Domain Expiry Monitoring: How to Prevent Costly Outages

Every website depends on a valid domain registration. When that registration lapses, the site disappears, emails stop working, and customers see a registrar parking page instead of your product. It happens more often than you think, and to organizations you would never expect.

In this article, we cover why domains expire, how domain expiry monitoring works at a technical level, and what you can do to make sure your domains never lapse.

Real-World Domain Expiry Incidents#

Domain expiry is not a theoretical risk. Some of the most prominent companies in the world have been affected.

Google Argentina (2024): A web designer in Argentina was able to purchase google.com.ar when Google failed to renew the domain on time. The entire country-code domain was briefly under someone else's control. Google recovered it, but not before the incident made international news.

Foursquare (2013): The social media and location platform Foursquare let foursquare.com lapse. Users attempting to check in or access the service were met with a blank page. The domain was re-registered quickly, but the outage lasted long enough for widespread media coverage.

Markmonitor / Microsoft (2003): A domain management provider accidentally let hotmail.co.uk expire, briefly taking down one of the most-used email services in the United Kingdom.

These examples share a common thread: no one intended for the domain to expire. In each case, processes that should have caught the lapse failed silently.

Why Domains Expire#

The idea of a domain expiring seems almost impossible with modern auto-renewal systems, but several conditions create gaps.

Credit Card Expiry or Payment Failure#

This is the most common cause. A credit card on file with the registrar expires or gets replaced. The registrar attempts to charge it, the charge fails, and the registrar sends a notification email. If that email goes to a shared inbox, a former employee, or gets caught in a spam filter, nobody acts on it. After a grace period, the domain drops.

Changed Registrar Without Completing Transfer#

When organizations migrate between registrars, the transfer can stall. If the old registrar's auto-renewal is turned off in anticipation of a transfer that never completes, the domain expires at the old registrar while the team assumes everything is handled.

Company Acquisitions and Mergers#

When one company acquires another, the acquired company's domain portfolio may not be fully inventoried. Domains registered by departed employees, paid for by closed credit cards, or managed through forgotten registrar accounts can fall through the cracks.

Domains Registered by Third Parties#

Agencies, freelancers, and contractors sometimes register domains on behalf of clients. When the business relationship ends, access to the registrar account may not be transferred. The original registrant stops paying, and the domain expires.

Intentional Non-Renewal of the Wrong Domain#

Large organizations with hundreds of domains periodically review their portfolio and decide not to renew certain domains. Human error in this process can mark an active production domain for non-renewal.

The Domain Expiry Timeline#

Understanding the lifecycle of an expired domain is critical for planning your response if something goes wrong.

Active Period#

The domain is fully registered, DNS resolves normally, and the website and email work. Auto-renewal is typically attempted 30 days before expiry, then again at various intervals.

Expiry Date#

The registration period ends. Depending on the registrar and TLD, DNS may continue to resolve for a short time. Most registrars add a grace period before taking any action.

Renewal Grace Period (0-45 days)#

Most registrars provide a grace period after expiry during which you can renew the domain at the standard price. The duration varies: some offer 0 days, others up to 45. During this window, the registrar may point the domain to a parking page, but renewal is straightforward and typically instant.

Redemption Period (30 days)#

If the grace period passes without renewal, the domain enters a redemption period. The registrar charges a significantly higher fee to recover it, often between $80 and $200 or more. The domain is locked, and it may take 5-10 business days to restore.

Pending Delete (5 days)#

After the redemption period, the domain enters a pending-delete phase. No one can register or recover it during this 5-day window. After this period, the domain is released to the public pool.

Public Availability#

The domain becomes available for anyone to register on a first-come, first-served basis. Domain speculators and automated bots often snap up previously valuable domains within seconds of release.

The total window from expiry to public drop can range from 35 to 80 days depending on the TLD and registrar. For gTLDs like .com, the typical window is about 75 days. Country-code TLDs often have shorter redemption periods.

How Domain Expiry Checking Works#

Automated domain expiry monitoring depends on two protocols for looking up registration data: RDAP and WHOIS.

RDAP (Registration Data Access Protocol)#

RDAP is the modern replacement for WHOIS, standardized by the IETF in RFC 7480-7484. It returns structured JSON data over HTTPS, making it reliable for automated parsing.

A typical RDAP lookup for a .com domain starts by querying the IANA bootstrap file to find the correct RDAP server for the TLD, then requests the domain data:

GET https://rdap.verisign.com/com/v1/domain/example.com

The response includes registration and expiry dates in ISO 8601 format within the events array:

{
  "events": [
    {
      "eventAction": "registration",
      "eventDate": "2005-03-15T00:00:00Z"
    },
    {
      "eventAction": "expiration",
      "eventDate": "2027-03-15T00:00:00Z"
    }
  ]
}

RDAP is the preferred method because the data is structured and consistent. However, not all TLDs support RDAP yet.

WHOIS (Legacy Protocol)#

WHOIS is the older protocol, operating on TCP port 43. It returns unstructured plain text, and every registrar formats the output differently. Parsing WHOIS data reliably requires pattern matching across dozens of date formats and field names.

A WHOIS response might contain any of these expiry date labels:

• Registry Expiry Date:
• Expiration Date:
• paid-till:
• Expiry Date:
• expires:

And dates may appear as 2027-03-15T00:00:00Z, 15-Mar-2027, 2027/03/15, or other formats.

Despite its limitations, WHOIS remains essential as a fallback for TLDs where RDAP is not available. Many country-code TLDs like .me, .in, and .co still rely primarily on WHOIS.

