Buying expired domains and how backorders work

The short answer

An expired domain can be bought at three different points, and they are not the same transaction. Before the name is deleted, the losing registrar can auction it, and the winner receives it by transfer with its existing registration period intact. At the moment of deletion, drop-catch services race to re-register it: if one wins and you were its only customer who asked for the name, you pay a flat fee; if several of its customers asked, they auction it among themselves. If nobody wanted it, anyone can register it afterwards at the ordinary price.

A backorder is simply a pre-paid instruction to a drop-catch service: "if this name becomes available, try to register it for me." It is not a reservation and it guarantees nothing. You cannot realistically catch a competitive .com yourself, because registries rate-limit each accredited registrar's connections and the catching services run fleets of accreditations specifically to get more attempts than you can. Backordering at more than one service is the only sensible strategy, because each service can only win the names its own fleet catches.

The lifecycle, and where a domain can be bought at each stage

For .com and other gTLDs the sequence after expiry is set by ICANN policy. The day counts below are the policy figures.

• Auto-Renew Grace Period (AGP) — 45 days. ICANN defines it as "a 45-day period following the expiration of a domain name. If a registrant does not explicitly consent to renew the domain name, the registrar must delete the name from the registry by the end of the AGP" (ICANN). The registrar must delete by the end of it, but may delete much earlier. Registrar expiry auctions run in this phase.
• Redemption Grace Period (RGP) — 30 days. Once the registrar requests deletion, the registry holds the name in redemptionPeriod for 30 days. DNS stops resolving and transfers are blocked, but the original registrant can still restore it for a fee (ICANN ERRP). Nothing is for sale here.
• Pending Delete — 5 days. No restore, no renewal, no transfer. ICANN states the domain "is purged from the registry database" after five calendar days (ICANN EPP status codes). Drop-catchers schedule from this.
• The drop. The name becomes available first-come, first-served. Verisign releases deleted .com names in scheduled batches, which is the basis of the drop-catching industry.

Add those up and the maximum from expiry to drop is about 80 days — a ceiling, not a norm. The first phase is registrar-controlled: some registrars request deletion within days of expiry, pulling the total closer to 35–40 days; others hold the full 45 and run their own auction first. Treat any published "75 days" figure as the top of a real range of roughly 35 to 80 days, and never plan around a predicted drop date.

Note also that throughout both the AGP and the RGP the previous owner can take the name back — Namecheap publishes a restore price of $88.48 for .com including the renewal, and an owner who wakes up will pay it for a name worth having.

Three different things get called an expired domain auction

Most confusion in this market comes from treating these as one thing. They have different bidder pools and different risks.

Expiry auction (registrar auction). The current registrar auctions a name whose registrant did not renew, before it returns to the registry — no race, no drop. As one platform comparison puts it, "the winning bidder receives the domain with its existing registration period, avoiding drop-catch competition." GoDaddy Auctions is the largest of these, because GoDaddy is the largest registrar. Its published schedule shows how the AGP gets used commercially:

Source: GoDaddy. Winners must pay within 48 hours; transfer typically completes within 15 days.

Drop-catch auction. The domain deletes at the registry, a catching service re-registers it the instant it is available, and if more than one of that service's customers backordered it, the service auctions it among them. SnapNames and NameJet also run pre-release inventory, where partner registrars sell expiring names before the drop.

Seller-initiated auction. An ordinary owner listing a name for timed bidding with a reserve. Nothing has expired; it is a different market that shows up in the same search results.

The distinction matters when you bid. In an expiry auction you bid against everyone who wants the name; in a drop-catch auction, against a smaller, more committed pool who paid a fee up front. In either case the previous owner receives nothing — the registrar or the catching service keeps the proceeds.

How drop-catching actually works

The mechanics are simple; the barrier to entry is not.

1. When a gTLD domain finishes Pending Delete, the registry purges the record at a scheduled time and the name becomes available first-come, first-served.
2. Drop-catch services fire registration requests at the registry the instant the record drops. Whoever's request lands first wins.
3. Registries rate-limit each ICANN-accredited registrar's connections, so the only way to send more requests per second is to control more accreditations — which is why catching services accumulate registrar shells. DropCatch is reported to run over 1,200 of them, a figure from a secondary comparison source that changes over time and should be checked against ICANN's accredited registrar list before it is repeated as fact.

Wikipedia's summary is worth quoting to anyone planning to write their own script: individuals "with their limited resources find it difficult to compete with these drop catching firms for highly desirable domain names" (Domain drop catching). You are not competing at the registry. You are choosing which fleet to hire, and hiring more than one.

