How to Vet an Expired Domain Before You Buy (and When to Walk Away)

What vetting an expired domain actually means

Vetting an expired domain means running a structured due-diligence screen across its backlink profile, authority metrics, history, spam exposure, ownership record, and legal footprint, then deciding buy or walk away. The purpose is to separate a domain whose inherited authority is a real asset from one whose hidden liabilities make it worthless or dangerous.

An expired domain is a name a prior owner let lapse. The pages it once published can stay linked from news sites, directories, and partners, and those links survive the lapse. That inherited link equity is the reason the name carries value. It is also the reason a name can carry buried damage, because a domain that was spammed, penalised, or flipped to an unrelated topic inherits that record too.

The asset versus the liability

The defining question of every vetting pass is which of two things sits behind the listing. One is a legitimate asset: earned authority from real prior use, a clean and relevant link profile, and an open record. The other is a liability: a toxic profile, a penalty footprint, or a topic-flipped history that no amount of rebuilding undoes.

The metrics shown on a marketplace listing describe size, not safety. A high authority score can sit on top of a profile built by a link-spam scheme. Vetting is the work of reading past the headline number to the signals underneath it.

Why the screen has six parts

No single check is sufficient. A strong authority score says nothing about a hidden penalty. A clean backlink count says nothing about a trademark collision. The six-part screen exists because each part catches a failure the others miss, and a domain has to clear every one to qualify as an asset. The sections that follow take them in order, each with the numeric thresholds that turn a vague impression into a decision.

The metrics that matter: DR, DA, and the Trust Flow to Citation Flow ratio

The core authority metrics are Ahrefs Domain Rating, Moz Domain Authority, and the Majestic Trust Flow to Citation Flow ratio. Read together they describe a profile; read singly they mislead. DomCop, an expired-domain data platform, publishes working floors of DR 15 and up, DA 25 to 30 and up, and a Trust Flow that sits close to or above Citation Flow.

Domain Rating and Domain Authority

Domain Rating from Ahrefs and Domain Authority from Moz are third-party scores, each on a 0 to 100 scale, that estimate the strength of a domain’s backlink profile. Neither is a Google metric, and both are estimates, not verdicts. DomCop’s published evaluation guidance treats a Domain Rating of 15 or higher and a Domain Authority starting around 25 to 30 as the working floor for an expired domain worth a deeper look.

The trap is treating either score as proof. Both can be inflated by a small number of powerful links or by manipulation, which is the reason the next metric exists and the reason the backlink audit in the following section is the real test.

The Trust Flow to Citation Flow ratio

Majestic publishes two complementary scores. Citation Flow estimates how much link volume points at a domain. Trust Flow estimates how trustworthy those links are, weighted toward a seed of reputable sites. A domain can collect a high Citation Flow from a heap of low-quality links while its Trust Flow stays low, and that gap is the signal.

DomCop’s guidance is to want Trust Flow close to or higher than Citation Flow. A domain at Trust Flow 30 and Citation Flow 35 reads as healthy. A domain at Trust Flow 10 and Citation Flow 60 reads as a profile inflated by volume with little trust behind it, a classic red flag.

Reading the three together

The discipline is to triangulate. A domain that clears the Domain Rating floor, clears the Domain Authority floor, and shows a Trust Flow near or above its Citation Flow has passed the metric gate. A domain that clears one and fails another has not, and the failure points to where the deeper audit needs to dig. The metrics narrow the field. They never close the case.

The backlink profile: referring domains, relevance, and the manual audit

The backlink profile is the asset. Quality outranks count: a small set of relevant, editorially earned links from trusted sites beats a large set of low-quality ones. The decisive test is a manual audit of the top 10 to 20 referring links, reading each for existence, follow status, placement, outbound-link count, topical relevance, and anchor pattern.

Referring domains and relevance

A referring domain is a unique website that links to the name being vetted, and the count of referring domains is a better strength signal than the raw link total, because one site linking a hundred times is one endorsement, not a hundred. Ahrefs and Majestic both report this figure. The number alone is not the point. The relevance is.

Links from sites in or adjacent to the domain’s niche carry far more weight than links from unrelated sites, and a profile whose strongest links come from topically related, reputable publishers is the profile worth paying for. A profile padded with links from unrelated directories and comment sections is volume without substance.

