• by Ray Schultz , Columnist, 2 hours ago

The newest threat to orderly email marketing is artificial domain warning. This is a fraudulent system for building trust with mailbox providers like Gmail and Outlook, enabling cold spam outreach at scale. 

To fight it, Validity has debuted an email blocklist called the Validity Heatwave. The goal is to help legitimate brands “identify unethical gaming behavior and act on it,” says Tom Bartel, senior vice president of Data at Validity and board chair of M3AAWG.

“Email works because people trust it, and that trust depends on the integrity of the signals behind the inbox,” Bertel explains. “When reputation is manufactured instead of earned, it’s just plain cheating, and the whole ecosystem suffers.”

Heatwave has to date listed more than 1 million domains that exhibit unethical behavioral patterns, and  has been endorsed by Spamhaus.

"Attempts to manipulate email reputation are not new,” says says Carel Bitter, CEO at Spamhaus. “We have dealt with automated abuse in many forms for decades, and synthetic engagement is another iteration of the same problem," 

Bitter continues, "Our work with Validity on Heatwave gives us an additional signal we can use to correlate domains and better understand the infrastructure behind this activity. That added context helps us identify patterns earlier and respond more precisely."

Experts agree that artificial warming mimics legitimate warming programs that help new brands build a sender reputation one step at a time based on engagement and predictability. 

Here’s how they work. Artificial warming systems  connect to a customer’s email tenant and register domains resembling the person’s own. Then they generate synthetic messages along with replies and metrics like opens and clicks between networks of fake accounts. These false engagement signals into the systems of mailbox providers, Validity reports.

Spamming campaigns are often run through subcontracted vendors or partner providers that are several layers removed from the sender’s own team, Validity states. Thus, warming activity can happen under a brand’s name without anyone at the company knowing about it. 

What Heatwave does is search primary domains and surface related domains that fuel synthetic warming. 

The Heatwave signal is “mirrored into” Validity's existing domain name system reputation zones. Mailbox partners using Validity’s reputation data can access the signal without having to do so separately. 

Heatwave is being used or evaluated by mailbox provider partners such as i22ncluding Comcast, Proofpoint, Spamhaus, and SURBL and the ESPs.

“We utilize Validity reputation data signals,” says Alex Brotman, senior engineer at Comcast. “This particular signal is interesting because reputation relies on senders intentionally behaving ethically and doing the right thing — nobody likes shortcuts, and nobody likes deception.”

"We've been applying our domain reputation work to deceptive cold email infrastructure for some time, and Heatwave adds a complementary signal built from a different data set,"adds Raymond Dijkxhoorn, CEO at SURBL. "The more independent sources pointing at the same domains, the harder it becomes for that deceptive infrastructure to hide."

"Synthetic domain warming is a direct violation of beehiiv's Acceptable Use Policy," says Mariska Calabrese, vice president of security at beehiiv. "Manufacturing fake engagement to trick an inbox into trusting a sender isn't legitimate, it's deception."

Calabrese adds, "The senders on our platform earn their reputation the real way, through subscribers who actually want their content. Signals like Heatwave help us and the rest of the ecosystem hold that line, protecting the senders who play it straight from being crowded out by the ones who don't."