Guides
Validate Every Sender Domain in Your Inbox with Trusted Sender ScorePhishing is one of the most reported cybercrimes across Australia, with the Australian Cyber Security Centre regularly warning about criminals impersonating…What an Incorrect DKIM d= Parameter Can RevealAn email can appear to come from a familiar Australian organisation while its cryptographic signature tells a different story. The DKIM d= parameter identifies…Continuous Domain Monitoring with a Trust Verification APIEmail trust can change long after a domain has passed its initial security review. A new mail provider, an expired DKIM key, a broken DMARC record or a sudden…Why DKIM-only DMARC still leaves a domain exposed to spoofingA domain can report DMARC as “pass” even when SPF fails. This happens when the message carries a valid DKIM signature aligned with the visible From domain.…How to assess a domain before you acquire itBuying an established domain can bring useful brand recognition, backlinks and existing email traffic. It can also transfer a hidden liability: a history of…What a Stable Trust Score Says About Changing IPsA sender’s IP address can change while its trust score stays remarkably steady. This often means reputation systems are evaluating more than the current server…Decoding phishing email headers to uncover the true senderPhishing remains one of the most reported cybercrime categories in Australia, with the ACCC's Scamwatch logging tens of thousands of complaints annually. Many…How attackers use DKIM-signed domains to bypass SPF-only filtersEmail authentication rests on three pillars: SPF, DKIM, and DMARC. Far too often, businesses deploy the first and ignore the rest, leaving a window that…Scanning domains with DMARC p=none that lack active monitoringEmail spoofing remains a persistent threat to Australian organisations, from small e-commerce shops in Brisbane to large financial institutions in Sydney. A…What excessive SPF lookups reveal about domain misconfigurationAn SPF record tells receiving mail servers which systems are authorised to send messages for a domain. It uses DNS mechanisms such as include, a, mx, exists,…