Defaults.Exposed › Reports

The Internet's Dead Domains: How Many Domains No Longer Resolve? (2026)

Published 2026-06-28

Figures as of 2026-06-28 · methodology v7. Aggregate census data; we never publish an individual domain’s status or grade. See how we grade.

Roughly one in every sixteen domains the internet has registered is now dead. Of the 333 million domains in our inventory, 313 million still resolve — and 21 million (6.2%) no longer point to anything at all. They were registered, used, and then abandoned, expired, or switched off. The internet, it turns out, has a substantial graveyard.

How many domains are dead?

A “dead” domain here is one we can no longer resolve to a working address — the name exists in the record of the internet, but it leads nowhere. That covers expired registrations, deliberately retired sites, and domains parked so thinly they no longer respond.

Why do so many domains die?

Domains are cheap to register and easy to forget. The common paths to a dead domain:

• A business closes or rebrands and lets the old domain lapse.
• A campaign or project ends — a launch microsite, an event page, a short-lived product.
• Speculative registrations expire when nobody buys them.
• Migrations leave the old name behind after a move to a new domain.

None of this is unusual or alarming on its own. What matters is what an abandoned domain can leave switched on behind it.

The quiet risk: abandoned domains can still be abused

A domain that no longer serves a website is not automatically harmless. Depending on what was left configured when it was abandoned, a lapsed or dormant domain can become a tool for others:

• Spoofing leftovers. If an abandoned domain was never given enforced SPF and DMARC, it can still be impersonated in email — and a domain nobody is watching is an attractive one to forge.
• Re-registration risk. When a once-trusted domain expires, someone else can register it and inherit whatever reputation, inbound links, or old integrations still point at it.
• Dangling references. Old DNS records that point at cloud services which have since been released can, in some configurations, be claimed by a third party.

The lesson for owners is the same whether a domain is your main site or an old one you forgot: a domain you don’t intend to use should be either properly locked down or deliberately retired — not simply left to drift.

What dead domains tell us about the internet

The 6.2% dead rate is a reminder that the registered internet is much larger than the live internet. Headline counts of “domains registered” overstate how much of the web is actually reachable. When we grade security, we focus on the live population — the 313 million domains that still resolve — because those are the ones that can actually send email, serve a site, and be impersonated today.

Frequently asked questions

How many domains are dead or inactive? As of 2026-06-28, about 21 million of the 333 million domains we track — roughly 6.2% — no longer resolve to anything.

What is a dead domain? A domain that still exists in the record of the internet but no longer resolves to a working address — typically because it expired, was retired, or was abandoned.

Are abandoned domains a security risk? They can be. An abandoned domain that was never protected against spoofing can still be impersonated in email, and an expired domain can be re-registered by someone else who inherits its old trust and links.

Should I delete a domain I no longer use? If you won’t use it, either keep it registered and locked down (with enforced SPF/DMARC so it can’t be spoofed) or let it go deliberately — and remove any DNS records that point at services you’ve shut down.

Is your domain pulling its weight — or quietly exposed?

Whether it’s your main site or an old one you’d half-forgotten, check what it currently exposes — privately and free, with a per-check breakdown and how to fix anything that fails.

Check your domain → · How we grade → · Aggregate data only. Data stored and processed in the EU.