Guides
Scanning domains with DMARC p=none that lack active monitoringEmail spoofing remains a persistent threat to Australian organisations, from small e-commerce shops in Brisbane to large financial institutions in Sydney. A…What excessive SPF lookups reveal about domain misconfigurationAn SPF record tells receiving mail servers which systems are authorised to send messages for a domain. It uses DNS mechanisms such as include, a, mx, exists,…Building a Playbook for Dormant Domains With Sudden Trust SpikesWhen a domain that has been quiet for years suddenly lands a high trust score, security teams across Australia are right to raise an eyebrow. The shift can…Why a newly registered domain with privacy protection often signals riskA small bookkeeping firm in Parramatta opens what looks like an invoice from a regular supplier, only to discover the sender's address ended in a domain…Verifying Domain Reputation Before You Click an Email LinkPhishing remains one of Australia's most reported scams, with the ACCC's Scamwatch logging tens of thousands of complaints each year. Many messages imitate…Why a High DKIM Failure Rate from One IP in Your DMARC Report MattersWhen you open a DMARC aggregate report, the data can feel overwhelming - rows of IPs, message counts, and pass or fail results across thousands of messages.…Distinguishing brand impersonators from real competitors using SPFA finance staffer in Sydney opens an invoice that looks correct. The logo matches, the bank details have changed, and the domain reads "acme-payments.com"…Why a high trust score with constant invalid sends signals hidden threatsA domain reputation score has become a frontline checkpoint for mail servers, gateways, and security teams. In Australia, where small businesses in Sydney and…Using an API to Enrich Threat Intelligence With Email Trust SignalsThreat intelligence becomes more useful when an indicator carries context, not just a domain name or IP address. Email sender trust signals can help security…When an Invoice Domain Scores Below 20A trust score below 20 on a domain in your invoice email flow should force an investigation, especially when the message requests payment, bank-detail changes…