---
title: "What to Do After Buying a Domain: First Steps"
description: "The steps to take right after buying a domain, in order, plus the extra checks a domain with a past needs: Search Console, email reputation and old owners."
url: https://hunter.domains/blog/what-to-do-after-buying-a-domain
language: en
---

# What to Do After Buying a Domain: First Steps

The steps to take right after buying a domain, in order, plus the extra checks a domain with a past needs: Search Console, email reputation and old owners.

4 November 2026 8 min read

What to do after buying a domain comes down to three jobs, in this order: lock down the account that holds it, make sure the registry record really shows it as yours, then connect it to DNS, a site and email. If the domain had a life before you, add a fourth job before you build anything: find out what that past left behind in Google, in email reputation and in other people's accounts.

## The first-day checklist

1. Turn on two-factor login at the registrar and check the account email is one you control.
2. Switch on auto-renew and confirm the payment method works.
3. Look the domain up in RDAP and confirm the registrar, the expiry date and the status codes.
4. Decide where DNS lives and replace the registrar's default parking page, or leave it on purpose.
5. Add an SSL certificate as soon as a site goes live.
6. Verify the domain in Google Search Console and read the Manual Actions and Security issues reports.
7. Check blacklists before you send a single email from it.
8. Write down the purchase date: the transfer lock starts from it.

Steps 6 and 7 matter most for a domain someone else used before, and that is where most of this article goes.

## Secure the registrar account

Anyone who gets into the account that holds your domain can change nameservers, move it out, or let it lapse.

- **Two-factor login.** Prefer an authenticator app to SMS.
- **Registrar lock.** Most registrars switch it on by default; in the registry record it shows as `clientTransferProhibited`. Leave it on unless you are moving the domain.
- **Auto-renew.** Set it, plus a calendar reminder a month before the expiry date.
- **Contact details.** The registrant email receives transfer and renewal notices. Use an address on a different domain, so you can still read it if this domain's email breaks.

## Confirm the domain is really yours

A receipt is not proof of ownership. The registry record is. Run a [WHOIS and RDAP lookup](https://hunter.domains/tools/whois-lookup) and check three things:

- **Registrar.** It should be the company you bought through, or the one the seller pushed the domain to.
- **Expiry date.** If you won an expiry auction, the date should already reflect a renewal.
- **Status codes.** An active domain shows codes such as `clientTransferProhibited`. If you still see `redemptionPeriod` or `pendingDelete`, the purchase has not completed. Our guide to [domain status codes](https://hunter.domains/blog/domain-status-codes) explains each one.

This matters most with expiry auctions: the original owner can still redeem during part of the auction window, so a won auction can be cancelled. Spend nothing on content or design until the record shows your registrar and the domain sits in your account.

## DNS, parking and SSL

Right after a purchase, the domain usually points at the registrar's nameservers and shows a default parking page, often with ads. Keep the registrar's DNS and add records there, or move DNS to your host or a DNS provider by changing the nameservers.

For a domain bought for its history, a parked ad page is not neutral: it tells every visitor and crawler the site is now a placeholder. If you are not ready to build, a plain one-page holding site on the topic is cleaner.

A website needs hosting; the domain alone is only the name. Once the site is live, add an SSL certificate so it loads over HTTPS. A [DNS lookup](https://hunter.domains/tools/dns-lookup) shows which nameservers and records are live, and whether the domain still looks parked.

## Search Console: see what Google knows

Google shows manual actions only to the verified owner, in Search Console's Manual Actions report. Before the purchase you could not see them; now you can.

### Verify a Domain property

Add a **Domain property** rather than a URL-prefix one. A Domain property covers every subdomain and both http and https, and it can only be verified with a DNS TXT record. Google's [verification instructions](https://support.google.com/webmasters/answer/9008080) note that the record must stay in place: remove it and you lose verification.

### Read two reports first

- **Manual Actions.** A green check means no current manual action. If one is listed, the report shows which URL patterns it covers.
- **Security issues.** Hacked content or malware flags left over from the old site show up here.

If you find a manual action, Google's [Manual Actions report help](https://support.google.com/webmasters/answer/9044175) covers this exact case: fix the issues on all affected pages, then in the review request say that you recently acquired the site and that it no longer violates the policies. Reviews can take days or weeks.

### Remove former owners

Search Console allows several verified owners on one property, each verified as long as their token is present. If you restore old pages from the archive, look for an old `google-site-verification` meta tag or verification file: leaving one in place can quietly re-verify the former owner. Delete them, then review the owners list in the property settings.

No manual action is not a clean bill of health: algorithmic demotions never appear here. Keep the notes from your [pre-purchase checklist](https://hunter.domains/blog/expired-domain-checker-checklist).

