Track expired and newly re-registered domains every day so you can spot valuable drops, policy violations, or suddenly repurposed properties before they become a problem. Monitor for domains that shift from legitimate to malicious use.
Millions of domains expire and are re-registered every month. Some are valuable drops. Others flip from a legitimate blog to a phishing kit, a crypto scam, or a C2 relay — keeping their old SEO trust and aged WHOIS to evade new-domain blocks. Primitive Host tracks 50M+ expired and newly re-registered domains daily, with before/after DNS, hosting and ownership context. Security teams spot when an attacker retools a trusted domain, brand teams catch expired brand-adjacent drops, and researchers study re-registration patterns at scale. Daily feed, filterable by TLD, registrar and keyword, so drift never hides in the noise.
What you can do
Detect Repurposed Malicious Domains
Flag when a previously benign domain switches to bulletproof hosting or phishing DNS within days of re-registration.
Hunt Valuable Drops
Surface brandable or SEO-strong expired domains before brokers list them.
Brand-Adjacent Risk Monitoring
Watch for your brand terms among expired domains to preempt cybersquatting and resale.
Key features
- Daily feed of expired and re-registered domains from 50M+ records
- Detect when dropped domains change ownership, DNS or hosting
- Track policy violations on expired brand-adjacent domains
- Filter by TLD, registrar, keyword or historical ownership
- Alert on sudden DNS or hosting changes post-expiration
GET /v1/expired?date=2025-09-06&tlds=com,io,co
Authorization: Bearer <token>
{
"date": "2025-09-06",
"expired": ["old-startup.io", "brand-cache.com"],
"total": 48201
}