The manual backlink audit

The audit is where vetting earns its name. DomCop’s evaluation guidance recommends opening the top 10 to 20 referring links by hand and reading each one, because tools report that a link exists while a human eye confirms what kind of link it is. Each link is checked against six questions:

• Does the link still exist on the live page, or has it been removed since the tool last crawled it.
• Is it a follow link that passes equity, or a nofollow link that does not.
• Does it sit in the main content, where editorial links live, or in a footer or sidebar, where bulk links hide.
• How many outbound links does the linking page carry. A page with 50 or more outbound links reads as a link farm.
• Is the linking site topically related to the domain, or unrelated.
• What anchor text does the link use, and does it fit a natural pattern or a manipulated one.

A profile that survives this read on its strongest links is genuine. A profile whose top links turn out removed, nofollowed, footer-buried, farm-hosted, or irrelevant was inflated, and the headline metric was describing a mirage. The standards behind each of these signals are documented across the Domain Authority & Metrics hub.

Anchor text and link velocity: reading a profile for manipulation

Anchor text and link velocity expose manipulation a strength score hides. A natural profile uses varied anchors weighted toward brand and URL, with links accumulated at a human pace. A manipulated profile concentrates exact-match commercial anchors and shows links arriving in unnatural bursts, the fingerprints of a profile built to rank instead of earned.

The anchor-text distribution

Anchor text is the visible words inside a link. An editorially earned profile produces a mix: the brand name, the bare URL, generic phrases, and a minority of partial-match descriptive anchors. A profile engineered for ranking inverts that mix, concentrating exact-match commercial keywords because the prior owner chose those words to push a target page.

DomCop’s guidance flags the extreme case directly: a domain where roughly 80 percent of anchors use the same money keyword is a profile built for manipulation, not earned through editorial linking. The check is to read the anchor distribution and ask whether it looks like how real publishers link, which is varied, or how a scheme links, which is repetitive and commercial.

Link velocity and history

Link velocity is the rate at which a domain gains or loses links over time. A genuine site accumulates links gradually as content earns attention. A manipulated site shows spikes, a sudden burst of links appearing at once, then decay as those links rot or get removed. A backlink-history graph from Ahrefs or Majestic makes the pattern visible, and an unnatural spike in the past is a reason to look harder at where those links came from.

The history check: Wayback Machine, prior use, and topic continuity

The history check reads what the domain published before it lapsed, using the Internet Archive’s Wayback Machine to trace its content across time. The signals are topic continuity, offline gaps, and prior abuse. A name that stayed on one topic and was used by a real site is an asset. A name that flipped topics, went dark for long stretches, or hosted spam is a liability.

Reading the Wayback Machine

The Wayback Machine, operated by the Internet Archive, stores dated snapshots of web pages going back decades. Pulling up a domain’s archive shows what it published, when, and how the content changed. The first read is topic continuity. A name that published cooking content for ten years and is being sold into a cooking niche carries relevant, continuous authority. A name that published one topic, went dark, and reappeared as an unrelated or foreign-language site has flipped, and the inherited relevance is broken.

The second read is the gaps. Long offline periods, where the archive shows a parked page, a registrar holding page, or nothing, weaken the continuity that makes inherited authority worth anything. The webacquisition due-diligence guide names extended offline stretches as one of its core walk-away signals, and the Wayback Machine is where they show.

Prior abuse in the record

The third read is the worst case: a name whose archived history shows spam, an unrelated gambling or adult site, or content that has nothing to do with the registration record. A domain that was abused in a prior life inherits that abuse, and the archive is the place it cannot be hidden. A clean, continuous, on-topic history is the foundation; a flipped or abused one is a reason to stop. The full risk picture is set out in Risks of buying an expired domain: 7 costly mistakes and how to avoid them.

The spam and penalty screen, and Google’s expired-domain-abuse policy

The penalty screen tests whether the domain is already in trouble with Google. The fast check is a site: search that reveals whether the name is indexed. The deeper context is Google’s expired-domain-abuse policy, announced in the March 2024 update, which names buying an expired domain mainly to exploit its past reputation as a spam violation, while permitting a genuine new site built to serve people.

