Guides
Spotting Phishing from Authenticated Legitimate SubdomainsA phishing email can arrive from a real organisation’s domain and still be malicious. Attackers may exploit a forgotten subdomain, compromise a marketing…Why DMARC Reject Fails Without SPF or DKIMA DMARC record with p=reject tells receiving mail systems to refuse messages that fail authentication and alignment checks. It is a strong anti-spoofing…How to Build a Recurring Report of Brand Email DomainsA brand can send email through its main domain, a marketing platform, a customer relationship system, a payroll provider, a ticketing tool and several…What a Short DKIM Expiry Reveals About Mail Server ConfigurationA DKIM signature allows a receiving mail server to verify that a message was authorised by the sending domain and that important parts of the message were not…Checking attachment links with Trusted Sender ScoreAn email attachment URL can look harmless while leading to a newly registered domain, a compromised website, or a convincing copy of a legitimate file portal.…Why an unfamiliar SPF include warrants a closer lookA new SPF include can appear to be a minor DNS update, yet it may give another service permission to send email for a domain. When that service is unfamiliar,…Reading DMARC Failures When Header and Envelope Domains DifferA DMARC failure can look confusing because an email contains several domain identities. The address visible to a recipient appears in the From header, while…What Daily Trust Score Changes Reveal About Shared HostingA domain trust score that changes from day to day can reveal more than a temporary email delivery problem. It may show that the domain shares infrastructure…How to bulk-check domains in SIEM logs for compromised sendersA SIEM can reveal suspicious email activity long before a complaint reaches the help desk. By extracting every sender domain from authentication failures,…Why Legacy Subdomains Without DMARC Become Spoofing HavensMany Australian organisations unknowingly leave digital back doors open through old subdomains created for past campaigns, pilot projects, or temporary…