Domain Expiration Process: What ICANN Actually Requires

When a gTLD domain like a .com expires, it is usually not deleted that day. It sits with the registrar in a post-expiry grace window, where the owner can still renew and where most registrars auction the good names. Then the registrar deletes it, the registry holds it for a 30-day Redemption Grace Period in which only the old owner can restore it, it spends about five days in pending delete, and finally it drops back into the pool for anyone to register. ICANN fixes only a few pieces of that chain. The length of the grace window, the deletion date and the auction are the registrar’s call, which is why no two registrars run the same clock.

I have been watching names expire for more than twenty years, and the version of this process you read in most places is too tidy. It goes something like: thirty days of grace, thirty days of redemption, five days of pending delete, then the name is free. Two of those three numbers are real. The first one is a registrar habit dressed up as a rule, and that one soft number is exactly where the buying opportunity lives. If you are trying to acquire an expiring name, the useful question is not “how long until it drops?” It is “which parts of this timeline are fixed, and which parts is this particular registrar making up?”

This post separates the two. Everything below is for generic top-level domains such as .com, .net and .org. Country-code extensions like .de, .eu or .co run their own rules and some of them delete or expire days early, so treat them as a separate problem.

What are the stages of the domain expiration process?

End to end, an expiring gTLD passes through seven stages. Here they are in the order a name actually moves through them.

1. Reminders. Before the expiry date, the registrar has to warn the owner at least twice.
2. Expiry. The registration term ends. The name is marked expired, usually around midnight, and the registrar typically points it at a parking or hold page. The site and email stop working, though the name has not gone anywhere.
3. Post-expiry grace. At the registry level, most gTLD registries automatically renew the name for another year and give the registrar a window, up to 45 days on ICANN’s own chart, to either keep that renewal or delete the name for a credit. What the registrar does inside that window is its business: let the owner renew at normal price, charge a late fee, or send the name to auction.
4. Deletion. The registrar deletes the registration and hands it back to the registry.
5. Redemption Grace Period. Thirty days in which the name is frozen at the registry and only the previous owner can buy it back.
6. Pending delete. About five days in which nobody can do anything at all.
7. Release. The name is available to register again, and the drop-catching services race for it.

ICANN publishes a life-cycle chart of a typical gTLD domain name that shows the same sequence, labeling the auto-renew grace window as zero to 45 days, redemption as 30 days and pending delete as five. Note the word “typical” in the title and the zero at the front of that range. A registrar is allowed to use none of the grace window at all.

What does ICANN actually mandate, and what does the registrar choose?

The rules that bind registrars after expiry live in ICANN’s Expired Registration Recovery Policy, which every registrar and registry has had to follow since 31 August 2013. It is short, and it is much looser than most summaries suggest. Three clauses do most of the work. Registrars must send at least two reminders, one about a month and one about a week before expiry. Registrars “may delete registrations at any time after they expire.” And every non-sponsored gTLD registry must offer a 30-day Redemption Grace Period immediately after deletion.

That middle clause is the one the tidy timelines leave out. There is no guaranteed grace window after expiry. The policy does protect the owner in smaller ways: the owner must be allowed to renew right up until deletion, and if the registrar keeps the name around for more than eight days, the old DNS has to be interrupted for at least the last eight days it is still renewable, so a lapsed owner notices their site went dark before it is too late. But the length of the window itself is a business decision.

Here is the whole timeline with the two kinds of rule pulled apart. This is the table I wish I had been handed when I started.

Read down the middle column and you see why registrar timelines disagree. Namecheap’s knowledge base says the majority of expired names stay in the owner’s account for 30 days after the expiration date, and that a name not renewed in its grace period may be auctioned off. Porkbun’s says it typically deletes between 35 and 45 days after expiry, queues names for a third-party auction around day 21, and runs that auction roughly from day 26 to day 37. Both are compliant. Neither is “the” timeline.

Why can’t anyone transfer a domain during the Redemption Grace Period?

Because the policy forbids it. Section 3.2 of the Expired Registration Recovery Policy says that during redemption the registry must disable DNS resolution and prohibit attempted transfers, and must show the redemption status in WHOIS. The name has already been deleted by the registrar. It is sitting at the registry in a holding pen, and the only way out is for the old owner to restore it through the registrar that deleted it.

Restoring is not cheap. On Namecheap, redemption lasts 30 days and the owner pays a redemption price plus the $0.20 ICANN fee for generic TLDs, and the restore goes through support rather than a button. That friction is deliberate. Redemption exists to rescue owners who missed every reminder, not to give anyone a second shopping window.

