AZ
Back to sessions

unx_00fdc8f

96
User: l••••••@proton.me🇵🇱PL131.224.•••.•••AS8452 TE-AS
Open in graph
Final decision
Blocked· 96 / 100
Driven primarily by:
  • Rooted / jailbroken device70
  • Velocity burst45
  • Unusual navigation pattern39

Fired signals

Each card explains what the signal means and why it fired.

Device
Rooted / jailbroken device
70
Integrity checks flagged a rooted Android or jailbroken iOS device — elevating malware and tampering risk.
Behavior
Unusual navigation pattern
39
User traversed pages in an order inconsistent with typical flows for this account.
Identity
Velocity burst
45
Account has produced an abnormal burst of authentication attempts or transactions.
New device for account
25
User signed in from a device never previously bound to the account.

Risk breakdown

Contribution to the final score by category.

  • Device70
  • Behavior39
  • Network0
  • Identity70
  • Malware0

Event timeline

Everything that happened during this session.

  1. Session start11:42:46 PM
    Cellular · AS8452 TE-AS
  2. macOS · macOS Sequoia11:42:48 PM
    fp_00007hh
  3. Rooted / jailbroken device11:43:03 PM
    severity 70
  4. Velocity burst11:43:25 PM
    severity 45
  5. Unusual navigation pattern11:43:30 PM
    severity 39
  6. New device for account11:43:37 PM
    severity 25
  7. Opened /transfer11:43:49 PM
  8. Transfer attempt11:43:57 PM
    $240
  9. Blocked by unilinx11:43:51 PM