[Bots] ATO login endpoints v2

src/content/docs/bots/additional-configurations/detection-ids/account-takeover-detections.mdx

@@ -11,16 +11,14 @@
 
 | <div style="width:100px">Detection ID</div> | Description                                                                                                                                                                                                                                                                                                                  |
 | ------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `201326592`                                 | Observes all login failures to the zone.                                                                                                                                                                                                                                                                                     |
 | `201326593`                                 | Observes all login traffic to the zone.                                                                                                                                                                                                                                                                                      |
 | `201326598`                                 | Sets a dynamic threshold based on the normal traffic that is unique to the zone.<br /><br /> When the ID matches a login failure, Bot Management sets the [bot score](/bots/concepts/bot-score/) to 29 and uses [anomaly detection](/bots/concepts/bot-detection-engines/#anomaly-detection-enterprise) as its score source. |
 
 :::caution[Login endpoints]
 Not all login endpoints are automatically detected. 
 
-By default, endpoints [labeled](/api-shield/management-and-monitoring/endpoint-labels/#categories) as `cf-log-in` will be evaluated for account takeover detection IDs.
-
-However, if you have a non-traditional login endpoint, you should label your login endpoint with `cf-log-in` using the [endpoint labeling service](/api-shield/management-and-monitoring/endpoint-labels/#create-a-label).
+Cloudflare evaluates and automatically detects your website or application's login endpoint, but non-traditional login endpoints may not be recognized. If you have a non-traditional login endpoint, you should label it with `cf-log-in` using the [endpoint labeling service](/api-shield/management-and-monitoring/endpoint-labels/). Once you have applied the `cf-log-in` label, Cloudflare will use the labeled endpoint for account takeover detection decisions.
 :::
 
 ## Challenges for account takeover detections
@@ -57,7 +55,7 @@
 
 ```js title="Rule example"
 
 (any(cf.bot_management.detection_ids[*] eq 201326593))
 ```
 
 ## Limit logins with account takeover detections