Sendmarc actively monitors DMARC forensic reports for any malicious activity and take action based on our findings.

This includes reporting where the threat originated, how severe the threat is, and the steps required or taken to mitigate the threat.

Based on finding from our active monitoring of the DMARC aggregate and forensic reports, we can indentify servers and

IP addresses that should be submitted to email blacklisting services that prevent the ending of email from specific origins.

If we find URLs and other domains in forensic reports associated with phising or impersonation attacks, we can submit these to services which will block the URLs in a user’s browser. This means that even if someone receives the email and clicks on the malicious link, their browser will tell them that the link is unsafe and prevent them from visiting the site.

The same is done with look alike domains that could fool a user by looking similar to the legitimate URL.

Through our investigation of forensic reports. we can identify where a fraudulent email originated. By contracting the ISP, we can block any further attacks from the source and prevent more emails from being distributed.

If you have inactive domains that have been registered for defensive purposes or parked for later use. We will configure these domains to prevent sending from them and therefore the use of those domains in an attack.