SH Consulting says Eden Park’s DMARC reports went to an expired domain it registered, providing access to aggregate reports and a map of roughly 600 counterparties. Eden Park removed the reference and asked for the reports to be deleted.
The article explains three reasons parked domains may be blocked—category-based filtering, unauthenticated mail, or abuse-related blocklisting—and recommends changing the domain destination, checking mail use and authentication, and addressing abuse before requesting a
Monitoring 364 domains belonging to a real estate team found 79 parked domains sending unauthenticated email. The publisher says DNS lockdown records reduced delivery, with remaining spoofed messages rejected by mailbox providers.
A researcher found hijacked subdomains at 34 U.S. universities serving SEO spam. Infoblox linked the campaign to Hazy Hawk; the article explains how abandoned CNAME records enable takeovers and recommends DNS inventory, audits, and cleanup.
A researcher says reports from 22 organizations reached a domain used in Cloudflare and other DMARC guides. Cloudflare corrected its documentation, but copied guides and production DNS records remain unchanged.
A researcher who registered lapsed doverpmi[.]com received 800+ business emails and DMARC reports for JE Pistons and Wiseco. JE later removed its reporting address; Wiseco still points to the domain, but inbound mail is now rejected.
The guide recommends auditing and authenticating every legitimate sender, monitoring DMARC reports, then gradually moving through quarantine to reject. It cautions that forwarding and some non-compliant receivers can limit enforcement.
Based on 100+ audits, SH Consulting identifies nine causes of spam-folder placement, including weak sender reputation, unengaged lists, broken authentication, spoofing and overmailing, with monitoring and configuration steps to improve deliverability and protect domains
An agency says a SendGrid payment-method verification hold on one account locked more than 50 accounts tied to the same phone number for 36 hours. It shares recovery steps and ways to reduce the risk of another lockout.
DMARC p=reject can reduce spoofing, but recipient servers decide how to handle failing messages. The article reports that So-Net accepted spoofed messages despite failed SPF and DKIM checks, with related rejections attributed to full inboxes.
The article compares SendGrid’s platform-specific consulting with independent services, emphasizing cross-platform visibility and email security measures such as DMARC enforcement, spoofing prevention, MTA-STS, DNSSEC and TLS-RPT.
Based on 100+ audits, the article explains why messages reach spam and recommends monitoring domain/IP reputation, suppressing disengaged recipients, validating SPF/DKIM/DMARC, enforcing DMARC, and restricting SaaS notification features that can be abused for phishing.
SH Consulting scanned 1,055 CRM domains and found 11 listed and 127 candidates on Validity Heatwave. Its analysis highlights persistent listings and cases where lookalike matching can associate unrelated domains, with DMARC and review requests among the recommended next
The guide explains how SURBL lists URLs in email, common causes including compromised sites, leaked ESP keys and unsolicited outreach, and a four-step process to investigate, fix root causes, strengthen email security and request delisting.
The article explains that UCEPROTECT Level 3 lists entire provider networks, not individual senders, and recommends checking bounce logs for actual rejections. It argues paid delisting is usually unnecessary because listings can return.
A practical guide to Spamhaus blocklists, why senders may be listed, how to check listings by DNS, and steps to address sending practices or compromised machines before requesting delisting.
An SH Consulting analysis of 30 days of DMARC data found 99.74% of 11,846 legitimate sending IPs passed reverse-DNS checks, but 137 of 494 domains used at least one failing IP. HELO was not assessed.
SH Consulting scanned 25,964 U.S. government-related domains and found 43 with expired, mistyped or repurposed DNS dependencies. The flaws could enable email spoofing, mail interception, DNS control or exposure of DMARC reports; researchers registered 17 domains andแจ?
