Most advice on how to check an expired domain stops at a metric: authority, referring domains, age. Those numbers say nothing about what the name was used for or how its links were earned, and that is where the risk sits. A domain can look strong on paper and still carry years of casino pages or a backlink profile built from directory spam.
This guide walks through the checks in the order a buyer runs them, one free tool per step. Each step screens for a specific risk named in Google’s own rules, so it helps to read those rules first. Buying comes after; our guide on how to buy an expired domain covers auctions, closeouts and payment.
What Google’s spam policy actually targets
Google’s Spam policies for Google web search (last updated 28 August 2026) define the problem precisely: “Expired domain abuse is where an expired domain name is purchased and repurposed primarily to manipulate search rankings by hosting content that provides little to no value to users.”
Note what the page does not say. It does not ban expired domains, and it does not treat buying one as a violation. The test is the repurposing and the value of what you publish. The illustrative examples make the pattern plain: unrelated content riding a reputation someone else built.
| What the old site was | What the buyer put on it |
|---|---|
| A government agency site | Affiliate content |
| A non-profit medical charity | Commercial medical products |
| An elementary school site | Casino-related content |
The consequence is general rather than specific to expired domains: “Sites that violate our policies may rank lower in results or not appear in results at all.” Detection runs “through automated systems and, as needed, human review that can result in a manual action.” Google’s definition of spam now also covers “attempting to manipulate generative AI responses in Google Search”, so the same logic applies to AI answers. For the wider SEO case, see expired domains and SEO.
Step 1 and 2: read the history, then test the age
What was the domain used for?
Start with the cheapest check, because it rules out the most names. The Domain History Checker builds a year-by-year Wayback Machine timeline of what the domain was used for: past page titles, topic changes, gaps and redirects. You want one consistent topic, close to what you plan to publish.
A topic change is the red flag that matters most here, because it is exactly the shape of Google’s examples. If a school site became a gambling page in its final year, someone has already tried the play you would be continuing. Redirects need judgement: Google lists “Moving your site to a new address” as legitimate, and asks “whether or not the redirect is intended to deceive”. Our post on domain ownership history goes deeper on reading who held a name and when.
Is the age continuous?
Next, run the name through the Domain Age Checker. It shows the registration date and true age for up to 20 domains, and flags domains that were dropped and re-registered. That flag is the point. A name that lapsed and was picked up again is not the same site that existed ten years ago, whatever the archive shows. Compare any gap in the history timeline with the age result; if both point to a break, treat the old reputation as someone else’s. What domain age tells you explains why age is a signal to read, not a boost to buy.
Step 3: scan the archive for spam
A clean-looking timeline can still hide a hacked phase. Google defines hacked content as “any content placed on a site without permission, due to vulnerabilities in a site’s security”, and lists code injection, page injection, content injection and redirects. Injected pages rarely change the homepage title, so they slip past a quick history scan.
The Domain Spam History Checker scans the domain’s archived pages for casino, pharma, adult and hacked-site spam, and links the evidence: the archived pages themselves. Open each one. A single spam page from a hack that was cleaned up quickly reads very differently from a year of pharma pages. If the scan comes back heavy, walk away; there is no cheap fix for a reputation built on someone else’s spam. For blocklists and email reputation, use the steps in our domain blacklist check.
Step 4: audit what the backlinks are made of
The links are usually why you want the name, so they deserve the hardest look. Google’s rule: “Link spam is the practice of creating links to or from a site primarily for the purpose of manipulating search rankings.” Its examples are a checklist for an old profile:
- “Buying or selling links for ranking purposes”
- “Low-quality directory or bookmark site links”
- “Widely distributed links in the footers or templates of various sites”
- “Excessive link exchanges”
- “Forum comments with optimized links in the post or signature”
Export the domain’s backlinks as a CSV from whichever backlink tool you use, then drop it into the Expired Domain Backlink Analyzer. It shows what the profile is made of: anchors, spam, throwaway sites and how concentrated the links are. It runs in your browser, so the file is not uploaded, and it does not fetch backlinks itself, which is why the export comes first.
Read the anchors before anything else. Natural profiles carry brand names and plain URLs; exact-match commercial anchors in bulk suggest the links were bought. Paid links are not automatically a problem, since Google allows them when “qualified with a rel=”nofollow” or rel=”sponsored” attribute value”, but those pass you nothing either.
Step 5: confirm the status and check your own plan
Only now does it make sense to ask whether you can buy the name. The Domain Expiry Checker shows when a domain expires and, if it has lapsed, which stage it is in (grace, redemption or pending delete) and when it could become available. The full sequence is in when expired domains become available.
The last check is on you. Set your plan beside the old site’s history. Continuing the same topic with real content is the opposite of Google’s examples. Swapping a charity’s reputation for product reviews is one of them. Google also warns it may act against “Using existing or creating new subdomains, subdirectories, or sites with the intention of continuing to violate our policies”. Then set a price ceiling; our breakdown of what an expired domain costs covers the fees.
| Check | Free tool | Risk it screens for (Google’s terms) |
|---|---|---|
| Past content and topic changes | Domain History Checker | Expired domain abuse |
| Dropped and re-registered flag | Domain Age Checker | Whether the “age” is continuous |
| Archived casino, pharma, adult, hacked pages | Domain Spam History Checker | Hacked content, prior spam |
| Anchors and throwaway linking sites | Expired Domain Backlink Analyzer | Link spam |
| Expiry stage | Domain Expiry Checker | Whether it can be bought yet |
One limit to state plainly: none of these checks can tell you whether Google has already acted on the domain. The policy page does not say whether a previous owner’s manual action carries over, and no outside tool can see one. The checks reduce the risk; they cannot certify a name.
Frequently asked questions
Is buying an expired domain against Google’s rules?
No. The spam policy targets repurposing a domain “primarily to manipulate search rankings” with content of “little to no value”. Buying one is not itself a violation.
Which check should I run first?
The history. A topic change or a spam phase rules a name out in minutes, before you spend time exporting backlinks or tracking its expiry stage.
Does the Backlink Analyzer find the links for me?
No. You export a backlink CSV from a backlink tool and drop it in. The analysis runs in your browser and the file is not uploaded.
Can these checks prove a domain is safe?
No. They show history, spam and link patterns, but they cannot see whether Google has taken action against the domain in the past.
The takeaway Read the history, test the age, scan for spam, audit the links, then confirm the stage. Buy only names whose past matches what you plan to publish.
