Patent attributes
Information associated with a plurality of electronic communications associated with an entity is obtained. An entry including information associated with a given email address is generated in a whitelist. The entry including the information associated with the given email address is generated based at least in part on a determination, from the obtained information associated with the plurality of electronic communication associated with the entity, that at least a threshold number of electronic communications have been exchanged between the entity and the given email address, and that the at least threshold number of emails were exchanged during a period of time that exceeds a threshold period of time. Subsequent to generating the whitelist entry, an electronic communication to be classified is received. A classification of the received electronic communication is performed based at least in part on a determination of whether the received electronic communication corresponds to an entry in the whitelist.