Launching email security insights on Cloudflare Radar

Cloudflare introduces a new Email Security section on Cloudflare Radar that publishes aggregated, real-time insights from tens of millions of processed emails, covering malicious email share and spikes, dominant threat vectors (links, attachments, impersonation, identity deception), and TLDs most associated with malicious and spam activity. The February 2024 snapshot shows an average 2.1% malicious rate with event-driven spikes, link-based threats in 58% of malicious emails (notably credential harvesting), significant surges in attachment- and brand-impersonation activity, and identity deception leading “Other” threats; it also reports high pass rates for SPF/DKIM/DMARC, low IPv6 use (5%) for SMTP connections, and widespread TLS adoption (94%).