Guides
Custom risk scores for inbound emailA custom risk score helps an organisation turn several email security signals into one practical decision. Rather than treating a sender reputation result, SPF…Monitor Expiring Domain Trust Before Attackers Take OverAn expiring domain can become a valuable target long before it disappears from the internet. If it has a history of legitimate email, customer traffic and…How to Check an Email Sender’s IP History Before Receiving MessagesAn email can look convincing while coming from an infrastructure address with a poor record. Checking the sending IP before accepting a message helps reveal…Understanding Relay-Information Alerts in DMARC ReportsA DMARC report indicator marked “Relay-Information” alongside unknown servers can be unsettling, particularly when a domain owner expects every legitimate…Building a live feed of suspicious newly registered domainsA newly registered domain can become part of a phishing campaign within hours. Monitoring registration age alongside sender reputation, authentication results…Detecting Phishing Behind a Valid DKIM SignatureA phishing email can pass DKIM and still be dangerous. This is especially true when an attacker controls a forwarding address, mailbox rule, or compromised…Why Regional Trust Scores Matter for Your Email DomainA domain can appear trustworthy to recipients in Sydney while triggering more scrutiny in Singapore, London or Los Angeles. Email reputation is shaped by…Tracking email authentication history for a newly acquired domainA newly acquired domain can look clean in a registrar account while carrying a complicated email history. Previous owners may have used it for marketing, staff…Automated inbound whitelisting with trust score thresholdsAutomated whitelisting can reduce false positives while keeping suspicious messages away from staff inboxes. Instead of approving every sender manually, a mail…What “Other” and “Unknown” DMARC Recipients Can RevealA DMARC report is intended to show how messages claiming to come from your domain are being handled. It can reveal authentication results, sending…