For a buyer, this stage is dead time. You cannot bid, you cannot transfer, and you cannot negotiate with the registrar. The one useful thing you can do is decide, before the clock runs out, whether the name is worth a backorder when it reaches pending delete.

Where do expired-domain auctions and drop catching fit in?

They sit on opposite sides of the deletion. This is the most useful thing to understand about the whole process, and it is the part the registrar help pages have no reason to spell out.

Expired-domain auctions happen before deletion, inside the registrar’s grace window. The registrar still controls the name, so it can sell it. At Porkbun, the moment a name receives a bid at auction, it is removed from the old owner’s account and can no longer be renewed. That is the registrar’s discretion at work, and it is why the best expiring names almost never reach redemption. Someone who was paying attention bought them in week three or four. If you want to understand that lane on Namecheap specifically, start with how Namecheap Market auctions work.

Drop catching happens after pending delete, at the registry, when the name is released. Nobody is selling anything at that point. Services with many registrar connections simply try to register the name faster than everyone else in the first moments after it drops. Your tool there is a backorder, not a bid; I explain the mechanics in what a domain backorder is and compare the services in the best drop-catching services.

Put those together and the timeline reads differently. Anything genuinely valuable is usually decided in the auction, and what reaches the drop is mostly what nobody wanted at auction plus the occasional name from a registrar that does not auction at all. That is not a reason to ignore drops, but it is a reason to spend most of your attention on the earlier lane. I made the full case for that trade-off in drop catching vs. auctions, and it is also why domain sniping means different things depending on which side of the deletion you are standing on.

How do you read a domain’s stage from WHOIS?

Run a WHOIS or RDAP lookup and look at two things: the expiry date and the status codes. The codes are standardized, and ICANN keeps a plain English guide to EPP domain status codes. The ones that matter for an expiring name are these.

• autoRenewPeriod means the registry has auto-renewed the name after expiry and the registrar is inside its window to keep or delete it. The expiry date will often have jumped forward a year, which fools people into thinking the owner renewed. Check the date the status was set against the old expiry date.
• clientHold means the registrar has told the registry not to resolve the name. On an expired name, that usually means the registrar is holding it through grace. ICANN describes it as uncommon and often tied to non-payment or pending deletion.
• redemptionPeriod means the name has been deleted and is in its 30-day redemption window. Only the old owner can act.
• pendingRestore means the old owner has asked to restore it. Expect the name to come back to life.
• pendingDelete, on its own, means redemption ran out without a restore. The name will drop in a matter of days. This is your last chance to backorder.

The status tells you which side of the deletion you are on, and therefore which tool you need. Before deletion, you need an auction watch. After it, you need a backorder. Guessing wrong in either direction is how people miss names they were sure they had covered.

How long until an expired domain is available?

If nobody renews it and nobody buys it at auction, a typical .com becomes registrable somewhere between about five weeks and about eleven weeks after its expiry date. The fixed portion is the back end: 30 days of redemption plus roughly five of pending delete. The variable portion is the front end, anywhere from zero to 45 days depending on when the registrar chooses to delete. That is why you cannot compute a drop date from an expiry date alone. You can only compute it once the name shows up in redemption, at which point you have roughly 35 days of warning.

For the names I actually want, I rarely wait that long. I look for them while they are still in the registrar’s hands, because that is the only stage where judgment, rather than server speed, decides who gets the name. The filters I use to pick those names out of the flood are in how to find valuable expired domains.

Where is the opportunity in the expiration timeline?

It is in the gap between the mandated parts and the discretionary parts. Because registrars set their own grace windows, their auctions open and close on their own schedules, and most people only notice a name once it shows up on a drop list, a month or more after the moment it was actually for sale. The practical routine that falls out of this is simple.

1. Watch expiring-name auctions during the grace window, since that is where the good inventory is decided.
2. Check the WHOIS status on anything you miss. If it reaches redemption, put it on a list with a date about 35 days out.
3. Place backorders once names hit pending delete, and accept that the drop is a lottery weighted toward whoever has the most registrar connections.

The first step is the one that eats hours, because it means scanning thousands of expiring names a day to find the handful worth a bid. That is the part I built PounceDomains to do: it watches Namecheap Market’s expiring auctions around the clock, scores and enriches each match against the configs you set, and alerts you while there is still time to act. You can start free and see what it surfaces before you decide whether it earns a place in your routine.

The expiration process looks like a fixed countdown from the outside. Up close it is a short list of hard rules wrapped around a long stretch of registrar choices, and the names worth owning usually change hands inside the choices.