An automated SEO tool looked at a Summerville real estate team's website and returned a middling-but-passable score — the kind that tells an owner "you're basically fine, tune a few things." It printed two different scores in the same report and never mentioned the thing that actually mattered: the team's old web address had lapsed, been re-registered by a stranger, and was serving a fraudulent crypto page to anyone who clicked an old link.
How a business ends up owning seven versions of itself
Nobody sets out to do this. It accumulates.
A team rebrands and buys a new domain, keeping the old one "just in case." Someone registers the .net defensively and points it at the site. A past marketing agency spins up a microsite for a campaign. An agent's personal domain still forwards. A geographic variant gets bought for a neighborhood push that never launched. Add a decade, and there are seven live properties serving overlapping versions of the same content.
Every one of them looks harmless. Together they do two kinds of damage.
Damage one: authority gets divided
Search engines want to credit a page. When five domains serve substantially the same content, the credit splits. Links that should have compounded onto one site are spread across several. Nothing has enough weight to rank. The team keeps producing content and keeps not ranking, and no ranking report will ever explain why — because the report is looking at one domain and the problem is the other six.
Damage two: the entity fractures
This is the newer, quieter cost, and it matters more each year.
An AI answer engine deciding whether to recommend a real estate team has to first resolve which team. When it encounters seven sites with the same brand name, an outdated agent roster on one, stale pricing on another, and verbatim-copied bios across the rest, it can't build a confident picture. So it hedges — or names someone else. Recognized entities get cited. Ambiguous ones get skipped.
A duplicate-domain problem used to be an SEO issue. Now it's also an identity problem.
Damage three: someone else can take one
Domains expire. If nobody's watching the renewal on a domain the business stopped thinking about, it drops — and lapsed domains with real inbound links are actively hunted, because the links have value.
In the case above, the buyer stood up a crypto-exchange page. Every aged link, every old business card, every stale search result still pointing at that address was sending real people — people who trusted this team — to a scam wearing the team's former name. The team had no idea it was live. There is no dashboard that tells you this. It only surfaces when someone goes looking.
What the diagnosis involved
Nothing exotic. It's mostly patient work that automated tools don't do:
- Search the brand name, every principal's name, and every plausible variant. Look past page one.
- Run
site:queries against each domain you find, and each TLD variant. - Check what each one actually serves — not what you assume it serves. Load it.
- Check whois-style registration and expiry on everything you still own.
- Pick the canonical destination. Not the oldest, not the sentimental favorite — the one with the real authority and the right brand.
- Write the 301 map from every other property to the winner, page by page where it matters.
Underneath all of it, in that engagement, sat a specific technical cause for a stalled re-index: the old domains had DNS records pointing at the live server and registrar-level forwarding that only worked over insecure HTTP. Every secure request errored against a certificate that wasn't there. That's not a checklist item. That's what you find by following the symptom down to the root.
What to do this week
Inventory what you own. Pull your registrar accounts — all of them, including the one from the agency you fired in 2019. List every domain. Note the expiry date on each.
Load every one. Type them into a browser. You are looking for two things: content that duplicates your main site, and content that isn't yours at all.
Search for the ones you don't own anymore. Your old brand name. Your founder's name plus your city. Anything that once had a website. If a lapsed domain of yours is serving something ugly, you want to be the one who finds it.
Consolidate. One canonical home, 301s from everything else, and a calendar reminder on every renewal date.
The point
The reassuring score from an automated crawl sat directly on top of an active fraud risk and a fractured brand, and never said a word. That's not because the tool was badly built. It's because a crawl measures, and only a diagnosis judges.
The best businesses don't fail these audits because they cut corners. They fail because the web quietly drifted out from under them while they were busy doing the work.
Read the full write-up in our case studies, or get your own audit.
An automated SEO tool looked at a Summerville real estate team's website and returned a middling-but-passable score — the kind that tells an owner "you're basically fine, tune a few things." It printed two different scores in the same report and never mentioned the thing that actually mattered: the team's old web address had lapsed, been re-registered by a stranger, and was serving a fraudulent crypto page to anyone who clicked an old link.
How a business ends up owning seven versions of itself
Nobody sets out to do this. It accumulates.
A team rebrands and buys a new domain, keeping the old one "just in case." Someone registers the .net defensively and points it at the site. A past marketing agency spins up a microsite for a campaign. An agent's personal domain still forwards. A geographic variant gets bought for a neighborhood push that never launched. Add a decade, and there are seven live properties serving overlapping versions of the same content.
Every one of them looks harmless. Together they do two kinds of damage.
Damage one: authority gets divided
Search engines want to credit a page. When five domains serve substantially the same content, the credit splits. Links that should have compounded onto one site are spread across several. Nothing has enough weight to rank. The team keeps producing content and keeps not ranking, and no ranking report will ever explain why — because the report is looking at one domain and the problem is the other six.
Damage two: the entity fractures
This is the newer, quieter cost, and it matters more each year.
An AI answer engine deciding whether to recommend a real estate team has to first resolve which team. When it encounters seven sites with the same brand name, an outdated agent roster on one, stale pricing on another, and verbatim-copied bios across the rest, it can't build a confident picture. So it hedges — or names someone else. Recognized entities get cited. Ambiguous ones get skipped.
A duplicate-domain problem used to be an SEO issue. Now it's also an identity problem.
Damage three: someone else can take one
Domains expire. If nobody's watching the renewal on a domain the business stopped thinking about, it drops — and lapsed domains with real inbound links are actively hunted, because the links have value.
In the case above, the buyer stood up a crypto-exchange page. Every aged link, every old business card, every stale search result still pointing at that address was sending real people — people who trusted this team — to a scam wearing the team's former name. The team had no idea it was live. There is no dashboard that tells you this. It only surfaces when someone goes looking.
What the diagnosis involved
Nothing exotic. It's mostly patient work that automated tools don't do:
- Search the brand name, every principal's name, and every plausible variant. Look past page one.
- Run
site:queries against each domain you find, and each TLD variant. - Check what each one actually serves — not what you assume it serves. Load it.
- Check whois-style registration and expiry on everything you still own.
- Pick the canonical destination. Not the oldest, not the sentimental favorite — the one with the real authority and the right brand.
- Write the 301 map from every other property to the winner, page by page where it matters.
Underneath all of it, in that engagement, sat a specific technical cause for a stalled re-index: the old domains had DNS records pointing at the live server and registrar-level forwarding that only worked over insecure HTTP. Every secure request errored against a certificate that wasn't there. That's not a checklist item. That's what you find by following the symptom down to the root.
What to do this week
Inventory what you own. Pull your registrar accounts — all of them, including the one from the agency you fired in 2019. List every domain. Note the expiry date on each.
Load every one. Type them into a browser. You are looking for two things: content that duplicates your main site, and content that isn't yours at all.
Search for the ones you don't own anymore. Your old brand name. Your founder's name plus your city. Anything that once had a website. If a lapsed domain of yours is serving something ugly, you want to be the one who finds it.
Consolidate. One canonical home, 301s from everything else, and a calendar reminder on every renewal date.
The point
The reassuring score from an automated crawl sat directly on top of an active fraud risk and a fractured brand, and never said a word. That's not because the tool was badly built. It's because a crawl measures, and only a diagnosis judges.
The best businesses don't fail these audits because they cut corners. They fail because the web quietly drifted out from under them while they were busy doing the work.
Read the full write-up in our case studies, or get your own audit.