Blocking malicious email before it's too late