Guides
How to Measure the Trust Baseline of Every Domain in Your InboxEvery inbox contains more domains than most people realise. An email may come from a supplier, payment processor, parcel service, SaaS platform, newsletter…What Unaligned SPF Passes Reveal About Your Email ForwardersA DMARC report full of SPF passes can look reassuring until its authenticated domains differ from the visible business addresses. Forwarding is often the…How to Parse Authentication-Results Headers to Find Failed ChecksAn Authentication-Results header summarises checks performed by a receiving mail system, usually for SPF, DKIM and DMARC. Each method has its own result, so…Why Your Bank Will Never Send Secure Login Links from a Low Trust ScoreAustralian customers regularly receive emails that appear to come from Westpac, ANZ, NAB or Commonwealth Bank. Some announce security changes, new PayID…How shortened links hide poor sender scoresA shortened URL can conceal the domain that actually hosts a suspicious page. It may also pass through several redirect services, making a familiar messaging…When an SPF record points to an unreachable hostA domain with an SPF record that points to an unreachable host can create a deliverability problem even when the sending mail server is legitimate. SPF relies…How to use Trusted Sender Score to test domain impersonationEmail impersonation is rarely just a copied logo. A message may claim to come from your finance team, use a convincing reply address, or rely on a lookalike…SPF and DKIM passes do not clear suspicious URLsWhy a domain that passes both SPF and DKIM but has a suspicious URL pattern needs scrutiny comes down to a crucial distinction: SPF and DKIM validate…Automated email triage for low-trust sender domainsHow to build an automated email triage flow that pauses low-trust sender domains without hiding legitimate mail: treat sender trust as a layered decision, then…Missing DMARC on government domains and institutional riskWhat the absence of a DMARC record on a government domain can suggest about institutional risk points to control maturity, not proof of compromise. A missing…