Create one reliable inventory
Collect every domain controlled by the organization, including defensive registrations, campaign names, redirects, country variants, and domains held by agencies or acquired companies. For each one, record the registrar, account, creation and expiration dates, renewal setting, annual cost, nameservers, website destination, email use, and business owner.
Use the bulk domain age checker to normalize a working list and export source-backed registration data. Keep failed lookups in the spreadsheet so missing information becomes a task rather than disappearing.
Classify purpose and dependency
Assign a clear purpose: primary site, email, product, redirect, defensive registration, future project, or unknown. Then identify dependencies. A domain with no website may still receive email, host an API, validate a certificate, or protect an important brand.
Do not recommend dropping a domain until DNS records, traffic, email logs, certificates, application configuration, and stakeholder knowledge have been reviewed.
Score operational risk
Flag domains that have:
- An expiration date within the chosen review window.
- Auto-renewal disabled or an invalid payment method.
- No named business owner.
- Weak account security or inaccessible recovery details.
- An external agency or former employee as the only administrator.
- Unexplained DNS, mail, or redirect behavior.
Prioritize business impact and recovery difficulty. An inexpensive email domain can be more critical than an older, costly domain that is not in use.
Make documented decisions
Choose a proposed action—keep, consolidate, redirect, transfer, sell, or allow to expire—and record the reason, approver, dependencies, and review date. Age may support historical or brand context, but it should not become an automatic “keep” rule.
For a transfer, plan around eligibility, locks, DNS continuity, and account access. For a retirement, remove dependencies first and monitor the transition. Remember that expiry does not mean immediate deletion or guaranteed availability.
Repeat the audit
Review critical domains more frequently than low-risk defensive names and run a full portfolio review at least on a regular business cadence. Reconcile registrar invoices with the inventory, test recovery contacts, and record acquisitions or disposals promptly. A maintained portfolio costs less and is far easier to defend than an emergency reconstruction.