The old domain you drop can still receive password resets

After a rebrand, a dead website does not mean the old domain is safe to release.

Before expiry, check old email aliases, vendor logins, password managers, OAuth callbacks and support templates. Keep the domain registered while those dependencies are removed. A catch-all mailbox and a short DNS or mail log can show what still points there without opening every message.

What hidden dependency has stopped you dropping an old domain?