Osato Umweni · Blog
Blog
Plain explanations of the things that quietly break business email and websites. Written for owners, not for engineers.
Your business name is the easiest part of a scam to fake
The FBI now tracks AI-generated fraud as its own category, and a growing share of it borrows a real company's name rather than stealing directly from one. Here is what that means for a small business and its domain.
If your helpdesk's caller ID can be faked, so can your email address
A hacking group is now spoofing real IT helpdesk phone numbers to steal logins by phone. The same weakness sits in your inbox, except email already has a fix and most businesses have not turned it on.
Why a slow website costs more than it looks like it does
A slow page does not show up as a complaint. It shows up as visitors who never became customers, and you never see them leave.
How a fraudster sends an invoice that looks like it came from you
The scam does not need to break into your systems. It only needs your domain to accept a login it was never given, and DMARC is the setting that stops it.
SPF, DKIM and DMARC explained without the jargon
Three records, three different jobs. Here is what each one actually does, in an order that makes sense before you look at your own domain.
What p=none really means and why it protects nobody
A DMARC record with p=none looks like protection. It is not. Here is what that setting actually tells the world, and what changing it involves.
The SPF rule that breaks your email when you add one tool too many
SPF allows ten DNS lookups per check. Most small businesses hit that limit without knowing it exists, and the failure looks nothing like a limit being hit.
What actually breaks on a website nobody maintains
A site that still loads is not the same as a site that still works. Here is what quietly fails first, in order.
Reading a DMARC report without buying any software
The zip file your mail provider sends you every day is not for engineers. Here is what is inside it and how to read it in ten minutes.
Why your invoices land in spam
It is almost never the wording. It is usually three DNS records that nobody set up, and the fix takes days rather than months.
Check your own
Is your domain one of them?
The check is free, takes about thirty seconds, and shows the full result without asking for your email.
Run the free check