Guides
Investigating a DMARC quarantine surgeA sudden spike in failed DMARC quarantine events from one subdomain calls for a rapid, evidence-led investigation. It is not, by itself, proof of a breach:…Why p=quarantine without DKIM still lets forgeries reach the inboxA domain can publish an apparently strict DMARC policy and still be linked to forged mail that reaches a user. The key issue is why a domain with a…Audit CRM vendor domains with Trusted Sender ScoreVendor email is a common route for invoice fraud, phishing, credential theft and payment redirection, yet customer relationship management (CRM) records often…What SPF permission to a third-party ESP means for your brandWhat a domain with an SPF record that authorises a third-party ESP means for your brand is simple: it has delegated sending authority. The permission supports…Spot a suspicious macro-enabled downloadA macro-enabled attachment can carry code that runs when macros are enabled, even when its name looks ordinary. The strongest warning sign is often a…Why common DKIM selectors attract unwanted attentionA domain with a DKIM signature using a common selector is easy for attackers to discover because the selector is exposed during normal email delivery. DKIM, or…Use an API to check domain reputation before allowlistingAn allowlist can stop a familiar customer, supplier or system from being treated like a stranger. It can also become an attacker’s shortcut when a domain is…What a Rising Domain Trust Score Should Prompt You to AskA rising trust score can be reassuring, but it does not prove that every email now passes authentication. What a domain with a trust score that rises after…How to Create a High-Trust Domain AllowlistEmail security gateways combine reputation, authentication and content inspection to decide whether messages reach a mailbox. A controlled allowlist of…Why a domain with valid SPF but no DMARC is still a phishing enablerSPF can make an email appear authenticated while leaving the address a recipient actually sees unverified. The record is useful, but it governs one part of…