Microsoft 365 from GoDaddy Help

What do the banners from Advanced Email Security mean?

With Advanced Email Security, all incoming email is flagged with a banner or tag informing you of its threat level. This strengthens your security by making it easier to identify and report potentially malicious content. There are different types of banners or tags that warn you of possible email threats.

Required: Check which version of Advanced Email Security you're using by signing in and checking what's displayed at the top of your dashboard.
  • If you’re using Advanced Email Security from Proofpoint, you’ll see a white header with “GoDaddy."
    Proofpoint dashboard banner
  • If you’re using Advanced Email Security powered by INKY, you’ll see a blue header that includes "Powered by INKY."
    INKY dashboard banner

Advanced Email Security from Proofpoint will display either an informational (gray) tag or a warning (yellow) tag. If the message matches both a warning and an informational tag, the warning tag is displayed. If the message matches more than one warning tag, the one that is highest in priority is applied. In order from highest to lowest priority, you might see any of the following tags:

A Potential Impersonation (DMARC) tag means an email came from a verified domain that failed a DMARC check and has been rejected.
An example of a DMARC tag.

A Newly Registered Domain tag means the email was sent from a newly-registered domain.
An example of a Newly Registered Domain tag.

A High Risk Sender Location (High Risk GEO IP) tag means the email was sent from a high-risk location.
An example of a High Risk GEO IP tag.

An External Sender tag means the message came from an external sender, or someone outside of your organization.
An example of an External Sender tag.

Depending on the settings that your admin enabled, you might be able to select Learn More to see why the message was tagged or to add the message to your blocklist.

Related steps

Neutral (gray), caution (yellow), and danger (red) are all possible threat categories.

A neutral (External) banner means that the message came from an external sender but does not appear to be a threat.
Neutral banner

A Caution banner means that Advanced Email Security found something unusual in the email. It might not be considered dangerous, like when you receive email from a first-time sender, but the message should be treated with caution.
Caution banner

A Danger banner means that Advanced Email Security believes the message is suspicious and could be a phishing attempt. Possible reasons for this banner include brand impersonations, blacklisted phishing URLs, or attempts to spoof mail so it looks like it came from an internal company account. Your security team or email administrator can configure your server to automatically quarantine these dangerous emails.
Danger banner

If the email includes a suspicious link that you or another user opened, Advanced Email Security will stop you from continuing to the malicious site.

Related steps

More info