Proton filters conservatively and publishes little about how. It weighs authentication and public blocklist status heavily, which is good news for debugging: both are things you can check yourself in a couple of minutes.