Securealy
Check · Domain · high · passive

Domain not about to expire

More than 30 days remain on the registration.

Severity
high
Tier
Passive: runs on any URL
Category
Domain
Fix
Summary below; full runbook in the Fix Kit, Module 07: Keep it alive
Id
domain-expiry

What this means

Passing means your domain registration has more than 30 days left. Failing means it has 30 days or fewer, or has already lapsed. Registrars give a short grace period after expiry, but during it the domain stops resolving, and after it someone else can register the name.

How we test it

We query the registry's RDAP service for your domain and read the expiration date. More than 30 days remaining is a pass. Thirty days or fewer, or a date in the past, is a fail; there is no warn state. If the registry publishes no expiry date, we report that we could not read it rather than guess. This is a passive check.

Why it matters

An expired domain takes down the site, email and every login at once. The site stops resolving, mail to and from the domain bounces, and every sign-in email, receipt and password reset fails with it, so the outage is total and the people who could tell you are the ones who can no longer reach you. Module 00 of the Fix Kit sets auto-renew the moment the domain is bought; this check is for domains bought before that habit existed. The kit does not go deeper on registration, so the fix below stays short.

The fix

Sign in at your registrar, renew the domain now, and turn on auto-renew with a payment method that stays valid past the next renewal date (at Cloudflare Registrar this is under Domain Registration). Confirm the new expiry with whois YOUR_DOMAIN or your registrar's dashboard.

The full runbook is in the Fix Kit, Module 07.

Prompt for your AI

Paste this into the coding agent that built the app. It reproduces the finding and stops before changing anything; the fix steps are in the kit.

Do not renew or change anything. Run: whois YOUR_DOMAIN | grep -iE "expir|registrar" and show me the output.
Tell me the expiry date, the registrar, and how many days remain.
Tell me whether whois shows a transfer lock (clientTransferProhibited) and say plainly that auto-renew cannot be read from whois.
Run: dig +short NS YOUR_DOMAIN and tell me whether the DNS provider is the same company as the registrar.
List what it would take to renew and turn on auto-renew at this registrar, and stop there.
Finally, compute the days until the expiry date above and state the number. Expected more than 30.

Next

Grade your own URL

Every grade lists this check with its evidence for your site. Two free grades a day.