This guide is for buyers of expired domains and for brand owners whose domain has lapsed. If you have bought an expired domain and received a UDRP complaint, read the registration-date section first. If your brand’s domain has expired and been re-registered, read the brand-owner section. The rules are different, and the timing matters.
Quick answer: what happens when a domain expires and is re-registered
When a domain name expires, it goes through a grace period and is eventually deleted. Once deleted, it returns to the public market and can be registered by anyone. For UDRP purposes, the new registration is a new registration: the relevant date for bad-faith analysis is the date the current registrant acquired the domain, not the original registration date. A buyer who purchases an expired domain through a public auction or marketplace, without targeting the former owner’s trademark, is generally acting in good faith. A drop-catcher who acquires the domain and then emails the former owner offering to sell it back is at risk of a bad-faith finding. A brand owner whose domain has lapsed cannot rely on trademark rights alone to recover it; it must prove the new registrant acted in bad faith.
Key facts at a glance
| Fact | Detail |
|---|---|
| New registration | The re-registration is a new act, with a new date |
| Relevant date | The date the current registrant acquired the domain |
| Public purchase | Generally good faith, absent targeting |
| Drop-catching | Legitimate in itself; targeting is the risk |
| Outbound email | Emailing the former owner creates bad-faith risk |
| Brand owner | Trademark rights do not guarantee recovery |
| “Operative registration date” | A theory that failed in Lazarus |
| Leading cases | Lazarus (D2026-1139), Xucker (D2026-3253), SNGLR (D2026-1004) |
| RDNH risk | High where the complainant lost an auction or tried to buy the domain |
The domain lifecycle and the registration-date problem
Expiration, grace period, and deletion
A domain registration is for a fixed term, typically one year. When it expires, the registrar usually provides a grace period (often 30–45 days) during which the registrant can renew. If the domain is not renewed, it is deleted from the registry and returns to the public pool.
The lifecycle matters because the registration date — the date the domain was first registered — is not the date that matters for UDRP purposes once the domain has been deleted and re-registered.
The new registration is a new registration
Under the UDRP, the complainant must prove that the domain was registered in bad faith. Where the domain has been deleted and re-registered, panels treat the new registration as the relevant act. The question is whether the current registrant acquired the domain in bad faith, not whether the original registrant did.
The Lazarus decision is the clearest statement of the principle. The complainant had originally registered the domains but accidentally allowed them to expire. When it tried to recover them, it argued that the panel should treat the date it discovered the loss as an “operative registration date” representing an unauthorized transfer. The WIPO panel rejected the theory, reaffirming that a standard renewal failure does not turn a subsequent good-faith public purchase into cyberpiracy.
Why the “operative registration date” theory failed
The theory failed because it would rewrite the UDRP’s temporal requirement. The UDRP asks whether the respondent registered the domain in bad faith. The complainant’s mistake in allowing the domain to expire does not convert the respondent’s lawful purchase into a bad-faith registration.
The panel’s reasoning is consistent with the structure of the UDRP. The policy protects trademark owners from cybersquatting, not from their own administrative oversights.
The Lazarus decision
In Lazarus Enterprises, Inc. v. Ariel Elizarov (WIPO Case No. D2026-1139), the complainant was an AI company that had used the “Lazarus AI” name. It accidentally allowed lazarusai.com and lazarus.enterprises to expire. The respondent, Ariel Elizarov, purchased the domains out of an open expiration auction pool. He provided evidence that he was actively preparing to launch his own independent business venture under his own name, using the “Lazarus” moniker. The panel found no bad faith and denied the transfer.
The decision is a warning to brand owners: continuous domain management is essential, and the UDRP will not rescue a lapsed domain where the new registrant acted in good faith.
The new registration is a new registration. We test the date, the targeting, and the provenance before you respond. Book an expired-domain assessment →
Buying an expired domain: when it is legitimate
The secondary market is legitimate
The secondary market for expired domains is legitimate. The Xucker panel stressed that catching an expired domain immediately after deletion does not automatically amount to bad faith, and that there is a legitimate secondary market for dropped domains, including domains previously used by unrelated businesses.
The SNGLR.com panel accepted that professional investors may legitimately acquire short acronyms, coined-looking strings, and brandable domains for resale where there is no evidence of trademark targeting.
The good-faith public purchase
A good-faith public purchase has three characteristics:
- Public source: The domain was acquired through a public auction or marketplace, not through a private approach to the former owner.
- No targeting: The buyer did not acquire the domain because of the former owner’s trademark; it acquired it for its generic, descriptive, or brandable value.
- Documented rationale: The buyer has a contemporaneous record of why the domain was chosen and how it fits the portfolio.