How a backorder works when several people want the same name

A backorder is a pre-paid instruction to attempt registration at the drop. What happens next depends on how many of that same service's customers placed one:

• The service fails to catch it. Another service won the race, or the previous owner renewed. You are refunded or credited and get nothing. This is the most common outcome on contested names.
• The service catches it and you were the only backorderer. You get the domain at the flat backorder fee. As one explainer puts it, "if nobody bids, the backorder customer gets the name at a flat fee" (notify.domains).
• The service catches it and several customers backordered it. The service runs a private auction among those customers only, and your backorder fee is credited toward the winning bid. Everyone else is refunded.

So a backorder is closer to a lottery ticket with a floor price than to a purchase, and spreading backorders across services genuinely improves your odds, because they compete at the registry rather than in one auction.

If you do land in a drop-catch auction, read the closing rules first. Park.io extends closing to one hour after the last bid for bids placed in the final hour, five minutes for "hot auctions", and states that bids are binding and that "no employees can bid in any of the auctions" (Park.io support). Sniping does not work where anti-sniping extensions exist.

What the services charge

The figures below come from published comparison sources rather than from each vendor's own price page, and this pricing moves. Treat every number here as single-source and verify it against the provider before spending anything.

Sources: domaindetails comparison and sidebysidedomains, cross-read against Park.io's support page and Sedo's price list. The two comparisons disagree with each other on GoDaddy's membership fee and on Dynadot's model, which is a fair indication of how much of this pricing is second-hand.

How to evaluate an expired domain before you bid

Expired names carry a premium because backlinks survive the drop: links live on the linking sites, so they keep pointing at the domain whoever owns it. Rankings do not work that way — search engines re-evaluate a domain when its content and purpose change, so no past position transfers to your new content. Buy the link graph if you like; do not buy an expected ranking. Before bidding:

• What was it? Pull the history in the Wayback Machine. The more respectable the former use, the more obviously an unrelated repurposing looks like abuse — see the next section.
• Are the links real? A profile made of directories, comment spam and expired-domain networks is not authority; it is a liability you are paying for.
• What does it renew at? The most expensive thing new buyers miss. A registry-premium name carries its premium price at every renewal: "when a registry designates a domain as premium, that premium status persists throughout the domain's lifecycle" (NameSilo). An auction bargain with a four-figure annual renewal is not a bargain.
• Is there trademark exposure? An aged name trading on someone else's brand is a UDRP complaint waiting to be filed, and the link profile is often the evidence. See cybersquatting.
• Is mail still flowing to it? Former business domains often still receive email, including password resets. Inheriting that is a security question, not a bonus. So is a name flipped repeatedly with unrelated content each time.

Keep the base rate in mind: most expiring domains are worthless and most expiry auctions close in the low tens of dollars. The four- and five-figure results that get written up are the tail, not the middle.

Google's expired domain abuse policy, quoted

If you plan to use an expired domain for search traffic, this is the paragraph that governs what you do next. From Google Search's spam policies:

"Expired domain abuse is where an expired domain name is purchased and repurposed primarily to manipulate search rankings by hosting content that provides little to no value to users."

Google's own examples on the same page:

• "Affiliate content on a site previously used by a government agency"
• "Commercial medical products being sold on a site previously used by a non-profit medical charity"
• "Casino-related content on a former elementary school site"

Read the wording carefully, because it is narrower than the folklore. The purchase is not the violation. Nothing in the policy forbids buying an expired domain, and continuing a domain's genuine purpose is not what it describes. What is named is the pattern: acquire a name for its residual signals and repurpose it "primarily to manipulate search rankings" with thin content. All three examples share one shape — a sharp break between what the domain was and what it now sells.

The redirect version of the same trick sits under the sneaky-redirects provision on that page, which Google scopes to redirects designed "to either show users and search engines different content or show users unexpected content that does not fulfill their original needs." The test that follows is simple: would a visitor who typed the old domain consider your destination a reasonable place to land? If the only answer is "it has good links," you are describing the violation.

When buying expired names is worth it, and what goes wrong

Expired inventory is worth buying when the name would be worth owning with no history at all: a short .com, a dictionary word, a phrase with commercial demand, or a name in a TLD with live buyer interest. History is a bonus on a good string, not a substitute for one. It is not worth buying when the whole thesis is the backlink profile — that play is named in Google's spam policies, priced into the auction by people who understand it better than you, and mostly does not work any more. The mistakes that cost most:

• Backordering at a single service. Each fleet only wins what it catches. One backorder is one entry in one race.
• Confusing an expiry auction with a drop-catch auction, and misjudging both the bidder pool and whether the previous owner can still take the name back.
• Not checking the renewal price before bidding on anything outside the legacy TLDs.
• Assuming the drop date is predictable. The first 45 days are registrar-controlled, and a valuable name usually sells in a registrar auction long before the public drop.
• Pointing thin content or an unrelated redirect at an aged domain. That is the exact pattern Google's policy names.

Frequently asked questions