Domain expired: what happens now and how to recover it

What happens on expiry day

On the expiry date the domain is not deleted right away, but it stops working. Most registrars switch the nameservers to their own parking page so the owner notices. With that, every DNS record of the zone disappears: the website shows an ad page, the MX records are gone, and inbound mail is bounced at the sender or sits in queues for days.

Some registrars keep the domain running normally for a short courtesy period, which only delays the outage. You cannot rely on it. If you first hear about the expiry through a client call on Monday, a weekend without mail has usually already passed.

The phases for .com, .net and other gTLDs

Generic TLDs under ICANN rules follow a typical lifecycle. After expiry comes the auto-renew grace period, during which the registrar can renew at the normal price; it lasts up to 45 days depending on the registrar, and many use considerably less. Then comes the redemption period of 30 days: the domain is marked for deletion but the previous owner can still restore it for a redemption fee, typically somewhere between 80 and 200 euros and well above the normal annual fee.

After redemption comes pending delete, five days in which nothing can be done. Then the domain is released and in that very second becomes a target for drop-catching services that register desirable names automatically to park or resell them. A domain with backlinks and mail traffic is valuable to such services.

• Auto-renew grace: up to 45 days, renewal at the normal price, nameservers often already switched
• Redemption period: 30 days, restore only for a fee via the previous registrar
• Pending delete: 5 days, no restore possible
• Release: anyone can register the domain, drop-catchers are faster than you

Why .de works differently

DENIC has no redemption period in the classic sense. A .de domain has no expiry date at the registry; the contract runs between the holder and the provider. If the provider cancels the domain, for example because an invoice was not paid, it can have DENIC delete it, and the name becomes available for registration again very shortly afterwards. There is no restore like with .com.

Alternatively the provider can hand the domain into DENIC's TRANSIT procedure. DENIC then administers the domain temporarily, contacts the holder and gives them a window of roughly four weeks to choose a new provider. If nobody reacts, the domain is deleted. TRANSIT is a safety net, not a right, and many providers use the direct deletion path.

Why agencies get caught

A domain expiry is never a technical problem but an organisational one. The patterns are always the same: the domain was registered years ago by an employee who has since left, and the registrar's mails go to their old mailbox. The credit card behind auto-renew has expired and the reminder lands in spam. The client changed hosting providers and both sides assumed the other one takes care of the domain.

Especially nasty: registrars send reminders to the contact address of the domain account, and that address often lives on exactly the domain that is expiring. Once the nameservers point to the parking page, even the final notice no longer reaches you.

Checking the expiry date via RDAP and WHOIS

RDAP has replaced WHOIS as the query protocol and returns structured JSON with the expiry date, registrar and status codes. For gTLDs you will find an "expiration" event and status values such as clientTransferProhibited. Some registries publish no expiry date at all, DENIC for .de among them; there, only the provider's customer portal or a status check for "connect" or "TRANSIT" helps.

$ curl -s https://rdap.org/domain/example.com | jq '.events, .status'

[
  { "eventAction": "registration", "eventDate": "1995-08-14T04:00:00Z" },
  { "eventAction": "expiration",   "eventDate": "2027-08-13T04:00:00Z" }
]
[ "client delete prohibited", "client transfer prohibited", "client update prohibited" ]

Besides the date, the status codes matter. clientHold or serverHold means the domain is no longer published in the registry zone, so DNS is dead. redemptionPeriod and pendingDelete are the lifecycle phases described above. A sudden change of registrar or the disappearance of clientTransferProhibited is a warning sign for a hijacking attempt.

Registrar lock, auto-renew and inventory

Three measures prevent almost every expiry case. First: enable auto-renew on every client domain and verify the payment method once a year. Second: keep the registrar lock (clientTransferProhibited, clientDeleteProhibited) enabled so the domain cannot be transferred by accident or through a stolen login. Third: keep a domain inventory per client with registrar, contact address, expiry date, payment method and responsible person.

When onboarding a new client, the question "where are your domains and who receives the invoices?" belongs on the very first checklist. The answer is surprisingly often "no idea", and then an RDAP lookup of every domain is the fastest way to the truth.

1. List every domain of the client, including typo domains and old campaign domains.
2. Determine registrar, expiry date and status codes for each domain via RDAP.
3. Set the contact address at the registrar to an address that does not live on the domain itself.
4. Enable auto-renew and registrar lock, note the payment method and its expiry date.
5. Monitor the expiry date and status changes automatically, with warnings 60, 30 and 7 days ahead.

If it has already happened

The first step is always the registrar, never a third party. During the grace period a normal renewal in the customer portal is enough. During redemption you file a restore request and pay the fee; the domain is usually active again within hours to a few days. For .de, ask the provider immediately whether the domain was deleted or handed into TRANSIT, and act within days, not weeks.

If the domain is already free or registered by a drop-catcher, only a buy-back or a dispute procedure for trademark violations remains. Both are expensive and slow. In the meantime, set up a substitute domain for client communication so at least mail works again.

Frequently asked questions

Can I see the expiry date of a .de domain via WHOIS?

No. DENIC does not publish an expiry date because the contract runs between the holder and the provider. The date exists only in the provider's customer portal. Monitor the domain status and the nameservers instead, so you notice a switch to parking or TRANSIT immediately.

How long does mail keep working after expiry?

As long as the nameservers still serve the old zone. Once the registrar switches to parking, the MX records disappear. Senders then retry for one to five days depending on their configuration, after which bounces are generated.

Is a calendar reminder enough?

It helps if the date is right and the right person sees it. With dozens of client domains at different registrars, automatic monitoring of expiry date, status codes and nameservers is more reliable than a calendar nobody maintains.