Email-Borne Insurance Scams: A Complete Guide to Understanding, Preventing & Securing Your Domain

Email-Borne Insurance Scams: A Complete Guide to Understanding, Preventing & Securing Your Domain

ByBrad Slavin

In today’s highly digital world, email remains one of the most essential communication channels for businesses — especially in the insurance industry. Unfortunately, as the industry embraces digital transformation, it also becomes an increasingly attractive target for cybercriminals leveraging email to defraud companies and unsuspecting policyholders alike. Email-borne insurance scams aren’t just an annoyance. When…

Understanding DMARC RFC: A Comprehensive Guide by DMARCReport

Understanding DMARC RFC: A Comprehensive Guide by DMARCReport

ByBrad Slavin

In today’s digital world, email remains one of the most powerful communication channels, but it is also one of the most abused. Every day, millions of malicious emails are sent to deceive recipients — from phishing to brand spoofing to targeted business email compromise (BEC). As these attacks evolve, so too must our defenses. At…

Why is DMARC important for protecting emails sent from G Suite?

Why is DMARC important for protecting emails sent from G Suite?

ByBrad Slavin

DMARC is important for protecting emails sent from G Suite (Google Workspace) because it verifies your domain’s messages via SPF/DKIM alignment and tells receiving servers to quarantine or reject spoofed mail, which dramatically reduces phishing while improving deliverability and visibility through standardized reporting. G Suite’s native security (SPF and DKIM) prevents many spoofing attempts, but…

New ClickFix Scam, Dental Practice Banned, UK MPs Targeted

New ClickFix Scam, Dental Practice Banned, UK MPs Targeted

ByBrad Slavin

Cybercriminals are getting smarter, quieter, and far more convincing. From a new browser-based ClickFix variant that slips past traditional security tools, to healthcare organizations facing legal action after phishing breaches, and even UK MPs being targeted through trusted messaging apps, recent incidents show how fast attack methods are evolving. These threats no longer rely on…

Business Email Compromise vs Phishing Attacks — A Deep Dive by DMARCReport

Business Email Compromise vs Phishing Attacks — A Deep Dive by DMARCReport

ByBrad Slavin

In today’s hyper-connected digital world, email remains the backbone of business communication — and unfortunately, also one of the most exploited attack vectors used by cybercriminals. Sophisticated threat actors continually refine their techniques to deceive trusted recipients, impersonate legitimate senders, and manipulate end users into disclosing sensitive information or transferring funds. At DMARCReport, we believe…

Does a DMARC check verify SPF and DKIM alignment for my domain?

Does a DMARC check verify SPF and DKIM alignment for my domain?

ByBrad Slavin

Yes—DMARC explicitly evaluates SPF and DKIM authentication results and verifies their alignment with the message’s Header From domain, passing if at least one of SPF or DKIM both authenticates and aligns per your DMARC policy. DMARC (Domain-based Message Authentication, Reporting, and Conformance) exists to connect message authentication to domain identity as shown to recipients: the…

CNAME vs ALIAS Records — A Guide by DMARCReport

CNAME vs ALIAS Records — A Guide by DMARCReport

ByBrad Slavin

As DNS users, domain administrators, and website operators know all too well: DNS configuration often feels like walking a tightrope. A small misconfiguration can mean your users can’t reach your site — or your email goes missing. Two DNS record types that are often sources of confusion are CNAME and ALIAS records. They can look…

CNAME vs A Record: What Every Domain Owner Should Know

CNAME vs A Record: What Every Domain Owner Should Know

ByBrad Slavin

By DMARCReport When you register a domain name — say mywebsite.com — you’re not done yet. To get the domain to actually load your website, or allow email to be delivered, you need to configure the Domain Name System (DNS) appropriately. Think of DNS as the internet’s “phone book.” Instead of human-readable domain names, computers…

How can I implement DMARC for multiple domains and subdomains?

How can I implement DMARC for multiple domains and subdomains?

ByBrad Slavin

Implement DMARC for multiple domains and subdomains by standardizing a DNS template (SPF, DKIM, DMARC), inventorying all sending services, using parent-level inheritance with the DMARC sp tag where appropriate, centralizing rua/ruf reporting, rolling out p=none then gradually enforcing per domain (quarantine → reject) based on report-driven confidence, automating DNS and DKIM key management via APIs/IaC,…