What should a website owner do when a domain they link to expires and changes hands?

How an expired domain turns your links against you

When a domain registration lapses, it passes through a grace period and then becomes available for anyone to register. Domains with existing inbound links are attractive precisely because those links carry traffic and reputation. The new owner may park the domain with ads, redirect it to an unrelated commercial site, publish low quality content built for search traffic, or in the worst cases serve malware or phishing pages. Your article still links to it, with your original anchor text vouching for whatever is there now. Related: Why Broken Links Quietly Hurt Your SEO

The damage arrives on several fronts. Readers who trusted your recommendation land somewhere useless or harmful. Your site appears to endorse spam. In aggressive cases, browser safety services or reputation systems may flag pages that link to a known malicious domain. None of this shows up in an ordinary link check, because a hijacked domain returns a perfectly healthy 200 status and often loads faster than the original site ever did. Related: How Often Should You Audit Your Site for Broken Links

Keep reading: Why Broken Links Quietly Hurt Your SEO, Internal vs External Broken Links: Which to Fix First, How to Find Broken Links at Scale. See how LinkRotly helps you continuous broken link monitoring for websites.

Detecting a domain that changed hands

Several signals are observable from outside. Registration data changes, such as a different registrar, a reset creation date, or new nameservers. The site's title and main content change wholesale. A redirect to a different domain appears where none existed before. The page language or subject category shifts abruptly. The TLS certificate is issued to a different organization. Any one of these is a hint worth a look; several together are close to certain evidence of a new owner.

In practice, store a baseline for each external destination that includes the final URL after redirects, the page title, a content hash, and the nameservers. Compare on each monitoring run and flag destinations whose final domain changed or whose title bears no resemblance to the original. Prioritize domains whose registration expires within the next few months, since those are the most likely to drop, and give extra attention to small personal sites and defunct organizations, which lapse most often.

Responding when you find one

Act first, investigate second. Disable or remove the link on your side immediately, especially if the destination is now commercial, adult, or flagged as unsafe. The link can be restored later if the change turns out to be benign, such as a legitimate rebrand or an acquisition that kept the content. Then check whether the original material exists at a new address or in a public web archive, and choose between a replacement link, an archived link, or a plain attribution with no link at all.

Widen the search beyond the page where you noticed it. One article rarely links to a domain alone; check the whole site, plus email templates, documentation, resource pages, and any partner directory. If there was a formal relationship with the previous owner, tell your team so nobody reinstates the link from an old spreadsheet. Record the domain in an internal blocklist that writers and editors can consult, so the same domain does not get added again in a future article by someone who never heard about the change. Related: Internal vs External Broken Links: Which to Fix First

Reducing exposure going forward

For essential citations, prefer established organizations and durable publications over small personal sites, which lapse more often. Save an archive snapshot at publication time. When linking to a resource that matters, mention the author and title in the text itself so readers can find it even if the link has to be removed later. Consider a nofollow attribute on links to sites you cannot vouch for over the long term, which limits reputational transfer if the domain later changes hands. Related: How to Find Broken Links at Scale

Treat hijack detection as a standing part of monitoring rather than an annual audit. Domains drop every day, and the window between a domain changing hands and its inbound links being exploited can be short. A quarterly manual review of your most linked external domains, combined with automated change detection on final domain, title, and nameservers, is a proportionate level of effort for most sites and catches the large majority of cases before readers do.