The Lazarus respondent satisfied all three. He purchased the domains out of an open expiration auction pool, had no connection to the AI company, and was preparing to launch his own business under the “Lazarus” moniker.
The Xucker decision
In Xucker GmbH v. Domain Admin (WIPO Case No. D2026-3253), the German company had owned Xucker.com since at least 2011 and used it to redirect to Xucker.de. The domain was deleted on 10 May 2026 and re-registered on 11 May 2026. The respondent then sent an outbound email to Xucker.info — an address associated with the complainant’s founder and former CEO — offering Xucker.com as a “premium domain”. The domain was listed for sale on Atom.com with a “Make Offer” option.
The panel found that catching an expired domain does not automatically amount to bad faith, but the circumstances here were different. XUCKER is a coined term with no dictionary meaning, the complainant had used the .com for years, and the respondent provided no alternative explanation for selecting it. The panel also noted that historical traffic can make an expired domain attractive, and where that traffic derives from the former owner’s trademark use, a registrant cannot rely on that value while simultaneously denying knowledge of the trademark association. Combined with the immediate outbound outreach to a domain associated with the founder, the panel concluded this was not an innocent expired-domain acquisition. The domain was ordered transferred.
What buyers must document
A buyer of an expired domain should document:
- The acquisition source: auction platform, marketplace, or broker.
- The acquisition date and price.
- The reason for the acquisition: generic value, portfolio fit, keyword research.
- The absence of targeting: no knowledge of the former owner, no prior dealings.
- Post-acquisition use: parking page, listing, development.
- Due diligence: searches performed before acquisition.
The documentation should be contemporaneous where possible. After-the-fact reconstructions are less persuasive.
A public purchase is legitimate. Targeting is not. We build the provenance record — source, date, rationale, due diligence — before the deadline. Get a provenance review →
Drop-catching and bad faith
What drop-catchers do
A drop-catcher is a service or individual that attempts to register a domain immediately after it is deleted, often using automated systems to beat other bidders. Drop-catching is a legitimate business, and the secondary market it serves is recognised by panels.
The Xucker panel confirmed that catching an expired domain immediately after deletion does not automatically amount to bad faith.
When drop-catching is legitimate
Drop-catching is legitimate when:
- The domain is acquired for its generic, descriptive, or brandable value.
- The acquisition is through a public auction or marketplace.
- The buyer has no prior knowledge of the former owner’s trademark.
- The buyer has no intention of targeting the former owner.
- The domain is offered for sale generally, not through a targeted pitch.
The SNGLR.com decision accepted that a short acronym acquired at auction for USD 1,249 and later listed on Afternic was a legitimate investment.
When drop-catching becomes targeting
Drop-catching becomes targeting when the buyer:
- Emails the former owner offering to sell the domain back (the Xucker pattern).
- Acquires the domain because of its historical traffic from the former owner’s brand.
- Provides no alternative explanation for selecting a coined term.
- Lists the domain at a price calibrated to the former owner’s brand value.
- Has prior knowledge of the former owner’s trademark.
The Xucker panel found targeting where the respondent sent an immediate outbound email to an address associated with the founder, offered the domain as a “premium domain”, and provided no alternative explanation for selecting a coined term.
The outbound email problem
An outbound email to the former owner is the single riskiest act a drop-catcher can take. It converts a potentially legitimate purchase into evidence of targeting. The email shows that the buyer knew of the former owner’s connection to the domain and was seeking to exploit it.
The Xucker panel treated the outbound email as a decisive factor. A drop-catcher who acquires a domain and lists it passively on a marketplace is in a different position from one who actively solicits the former owner.
Historical traffic and the knowledge inference
The Xucker panel noted that historical traffic can make an expired domain attractive, and where that traffic derives from the former owner’s trademark use, a registrant cannot rely on that value while simultaneously denying knowledge of the trademark association.
The inference is that a drop-catcher who values a domain for its historical traffic knows why the traffic exists. If the traffic comes from a brand, the drop-catcher knows the brand. That knowledge supports a bad-faith finding.
Drop-catching is legal. Outbound email to the former owner is not. We audit the acquisition and the outreach before you respond. Get a drop-catch risk review →
The brand owner’s problem: when a lapsed domain is gone
Trademark rights are not a reclamation right
A brand owner whose domain has lapsed cannot rely on trademark rights alone to recover it. The Lazarus decision is explicit: a brand owner cannot simply rely on the existence of its trademark to force a transfer — it must prove that the new registrant acted in bad faith.
