Data-informed holding statements for organic traffic anomaly