Offshore Gambling Sites Spend Millions Snatching Up Expired Government Domains

The digital gambling underworld has found a lucrative way to bypass strict search engine filters. Offshore operators are investing millions of dollars in purchasing internet addresses that once belonged to official agencies, charities, or political campaigns. The goal of this strategy is to inherit the trust and technical authority these sites have built over years. Once such a domain expires, the links pointing to it do not automatically disappear. These backlinks are the digital gold that operators now use to redirect unsuspecting users to online casinos.

What is particularly insidious is that many of these links still exist on official documents or even physical objects. For example, in Maryland, about 800,000 people are driving around with license plates featuring a URL that was supposed to celebrate the 200th anniversary of the national anthem. Today, that address leads directly to an online casino in the Philippines. Such incidents demonstrate the scale of a global manipulation where the boundaries between reputable information and illegal gambling are deliberately blurred. The buyers are often located in regions like Curacao, Malta, Indonesia, or the Isle of Man, placing them beyond the reach of Western regulatory authorities.

Numbers and facts

A detailed report from Backlinking.com reveals the extent of the operations. Between January 2024 and May 2026, at least 448 websites sold at auction were converted into gambling sites or affiliate portals. Offshore firms paid a total of $22.3 million for them. A clear trend emerged: the more expensive a domain was, the more likely a gambling provider was behind it. For domains sold for more than $5,000, one in ten was a gambling purchase. For prices above $25,000, the rate rose to one in five domains.

The American Gaming Association (AGA) estimates the volume of this market to be gigantic. According to estimates from August 2025, US consumers wager around $466 billion annually on unregulated online slots and table games. Player losses on these platforms amount to approximately $18.6 billion. These figures illustrate why operators are willing to pay astronomical sums for expired web addresses.

Background

The technical phenomenon behind this is often referred to as dropcatching. Every day, about 65,000 domains are re-registered worldwide that previously belonged to someone else. In the first half of 2026, these rediscovered addresses accounted for nearly 20 percent of all new registrations. For actors like the Sable Squirrel group, which spent around $7 million for such purposes alone, this is an efficient business model. They control over 10,000 domains and use them not only for illegal sports betting promotion but also partially for spreading malware such as Quasar RAT or Remcos RAT.

A prominent example is the Queen’s Green Canopy website, an initiative for the Queen's Platinum Jubilee in 2022. Anyone visiting this site today ends up at an Indonesian slot provider. A similar fate befell the Vote Leave campaign, which supported Brexit. Here, the link now leads to a list of casinos that bypass the British self-exclusion system GamStop. Google itself classifies this practice as abuse.

"Expired domain abuse is where an expired domain name is purchased and repurposed primarily to manipulate search rankings by hosting content that provides little to no value to users." - Google Spokesperson (Official Spam Policy)

Aaron Seminoff of Backlinking.com emphasizes that buyers primarily pay for the existing connections. When a charity abandons its site, the recommendations from other reputable sites remain. This inherited reputation is more valuable to criminals than a completely new website.

Why it matters for German players

For German players, this development poses a significant danger. In Germany, the market is strictly regulated by the State Treaty on Gambling 2021 (GlüStV 2021). Only providers listed on the official whitelist of the Joint Gambling Authority of the States (GGL) are allowed to legally offer online slots or poker. These legal providers are subject to strict rules, such as the €1,000 monthly deposit limit and the €1 stake limit per round for slots. Furthermore, they are connected to the LUGAS monitoring system to ensure player protection.

However, anyone redirected via a hijacked government domain to an offshore casino in Curacao or the Philippines leaves this protected space. There, neither the German limits nor the OASIS blocking system apply. German consumers should therefore be extremely careful when suddenly redirected from seemingly reputable links to gambling offers. Checking the URL and cross-referencing with the GGL whitelist is essential. Playing with a provider without a German license not only carries legal risks but also means having no recourse to sue for winnings or protect oneself from gambling addiction in case of disputes.

What it means for GGL-licensed casinos

Licensed providers in Germany face the challenge that their regulated and therefore more expensive offering must compete with the aggressive methods of offshore competition. While GGL casinos pay high taxes and meet strict advertising requirements, illegal providers use SEO tricks worth millions to position themselves at the top of search results. The GGL closely monitors such SEO manipulations and works with internet service providers to implement IP blocking and DNS filtering against such illegal networks. Nevertheless, the current report shows that the fight against the offshore world remains a digital arms race, where the technical expertise and financial resources of the opposing side should not be underestimated.