The marksgray analysis of Lazarus states the point directly: “A Lapsed Domain Is Fair Game. Once a domain name expires and clears its grace period, it returns to the public market. If an independent third party purchases it for a legitimate business purpose without explicitly targeting your brand, UDRP panels will not rescue you from your administrative oversight”.
Proving bad faith against the new registrant
To recover a lapsed domain, the brand owner must prove that the new registrant registered it in bad faith. The evidence can include:
- Targeting: the registrant contacted the brand owner, offered to sell the domain, or had prior knowledge.
- Historical traffic exploitation: the registrant is relying on the brand’s traffic.
- Coined term: the domain is a coined term with no meaning other than the brand.
- Outbound outreach: the registrant emailed the brand owner or its associates.
- No alternative explanation: the registrant cannot explain why it chose the domain.
The Xucker case is the model. The brand owner succeeded because the respondent emailed an address associated with the founder, offered the domain as a premium, and provided no alternative explanation for selecting a coined term.
The “I forgot to renew” defence that fails
The “I forgot to renew” defence fails under the UDRP. The complainant’s administrative oversight does not convert the respondent’s lawful purchase into cyberpiracy. The Lazarus panel rejected the “operative registration date” theory and reaffirmed that a standard renewal failure does not create a bad-faith registration.
The practical lesson is that renewal management is essential. A brand owner who allows a domain to lapse has no guaranteed route to recovery.
When court is the only route
If the new registrant acted in good faith, the UDRP will not transfer the domain. The brand owner’s remaining options are:
- Negotiate with the registrant to buy the domain.
- Court proceedings, if there is a cause of action beyond bad-faith registration.
- Accept the loss and move to a different domain.
The court route is expensive and uncertain. The negotiation route depends on the registrant’s willingness to sell. Prevention — renewing on time — is the only reliable cure.
Trademark rights are not a reclamation right. We assess the bad-faith evidence against the new registrant — targeting, outreach, historical traffic. Get a recovery assessment →
The registration-date analysis in practice
Priority and the new registration
The new registration date is the critical date. If the current registrant acquired the domain before the complainant’s mark arose, the complainant cannot prove bad-faith registration. If the current registrant acquired it after, the complainant must show targeting.
The complainant’s mark date
The complainant’s trademark date — registration or first use — is compared to the new registration date. A mark that postdates the new registration is a weak basis for a complaint. A mark that predates it may support a bad-faith inference if there is evidence of targeting.
The “targeting” requirement
Targeting is the core of the analysis. The complainant must show that the registrant knew or should have known of the mark at the time of acquisition. The evidence can be:
- Direct: an email, a prior dealing, an offer to sell.
- Circumstantial: the fame of the mark, the registrant’s sophistication, the absence of a plausible alternative explanation.
The Xucker panel found targeting from the outbound email and the lack of an alternative explanation for a coined term. The Lazarus panel found no targeting where the respondent purchased through a public auction, had no connection to the complainant, and was preparing his own business.
The disjunctive policies and expired domains
The auDRP, Nominet DRS, CNDRP, INDRP, and usDRP use a “registered or used” test, which is more favourable to complainants in expired-domain cases. A brand owner who cannot prove bad-faith registration under the UDRP may be able to succeed under a disjunctive policy by showing bad-faith use. The CDRP focuses on registration, like the UDRP. The SACI-Adm requires direct knowledge at registration.
The policy determines the outcome. We map the extension and the registration date to the applicable test before you file or respond. Ask which policy applies →
Worked hypotheticals
The accidental expiry
Facts: A brand owner accidentally allows its .com domain to expire. The domain is deleted and purchased at auction by an investor. The investor lists it for sale on a marketplace at a general price. The brand owner files a UDRP.
Analysis: The brand owner is likely to lose. The investor acquired the domain through a public auction, has no prior knowledge of the brand, and listed it passively at a general price. There is no targeting. The Lazarus decision is directly on point.
Lesson: Accidental expiry does not create a right of recovery. The brand owner should negotiate or move on.
The drop-catch and outbound email
Facts: A drop-catcher acquires a coined-term domain immediately after deletion and emails the former owner offering to sell it back for USD 25,000. The former owner files a UDRP.
Analysis: The brand owner has a strong case. The outbound email proves targeting. The domain is a coined term with no alternative meaning. The drop-catcher cannot explain why it chose the domain. The Xucker decision is directly on point.
Lesson: Outbound email converts a legitimate drop-catch into bad faith.
The public auction purchase
Facts: An investor wins an expired domain at a public DropCatch auction for USD 1,249. The domain is a five-letter acronym used by several entities. The former registrant, who had bid on the auction and lost, files a UDRP.
