docs
stormdoor.dev
FINDING

domain.parked

The domain is delegated to a known domain-parking nameserver, not in active use.

SEVERITY
medium
LEADS TO
suspect
GATE
/v1/domains
CHECK
domain.parked
Jump to what to do

What it looks at#

Reuses domain.dns’s own nameserver lookup and checks whether any of the domain’s nameservers match a curated list of about 16 well-known dedicated parking services (Sedo, ParkingCrew, Bodis, Afternic, and similar), by exact or subdomain match.

This covers dedicated parking-service nameservers specifically — not every registrar’s own generic “domain for sale” landing page, which may use the registrar’s regular nameservers and wouldn’t match this list.

Why it matters#

A parked domain isn’t serving anything real yet. Behind a signup or contact form, a parked domain usually means the address or link leads nowhere real — either it’s not set up yet, or it’s being warehoused for later use, including abuse.

What to do#

Medium severity — treat as worth a second look. A parked domain isn’t proof of malicious intent (plenty of legitimate domains sit parked before launch), but it’s rarely what you want behind an active signup.

OTHER FINDING CODES FROM /V1/DOMAINS