Your unused domains are someone else's opportunity
Old brand names, typo domains and defensive registrations rarely send email, so they're easy to forget. Without the right DNS records, criminals can still send convincing email from them.
Four records that close the door
For a domain that sends no email, the right set-up is simple: tell the world that nothing is allowed to send, and that receivers should reject anything that tries. FlashFortify checks every parked domain against these rules, in line with UK NCSC and M3AAWG guidance.
- DMARC p=reject, covering subdomains too
- SPF "v=spf1 -all": no server may send
- Null MX: the domain accepts no email
- Empty DKIM wildcard: any signature fails
- Still registered: the expiry date is checked with the domain registry, so you're warned before a domain lapses and someone else can buy it
- CAA and DNSSEC (advice): stop certificates being issued for the domain, and stop its records being forged
For each domain, FlashFortify shows only the records that are missing or wrong, ready to copy into your DNS provider.
Built for large portfolios
Whether you have five parked domains or five hundred, you can see their status at a glance and keep them protected.
Import by CSV
Upload up to 500 domains at a time: one per line, or a spreadsheet with a "domain" column. Invalid rows are listed so you can fix them.
Scored and prioritised
Each domain gets a score out of 100 and a status: Protected Partly protected Not protected. Filter to what needs fixing.
Watched continuously
Domains are re-checked every 30 minutes. If someone weakens a record, or a domain is about to expire or stops resolving, you're alerted.
Sortable and filterable
Sort by score, status, expiry or name to find the domains that need attention first.
A report to share
Download a PDF of your parked domain portfolio for your board, auditors or IT provider.
Watch for lookalikes too
Parked domains are included in lookalike monitoring, so imitations of old brands are spotted as well.
Questions
Do parked domains need DMARC reports?
No. Parked domains are judged on their published records, so no reporting address is needed. You can add one if you want to see who tries to spoof the domain, and FlashFortify gives you the record to use.
Can a domain be both monitored and parked?
No. A domain is either a sending domain, monitored through DMARC reports, or a parked domain, checked against the lock-down rules. If a parked domain starts sending email, move it to monitoring.
Will these records affect my website?
No. They only affect email. Web records (A, AAAA, CNAME) aren't changed, so a parked domain can still redirect to your main website.
Find out how exposed your domains are
Parked domain checks are included in every plan.