Sold By Shonna forwarding-domain audit report.
A focused review of soldbyshonna.com, a public real-estate marketing domain that forwards visitors to shonnaking.exprealty.com. The report separates scanner noise from the one real risk: a forwarding domain with no anti-spoofing records.
Executive Summary
soldbyshonna.com is not a full website or mail domain. It is a forwarding-only marketing URL. Web visitors resolve through GoDaddy DNS and GoDaddy forwarding, then redirect to the eXp Realty profile. That means many domain-health scan “errors” are not broken systems; they are symptoms of a domain that intentionally has no mailbox.
The genuine issue is that the domain has no SPF, DKIM, or DMARC posture. A domain that does not send email is still useful to attackers unless it explicitly tells receivers to reject forged mail.
Posture Snapshot
Audit posture score: 52 / 100
Forwarding works, DNS is structurally sound, and reputation is clean. The score is dragged down almost entirely by missing anti-spoofing controls on a domain nobody is monitoring for email.
Infrastructure Identification
| Area | Observed / inferred state | Audit interpretation |
|---|---|---|
| Registrar | GoDaddy | High-confidence inference from domaincontrol.com nameservers and SOA evidence. |
| DNS host | ns07.domaincontrol.com / ns08.domaincontrol.com | GoDaddy default DNS pool. DNS administration should be centralized there. |
| A records | 3.33.251.168 and 15.197.225.128 | Both reverse-resolve to an AWS Global Accelerator endpoint used by GoDaddy forwarding. |
| Web behavior | 301/302 redirect to https://shonnaking.exprealty.com/ | Working as a forwarding domain. Scanner HTTP 403 noise is consistent with forwarding service behavior. |
| Mail records | No MX, SPF, DKIM, or DMARC records published | No MX is acceptable for a no-mail domain; missing SPF/DMARC is the real spoofing risk. |
Current-State Architecture
Findings & Recommended Actions
No anti-spoofing protection on a no-mail domain
Because there is no SPF or DMARC record, receivers are not instructed to reject forged email claiming to come from @soldbyshonna.com.
Host: soldbyshonna.com Type: TXT Value: v=spf1 -all Host: _dmarc.soldbyshonna.com Type: TXT Value: v=DMARC1; p=reject; rua=mailto:dmarc-reports@shonnaking.com; fo=1No MX records are published
This is acceptable for a forwarding-only marketing domain. Do not add mailboxes unless the business intentionally plans to send or receive mail from this domain.
Scanner errors overstate the actual problem
The public scanner flags missing mail infrastructure, but the correct interpretation is not “build mail.” The correct action is “prove this domain never sends mail.”