The RDAP-First, WHOIS-Fallback Strategy#

A robust monitoring system tries RDAP first and falls back to WHOIS when RDAP returns no data or the TLD is unsupported. This is the approach Nova Uptime uses: the system extracts the root domain using public suffix list data, queries the appropriate RDAP server, and if that fails, queries WHOIS servers using a multi-registrar lookup library.

The expiry date is stored, and the "days remaining" value is recomputed daily from the stored date without needing to re-query the registrar. Full RDAP/WHOIS re-queries are only triggered for newly added domains and for domains whose stored data is stale.

How to Set Up Domain Expiry Monitoring With Nova Uptime#

Nova Uptime includes domain expiry monitoring as a built-in feature for every monitored domain. Here is how it works in practice.

Automatic Lookup on Domain Add#

When you add a domain to Nova Uptime, the system immediately performs an RDAP lookup (with WHOIS fallback) to retrieve the domain's registration expiry date. The expiry date and days remaining appear on your dashboard within seconds.

Dashboard Visibility#

Every domain card on your dashboard displays the domain expiry information alongside uptime, response time, SSL expiry, and email health grade. You can see at a glance which domains are approaching their renewal date.

Email Alerts#

As a domain's expiry date approaches, Nova Uptime sends email alerts at configurable intervals. This gives you and your team time to verify auto-renewal settings, update payment methods, or manually renew before any disruption occurs.

Renewal Acknowledgment Flow#

When you receive a domain expiry warning email, it includes an "I Have Renewed" button. Clicking it confirms that you have taken action. Nova Uptime then runs daily RDAP/WHOIS checks against that domain to verify that the expiry date has actually been pushed forward. Once the registrar confirms the renewal, you receive a confirmation email.

This two-step verification prevents false confidence. You acknowledge the renewal, and the system independently confirms it happened.

Daily Recalculation#

Rather than re-querying registrars for every domain every day (which would hit rate limits and add unnecessary load), Nova Uptime recalculates days remaining from the stored expiry date. Re-queries are reserved for domains that need fresh data: newly added domains, domains past their expiry date, and domains with acknowledged renewals pending verification.

You can explore all of Nova Uptime's monitoring capabilities on the features page.

Best Practices for Preventing Domain Expiry#

Beyond automated monitoring, several operational practices reduce the risk of domain lapses.

1. Register Domains for Multiple Years#

Most registrars allow registration periods of up to 10 years. While you still need to renew eventually, a 5 or 10-year registration gives you a much larger buffer against payment failures. The cost difference is typically minimal.

2. Use a Dedicated Payment Method#

Set up a virtual credit card or a company card that is specifically designated for domain renewals. This card should not be subject to routine cancellation or replacement. Some organizations use a card with a far-future expiry date or a card tied to a bank account with automatic reloading.

3. Enable Registrar Lock#

Most registrars support a "registrar lock" or "transfer lock" that prevents unauthorized transfers. While this does not prevent expiry, it prevents a third party from initiating a transfer of a domain you forgot to renew.

4. Maintain a Domain Inventory#

Keep a spreadsheet or database of every domain your organization owns, including:

• The domain name
• Registrar and account credentials
• Registration date and expiry date
• Auto-renewal status
• Payment method on file
• Responsible person or team

Review this inventory quarterly. Cross-reference it with your DNS records and monitoring tools to ensure nothing is missing.

5. Set Calendar Reminders at 90, 60, and 30 Days#

In addition to automated monitoring, set manual calendar reminders for critical domains. Having multiple layers of alerts reduces the chance that a single failure point (spam filter, changed email, tool downtime) causes you to miss a renewal.

6. Use a Monitoring Tool With Independent Alerts#

Relying solely on your registrar's renewal reminders is a single point of failure. If the registrar's email system fails, or if your email address on file with the registrar is wrong, you will never receive the warning. An independent monitoring tool like Nova Uptime queries domain expiry data separately and sends alerts through its own email infrastructure, giving you a second line of defense.

7. Consolidate Domains Under One Registrar#

If your domains are spread across multiple registrars, consolidate them. Fewer accounts mean fewer payment methods to maintain, fewer passwords to track, and a single dashboard to review. Transfer all domains to your primary registrar and set up consistent auto-renewal policies.

8. Audit Domains After Acquisitions#

When your company acquires another business, immediately inventory all domains associated with the acquired company. Transfer them to your registrar, update payment methods, and add them to your monitoring system. This should be part of the standard post-acquisition IT integration checklist.

The Cost of Getting It Wrong#

When a domain expires, the direct costs include:

• Lost revenue: Every minute your website is unreachable, potential customers cannot buy from you or learn about your product.
• Lost email: Emails sent to your domain bounce. You may miss critical communications from customers, partners, or vendors.
• SEO damage: Search engines that cannot reach your site will eventually drop your rankings. Recovering search rankings can take weeks or months.
• Redemption fees: Recovering a domain from the redemption period costs significantly more than a standard renewal.
• Brand damage: Customers who see a registrar parking page instead of your website lose trust in your brand.
• Domain hijacking risk: If the domain reaches public availability, a third party can register it and use it for phishing, spam, or holding your brand hostage.

The cost of prevention, whether through multi-year registration, a monitoring tool, or simply better internal processes, is negligible compared to any one of these consequences.

Conclusion#

Domain expiry is a preventable problem, but prevention requires deliberate action. Auto-renewal is a good start, but it is not enough on its own. Payment failures, registrar changes, organizational transitions, and human error all create opportunities for domains to lapse.

A layered approach works best: enable auto-renewal, maintain a domain inventory, set calendar reminders, and use an independent monitoring tool that checks expiry dates through RDAP/WHOIS lookups and sends alerts before the critical date arrives.

Nova Uptime provides this monitoring automatically for every domain you add, alongside uptime monitoring, SSL checking, and email health analysis. You can start monitoring your domains today from the features page.