[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-25 UTC."],[],[],null,["# BadWhitelist\n\n- [JSON representation](#SCHEMA_REPRESENTATION)\n\nAlert for setting the domain or IP that malicious email comes from as whitelisted domain or IP in Gmail advanced settings.\n\n| JSON representation |\n|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| ``` { \"domainId\": { object (/workspace/admin/alertcenter/reference/rest/v1beta1/DomainId) }, \"maliciousEntity\": { object (/workspace/admin/alertcenter/reference/rest/v1beta1/MaliciousEntity) }, \"messages\": [ { object (/workspace/admin/alertcenter/reference/rest/v1beta1/GmailMessageInfo) } ], \"sourceIp\": string } ``` |\n\n| Fields ||\n|-------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `domainId` | `object (`[DomainId](/workspace/admin/alertcenter/reference/rest/v1beta1/DomainId)`)` The domain ID. |\n| `maliciousEntity` | `object (`[MaliciousEntity](/workspace/admin/alertcenter/reference/rest/v1beta1/MaliciousEntity)`)` The entity whose actions triggered a Gmail phishing alert. |\n| `messages[]` | `object (`[GmailMessageInfo](/workspace/admin/alertcenter/reference/rest/v1beta1/GmailMessageInfo)`)` The list of messages contained by this alert. |\n| `sourceIp` | `string` The source IP address of the malicious email, for example, `127.0.0.1`. |"]]