## Email: reputation and mail meant for someone else

### Check blacklists before you send

Domain blocklists such as Spamhaus DBL and SURBL mainly affect email and security filters. If the old owner sent spam, your first newsletter can land in junk or bounce, so check before you create mailboxes. Also check Google Safe Browsing status in the [Transparency Report](https://transparencyreport.google.com/safe-browsing/search), since a flagged domain triggers browser warnings for visitors. The [domain checker](https://hunter.domains/domain-checker) runs the blacklist checks along with the archive history if you want them in one report.

### SPF and DMARC

Publish an SPF record listing only the services that send mail for you, and a DMARC record telling receiving servers what to do with mail that fails. On a domain with a past, start DMARC in monitoring mode: its reports show who else still sends as your domain. If you plan to use the domain for outreach, the separate question of reputation is covered in [aged domains for cold email](https://hunter.domains/blog/aged-domains-for-cold-email).

### Mail addressed to the previous owner

Once you add MX records, mail sent to old addresses can start arriving, especially with a catch-all mailbox. Some may be password resets, invoices or personal messages meant for the previous owner. Avoid a catch-all unless you need one, never use stray messages to access anyone's accounts, and delete what is not yours. This is not legal advice.

## The 60-day transfer lock

A newly registered or newly transferred gTLD domain is typically locked against transfer to another registrar for 60 days. A domain caught through a backorder service sits at that service's registrar; if you want it with the rest of your portfolio, plan the move for after the lock ends. Moving is worth it for one account across your domains or better security options, but it is not urgent: renewal and DNS work wherever the domain sits.

## Decide the plan before you build

Pick one of four plans and write it down:

| Plan | Fits when | First move |
| --- | --- | --- |
| Rebuild | The old site's topic matches yours and its links point to real pages | Map the old URLs and rebuild the linked pages |
| Redirect | You run a closely related site and the topics overlap page by page | Map old URLs to matching pages, one by one |
| Hold | You are not ready, or the Search Console reports need time | A plain holding page, renewals on |
| Resell | You bought it as an investment | Leave it clean, list it, keep the history notes |

The step-by-step version of the first plan is in [how to rebuild an expired domain](https://hunter.domains/blog/how-to-rebuild-an-expired-domain).

Do not rush a 301. A redirect set up on day one, before you have read Search Console, can carry an old problem straight to your main site. Repurposing an old domain mainly to manipulate rankings with low-value content is what Google's [expired domain abuse](https://hunter.domains/blog/expired-domain-abuse-google-policy) policy targets. When a redirect does fit, the [301 redirect guide](https://hunter.domains/blog/301-redirect-expired-domain) covers how to map it.

If you are still choosing domains, [hunter.domains](https://hunter.domains/domains) lists expired domains that have already passed a history and spam check, with risk flags shown rather than hidden.

## Frequently asked questions

### How long after buying a domain can I use it?

You can add DNS records right away. Nameserver changes and new records take some time to be visible everywhere, and Search Console notes that a manually added TXT record can take up to two or three days. For an expiry auction win, wait until the registry record shows your registrar and the domain sits in your account before building anything.

### Can I transfer a domain right after buying it?

Usually not to another registrar. A newly registered or newly transferred gTLD domain is typically locked against transfer for 60 days. You can still change DNS, renew it and set it up during that time.

### Do I need hosting after buying a domain?

Only if you want a website or email on it. Hosting serves the site and an email provider handles mail; DNS lets you point the domain at either.

### What if the domain I bought has a Google penalty?

Verify the domain and check the Manual Actions report. If there is an action, fix every listed issue, then request a review and say that you recently acquired the site. If nothing is listed but the domain still does not appear in Google, the cause may be algorithmic or a long offline period, and there is no review to request.

Affiliate link

Is the name you want still free?

Type it in and we will open it in Spaceship search. If it is free, you can register it there right away.

## We find domains that meet these criteria every day

Expired domains with a clean history and real authority, listed with a score; the ones matching your rule land in your inbox the moment they appear.

[See today's catch](https://hunter.domains/domains)

## Related articles

Basics

### [Expired Domain Checker: 12 Checks Before You Buy](https://hunter.domains/blog/expired-domain-checker-checklist)

An expired domain checker you can run by hand: twelve checks covering archive history, spam, index status, link quality and trademarks before you buy.

3 October 2026 8 min read

History checks

### [How to Check If a Domain Is Penalized by Google](https://hunter.domains/blog/how-to-check-if-a-domain-is-penalized)

How to check if a domain is penalized by Google: the indirect signs you can read before buying and the definitive check once the domain is yours.

3 October 2026 7 min read

Using domains

### [301 Redirect Expired Domain: Does It Still Pass Value?](https://hunter.domains/blog/301-redirect-expired-domain)

Does it still work to 301 redirect an expired domain? When a redirect passes link value, when Google treats it as abuse, and how to do it properly.

3 October 2026 9 min read

## Don't miss the next good domain.

Set your rule and leave the rest to us. You hear the moment a matching domain is found.

[Get started free](https://hunter.domains/register)