Control over non-email sending domains

Using DMARC, DKIM, MTA-STS and SPF Obfuscation is very important for email security. And using PowerDMARC will give you very good control over mailsending domains. However, what is also important is to register and get authorotive access to all domains that fall under your company name and trademark to be able to secure your company. A normal comany will use 2-3 mailsending domains, not knowing who is owning other TLD's for their domains. We have seen many times that threat actors are bying similar domains (say company.co.uk or company.io etc) creating a correct SPF, DKIM and DMARC scheme and sending invoices on your behalf or trying CEO Fraud form a similar domain. So owning and parking non-email sending domains is important. As a part of setting up PowerDMARC for our customrers, we are always reccomend also buying key domains (trademark.com, company.*). We will also park mailsending for non-email domains (the ones not set up to PowerDMARC) with the following settings: SPF: (Blocking envelope «MAIL FROM:» sender on domain/subdomain) @ TXT v=spf1 -all *@ TXT v=spf1 -all DKIM: (blocking all domainkeys, ) *._domainkey.example.com TXT v=DKIM1; p= DMARC: (strict blocking, no reporting) _dmarc.example.com TXT v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s MX: RFC7505 Null MX Pointer. @ MX 0 . However, with many PowerDMARC Customers, and an extreme ammount of DNS domains per customer it is easy to overlook a domain. It woud be great if PowerDMARC could: give posibility to add all non-email sending domans (no PowerDMARC processing) so that customer could have control over all thir domains. Also check once a moth that SPF blocking, DKIM blocking, DMARC reject and MX nullpointer is set up, could be represented as a table with Green/Red signs: Domain,SPF,DKIM,DMARC,MX-Parking domain.com,"Green/parked","Green/parked","Green/parked","Green/parked" domain.co.uk,"Red/Missing","Red/Missing","Red/Missing","Red/Missing" As the customer is buying all domains, and it will require basically no processing on PowerDMARC side, these domains added could be included/extremely cheap. This would give the MSP and Customer a great overview of the customer domains, registrations etc. Also, giving the nonsending domains the attention could result in it being added as a full PowerDMARC domain (upsell!! :)) Lookup service, check your currently set up domains and check registration for all tld's, reporting on new domains are registered with WhoIS/registrar information. Either on demand (clicking on a registered DMARC domain) check all tld's for the domains (like https://domainname.shop/ domain search feature). Monitor service, like https://domainname.shop/domainwatch that will report changes when your companyname/brandname is registered on another TLD.