A domain name coming out of quarantine is not released quietly. The exact moment is public in the whois, and an entire industry is standing by to strike at precisely that second. Forget to renew a domain name and you usually do not lose it to a passer-by, but to a bot that registers it within a second and puts a sales page on it.
In this article we explain how that works, why your old domain name is worth money, what other risks come with it, and how to make sure it does not happen to you.
The moment of release is public
For .nl, SIDN shows both the date and the time at which a domain name leaves quarantine in the whois. That is deliberate: it makes the system transparent and verifiable. But it also means everyone knows exactly when to be ready.
There are services that do nothing else but track those lists. Every day they collect which names are being released, sort them by age, traffic, backlinks and brand value, and queue up an automated registration request. Your forgotten renewal is just a row in their spreadsheet.
How drop-catching works
Catching domain names the moment they are released is called drop-catching, and it is literally a contest measured in milliseconds:
- Many accounts at once. These services operate dozens to hundreds of registrar accounts, so they may submit far more requests per second than any single party could.
- Persistent connections. They keep their connection to the registry open continuously, so no time is lost setting one up.
- Servers as close to the registry as possible. Purely to shave off latency, because the winner is whoever arrives first.
- Pre-built requests. The registration request is ready to go and fires the instant the name is released.
For a name with any value, the window between "available" and "registered" is therefore shorter than a second. Sitting at your screen at 09:00 to grab your own domain back simply does not work.
If several of those services want the same name, it often goes to an auction between their own customers afterwards. You, the previous owner, are not at that table, and the price set there is the price you get to pay.
SIDN makes it a bit harder
SIDN is well aware of this. That is why a .nl domain is not released at the announced second exactly, but after a random delay of 0 to 360 seconds afterwards. That makes it impossible to time the release precisely and gives smaller players a chance too.
It is a smart measure, but it is not protection. The bots simply wait out that six-minute window and keep hammering away. So do not count on being faster.
Why your old domain name is worth money
To a buyer, an expired domain name is not an empty shell but a package of accumulated value:
- Backlinks and SEO. Links other sites built to your domain over the years still exist. That authority can be cashed in straight away.
- Existing traffic. People still type your address, click old links, and have your name in their bookmarks.
- Brand value. The better known your name, the easier it is to sell it back to you specifically.
- Email. A domain that was in use for years keeps receiving mail.
And that is usually how it ends: a parking page saying "this domain is for sale" with an asking price that is a multiple of what a renewal would have cost.
It is not only about money
The bill is annoying, but the security side is more serious. Whoever holds your old domain also holds:
- Your email. The new owner can receive mail on that domain. Think password resets for services that still have an old address on file, supplier invoices, and messages from customers who do not know you moved.
- Your brand name. A domain with history and existing trust is attractive material for phishing, precisely because people recognise the name.
- Your visitors. Expired domains with existing traffic are bought up at scale to redirect visitors to fraudulent or malicious pages. There are millions of euros moving through that trade.
A forgotten renewal is therefore not just a missed opportunity, but a risk that can keep working against you for years after you lose the name.
How to make sure it does not happen to you
- Turn on automatic renewal and then check that it is genuinely active. Ticked is not the same as working.
- Keep your payment details up to date. An expired credit card is the most common cause of a lost domain.
- Never use an email address on the domain itself as your registrar contact address. When the domain is down, the warning does not arrive.
- Use a shared mailbox, not one employee's personal address.
- Renew for several years at once for names you really cannot afford to lose. That takes the risk off the table for years.
- Keep your domains with one provider, so a single overview shows you what expires when.
- Do not simply let old domains lapse. If your brand name or an old campaign is in there, renew it anyway. A few euros a year is cheaper than the damage.
And if it has already happened?
If you are facing the fact that your domain is gone, a few routes remain:
- Negotiate. Unpleasant, but often the fastest way. Preferably not from an address or in a tone that reveals how badly you want the name back.
- Invoke trademark rights. If you hold a registered trademark matching the domain name and it is being used in bad faith, you can start a procedure through SIDN's dispute resolution scheme for .nl. That costs time and money and offers no guarantee.
- Move on without it. Sometimes picking a new name is simply cheaper than the asking price. If you do, make sure your old address is no longer set anywhere as a contact or recovery address.
Renewing is the cheapest insurance there is
The entire chain of drop-catchers, auctions and parking pages runs on one thing: people who are too late. A renewal costs a few euros a year. Buying back a hijacked domain name quickly runs into hundreds or thousands, if it works at all.
Want to understand the period before the release first? Read our article on domain names in quarantine as well.
Would you like your domain names in one place, with automatic renewal and reminders that actually arrive? Have a look at our domain name page, or ask your question through our Discord or a ticket. We are happy to help!