Guides

Vet Email Service Providers Before They Send on Your Behalf
Choosing a third-party email service provider is a security decision, not just a procurement task. Whether the provider handles marketing campaigns, customer…
Reading SPF Neutral Results and What They Say About a Domain
Email authentication has become a daily concern for IT teams in Sydney, Melbourne, and regional offices across Australia. SPF records, alongside DKIM and…
Spotting domain spoofing through legitimate email forwarders
Most office workers in Sydney and Melbourne have a colleague who forwards their mail while on long service leave. That routine habit, however, sits at the…
Why a Short DKIM Key Weakens Domain Security
A domain can pass a DKIM check and still have a meaningful security weakness. DKIM, or DomainKeys Identified Mail, uses cryptographic signatures to prove that…
Combining Trust Score and Email Authentication in a Risk Formula
Security teams across Australia are quietly shifting away from binary allow-or-block decisions. With the ACSC reporting thousands of phishing incidents every…
What heavy rua traffic on a DMARC p=none policy means for compliance
A DMARC record published with a policy of p=none tells receiving mail servers to take no action against messages that fail SPF or DKIM alignment. The domain is…
Spotting newly registered domains with historical reputation data
Freshly minted domain names are the lifeblood of modern phishing campaigns. Cybercriminals register lookalike addresses hours before launching convincing…
Why phishers use free mail with SPF records against filters
Email-borne scams continue to hit Australians hard. Scamwatch data consistently ranks phishing among the top loss categories reported from Sydney to Melbourne,…
Tracing SPF Include Chains Behind Suspicious Email Senders
A suspicious email can appear to come from a familiar brand while its sending infrastructure is controlled by a completely different organisation. SPF analysis…
When a password reset domain drops below a trust score of 30
Email authentication scores quietly determine whether a password reset message lands in an inbox or vanishes into a spam folder. For domains that handle…