Analysis: The investor has a strong defence. The domain was acquired through a public auction. The acronym has multiple meanings. The complainant participated in the auction and lost, which supports an RDNH finding. The SNGLR.com decision is directly on point.
Lesson: A public auction purchase, followed by a “Plan B” complaint, is a strong defence and an RDNH opportunity.
The portfolio buyer
Facts: An investor buys a portfolio of 200 domains from another investor. The portfolio includes a domain matching a third-party mark. The buyer does no due diligence on the portfolio before completing the acquisition. The brand owner files a UDRP.
Analysis: The buyer may be willfully blind. The failure to check, despite the buyer’s sophistication, supports an inference of knowledge. The “stepping into the shoes” question arises: does the acquisition preserve the original registration date? The answer depends on the transfer terms and the buyer’s knowledge.
Lesson: Portfolio acquisitions require due diligence. Willful blindness is a route to bad faith.
The brand owner who waited
Facts: A brand owner’s domain expires. The domain is purchased by an investor who lists it for sale. The brand owner waits two years before filing a UDRP.
Analysis: The delay weakens the brand owner’s case. Panels may infer that the brand owner was not seriously harmed, or that it acquiesced in the new registration. The targeting evidence is also weaker after two years, because the investor’s acquisition is further in the past and the brand owner’s mark may not have been as well known at the time.
Lesson: Act promptly. Delay undermines the bad-faith case.
RDNH and the “Plan B” complaint
The losing bidder
The SNGLR.com decision is the leading example. The complainant participated in the DropCatch auction, placed three losing bids, then contacted DropCatch alleging infringement and filed the UDRP. The panel found RDNH, noting that the complainant was sophisticated, experienced with the domain and trademark registrations, and should have understood the limits of the UDRP before filing.
The failed negotiation
The pizzaman decision found RDNH where the complainant filed only after failing to purchase the domain at the respondent’s price. The panel found the complainant, who was represented, should have known that its complaint could not succeed on all three elements.
Pleading RDNH
To plead RDNH in an expired-domain case:
- Show the auction or negotiation history — the complainant participated and lost, or tried to buy and failed.
- Show the absence of targeting — public purchase, no prior knowledge, general listing.
- Show the complainant’s sophistication — it should have known the complaint would fail.
- Request the declaration expressly.
Was the complaint a Plan B? A losing bidder or a failed buyer is a strong RDNH candidate. We assess the auction and negotiation record. Discuss an RDNH strategy →
Preventing the problem: renewal management
The cheapest defence against an expired-domain dispute is not to let the domain expire. Practical steps:
- Centralise renewal management across all domains.
- Set multiple reminders — 90, 60, 30, and 7 days before expiry.
- Use auto-renew where available.
- Ensure payment methods are current.
- Monitor the registrar account for failed renewals.
- Audit the portfolio annually for domains that are no longer needed.
A lapsed domain is fair game once the grace period ends. Renewal management is the only reliable prevention.
The expired-domain checklist
For buyers
- Source: public auction or marketplace?
- Date and price: documented?
- Rationale: why this domain?
- Due diligence: did you check for third-party marks?
- Knowledge: did you know the former owner?
- Outreach: did you contact the former owner? (If yes, stop and get advice.)
- Listing: general marketplace, general price?
- Use: parking page, development, or passive holding?
For brand owners
- Renewal: did the domain expire?
- Grace period: is it still renewable?
- New registrant: who acquired it?
- Targeting: did the registrant contact you or offer to sell?
- Coined term: is the domain a coined term with no other meaning?
- Historical traffic: is the registrant relying on your brand’s traffic?
- Policy: is the extension subject to the UDRP or a disjunctive policy?
- Court: is there a cause of action beyond bad-faith registration?
The checklist is the difference between a recovery and a loss. Book an expired-domain assessment →
How counsel.domains can help
If you have bought an expired domain and received a complaint, we test the registration date and the targeting evidence, and build the provenance record.
If your brand’s domain has lapsed, we assess the bad-faith evidence against the new registrant and advise on UDRP, negotiation, or court.
If the complainant lost an auction or tried to buy the domain, we assess whether RDNH is viable.
If the case spans multiple extensions, we coordinate the UDRP and the relevant ccTLD policy.
counsel.domains Domain names, worldwide. Talk to counsel about an expired domain → · [email protected]
Disclaimer: This website provides general information about domain name dispute resolution. It is not legal advice and does not create a professional relationship. Procedures and fees change; check the relevant policy and provider before acting. counsel.domains is not affiliated with WIPO, ICANN, Forum, ADNDRC, CAC, CIIDRC, or any registry or dispute-resolution provider.