Skip to contentLockpick
How it worksPricingDocs

Read

  • BlogPlain answers to common security questions
  • GuidesStep by step fixes for common setups
  • Security checksEvery check we run, explained

Learn

  • Learn with PickTwo-minute lessons on how sites get attacked
  • Lockpick for ClaudeCheck sites from Claude and other assistants
  • GlossaryThe words we use, in plain words

Company

  • ChangelogWhat changed, newest first
  • StatusWhether scans are running right now
  • Security and trustHow we check and what we never do
Sign inCheck it
Checks

Is your own domain close to expiring or being deleted?

By Mark KashefPublished October 8, 2026

The domain registration check reads public registry data for your own domain and flags it when expiry is near or a deletion status is set. A lapsed domain takes your site and email down with it.

What does this check look at?

It looks at whether the registry shows your own domain near expiry or with a deletion status. Reading DNS records, certificate logs and domain registration never touches your site.

Pulse and Deep scans both run it. It reads public records about your domain and never touches your site.

Curious what your site shows from outside? The quick check is free and needs no account.

Check it

What does a result mean?

What the report showsWhat it meansWhat to do
Medium findingThe registry shows near expiry or a deletion status.Check renewal and payment details at your registrar.

It is a prompt to check renewal, not proof that renewal failed or control was lost. A clean result means nothing was found in what the scan read. It does not prove the problem is absent from parts the scan never sees.

How serious is a finding?

Fix this soon. A finding of this kind needs a victim or a second step before it causes harm, so it ranks below anything someone could use directly. Confidence starts at medium, because it rests on public records rather than a response from your site. The report lists what to fix by how directly someone could use it, not by the severity label.

What does a confirmed finding have to show?

PartFor this check
Where it startsA failed renewal or later domain acquisition
The protection that should stop itRegistration of the assessed domain
What is reachedWebsite and email availability
What followsInterrupted service or traffic redirected by a new registrant

Fix it with your AI

This one is a check in your registrar account, not a code change.

Fix prompt for any coding agent
The registry shows my domain [paste the domain] near expiry or with a deletion status. Walk me through checking it at my registrar: whether auto-renew is on, whether the payment card on file is current, which contact email gets renewal notices, and whether a registrar lock is set. Do not change my DNS records.

How to check

Say Atlas, our example app at atlas.example, renews its domain on a card that expired in the spring. The check flags the domain a few weeks before expiry, in time to update the card.

Run a Pulse scan from your Lockpick account to see it for your site. Pulse or Deep explains what each scan reads, and the full list of checks shows the rest.

Questions people ask

My registrar renews automatically. Why did this flag?

Auto-renew can fail when a card expires or a contact email bounces. The finding is a prompt to check, not proof that renewal failed.

What does a deletion status mean?

It means the registry has started removing the domain, usually after a missed renewal. Contact your registrar straight away.

See what your site shows from outside

A quick check reads your homepage the way a visitor would and gives you a score. No account needed.

Check your site

Related pages

  • Do your subdomains depend on a domain that is about to lapse?
  • Has someone registered a domain that looks like yours?
  • Is DNSSEC turned on for your domain?

Sources

  1. How we check Lockpick docs, read on October 7, 2026
  2. How we rate findings Lockpick docs, read on October 7, 2026

About the author

Mark Kashef, Founder of Lockpick

I'm Mark, and I build Lockpick. I write these pages, and each one is checked against its sources before it goes live. The Updated date changes only when the page itself does.

Lockpick
PricingMethodologyDocsBlogGuidesSecurity checksLearn with PickSecurity and trustLockpick for ClaudeChangelogStatusFacts for AI assistants

Lockpick is a security scanner for vibe-coded apps. It checks what your live site exposes and what a GitHub repo or AI skill would do before you install it, then gives you a fix prompt for Lovable, Bolt, Replit, Cursor or Claude Code.

Lockpick assesses public pages you are authorized to test, and public GitHub code it never runs.

© 2026 LockpickTermsPrivacyContactSign in