Every domainer has a routine before he buys a name. Mine's probably not that different from yours.
Comps, search volume, age, backlinks, extension, archive history, trademark search, the radio test. I run through most of it. But there's one check I think a lot of investors skip, and it's the one that quietly costs people the most: where has this domain actually been?
That's what URLVoid is for.
It's a free website reputation checker. You type in a domain, it runs the name against a stack of blacklist and reputation sources, and it tells you whether anything's flagging it for malware, phishing, fraud, spam, or the general category of stuff you don't want your name associated with. That's it. That's the whole tool. It's a simple tool.
For a domainer it matters more than it looks like it should.
A name can check every box. Short, aged, brandable, real backlinks, clean keyword. And it can still be carrying baggage from whoever owned it three owners ago. You're not just buying the string. You're buying its history, and history doesn't show up in an Estibot appraisal.
I've watched it happen to people. Not me, not on a name I want to confess to here, but I know domainers who bought what looked like a fantastic name, paid real money for it, four and five figures, and only found out later that the name had a whole previous life tied to a completely different audience. Sometimes a shady one. The string was clean. The history wasn't. By the time they figured out why the name wouldn't behave, the money was already spent.
That's the kind of thing a thirty-second check at the front end can flag.
So I run the questionable ones through URLVoid before I commit.
What I like about it is that it's not trying to sell me anything. No glossy dashboard, no upsell, no "upgrade to Pro to see the rest." It looks like it was built in 2009 and never touched again, and I mean that as a compliment. You go there for one answer and you get it fast.
That speed is the actual value. When I'm working a drop list or an auction, I'm not going to run a ten-point security audit on a name I haven't even decided I like yet. I want a signal. Clean, I keep moving. Flagged, I slow down and dig.
And that's the part newer investors get wrong. A flag isn't a verdict. False positives happen all the time. Shared IP, a previous owner's mess that's since been cleaned up, a reputation source that hasn't updated in years. A flag means look closer, not walk away. Same in reverse. A clean report isn't a guarantee either. It's a snapshot of what those particular sources know right now. Plenty of names have problems nobody's caught yet.
So I don't let URLVoid make the decision. I let it tell me when there's a decision to make, just like any other data point.
When do I actually reach for it? Aged and expired inventory, mostly, especially anything that had a live site on it. The longer a name's been around, the more chances somebody had to do something dumb with it. I'll also check before I develop anything, because building on a poisoned name is a special kind of wasted weekend. And before a serious end-user pitch, since if the buyer's any good they're running their own checks, and I'd rather find the problem before they do.
URLVoid isn't the only thing out there. If something looks off I'll bounce over to VirusTotal, Google Safe Browsing, Sucuri, urlscan, MXToolbox, Spamhaus, whatever fits what I'm trying to learn. Different tools for malware versus email reputation versus what the page does when it actually loads. But I'm not running every name through all of them. That's not a workflow, that's a hobby.
The honest takeaway isn't that we all need to become security people. We don't. It's just that names have pasts, and we spend almost all our energy on the upside. What'll it sell for, who buys it, what gets built on it. Those are the fun questions. The boring one is whether the name's already dragging something behind it that you're about to inherit.
I don't always remember to ask it. URLVoid is how I remember.