London’s romantic restaurants slacking on DMARC

What better reason to analyze the email domain security of some of the most popular consumer brands than one of the busiest retail holidays, Valentine’s Day? It’s that rose-tinted glasses time of year when some of us replace our common sense and security-savvy online behavior with panic purchases and last-minute, oh-so-expensive restaurant reservations.  

The best table in the house is going to cost more than you think

Call it what you will, ‘The Old Smoke’, ‘The Big Smoke’ or just ‘The Smoke’, but if you were trying to book a table in one of London’s hottest eateries, you may be feeling the financial burn today.

We analyzed the primary domains of the top 48 most romantic restaurants in London, as ranked by GQ Magazine, and found that only one had a DMARC policy in place, and it wasn’t even in quarantine, let alone reject. 

Email fraud continues to bloom

We looked at 20 of the biggest flower delivery companies in the US, as listed by Timeout, and found only two had DMARC set to p=none, not hugely assuring given how many orders are placed online and that so many email addresses are handed over to these companies whose email domains are so easy spoof. At this time of year, it could be as simple as a scammer sending an email asking a consumer if they want to upgrade their order, or tempt them with free delivery, and with one click, financial details are handed over to the unknown.

All that glitters isn’t always gold

It’s a cliche, but apparently people like to get engaged on Valentine’s Day. In fact, last year over one million people in the UK were planning to pop the question on February 14th. 

If you’ve had a wedding, you know how expensive things can get, so we looked into the most popular yet affordable jewelers in the UK to see if these brands were safeguarding their users from heartache. Sadly, none of those listed by Yahoo Style as the brand to buy this Valentine’s season had any DMARC policies in place.

‘But soft! What light through yonder window breaks?’ For those of us in the security world, it’s anything that will mitigate known and unknown threats. To strengthen your organization’s email security policies and start protecting your users, explore the solutions on offer and select a partner that suits your needs – it may just be Red Sift you’re looking for. If so, drop us a note. We can’t promise to be your one true love, but we’ll definitely set your email security heart on fire.

PUBLISHED BY

Red Sift

14 Feb. 2020

SHARE ARTICLE:

Categories

Recent Posts

VIEW ALL
News

Introducing DNS Guardian: Stop impersonation and spam caused by domain takeovers 

Rahul Powar

tl;dr: We’re thrilled to announce DNS Guardian — a new feature in Red Sift OnDMARC that can swiftly identify and stop domain takeovers that lead to malicious mail. Back in February, we shared updates with the community about SubdoMailing – an attack discovered by Guardio Labs. The attack was a form of subdomain takeover,…

Read more
Email

“What’s Next for DMARC”: Red Sift & Inbox Monster Webinar Recap

Red Sift

The recent webinar hosted by Inbox Monster, “What’s Next for DMARC: Data & Predictions for a New Era in Email Authentication,” featured insights from Red Sift and examined the significant changes brought by Yahoo and Google’s bulk sender requirements earlier this year.  It also offered a forward-looking perspective on the future of email authentication.…

Read more
Security

Navigating the Information Security Landscape: ISO 27001 vs. SOC 2

Red Sift

As cyber threats evolve, so do the standards and frameworks designed to combat them. Two of the most recognized standards in information security are ISO 27001 and SOC 2. What sets them apart, and which one is right for your organization? Let’s delve into the key differences. Purpose and Scope: Global Framework vs. Client-Centric…

Read more
News

G2 Summer 2024 Report: Red Sift OnDMARC’s Winning Streak Continues

Francesca Rünger-Field

We’re delighted to announce that Red Sift OnDMARC has again been named a Leader in G2’s DMARC category for Summer 2024. This recognition is based on our high Customer Satisfaction scores and strong market presence. Red Sift appeared in 11 reports – 5 new ones since Spring 2024! – earning 5 badges: A few…

Read more
News

Google will no longer trust Entrust certificates from October 2024

Red Sift

Tl;dr: Google has announced that as of October 31, 2024, Chrome will no longer trust certificates signed by Entrust root certificates. While there is no immediate impact on existing certificates or those issued before 31st October 2024, organizations should start reviewing their estate now. On Thursday 27th June 2024, Google announced that it had…

Read more