The de-indexing test

The quickest penalty signal is indexation. A search for site:domainname.com in Google returns the pages Google currently holds in its index for that name. A domain that once ran a real site and returns zero indexed pages has likely been de-indexed, which is the footprint of a manual action or a severe quality problem. Indexation is not proof of health, because a parked domain can show few pages for innocent reasons, but a name that ought to be indexed and is not is a reason to stop.

What Google’s policy actually says

The single load-bearing fact in this topic is one the field rarely cites. In its March 2024 core update and accompanying spam policies, Google introduced an expired domain abuse policy. Google describes the abuse as the practice of buying an expired domain and repurposing it primarily to manipulate Search rankings by hosting content that provides little to no value to users, exploiting the domain’s past reputation. Google states it will act against the practice through both algorithmic spam systems and manual actions.

The policy draws the exact line this guide draws. Buying a clean expired domain to build a real, original site is explicitly fine. Buying one to strap low-value content onto its borrowed reputation is the violation. Vetting is what keeps an acquisition on the right side of that line, by confirming the domain is clean before it becomes the foundation of a genuine site.

Ownership and legal: RDAP history, DNS records, and the trademark check

The ownership and legal screen reads who held the domain, how it was configured, and whether the name itself carries legal exposure. Registration history now comes from RDAP, which replaced WHOIS as the standard ICANN lookup on 28 January 2025. DNS history surfaces hosting red flags. A trademark search against the USPTO and global brand databases catches the deal-breaker that has nothing to do with SEO.

RDAP and the ownership record

Registration data shows who registered a domain, through which registrar, and when. For years that record was WHOIS. As of 28 January 2025, RDAP, the Registration Data Access Protocol, replaced WHOIS as the standard ICANN lookup, returning the same ownership data in a structured, machine-readable form. Reading the registration history shows the chain of ownership and the registration timeline, and a name passed between unrelated parties or registered and dropped repeatedly tells a different story than one held by a single business for a decade.

DNS history and configuration

DNS history records where a domain pointed over time: which servers hosted it and how it was configured. A name that lived on reputable infrastructure reads cleaner than one that bounced through hosting linked to abuse. DNS history is a supporting signal, not a verdict, and it adds context to the ownership picture the registration record draws.

The trademark check

The legal screen is the deal-breaker that has nothing to do with link equity. A name that contains or closely resembles a registered trademark exposes its buyer to a dispute under the Uniform Domain-Name Dispute-Resolution Policy or a legal claim, regardless of how clean the backlink profile is. The check is a search against the United States Patent and Trademark Office database and the WIPO Global Brand Database, plus relevant national registries. A live trademark collision is a walk-away signal on its own. The wider legal picture is covered in Legal overview when buying expired domains.

When to walk away: the deal-breaker checklist

Walking away is the right call when a check returns a deal-breaker no price discount can fix. The deal-breakers are a toxic or spam-flagged profile, a de-indexed name, a topic-flipped or abused history, and a live trademark collision. Caution signals warrant a deeper look or a lower offer; deal-breakers end the conversation regardless of the metric.

Vetting failures fall into two tiers. A caution signal is a problem that lowers the value or demands more digging, like a single weak metric or a short offline gap. A deal-breaker is a problem that makes the name unusable or dangerous, where the only rational response is to set it down. The table below sorts the signals from this guide into proceed, caution, and walk-away, so a verdict follows the evidence instead of the price tag.

Where vetted expired domains come from: screened inventory, not a raw drop list

Vetting is the screen that separates a clean expired domain from a poisoned one, and the practical starting point is inventory that has already passed it. A raw drop list offers names with nothing checked. A curated catalogue offers names screened across the same backlink, metric, history, and spam signals before they are priced. SEO Domains operates that curated marketplace.

The screen is the product, not a tool

Everything in this guide converges on one move: start from clean raw material. The work of pulling metrics, auditing links, tracing history, and screening for penalties and trademarks is the screen, and a name that has survived it is an asset whatever gets built on it. The point of sourcing from a curated catalogue is that the screen has already run, so the buyer inherits vetted inventory instead of a raw list where every name still has to be proven from scratch.

What a screened listing carries

A screened expired domain on the SEO Domains marketplace is read across its backlink profile and authority metrics before it is listed and priced, so the headline number sits on top of a checked profile instead of an unknown one. The raw material is the domain itself, an aged name with earned authority ready to host a real site, a 301, or white-hat link building. It is a product, not a checker tool and not a managed link service.