How to Evaluate an Expired Domain Before You Buy It
Spending a few minutes on history and reputation can save you from inheriting someone else's spam, penalties or trademark problems. Work through the checks below in order, and stop at the first serious red flag.
The rule: history is part of the price
When you register an expired name, you get a clean registration record but not a clean past. Search engines, email providers, link graphs and archive services all keep their own memory of the domain, and none of it resets when the registration does. This checklist is built around that fact. Each check answers one question: what did this name do before, and who still remembers?
The order below runs from the cheapest and most decisive checks to the more time-consuming ones. A single serious failure in the first four sections is usually enough to walk away.
Check 1: Archive history
Open the Internet Archive's Wayback Machine and look up the domain. You are looking for a continuous, coherent story.
- Consistent topic. A site about one subject for years is a good sign. A domain that was a bakery, then a pharmacy, then a forum is not.
- Gaps. Long gaps with no snapshots may mean the name was parked or abandoned. Short gaps followed by sudden new content can mean a change of owner.
- Foreign-language or unrelated spam pages. Snapshots full of text in a language the site never used, or pages about gambling, loans or medication, point to a hacked or repurposed site.
- Redirect chains. Snapshots that only redirect elsewhere suggest the domain was used as part of a network.
Archive coverage is incomplete, so absence of snapshots proves nothing by itself. Presence of snapshots, though, is strong evidence you can read.
Check 2: Content and hack signs
A compromised site often leaves a trail. Look for pages the original owner would not have written: casino, pharmaceutical, counterfeit goods, adult content, and keyword-stuffed pages. In search engines, query site:yourcandidate.com (with the real name) and scan the results for these topics. Pay attention to the titles and snippets. If a small local business domain returns thousands of indexed pages about unrelated products, the index still reflects a hack, even if the site itself is gone.
If the site search returns no results at all for a name that had an active site, the domain may have been removed from the index, which can happen after a penalty. That is a warning, not a verdict, because deindexing also follows simple lapse and inactivity.
Check 3: Backlink quality and anchor text
Use a backlink tool of your choice and review the profile by reading, not by trusting a single score.
| Signal | Healthy | Suspicious |
|---|---|---|
| Referring sites | Varied, relevant, real sites | Many near-identical or auto-generated sites |
| Anchor text | Brand name, URL, natural phrases | Heavy repetition of commercial phrases, or gambling and pharma terms |
| Link growth | Gradual over years | Sudden spikes |
| Link targets | Real pages, the homepage | Thousands of links to pages that never existed |
| Language and topic | Matches the site's old subject | Mismatched languages and topics |
Treat link-tool scores as a rough sorting aid, since different vendors compute them differently and none is an official search engine metric. Anchor text is one of the more revealing items: if most links use a commercial phrase the site never targeted, the profile was probably built artificially.
Check 4: Search engine standing
- Index check. Search for the exact domain name in quotes and with
site:. A name with a long history and no indexed pages may have been penalised or simply not been crawled. - Manual actions. Only the verified owner can see manual actions in Google Search Console. You cannot view them before you own the name. After you register it, add the domain to Search Console and check the manual actions report before investing in content.
- Brand queries. Search the label as a brand. If the results are dominated by complaints, scam reports or a different business, you inherit that context.
Search engines state that a domain's history can follow it, and that a site that was penalised or abused may need time or a reconsideration request to recover. Plan for that possibility instead of assuming a clean slate.
Check 5: DNS, mail and blacklist reputation
Check whether the name appears on domain reputation or blocklist services, such as those that track spam and phishing domains. Look at its previous name-server and mail records through historical DNS tools if you have access. A name that was used for bulk mail may have a poor mail reputation even if the website is clean, which can make email from it land in spam. Test with a Google Safe Browsing lookup, which will tell you if the name is currently flagged for malware or phishing, and test the name against a few public blocklists. Absence from these lists is good news, but it is not a certificate.
Check 6: Trademarks and name conflicts
Search the label in the trademark databases of the countries you operate in, and run a plain web search. A name that matches a registered mark, particularly one in the same field, can expose you to a complaint under ICANN's dispute policy or to a legal letter. The risk is greater for names that look like well-known brands, a pattern discussed in typosquatting and lookalike domains. If the name was previously a small business's brand, also consider whether customers will mistake you for them.
