A lapsed domain registration doesn't just take down a website — it can take the domain itself away from you, permanently.
A domain registration is a lease, not a purchase — it's valid until a specific date, and if it isn't renewed by then, most registries move it through a grace period and then a redemption period, both time-limited, after which the domain is released back into the pool and anyone — including a squatter watching for exactly this — can register it. Once that happens, getting it back isn't a support ticket; it's negotiating to buy it from a stranger, if they'll sell at all.
An expired TLS certificate is disruptive but recoverable in minutes — reissue it, and the site is back. A domain that's actually lapsed and been re-registered by someone else takes down the website, every email address on that domain, and any other service tied to the DNS records — all at once, with no quick fix, because the thing that broke isn't a setting on your server, it's ownership of the name itself.
Almost never on purpose. The most common causes are mundane: the card on file for auto-renewal expired and the renewal silently failed, the renewal reminder email landed in a spam folder or went to an inbox nobody checks anymore, auto-renew was switched off at some point and forgotten, or access to the registrar account itself was lost when whoever originally set it up left the business.
The scan looks up your domain's registration record and checks how much time is left before it expires. A domain that's already expired is flagged as critical; one expiring within two weeks is flagged as high priority; one expiring within a month gets a smaller, earlier warning. A domain with plenty of time left simply shows as current — this check exists to catch the case nobody's watching, not to nag about a renewal date that's already well in hand.
This is a genuinely different failure mode from almost everything else a security scan looks at — it's not about being attacked, it's about a routine administrative task quietly falling through the cracks until the consequence is total and, in the worst case, unrecoverable. It costs nothing to check and almost nothing to fix in advance; it's expensive, sometimes irreversibly so, to fix after the fact.
Want to know where your own domain stands? CBWatch checks this — and eight other categories — in about ten seconds, free, no signup.
Run a free scan →Want CBWatch to catch this automatically going forward? See what monitoring includes →