"Our website disappeared." That was the first call.

A client got to the office one Monday morning, opened a browser, and found that their domain — the address that ran their website, email, and Google listing — just didn't load. Not a 404. Not a "site under construction" page. Nothing. After the immediate panic, we started digging.

The Trail

The trail went back almost a decade. The original domain had been registered years earlier by a web guy who'd built the site, set up the domain under his own personal email account, and quietly stopped answering messages a few years later. The credit card on file had expired. The renewal notices had been going to an inbox nobody was reading. The domain had slipped into expiration without anyone noticing.

We caught it with days left before it would have dropped to the open market — at which point anyone could have grabbed it. Domain squatters watch expired business domains hawkishly, and once a name with even modest search history drops, the cost to get it back is no longer the renewal fee. It's whatever the new owner decides to charge in ransom, or the cost of rebranding the entire business.

What We Did

A few hours of work to fix the immediate problem and a few more to make sure it couldn't happen again:

  • Tracked down the original registrar and confirmed the original account holder
  • Paid the redemption fee (yes, there's a fee for domains in this grace window — much smaller than the alternative)
  • Initiated a transfer to put the domain under the client's name, with the client's email and credit card on file
  • Enabled domain locking and two-factor authentication so it can't be moved or transferred without the client's permission
  • Set up auto-renewal with a card the client actually owns and monitors
  • Documented everything in writing so the client knows exactly what they own, where it lives, and how to access it

That afternoon, the website was back online. Within a week, the domain was fully under the client's control for the first time since the day they started the business.

How This Happens

The "web guy" pattern is the most common version of this story, but it's not the only one:

  • A former employee who set up the website years ago and isn't with the company anymore
  • An old marketing agency that registered the domain under their account "for convenience" and never moved it
  • A friend or family member who did you a favor years ago and is hard to track down today
  • You — but you registered it under a personal email you've since stopped using, with a credit card that was cancelled three years ago

In every version of the story, the owner of the business doesn't actually control the most important digital asset their business has: its name on the internet.

Three Questions Every Business Owner Should Be Able to Answer

If you can't answer all three of these, your business has a domain problem you don't know about yet:

1. Whose name and email is your domain registered under? Not "the company's" — what specific email account gets the renewal notices? When was the last time anyone logged into that email?

2. What credit card pays for the renewal? Is it on auto-renew? Is the card still valid? Will the cardholder notice if a charge fails three months from now?

3. Do you have the login to the registrar? GoDaddy, Namecheap, Network Solutions, Cloudflare, Google Domains — whoever holds the domain. Do you have direct access, or are you trusting someone else to manage it for you?

Quick Check Before You Call Go to whois.com and search your business domain. Look at the registrant information. Is it your name and your business email? If it shows someone else, an old marketing agency, or "Privacy Protected" with no way for you to log in and prove ownership — you have a domain rescue waiting to happen.

When It's Time to Get Your Domain Back

If you've never logged into your domain registrar — or worse, you don't know which registrar your domain is at — it's worth a conversation. The cleanup is straightforward as long as we catch it before something breaks. The expensive version is the rescue after the domain has dropped. The much cheaper version is the audit now, while everything still works.