The British government has specific advice (applicable to everyone) for securing domains that aren't used for email. https://www.gov.uk/guidance/protect-domain

The British government has specific advice (applicable to everyone) for securing domains that aren't used for email. https://www.gov.uk/guidance/protect-domains-that-dont-send-email https://www.gov.uk/guidance/protect-domains-that-dont-send-e...