Someone bought my expired domain: 214 Belgian business domains now show gambling sites

On 6 November 2026, 214 of the 31,123 Belgian business domains listed in OpenStreetMap showed a full casino, betting or adult site: 1 in 145. The café, shop or practice that once owned the address is gone from it. For all 214, the business's map listing still sent visitors to that domain in October 2026.

Tap the website link on the map and you land on a casino, an age gate or an Indonesian lottery page instead of a menu or opening hours. More than half of those listings still carry opening hours, a recent check by a mapper or an email address on another domain, which suggests that many of the businesses are still trading. The pattern fits a domain that lapses and is registered by someone else. The Belgian registry, DNS Belgium, says so itself: after a 40-day quarantine, anyone can take over an unpaid name.

What the 214 addresses show now

We read the stored home page of all 31,123 domains, including those our 5 November count had set aside as redirects, spam or parked pages. Every hit was fetched once more on 6 November. A domain counts when its home page is a gambling or adult site as a whole, either on the domain itself or after a redirect to another address.

The casino pages mostly aim at Belgian players: 80 of the 214 page titles mention Belgium. 162 domains show the gambling page directly; 52 redirect elsewhere and end up at just 40 destinations, so several former business addresses feed the same site.

The 59 age gates come from a single template, same title, same layout. We opened ten of them in a phone-sized browser window without clicking anything. Five asked in Dutch whether the visitor is over 18; five stayed blank. We did not look behind the gate.

How a Belgian business loses its domain

A domain name is rented by the year. When a .be name is not renewed, DNS Belgium puts it in quarantine for 40 days. During that window the registrar can bring it back at the holder's request; after it, the name is free and anyone can register it. The extensions .vlaanderen and .brussels run on different terms, 35 days in total.

It rarely happens on purpose. A business closes, moves or rebrands and lets the old address lapse. The web designer who registered the name on their own account stops answering (our guide to a web designer who disappeared covers that case). The renewal reminder goes to an inbox nobody reads.

An old business domain also carries links from local sites, directories and maps. Those links stay in place after a takeover, which makes such a domain attractive to anyone who wants a page to rank quickly. What a backlink is explains why they matter. Getting the name back is hard once the quarantine is over: only the holder can transfer a domain, and the new holder decides.

One DNS provider, shared nameserver pairs

Nameservers show who manages a domain's DNS. We queried them through public resolvers. 205 of the 214 gambling domains (95.8%) sit with one and the same DNS provider. In a random sample of 300 working business sites from the same frame, that share is 9.3%.

That provider gives each account its own pair of nameservers, so domains on the same pair almost certainly share an account. 67 of the 214 domains share their pair with at least one other domain on our list, spread over 12 pairs; the largest pair carries 32 casino pages. We name no provider, no account and no destination. The point is the mechanism, not the players.

The concentration points to bulk management: a limited number of accounts holds many of these domains, rather than a string of one-off buyers. Hacked sites and ordinary business sites do not show that pattern.

The map still points customers to the casino

For each of the 214 domains we read the business's entry in OpenStreetMap, the open map that anyone can use and edit. In the version of 24 October 2026, all 214 still linked to the domain that now shows gambling.

We cannot be sure each business still exists, because we used no lookup services. The tags on the same map object do show plenty of signs of life. 99 of the 214 listings (46.3%) carry opening hours, against 39.5% across all 31,123 businesses in the frame. 116 (54.2%) show at least one sign of life: opening hours, an email address on another domain, or a mapper's check since 2024. 139 list a phone number. A business that is still open can have a map entry that sends its customers to a casino.

Email is the second risk. 38 listings give an email address on the lost domain. For 36 of them, the DNS has no mail server today, so messages to that address bounce. For the other 2, a mail server is set, configured by whoever controls the domain now. DNS Belgium warns about exactly this: whoever holds an old domain can reach emails, accounts and sensitive data. Password resets for a web shop, an accounting tool or a social profile often run through that one address.

