This is another case where it's highly important to "plant your flag" [1] and set up all those services like Search Console, even if you don't plan to use them.

This is another case where it's highly important to "plant your flag" [1] and set up all those services like Search Console, even if you don't plan to use them. Not only can this sort of thing happen, but bad-guys can find crafty ways of hijacking your search console account if you're not super vigilant. Google Postmaster Console [2] is another one everybody should set up on every domain, even if you don't use gmail. And Google Ads, even if you don't run ads. I also recommend that people set up Bing search console [3] and some service to monitor DMARC reports. It's unfortunate that so much of the internet has coalesced around a few private companies, but it's undeniably important to "keep them happy" to make sure your domain's reputation isn't randomly ruined. [1] https://krebsonsecurity.com/2020/08/why-where-you-should-you-plant-your-flag/ https://krebsonsecurity.com/2020/08/why-where-you-should-you... [2] https://postmaster.google.com/ https://postmaster.google.com/ [3] https://www.bing.com/webmasters/ https://www.bing.com/webmasters/