Guides
Why Perfectly Authenticated Domains Can Still PhishA domain can pass SPF, DKIM and DMARC checks and still deliver a dangerous email. Authentication confirms that a message was sent by an authorised system for…How to Check Your Domain Against Public Email BlocklistsA domain can lose email credibility without its owner noticing. Compromised mailboxes, weak authentication, malware, poor-quality mailing lists, or a…Why One DMARC Report Cannot Prove Sender ReputationA DMARC report is valuable evidence, but it is only a partial view of email trust. A single report may represent one receiving provider, one reporting period,…Why marketing tracking domains deserve regular reputation checksMarketing links often look harmless because they lead through a familiar campaign platform before reaching a product page. However, the tracking domain itself…Weekly domain expiry reviews for high-trust hijack targetsA domain approaching expiry can become a valuable target when it has a strong email reputation, established backlinks, and a history of legitimate business…Building a trusted sender database from scores and email logsA sender database can turn scattered email security signals into a practical source of truth. Instead of relying on memory, inbox reports, or a single…Check email IP trust before updating SPFAn SPF record tells receiving mail servers which IP addresses are authorised to send email for your domain. Adding an address can help legitimate messages…What Unknown SPF and DKIM Results Mean in a DMARC ReportA DMARC aggregate report usually shows how receiving mail systems evaluated messages claiming to come from a domain. Alongside counts, source IP addresses and…Building a Dynamic Blocklist for Low-Trust DomainsA static blocklist quickly becomes outdated. Domains may be compromised, abandoned, or suddenly used for phishing, while legitimate senders can recover after…Enriching Your SIEM With Live Domain Reputation IntelligenceEmail attacks often begin with a domain that appears familiar but has weak authentication, a poor sending history, or signs of spoofing. Adding domain…