Guides

Why a Short DKIM Key Weakens Domain Security
A domain can pass a DKIM check and still have a meaningful security weakness. DKIM, or DomainKeys Identified Mail, uses cryptographic signatures to prove that…
Combining Trust Score and Email Authentication in a Risk Formula
Security teams across Australia are quietly shifting away from binary allow-or-block decisions. With the ACSC reporting thousands of phishing incidents every…
What heavy rua traffic on a DMARC p=none policy means for compliance
A DMARC record published with a policy of p=none tells receiving mail servers to take no action against messages that fail SPF or DKIM alignment. The domain is…
Spotting newly registered domains with historical reputation data
Freshly minted domain names are the lifeblood of modern phishing campaigns. Cybercriminals register lookalike addresses hours before launching convincing…
Why phishers use free mail with SPF records against filters
Email-borne scams continue to hit Australians hard. Scamwatch data consistently ranks phishing among the top loss categories reported from Sydney to Melbourne,…
Tracing SPF Include Chains Behind Suspicious Email Senders
A suspicious email can appear to come from a familiar brand while its sending infrastructure is controlled by a completely different organisation. SPF analysis…
When a password reset domain drops below a trust score of 30
Email authentication scores quietly determine whether a password reset message lands in an inbox or vanishes into a spam folder. For domains that handle…
Spotting forwards and spoofs in email authentication headers
Emails from a mate in Melbourne or a colleague in Brisbane might have travelled a long way before reaching your inbox. Australian households and small…
Why valid DKIM cannot make an expired SSL certificate safe
A valid DKIM signature can show that an email was signed by an authorised system for a domain. It helps receiving servers check whether key parts of the…
How Bulk Domain Checks Reveal Typosquatting Against Your Brand
A single lookalike domain can support phishing, invoice fraud, fake login pages, or counterfeit customer support. Typosquatting relies on small changes that…