Run a full scan — every category, one report
Domain Expiry Checker
Find out exactly when a domain name expires and how many days are remaining.
Why Check Domain Expiry?
Losing a domain name because you forgot to renew it can be disastrous for a business. Not only does your website go down, but your email stops working, and competitors or squatters might register your domain.
It is highly recommended to enable "Auto-Renew" at your registrar to prevent accidental expiration.
Our Domain Expiry Checker queries WHOIS for any domain and returns its exact expiry date, the days remaining, and how urgent renewal is. Domain expiry is one of the few failures that takes down a website, all email and every service at once.
What is Domain Expiry?
Every domain registration is a lease, not a purchase. It runs for a fixed term — usually one to ten years — and stops working when the term ends unless it is renewed.
Expiry is not instant deletion. Most gTLDs pass through a defined lifecycle. After the expiry date the domain enters a grace period of roughly 30 days during which the original registrant can still renew normally, though the domain may stop resolving. It then enters a redemption period of about 30 days where recovery is possible but carries a substantial fee. Finally comes a pending delete phase of five days, after which the domain is released and anyone may register it.
The exact durations vary by TLD and registrar. Some country-code TLDs have much shorter windows, and a few have none at all.
Expiry is not instant deletion. Most gTLDs pass through a defined lifecycle. After the expiry date the domain enters a grace period of roughly 30 days during which the original registrant can still renew normally, though the domain may stop resolving. It then enters a redemption period of about 30 days where recovery is possible but carries a substantial fee. Finally comes a pending delete phase of five days, after which the domain is released and anyone may register it.
The exact durations vary by TLD and registrar. Some country-code TLDs have much shorter windows, and a few have none at all.
- Domain registration is a fixed-term lease that must be renewed
- Expiry is followed by a grace period of roughly 30 days
- Redemption recovery is possible but expensive
- After pending delete, anyone can register the domain
- Timelines vary considerably between TLDs
Why Domain Expiry Matters
An expired domain takes everything down simultaneously. The website stops resolving, email stops being delivered and starts bouncing, any API depending on the hostname fails, and SSO integrations break. There is no partial degradation.
The security consequences outlast the outage. Once a domain is released and re-registered by someone else, the new owner receives all email sent to it — including password reset links for accounts still registered to addresses on that domain. Expired domain hijacking is a well-established attack, and lapsed domains with residual traffic are actively bought for exactly this purpose.
The security consequences outlast the outage. Once a domain is released and re-registered by someone else, the new owner receives all email sent to it — including password reset links for accounts still registered to addresses on that domain. Expired domain hijacking is a well-established attack, and lapsed domains with residual traffic are actively bought for exactly this purpose.
- Website, email and every dependent service fail together
- Recovery from redemption carries a substantial fee
- A re-registered domain gives its new owner all inbound email
- Password reset interception is the usual follow-on attack
- Expired domains with residual traffic are actively targeted
How This Domain Expiry Checker Works
The tool queries WHOIS for the domain and extracts the registration dates.
- Validates the domain input against format and SSRF safety checks
- Queries the authoritative WHOIS server for the TLD
- Extracts the expiry, creation and last-updated dates
- Calculates the days remaining until expiry
- Reports an urgency assessment based on the time left
How to Use the Domain Expiry Checker
- Enter the domain name you want to check
- Run the check to query WHOIS
- Review the expiry date and days remaining
- If renewal is due within 90 days, act now rather than waiting
- Confirm auto-renew is enabled and the payment card on file is current
Understanding Your Domain Expiry Results
The check reports the key registration dates and what they imply:
| Field / Value | Meaning |
|---|---|
Expiry date |
When the current registration term ends. The domain may stop resolving on this date, though the grace period means it is not immediately lost. |
Days remaining |
Time until expiry. Under 90 days warrants attention; under 30 days is urgent, particularly if auto-renew status is unconfirmed. |
Creation date |
When the domain was first registered. Older domains carry more trust with search engines and spam filters, which is why aged domains have resale value. |
Updated date |
When the registration record last changed. An unexpected recent update can indicate a nameserver change or an unauthorised transfer attempt. |
Registrar |
The company managing the registration. This is where you renew, and where you enable transfer locks. |
Status codes |
EPP codes such as clientTransferProhibited indicate a registrar lock is active. redemptionPeriod or pendingDelete mean the domain has already expired. |
Common Problems & How to Fix Them
Best Practices
- Enable auto-renew and verify the payment method annually
- Use a monitored role address for registrant contact, not an individual
- Keep the registrant contact on a different domain from the one registered
- Register critical domains for multiple years to reduce renewal events
- Maintain a central inventory of every domain with its expiry date
- Set independent calendar reminders 90 and 30 days before expiry
- Enable registrar lock to prevent unauthorised transfers
Security Recommendations
- Treat domain expiry as a security event, not merely an availability one — a lapsed domain hands all inbound email to whoever registers it next
- Remember an attacker receiving your email can initiate password resets on any account still using an address at that domain
- Enable registry lock on high-value domains, which requires manual verification for any change
- Never leave the registrant contact as a departed employee, since account recovery may depend on it
- Monitor WHOIS for unexpected changes to expiry, registrar or nameservers, which can indicate a hijack attempt
- Audit dormant and legacy domains rather than letting them lapse silently, as they often still receive mail and traffic