Buying expired domains: what to check

An "expired" domain can be at several different stages, and many never reach the open market: the previous owner may renew late, or the name may be sold or caught the instant it is released. Knowing the timetable tells you when, or whether, a name may become available; knowing its past helps you avoid buying someone else's problems.

How generic domains expire (.com, .net, .org and others)

ICANN sets the rules for generic top-level domains (gTLDs) and publishes a typical lifecycle:

1. Registration. Names are registered for one to ten years at a time. Under ICANN's Expired Registration Recovery Policy, registrars must send renewal reminders roughly one month and one week before expiry.
2. Auto-Renew Grace Period: up to 45 days. If the registrar does not delete the name at expiry, it may offer a grace period in which the owner can still renew. ICANN warns that, depending on the registrar's terms, the name may be offered to others or auctioned during this time.
3. Redemption Grace Period: 30 days. Once the registrar deletes the name, the registry must hold it for 30 days. Only the previous registrant can restore it, through their registrar, often for a fee. The policy also requires the domain's DNS to be disrupted, so the website and email stop working, as a last warning to the owner.
4. Pending Delete: 5 days. If nobody restores it, the name sits in pending delete for five days and is then released for registration on a first-come, first-served basis.

Added together, ICANN's figures mean a gTLD name that is not renewed can take up to about 80 days after expiry to become available, or less if the registrar deletes it early. You can see where a name has reached from its EPP status codes, such as redemptionPeriod or pendingDelete, which appear in RDAP results and in a Domain Statistics report.

How .uk domains expire (as of October 2026)

The .uk lifecycle is different, and it is about to change. Nominet's current process, in place since September 2022, works like this:

• Expiry to day 30: Expiry Grace Period. The domain keeps working and can be renewed. Nominet emails the registrant the day after expiry, and on day 23 warns that suspension is coming.
• Day 30 to day 90: Redemption Grace Period. The domain is suspended and stops resolving, but it can still be renewed through a registrar. It appears on Nominet's daily drop list with a possible drop date. A cancellation warning goes out on day 83.
• Day 90 to day 95: Pending Delete. The domain can no longer be renewed.
• Day 95: the drop. The name becomes available again at an exact time published in advance on Nominet's public daily drop list.

What changes in 2027. Nominet plans to move .uk onto its newer registry platform on Tuesday 9 February 2027. After that, .uk will follow a lifecycle much closer to the gTLD one: an auto-renew grace period of up to 45 days, a 30-day Redemption Grace Period and a 5-day Pending Delete. Domains part-way through expiry at the switchover will be re-timed to fit. Check Nominet's pages before relying on a date.

Drop-catching

When a sought-after name is released, it is often registered within moments by someone who set things up in advance. This is called drop-catching, and ICANN's lifecycle chart marks it at the point of release. For .uk, Nominet publishes each name's drop time and suggests registrars use its drop lists to offer back-order services. It also notes that lookup tools may still show a name as registered until the registry's clean-up finishes, so the published drop time is what counts. If you use a back-order service, read its terms carefully, and never assume a name you can see expiring will be available to you at the standard price.

Checks before you buy

1. Status and dates. Look up the domain's RDAP record (for .uk, use Nominet's lookup) or run a Domain Statistics report. Note the expiry date, the status codes and the registrar.
2. Archive history. Open the earliest and latest captures in the Wayback Machine. What was the site? Did it change hands, or suddenly switch to an unrelated topic? Compare the first capture with the registration date (see domain age).
3. Spam and penalty signals. Google's spam policies describe expired domain abuse: buying an expired domain mainly to manipulate rankings with low-value content. One of Google's examples is casino content on a former school website. Sites that break the policies may rank lower or disappear from results. Google has also said it is fine to reuse an old domain for a new, original site designed to serve people. Look for spam or hacking in the archive, check the domain in Google Safe Browsing's site status tool, and see what Google still has indexed (how to check).
4. Backlinks. Links pointing to the domain can be valuable, but only if they are genuine and relevant. Google counts links created mainly to manipulate rankings as link spam. If most come from unrelated or low-quality sites, treat them as a risk, not an asset.
5. Trade marks. Search the UK register with the GOV.UK trade mark search. A domain gives you no trade mark rights. Under Nominet's Dispute Resolution Service, a domain can be found abusive because of how it is used at any point in its life, not just when it was registered. For .com and other gTLDs, the UDRP applies.
6. Eligibility. Some .uk zones have rules about who can register. Under Nominet's registration policy, .me.uk is for individuals, .ltd.uk and .plc.uk names must be derived from your registered company name, and .sch.uk is for schools. A dropped name in those zones may not be open to you at all.
7. Email and DNS. Once the domain is yours, set up your own DNS records, including SPF and DMARC, so nobody else can easily send mail as you (how SPF, DKIM and DMARC work).

After you buy

Add the domain to Google Search Console and look at the Manual Actions report. Google's help page says that if you recently bought a site that broke its spam policies before you owned it, you should fix the issues and say in your reconsideration request that you have just acquired it.

How Domain Statistics helps

A Domain Statistics report brings together RDAP registration dates and status codes, a Wayback Machine summary, DNS records and website checks, covering the first two checks above in one place. It cannot tell you about trade marks or search penalties, so make those checks yourself.