Check 7: Social handles and surrounding assets
If the name will serve a brand, check whether the matching handles are free on the platforms you care about, and whether any existing accounts are active under the old brand. Inherited followers are not a feature of the domain; the opposite is more likely, with old profiles still linking to the dead site. Also check for an existing business listing or maps entry, since those can confuse visitors and local search.
A scoring table you can adapt
A scoring sheet keeps decisions consistent when you screen many names. The weights below are an illustration, not an industry standard. Adjust them to your purpose.
| Check | Max points | Full marks when | Zero or veto when |
|---|---|---|---|
| Archive history | 20 | One coherent topic, real pages | Hack, spam or hidden network |
| Site search and content | 15 | Only relevant pages indexed | Casino, pharma or other injected pages indexed |
| Backlinks and anchors | 20 | Varied, natural, relevant | Artificial anchors and spikes |
| Safe Browsing and blocklists | 15 | Not listed anywhere | Listed for malware or phishing (veto) |
| Trademark and name conflict | 15 | No conflicts found | Direct conflict with a known mark (veto) |
| Name quality and renewal price | 10 | Readable, short, fair renewal cost | Awkward, long, or heavy renewal price |
| Social handles | 5 | Matching handles free | Not applicable |
As a rule of thumb for your own sheet, treat a total above about 75 as promising, 50 to 75 as needing a closer look, and below 50 as a pass. Any veto row ends the evaluation regardless of the total.
Worked example with an invented name
Consider an invented candidate, tidewater-pottery-example.com, which has appeared on a list of removed names. The figures below are invented for illustration.
| Check | Finding | Points |
|---|---|---|
| Archive history | Snapshots over several years of a small pottery shop; the last year shows a brief page of unrelated text, then nothing | 13 of 20 |
| Site search | Mostly shop pages; a handful of results about unrelated discounted products | 8 of 15 |
| Backlinks | A local directory, a craft blog and a few forum mentions; anchors mostly the shop name; no spikes | 17 of 20 |
| Safe Browsing and blocklists | Not listed | 15 of 15 |
| Trademark | A similarly named business in another country, different goods | 10 of 15 |
| Name quality | Long, with a hyphen; standard renewal | 5 of 10 |
| Social handles | Two of three free | 3 of 5 |
| Total | 71 of 100 |
The score lands in the "closer look" band. The unrelated results in the site search are the most worrying row, so the next step would be to read those pages in the archive to learn whether the site was briefly compromised in its last year. If they turn out to be a clear hack, the domain may still be usable for a different project, but you would not count on the old links. If the second look finds something worse, the answer is to pass. Either way, the decision came from checks that took less time than a single failed purchase would cost.
What to do after you register it
- Verify the domain in Search Console and read the manual-actions and security reports.
- Do not redirect all old links to an unrelated site. Redirect only where the destination matches the old page's subject.
- Publish real content before expecting any recovery of traffic.
- Re-check the blocklists after a few weeks, since reputation changes.
For the stages before this, expired domains describes where candidates come from, and checking domain availability covers the last step before you register. If you are thinking about buying names as a business, see domain investing basics for a realistic view of costs.
Frequently asked questions
How do I check an expired domain's history for free?
Use the Internet Archive's Wayback Machine for past snapshots, a site: search to see what is still indexed, and public blocklists and Google Safe Browsing for reputation. These cover the most important red flags without paid tools.
Can I see if a domain has a Google penalty before buying it?
Not directly. Manual actions appear only to a verified owner in Search Console. Before buying, infer it from signs such as an empty index for a long-lived site, spam in site search results and unnatural backlinks.
Are old backlinks worth keeping?
Only if they are relevant and from real sites. Links that point to pages that no longer exist deliver nothing unless you recreate equivalent content, and bulk redirects to unrelated pages can look manipulative.
What is a deal-breaking sign on an expired domain?
A listing on a malware or phishing blocklist, evidence of a long-running spam network in the archive, or a direct conflict with a well-known trademark. Any of these usually outweighs a good backlink profile.
Does a high authority score mean a domain is safe?
No. Authority scores come from third-party tools, are calculated differently by each vendor, and can be inflated by artificial links. Use them to sort candidates, and rely on the content and link review for the decision.
Should I check the renewal price?
Yes. Many extensions have different registration and renewal prices. A cheap first year with a high renewal changes whether a name is worth holding.