Malicious activity defense using ephemeral record data

A method comprising:

• detecting a request from a first communication device associated with a first identifier to a second communication device associated with a second identifier;
• retrieving a profile from a database based on the first identifier in response to detecting the request;
• retrieving an ephemeral record of the profile based on the second identifier, wherein the ephemeral record is associated with an expiration time and comprises a set of context values associated with the second identifier;
• providing a second message comprising data based on the set of context values to the second communication device, wherein receiving the second message causes a user interface of the second communication device to present information based on the set of context values;
• and
• in response to a retention condition being satisfied, deleting the ephemeral record.

One or more non-transitory, machine-readable media storing program instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

• detecting a request from a first communication device associated with a first identifier to a second communication device associated with a second identifier;
• retrieving a profile from a database based on the first identifier in response to detecting the request;
• retrieving an ephemeral record of the profile based on the second identifier, wherein the ephemeral record is associated with an expiration time and comprises a set of context values associated with the second identifier;
• providing a second message comprising data based on the set of context values to the second communication device, wherein receiving the second message causes a user interface of the second communication device to present information based on the set of context values;
• and
• in response to a retention condition being satisfied deleting the ephemeral record.