Here’s my take:
The domain aftermarket has a big problem… it exists. This market shouldn’t ever be allowed to exist in the first place. ICANN should’ve blocked this bullshit a long time ago and forced registrars to just let domains expire and free the space. Also add a few provisions about unused domain names and about selling them.
I accidentally let my personal domain expire because I was using PayPal with my registrar but they couldn’t use that for auto renew. Someone else bought it but they’re not doing anything with it. I can’t see who owns it because they’re doing a private registration with the same registrar I used, so as far as whois is concerned it’s the same registration it’s always had. This happened once before to me years ago and the people who bought it that time put up a fake YouTube clone in French but I just waited them out and they abandoned it a year later. This has been going on two years now and it still hasn’t been abandoned. It’s not critical to have but it’s annoying that someone’s squatting on it hoping I’ll pay a premium to get it back. It’s not that valuable to me.
Maybe it isn’t another person, it’s more likely to be your registrar holding the domain to sell on auction later on. This is the typical GoDaddy behaviour.
I’m using Namecheap but I have had this suspicion that they’re the ones holding it this time. If I could confirm that it would definitely have me looking for another registrar. That feels like it should be against ICANN rules.