In July 2025, a domain previously operated by a content delivery network was registered by an unknown party. The CDN had been shut down years earlier and the domain had been allowed to expire, yet it remained embedded in the infrastructure of many other projects.
According to The Hacker News, thousands of websites and code repositories still reference the domain for assets. That means the new registrant could potentially deliver arbitrary content to those downstream systems, turning a forgotten domain into a possible supply-chain risk.
The incident highlights how expired domains linked to retired services can linger as dependencies, leaving organisations exposed long after the original provider has disappeared.