A few years ago, after listening to the podcast by Michael Bazzell (which I really miss) I decided to explore using "expired domains" as a layer of operational security.
I visited the website expireddomains.net and began looking for a domain that had a reasonable reputation, and a name that
