DomainScores
> Guides
Domain & Email Security Guides
Practical guides behind your domain trust score: SPF, DKIM, DMARC, DNS security, TLS and email authentication — explained in plain English.
Protect Your Domain and Email with Cloudflare DNS + DMARC — Domain hijacking and email spoofing can wreck a business overnight. How Cloudflare DNS, DNSSEC, and SPF/DKIM/DMARC protect Irish SMEs — full walkthrough.
How DMARC, DKIM and SPF Actually Work — Beyond Spam Filters — Spam filters alone do not stop email spoofing. DMARC, DKIM and SPF are the technical controls Irish SMEs need. How they work and how to implement them.
Why Irish Businesses Need SPF, DKIM and DMARC — BEC Defence — BEC and phishing attacks cost Irish SMEs millions. How SPF, DKIM and DMARC stop email impersonation — and how to implement them for your domain this week.
Stop Email Impersonation — DMARC, DKIM & SPF for Irish SMEs — Without DMARC, anyone can send emails pretending to be your business. Irish SMEs are impersonated daily. How DMARC, DKIM and SPF lock down your domain.
Free SSL/TLS Certificates via Cloudflare — Setup Guide — Sites without HTTPS lose customers and risk GDPR fines. Cloudflare provides free SSL certificates with auto-renewal for any Irish business — setup in 10 mins.
Beyond Microsoft 365 Defaults: Email Security for Irish SMEs — Email security for Irish SMEs beyond Microsoft 365's spam filter: SPF, DKIM, DMARC, BIMI, MTA-STS and domain alignment — what you need and how to set it.
How to Add DMARC for Irish Business — 5-Minute Setup — Add DMARC to your Irish business email in 5 minutes — Microsoft 365, Google Workspace, or any DNS provider. Free, no software, stops spoofing today.
DNS Security for Irish SMEs — Overlooked Protection Layer — DNS filtering is one of the most cost-effective cybersecurity protections for Irish SMEs. What DNS security does, why it matters and how to implement it today.
DigitalTrust.ie Test: How We Went From C to A — We ran DigitalTrust.ie against our own domain, scored a C, and fixed every finding to reach an A. A practical walkthrough for Irish SMEs improving their score.
Why Are My Emails Going to Spam? Causes and Fixes — Why are my emails going to spam? The real causes for small businesses — missing SPF, DKIM and DMARC, poor sender reputation or a blacklisting — plus fixes.
Invoice Redirection Fraud and BEC: How to Stop It — Invoice redirection fraud and Business Email Compromise cost Irish SMEs millions. Learn how the scam works and the practical, low-cost steps that stop it.
Email Spoofing Explained: How Attackers Fake Your Domain — Email spoofing lets attackers fake your domain in the From address to send phishing in your name. Learn how it works and how SPF, DKIM and DMARC block it.
DMARC: Stop Criminals Sending Email as Your Business — Without DMARC enforcement, anyone can send email from your exact domain address. 89% of domains have this gap. Here's what it costs — and how to close it.
SPF Records Explained: Authorise Your Email Senders — SPF tells the world which servers are authorised to send on your behalf. Without it, your legitimate emails get junked and criminals can impersonate you.
DKIM: The Digital Seal That Proves Your Emails Are Genuine — DKIM cryptographically signs every email you send. Without it, Google and Yahoo increasingly treat your mail as suspicious — and buyers flag the risk.
HTTPS: Your Website Is Telling Visitors 'Not Secure' — A missing or broken HTTPS setup costs you visitors, Google ranking, and enterprise deals. Here's what it means for your business and how to fix it fast.
DNSSEC: Prevent Attackers Redirecting Your Domain — Without DNSSEC, attackers can poison DNS caches and redirect your website and email to servers they control — invisibly. Only 1.99% of domains are protected.
HSTS: Stop Attackers Intercepting Your First Connection — HSTS forces browsers to always use HTTPS — closing the unencrypted window on every first connection. Required by enterprise buyers and most insurers.
Old TLS Versions: The Encryption Gap on Your Server — TLS 1.0 and 1.1 are deprecated and exploitable. If your server still accepts them, browsers flag it, insurers notice, and enterprise questionnaires fail you.
SSL Certificate Errors: Fix 'Connection Is Not Private' — A browser certificate warning stops visitors dead. 8.21% of HTTPS sites have invalid certificates — costing leads, sales, and trust on every visit.
CAA Records: Control Who Can Issue Your SSL Certificates — Without CAA records, any of 200+ certificate authorities could issue a certificate for your domain. It takes 5 minutes to lock this down.
Can Someone Spoof Your Email Domain? Probably — Check Now — 89% of domains have no enforcement stopping criminals from sending email as them. Invoice fraud, CEO impersonation, and supplier scams all start here.
Emails Going to Spam? Diagnose SPF, DKIM and DMARC Failures — Email landing in junk is almost always an SPF, DKIM, or DMARC problem. Here's how to diagnose which one is failing — and what it's costing you.
NIS2 and Email Security: What Irish Businesses Need in Place — NIS2 requires demonstrable email security controls. DMARC enforcement is what regulators reference. Here's what Irish businesses need — and what's at stake.
Cyber Insurance: What Underwriters Check on Your Domain — Irish cyber insurers check DMARC, TLS, and DNS security on every application. Only 3.87% of domains pass the full baseline — gaps mean higher premiums.
DMARC Policies Compared: p=none vs quarantine vs reject — 24.89% of domains publish DMARC but most use p=none, which provides zero protection. Here's what each policy level does — and which one your business needs.
Google & Yahoo Email Sender Rules 2026: Are You Ready? — Google and Yahoo now require SPF, DKIM, and DMARC for all senders. Most Irish business domains aren't compliant. Here's what happens if you're not.
Domain Hijacking: How Attacks Work and How to Prevent Them — Domain hijacking redirects your website and email to an attacker's servers. The free protections take minutes to enable — most domains skip them.