There is a particular kind of Friday where the website is down, the email is down, and every dashboard you own is green.
You check the things you control first, because those are the things you can see. The hosting is paid up. The certificate is valid. The DNS records are the same as they were yesterday. The server is answering. Nothing has been hacked and nothing has been deployed. Somewhere in the second hour it occurs to you that the problem might not be on any screen you have ever been shown.
The domain has expired. The renewal notice went to an address that stopped existing years ago.
This is not a rare failure and it is not a foolish one. It is the predictable result of the way responsibility for a website gets divided up, and it is worth twenty minutes of your afternoon to make sure it cannot happen to you.
Four things expire on your website. You are probably watching one.
Every live website runs on four separate clocks. They belong to different people, they run at different speeds, and only one of them has no owner by default.
The SSL certificate. Renews itself, usually every ninety days, usually without anyone touching it. When it fails you get a browser warning: full width, red, impossible to miss. You know within the hour.
The hosting. Invoices you monthly or annually. Somebody in accounts sees the money leave, even if nobody reads the line item.
The DNS. Watched by whoever runs it. If a record breaks or a nameserver stops answering, monitoring notices and alarms go off. That is what monitoring is for, and it is part of how we build and look after sites.
The domain registration. Held by a registrar you may have chosen a decade ago, renewed on a cycle of anything from one to ten years, and notified by email to whichever address was on file the day it was registered.
Three of those four are somebody’s job. The fourth is nobody’s job until somebody decides to make it theirs.
It is also the only one of the four whose failure takes the website and the email down at the same moment, because both depend on the same name. Most people understand that an expired domain takes a site offline. Very few expect the mailbox to go with it. The mail server is perfectly fine. The name that points to it is gone.
The notice went somewhere. It just did not go to you.
Here is the part that surprises people: the notices are usually sent.
For most of the world’s common domain endings, registrars are required to send at least two renewal reminders before the expiry date, roughly a month out and roughly a week out, with a further notice within days of the date passing. South African domains run to their own registry timetable, moving through a short grace window, then suspension, then a closed redemption phase where recovery costs a fee on top of the renewal.
The obligation is to notify the registrant of record. Not the owner. Not the marketing manager. Not the agency. The address on file.
So the notice goes out, on time, to one of these:
- an account opened years ago by a previous agency or developer, under their own contact address
- a bundle that arrived with an internet or hosting package and has not been examined since
- somebody who has left the business
- a role account that nobody reads
None of that is carelessness. It is usually the residue of a sensible decision made by a person who has since moved on, and it survives because nothing in your working week ever asks about it. There is no monthly invoice for a five year renewal. There is no dashboard tile. The domain is the one part of your infrastructure genuinely capable of going years without being looked at.
The recovery email is on the domain that is down.
To recover a lapsed domain you have to prove you control it. The proof arrives by email, at the registrant address.
If the registrant address is [email protected], and yourcompany.co.za is the thing that has expired, the proof has nowhere to land. The only route back to the domain runs through the domain.
From there it is phone calls, identity documents, support tickets and other people’s business hours, while the site and the mail stay dark. Everything about the recovery is slow. Nothing about the prevention is. It is a five minute change to one field on a form.
Five things you can check yourself, right now, for free
Nothing below needs an agency, a tool or a budget. A browser is enough.
- Find out who your registrar actually is. Look your own domain up on any public WHOIS or RDAP lookup. If the name that comes back is one you do not recognise, that is the finding.
- Confirm auto renew is on. Log in and look. If you cannot log in, that is also a finding, and a more urgent one.
- Turn on transfer lock. It costs nothing, it takes a moment, and it prevents the worst version of this.
- Check the registrant contact email. If it is an address on the domain itself, change it to one that is not: a personal address, another domain, anything that survives independently. This is the five minute job most likely to save somebody a very bad week.
- Read the actual expiry date. Not the one you remember. The one on the record. Then put it in the calendar with a reminder two months ahead of it.
If any of those five made you uncomfortable, the fix is an afternoon, and you do not need an agency for it.
The unglamorous part
Nobody has ever bought a website because of expiry monitoring, and nobody will ever compliment you on it. It is simply the reason the website is still there in three years.
It is also exactly the kind of work that falls between a freelancer, a developer and a host, where each of the three reasonably assumes it belongs to one of the others. Not because anyone is negligent. Because it was never written down as anybody’s.
If you would rather work with a web design partner who owns the whole chain than three people who each own a slice, have that conversation with us.
