Your unused domains are someone else's opportunity
Old brand names, typo domains and defensive registrations rarely send email, so they're easy to forget. Without the right DNS records, criminals can still send convincing email from them.
Four records that close the door
For a domain that sends no email, the right set-up is simple: tell the world that nothing is allowed to send, and that receivers should reject anything that tries. FlashFortify checks every parked domain against these rules, in line with UK NCSC and M3AAWG guidance.
- DMARC p=reject, covering subdomains too
- SPF "v=spf1 -all": no server may send
- Null MX: the domain accepts no email
- Empty DKIM wildcard: any signature fails
- Still registered: we warn you if a domain stops resolving, as it may have expired
For each domain, FlashFortify shows only the records that are missing or wrong, ready to copy into your DNS provider.
Built for large portfolios
Whether you have five parked domains or five hundred, you can see their status at a glance and keep them protected.
Import by CSV
Upload up to 500 domains at a time: one per line, or a spreadsheet with a "domain" column. Invalid rows are listed so you can fix them.
Scored and prioritised
Each domain gets a score out of 100 and a status: Protected Partly protected Not protected. Filter to what needs fixing.
Watched continuously
Domains are re-checked every 30 minutes. If someone weakens a record, or a domain stops resolving, you're alerted.
Questions
Do parked domains need DMARC reports?
No. Parked domains are judged on their published records, so no reporting address is needed. You can add one if you want to see who tries to spoof the domain, and FlashFortify gives you the record to use.
Can a domain be both monitored and parked?
No. A domain is either a sending domain, monitored through DMARC reports, or a parked domain, checked against the lock-down rules. If a parked domain starts sending email, move it to monitoring.
Will these records affect my website?
No. They only affect email. Web records (A, AAAA, CNAME) aren't changed, so a parked domain can still redirect to your main website.
Find out how exposed your domains are
Send us your list and we'll show you which ones need attention.