Your registrar sells you the name.Nobody is watching what happens to it.

Part one — the price of a missed date

Forgetting costs between $45 and $200. Then it costs everything.

The registry's wholesale restore fee for a lapsed .com is about $40. What you pay depends entirely on which registrar you happened to buy from.

Part two — the eighty-day slide

Your site goes dark long before your domain is gone.

The window is a sequence of registry states, each with its own price and its own point of no return.

Part three — this happens to competent people

An expired credit card is all it takes.

• Sorenson Communications2016

  An internal lapse let sorenson.com expire, cutting off the ASL relay service deaf users depend on to place calls — including emergency calls — for three days.

  $3,000,000 FCC settlement

• Marketo2017

  A card on file expired, auto-renewal failed silently, and marketo.com lapsed. Forms broke across every customer site embedding their scripts. A customer noticed and re-registered the domain to save them.

  Recovered for $38 + $35.99 — by an outsider

• Foursquare2010

  Renewal notices were missed and foursquare.com expired, taking the entire service down — weeks after closing a $10M round.

  Total outage, no warning

The pattern is identical in all three: nothing was neglected on purpose. A card rotated. A notice went to an inbox nobody reads anymore. An employee left and their address kept receiving the alerts. The failure is never the renewal — it is that the only warning system lives inside the account that is failing.

Part four — the part nobody mentions

Losing the domain is not the worst outcome. Someone else getting it is.

Part five — the renewal date is the easy part

Four things silently decide whether the domain earns anything.

Every one of them can break without a single error message, on a domain that is perfectly current on its renewal.

The expiry date at least has a date attached. These do not. They degrade — quietly, on a schedule set by other people's policy changes — and the first symptom is always the same: fewer leads, for reasons nobody can name.

• Signal 01 — Email authentication

  42% enforced

  Your mail is being rejected outright

  DMARC awareness reached 78% in 2026, but only 42% of domains actually enforce it — 22% still publish no valid record at all. Gmail and Microsoft moved past spam-foldering: non-compliant mail now gets permanent 550 rejections. It never reaches any folder, and you are not told.

• Signal 02 — AI visibility

  15% cited

  Assistants retrieve you, then drop you

  ChatGPT cites roughly 15% of the pages it retrieves while composing an answer; the other 85% are evaluated and discarded. It drives 87% of all AI referral traffic. If GPTBot cannot crawl you, or your pages carry no citable structure, you are invisible in the layer where buyers now start.

• Signal 03 — Search footing

  93% zero-click

  The click has to be earned twice

  Around 93% of AI search sessions end without anyone visiting a site, and AI Overviews cut clicks to the top organic result by 58%. Ranking is no longer the finish line — being the source an answer is built from is. That depends on schema, crawlability and content that is not thin.

• Signal 04 — Speed and uptime

  8.4% per 0.1s

  Slow is a leak you cannot see

  Google and Deloitte measured an 8.4% retail conversion lift per 0.1s of load time. 53% of mobile visitors abandon a page that takes over three seconds — and the average B2B mobile LCP is 7.05s, nearly triple the threshold. Every one of those exits looks identical to traffic that never came.

Part six — the structural problem

Why the monitor cannot live inside the registrar.

This is not about bad registrars. It is about what a registrar is for. Four things follow from that, and none of them can be fixed by choosing a better one.

• 01

  They profit from the failure

  A registrar charging $200 to restore a domain that costs them $40 has a $160 reason not to make the warning impossible to miss. The redemption fee is a product line.

• 02

  The alert channel dies with the domain

  Expiry notices go to an address on the domain that is expiring. Once DNS is cut, those messages bounce. The alarm is wired to the thing it is meant to protect.

• 03

  Nobody owns one registrar

  Real portfolios are scattered — the domain your last developer bought, a defensive .net, a client's name on their own account. There is no single dashboard, because there is no single account.

• 04

  They do not measure the things that matter

  A registrar knows one fact about your domain: when you last paid for it. It has no opinion on whether your mail authenticates, whether AI crawlers can read you, or whether your homepage takes six seconds to paint.

Common questions

How much does it cost to recover an expired domain?

Restoring a lapsed .com during the redemption grace period costs the registrar's redemption fee plus a one-year renewal. The fee ranges from about $45 at Squarespace to $200 at Network Solutions, against a registry wholesale restore fee of roughly $40 for .com and .net. Fees also vary sharply by extension — Squarespace charges $45 for a .com, $160 for a .ai and $300 for a .shop.

How long do you have to recover an expired domain?

Typically about 80 days. A gTLD gets a renewal grace period of roughly 30 to 45 days at the ordinary price, then a 30-day redemption grace period where only a paid restore is possible, then about 5 days of pending delete where nothing can be done, after which the domain drops to the open market.

Why does my website go down before the domain is actually gone?

Because ICANN's Expired Registration Recovery Policy requires it. Registrars must disrupt DNS for up to eight days before deleting a domain, and registries must do the same through the 30-day redemption period, specifically so a broken site gets the registrant's attention. GoDaddy parks the domain on day 5; Namecheap switches nameservers at midnight on the expiry date, which stops the website and email at once.

What happens if someone else registers my expired domain?

They can receive mail at every address you ever used on it, which means they can run password resets against services where those addresses are still on file. Over 50,000 gTLD domains a day are drop-caught in 2026. In 2025 researchers registered 40 expired command-and-control domains for about $20 each and inherited more than 4,000 live backdoors, and PyPI now un-verifies email addresses whose domains have lapsed.

Is registrar auto-renew enough to protect a domain?

No. Auto-renew fails silently whenever the card on file expires, is replaced, or is declined — which is exactly how Marketo lost marketo.com in 2017. The renewal notice is also sent to an address on the domain that is expiring, so once DNS is cut the warning bounces. Monitoring has to sit outside the registrar to survive the failure it is watching for.