How Do I Find Expired Domains Starting From the Sites That Link to Them?
The reverse hunt: start at the trusted sites in your subject, crawl their outbound links, and keep the ones that no longer resolve. The three steps with the exact tools, the checks that separate a candidate from a mistake, and how the same search runs against a source index of 11,255 listings.
Work backwards from trust rather than forwards from a drop list. All 11,255 listings in the Revised directory, as of 14 September 2026, were found that way, starting at a live site that still links out and ending at the dead domain it points to. You can run the hunt by hand. Pick three or four sites already ranking for what you do, list the sites that link to them, and keep the linkers a person would recognise: an association, a vetted directory, a university department, a council resource page. Crawl those pages and read their outbound links. The ones that no longer resolve point at names nobody renewed. Judge each by whether its links are on topic and numerous, and whether the name is a generic word with no trademark in it.
Everything above describes the source index, which groups those listings by the site that still links to them, screens each one's history for spam and re-checks that the name is still available.
The direction matters because it is the direction a crawler travels. Google's documentation on how Search works puts discovery this way:
Other pages are discovered when Google extracts a link from a known page to a new page
Google Search Central, in-depth guide to how Google Search works, read 16 September 2026.
A dead domain on the end of a link from an association's resource page is a name a crawler still reaches, from a site it already trusts. The procedure below is the one a practitioner's account on r/SEO describes, with the two checks we would add before anyone registers anything.
Step 1: list the linkers, not the domains
Start with three to five sites already winning the searches you want. Pull each one's referring domains with the backlink checker or a vendor free tier, then sort the list by whether you recognise the name rather than by the authority score beside it.
Four shapes are worth keeping.
- Associations. Searching "national association of" plus your subject finds most of them. Their member lists and link-outs were placed by a person.
- Vetted directories. One with an application form is worth ten that accept submissions.
- Universities, agencies and councils. Resource lists, consumer guides, council community pages. Rare, old and stable.
- Long-lived community pages. A club or user group still maintaining a links page after twenty years.
A high authority score is not the filter. An aggregator scoring 80 links to everything, and a county beekeeping association scoring 12 links to six sites in twenty years. Every link on the second one was a decision. Edu and gov backlinks covers why the institutional version is strong and the bought version is not.
Five competitors usually yield 20 to 50 linkers worth crawling. That list is the input to step 2.
Step 2: crawl the trusted sites and read their dead outbound links
Crawl each linker with a tool that reports external links. In Screaming Frog, turn on external links under Configuration then Spider then Crawl, run the site, and open the Response Codes tab. The filter is No Response, which the user guide describes as:
When the URL does not send a response to the SEO Spiders HTTP request. Typically a malformed URL, connection timeout, connection refused or connection error.
A lapsed name no longer resolves at all, so its status reads as a DNS lookup failure rather than a 404. A 404 is a live site with a missing page. A failed lookup is a domain nobody owns.
Two notes that save an afternoon. The free version stops at 500 URLs per crawl, which covers a resource section and not a university. Where the links sit in a repeating layout, such as a directory's listing pages, set up a custom extraction under Configuration then Custom to pull the anchor and the href out of it. Use the bulk export for the filter you are on, so each dead target arrives with its linking page.
Collapse the results to registrable domains, then confirm each one. The expired domain checker reads the registry record over RDAP, so it tells you whether a name is genuinely unregistered rather than parked, redirected or in a redemption period.
Step 3: judge the dead domain, not the linking page
One good link does not make a domain worth registering. Three tests, in the order that kills candidates fastest.
| Test | Keep | Discard |
|---|---|---|
| Its own links | Several linking sites, most on your subject | One link, or many from unrelated directories |
| The name | A generic word or a subject keyword, readable to a person | A company name, a personal name, anything near a trademark |
| Its history | One consistent subject across the archived snapshots | A change of subject shortly before it expired |
The name test is legal as much as editorial. Under ICANN's Uniform Domain-Name Dispute-Resolution Policy, a complainant has to show that "your domain name is identical or confusingly similar to a trademark or service mark in which the complainant has rights", and a dead company's name is the easiest version of that case to make.
Both checks we would add concern what happened after the domain's last good year. Read the referring domains as a list of names rather than a count, because a spammed profile is obvious once you look at it, and how to evaluate an expired domain's link history is the order to do it in. Then read the archived snapshots for the stretch just before expiry, where a legitimate site usually turns into something else.
This is what a source hub is
A source hub is that hunt, run continuously and published. The source index groups the directory by the well-known sites that currently link to at least one listed expired domain. As of 14 September 2026 it names 106 sources with live listings across 11,255 listings in 30 top-level domains, led by .com, .org and .net. Every link was found in our own web crawl rather than claimed by a seller. Availability is re-checked against the live DNS root, and all 11,255 were re-checked inside the last 30 days. Site history comes from archived captures, and 10,318 listings, or 85%, pass a low spam screen. Names stay masked until you reveal one.
The same hunt, run against the index
- Start at the institutions. Expired domains with .edu backlinks holds 108 listings as of 14 September 2026, each linked from a tracked university, 98 of which pass the low spam screen. Expired domains with .gov backlinks holds 42, 41 of which pass. Each hub lists the institutions behind the links, so you can start from a single university or agency.
- Pick your subject. A category hub does step 1 from the other end. The category filter on the directory groups listings by the subject their archived content shows, so you start from the topic rather than the linker. Most category slices are small today; the subject match is the filter that matters, not the count.
- Set three filters. Linked by for the source you trust, Category for the subject, Referring domains for the band. The median listing sits in the 10 to 50 band and 58 have 250 or more, so the top band is a short list rather than a target.
- Read before you reveal. Spam signal, Age and Checked are the filters that disqualify. The Revised Score and Agent Citability sit on every row, and how to browse the directory walks through reading one.
What the index does not remove
Screening removes the candidates that were going to fail anyway. It does not make any individual domain a good bet. You are registering a name whose future you cannot see, on the strength of links somebody else placed for reasons that no longer apply.
One cheap check reduces that. Register a candidate, put a small site on it, and see whether Google will index it at all, which is the expired domain index test. It takes three to five days and answers the one question no amount of link reading can.
To skip the crawling, browse the directory of expired domains with backlinks and start from the source hub closest to your subject. The metrics, the sources linking in and the site history are free to read, signed in or not, and you register at your own registrar.
FAQ
How do I find expired domains that trusted sites in my niche still link to? Pull the referring domains of three to five sites ranking in your subject, keep the linkers a person would recognise, crawl those sites with a tool that reports external links, and filter for outbound links that return no response. Each one points at a lapsed domain. Check availability over RDAP before evaluating anything else.
Why look for the most trusted linkers rather than the highest authority score? A high score usually means the site links to a lot of things. An association or a department resource page links rarely and deliberately, so a link from one is evidence somebody judged the destination worth citing.
What does a DNS lookup failure mean when crawling outbound links? That the hostname no longer resolves, which normally means the registration lapsed. It is different from a 404, where the site is live and the page is gone. A crawler reports the failed lookup under its no-response filter rather than as a status code.
Is a dead link on a trusted site always worth registering? No, and most are not. The link has to be on topic for what you plan to build, the domain needs more than one linking site, and the name has to carry no trademark risk. A change of subject before expiry is the commonest disqualifier.