Hacked sites are a different problem

Next to the 214 taken-over domains, we found 50 business sites (0.16% of the frame) that are still there, with gambling content added: hidden links, casino articles or a bonus page tucked under the real site. That is a break-in, often through an outdated CMS or plugin, and the domain still belongs to the business. A later count that also read sitemaps reached 87 hijacked business sites.

The DNS shows the difference too. Only 8 of those 50 (16.0%) use the provider that hosts 95.8% of the gambling domains, because a hacked site keeps its owner's settings. If that sounds like your site, our guide to a hacked website lists the first steps, and is WordPress safe explains where things usually go wrong.

5 domains fit neither group: they show other content with gambling text and no trace of the business.

By sector: under 1.1% everywhere

Hospitality accounts for 113 of the 214 domains, just over half, while it makes up a third of the frame. In percentage points the gap stays small: 1.0% of hospitality domains against 0.6% in retail. Every sector sits within one percentage point of the others, so we read them as roughly equal. Our data does not say why hospitality turns up more often.

Across Belgium's provinces

Every province has a few of these domains, from 3.9 per 1,000 in Limburg to 11.6 per 1,000 in Namur. Flanders comes to 5.9 per 1,000, Wallonia to 8.7 and Brussels to 9.1. All of these gaps stay far below one percentage point.

The extension hardly matters either. 172 of the 214 gambling sites are on a .be domain, 6.5 per 1,000 .be domains in the frame, against 9.7 per 1,000 for .com (34 of 3,497) and 4.4 per 1,000 for .eu (2 of 454). Picking a name for a new business? Choosing a domain name covers the extension question.

Belgian gambling rules and the regulator's list

Belgium restricts gambling advertising tightly. The royal decree of 27 February 2023 on gambling advertising, in force since 1 July 2023, allows in article 2 only the forms of advertising listed in its second chapter. Article 11 lets a licence holder advertise itself and its games on its own website. Whether a page on a former business domain falls under that rule depends on who runs it and under which licence, and that is something we cannot see.

The Belgian Gaming Commission publishes a list of gambling sites it blocks. On 6 November 2026 it held 930 addresses, the most recent added on 30 October 2026. None of the 214 domains and none of the 40 destinations is on it, though 7 page titles carry a brand name that does appear on the list. The commission itself states that the list is not exhaustive: a site missing from it may still fall under the rules.

What this means for earlier counts

Our count of 5 November 2026 saw 162 of these 214 domains as working sites, since they served an ordinary page without a redirect. That is 0.7% of 23,676 working sites, and it sat inside the denominator of the study on legal requirements for business websites and the email spoofing study, which use the same frame. Removing them shifts those percentages by less than one percentage point; for the company number it adds a quarter of a point at most. The conclusions hold. The state of Belgian business websites also starts from domains on the map, and any study built on OpenStreetMap needs the same filter: a domain that answers is not always the business's site.

How to keep hold of your own domain

Losing a domain costs more than a website. It takes your email, your search visibility and the trust of people looking for you. To keep control:

1. Register the name to your business. Not to a web designer or a friend. Ask your registrar who the holder is and which address receives the renewal reminders.
2. Turn on automatic renewal with a card or direct debit that will still be valid next year. Renewing is cheap; a lost name costs customers. Our hosting cost guide shows what a domain and hosting add up to.
3. Keep an old domain when you move or rebrand. Point it at the new site with a 301 redirect for years. Selling the business? Put the domain in the deal.
4. Update your listings: your Google Business Profile, OpenStreetMap, social profiles and invoices. Anyone can edit a map entry, including you.
5. Move email and logins off an old domain. Password resets should never depend on an address you could lose. Check your mail setup with the DMARC checker.
6. Open your own domain on your phone now and then. If it shows something you do not recognise or the browser complains about the certificate, run the SSL checker and call whoever built the site.

Having a new site built? Settle who owns the domain and who renews it from day one. That is part of website design with us, and of website maintenance afterwards.