Guides

What a Flood of DMARC Reports Reveals About Your Infrastructure
DMARC reports arrive like weather forecasts for your sending domain, yet many teams across Sydney and Melbourne treat them as background noise. When a single…
Detecting forged emails that pass DKIM via a stolen subdomain key
Email authentication has long given organisations a false sense of safety. A message showing a green DKIM signature looks legitimate, the cryptographic seal…
What WHOIS Privacy Reveals About a Domain's Trustworthiness as a Sender
When an unfamiliar sender lands in your inbox, most people run a quick WHOIS lookup hoping to find a real name or address. What many Australians discover…
Enrich Threat Intelligence With Email Sender Trust Score API
Security teams across Australia are constantly dealing with phishing campaigns that target both government services and private businesses. From fake myGov…
When Valid SPF Still Hides a Dangerous Email
An email can pass SPF and still deliver a malicious attachment. That result is not a contradiction: SPF confirms that a sending server is authorised to use a…
How to spot a suspicious SPF include in your domain
An SPF record tells receiving mail servers which systems are authorised to send messages for a domain. Its include mechanism delegates that permission to…
Why SPF -all can make phishing domains look trustworthy
Email authentication is designed to help receiving systems distinguish authorised mail from forged messages. SPF, or Sender Policy Framework, publishes a list…
Building a Long-Term Trust Score Baseline for Your Domain
Running a business across the eastern seaboard from Brisbane down to Melbourne means juggling AEST one day and AEDT the next, and dealing with spam complaints…
DMARC Reports With Third-Party DKIM Signatures and Brand Trust
Email authentication has become a frontline defence for Australian organisations battling sophisticated phishing campaigns. The Australian Cyber Security…
How to Detect Phishing Emails With Random Subdomains and Valid DKIM
Most phishing guides warn about misspelled domains, but a quieter trick is spreading across Australian inboxes. Attackers register a real domain, configure…