Genuinely curious, how does a company manage their domains after they shut down their services to prevent this kind of stuff
Edit: Seems like there's a 10 year limit in many places? I wonder if that's broad convention or an actual rule.
Okay, apparently an ICANN limit for .com domains:
"The expiration date of the domain registration is extended by the number of years, up to a maximum of ten years, as specified by the Registrar's requested Extend operation."
https://www.icann.org/en/registry-agreements/com/com-registr...
Though, I can see that navy.us has an expiry in 2053, so it's likely per registry.