Guides
Using Domain Trust Signals in Threat Hunting PlaybooksEmail attacks often leave clues in the infrastructure behind a message. A sender domain may have weak authentication, a poor reputation, or a newly registered…Automatic Checks for Brand-Abusing Newly Registered DomainsAttackers often register domains that resemble a trusted company name, product, or executive identity. These lookalike domains can support phishing pages,…Assessing Partner Domain Risk Before Business OnboardingA new supplier, reseller, technology provider, or contractor can introduce email and impersonation risks before the relationship is fully established. A…How to Spot Phishing After an MX Record ChangeA phishing campaign can become more convincing when attackers use a domain whose MX record was changed recently. The MX, or Mail Exchange, record tells the…Why Every Email List Domain Needs A Trust Score CheckEmail marketing performance depends on more than compelling copy and accurate recipient addresses. The domains connected to your campaigns, partner records,…How to Use the Platform’s API for Bulk DKIM Due DiligenceEmail authentication is a central part of vendor, acquisition, and partner due diligence. A domain with a valid DKIM record can demonstrate better control over…What a Sudden Increase in DMARC Reporting from Unknown IPs Might MeanA sudden increase in DMARC reporting from unknown IPs can be alarming, especially when the addresses do not match your mail servers, marketing platforms, or…How to Verify an Email Attachment Server Before Accepting FilesEmail attachments can arrive from a familiar contact while being delivered through an unfamiliar or compromised server. A trustworthy sender address is useful,…Use DMARC Reports to Find Unauthorized Email SendersDMARC reports provide a practical view of which systems send messages claiming to represent your domain. They can reveal legitimate providers you forgot to…Why an SPF Fail From Your Own IP Demands Immediate InvestigationAn SPF failure means the sending IP address is not authorized by the domain’s published Sender Policy Framework record. When that address belongs to your…