Audit of 15,465 MCP servers: six expired domains can hijack AI agents

OX Security's audit of 15,465 public MCP servers (5,095 unique hostnames) found six running on expired domains that can be re-registered for $4–12 a year, letting an attacker inherit the server's identity and intercept agent queries. BlueRock (12,000+ servers) and AgentAvow (7,029) scans converge on 30–82% of public MCP servers carrying exploitable flaws.

• 6 of 5,095 MCP hostnames sit on expired domains costing $4–12 a year
• 492 servers are exposed with no auth; only 8.5% use OAuth
• About 33% allow SSRF and 42% have command injection
• 15.6% of hostnames resolve outside the US, including 19 in China and 18 in Russia