX 10 mail.provider.com • After: that's it yourdomain.com MX 10 gateway.mxmoat.com yourdomain.com MX 20 mail.provider.com
No per-user charges. No hidden fees. Cancel anytime.
Registration bombs don't send warnings. By the time you notice, 100,000 emails are already in your inbox. Protect your domain now.
Protect Your Domain →