This is a validation method supported by the major SSL certificate issuers, used primarily when approving a request by a third party (e.g. Akamai). They email y

This is a validation method supported by the major SSL certificate issuers, used primarily when approving a request by a third party (e.g. Akamai). They email you a hash, you put it in a webpage at a URL they specify, they approve the third party issuance. The point is not whether or not this domain parking thing uses two DNS records that do or do not include MX. The point is that, given a social engineering opportunity (“free domain parking with JUST 2 records”), an attacker can do extraordinary things.