ToolsSource: SH Consulting
Wire-fraud warning: a top Nashville team's 79 unused domains were sending email they never wrote
Original headline: “Parked Domains Are Sending Phishing Emails in Your Name” — SH Consulting, Oct 7, 2026
When email-security firm SH Consulting connected The Ashton Real Estate Group's 364 domains to DMARC monitoring in July, it found 79 supposedly parked domains — farm sites, old brands, defensive registrations — quietly sending unauthenticated email from botnets in more than a dozen countries, with zero legitimate traffic in the mix. Four DNS records (null MX, SPF "-all", an empty DKIM key, and DMARC p=reject) shut the abuse down: unauthorized-mail reports fell from 235 to 43 in five weeks, and everything remaining was discarded at the mailbox instead of delivered.
Our take (opinion & analysis, not reporting)
List every domain you own and have your IT provider or host lock down the ones that never send email — a spoofed message from a real domain in your name is far more convincing to a client than an obvious lookalike, and it's the raw material behind wire-fraud scams. This is a cheap fix compared with any CRM purchase, and it protects the email your CRM sends too.
Online discussion: no notable public discussion found yet (checked Oct 12, 2026).