Guides

How to Manually Verify a QR Code Link Before Scanning It
A QR code is only a container for a web address. It carries no seal of approval, and a sticker can cover an original code on a parking meter, café table,…
A Domain Score of 100 With No Mail Server
A domain with a trust score of 100 but no mail server can present a deceptive combination: its reputation looks excellent, yet it has no visible infrastructure…
Configure API Alerts for Weakened DMARC Policies
Email spoofing campaigns can look legitimate because a familiar domain appears in the From field. Monitoring should therefore inspect DNS policy and sender…
Why a competitor IP in your SPF record is a red flag
A newly registered domain should not quietly authorise a competitor’s mail servers. This is why a new domain with an SPF record that includes your competitor's…
Extracting Sender Domains From Raw Email Logs
To learn how to write a regular expression for extracting sender domains from raw email logs, first decide which field represents the sender you trust. A…
High trust, weak SSL: what domain reputation leaves exposed
A domain with a high trust score but poor SSL configuration demonstrates why no single security indicator can establish trust. Reputation can show that a…
Find missing DMARC records across your domain database
A domain without a DMARC record gives attackers more room to impersonate a trusted organisation. If that domain appears in your customer, supplier, marketing…
Why Email Forwarders Can Damage SPF and Sender Reputation
Email forwarding looks simple: a message arrives at one mailbox and is sent on to another. In practice, the forwarded message may reach the recipient from a…
How to investigate a phishing email with a perfect trust score
A perfect sender or domain trust score can feel reassuring, but it is only one signal in a broader email security investigation. A reputable domain may be…
What p=none and a long rua interval reveal about DMARC maturity
A DMARC record using p=none tells receiving mail systems to monitor authentication failures without asking them to quarantine or reject messages. That policy…