Systems and methods for analyzing communication traffic may include receiving message events, aggregating the message events to generate aggregated message events, receiving a destination address, performing traffic analysis for the destination address based on the aggregated message events, wherein the traffic analysis comprises determining an analyzer score for each of the message events associated with the destination address, calculating a risk score based on the analyzer score for each of the message events associated with the destination address; and performing a risk action for the destination address based on the risk score.