Who Owns Your Website's Domain? Check Before You Regret It

Checking the domain owner's name takes five minutes and needs no one's permission

Every registered domain has a public registration record that can be viewed, and the search for it is called WHOIS. You don't need to log in, you don't need a password, and you don't need to inform the vendor that you are checking it.

How to do it: open one of the WHOIS search sites on the internet, type your domain name without https and without www, then press search. Almost all major domain providers also provide a similar search page on their own site, so use whichever one you find first. The results should be uniform, because they all read the same records from the registrar where the domain is registered. If your domain has a .id extension, the .id registrar has its own search page, and the data displayed for Indonesian extensions may have a different arrangement than .com.

This article assumes you already have an active domain. If the terms domain, hosting, and SSL are still unclear, we have written the basics separately in article about domain, hosting, and SSL for beginners.

The five lines in the search result that actually matter

The WHOIS result is usually long and full of technical terms. You only need to read five of them.

• Registrant Name or Registrant Organization. This is the name recognized as the domain owner in case of a dispute someday.
• Registrant Email. All renewal warnings and change approval requests are sent to this address. If the address is not yours, you will never receive any of those warnings.
• Registrar. The company where the domain is registered. This determines whose panel you need to open if you want to make changes later.
• Creation Date and Expiry Date. The date the domain was first registered and the date the rental expires. Save the second date in your own calendar, not just in your memory.
• Domain Status. Codes like clientTransferProhibited often appear here. This is a standard transfer lock set by the registrar so the domain cannot be transferred secretly, and almost all healthy domains have it.

Of these five lines, the first two answer the question in the title of this article. The rest determine how quickly you can act if you don't like the answer.

A hidden name is almost always the registrar's built-in privacy feature

In the registration column, you often see writings like Redacted for Privacy, Data Protected, or the name of a privacy protection company, accompanied by an obviously random email. This is a feature that many registrars install automatically, some for free, some for a fee. Its purpose is to hide your name, phone number, and email from database sellers and spam senders who regularly scan domain records.

So the masked results do not reveal anything about who the owner is, in both directions at once. A domain that is indeed in your name can appear like that, and a domain that is in the vendor's name can also appear like that. What is hidden is only the appearance; the original records are still stored at the registrar.

To penetrate it, there are two ways. You can log in to the registrar's panel with your account and open the registration data page, or you can ask the vendor to send a screenshot of that page. The second request sounds awkward, but it's reasonable and commonly fulfilled. A vendor that manages domains neatly can take it in less than a minute.

Being listed as the owner doesn't mean you can log in to the panel

This is the part that is most often overlooked, including by people who have checked WHOIS and feel safe because their name is already correct.

There are two separate things. First, the name in the registration data, namely who is recognized as the owner on paper. Second, the registrar account where the domain is located, which is locked by one email and one password. All real actions are carried out from within the account: directing the domain to new hosting, changing DNS, requesting authorization codes, or starting transfers. You can be in the owner column and still have to wait for someone else's response every time you want to change one line.

The test is easy and you should do it today, while there's nothing urgent. Try logging in to the registrar panel. If you don't have the password, try the forgot password feature, then pay attention to the address to which the recovery link is sent. If that address is not your address, access is indeed in someone else's hands, no matter how correct the name in the registration column is.

The healthiest arrangement: the domain is in a registrar account under your name and email, then your vendor gives you access as needed to carry out their tasks. This is also what we use for our clients, with full ownership and access in the client's hands from day one.

Vendors who register domains in their own name are usually taking the easy route

One registrar account can hold dozens of client domains at once, paid with one card, and renewed from one dashboard. We don't have to wait for you to create an account, verify your email, and enter your card, which you may not have yet. Many of you also explicitly ask us to handle everything, and we take the quickest route to fulfill your request. In our opinion, most cases stop there and never become an issue.

What more often causes problems are ordinary things: we are busy and respond slowly, the person in charge moves to a new job, the account is held by one employee who has left, or the business stops operating without notice. In all these situations, no one intentionally holds anything hostage, while your website address remains in a place you can't access on your own.

Therefore, finding the vendor's name in the registrar column should be treated as the start of a normal conversation. If we work on it now, while our relationship is still good and the person is still responding to messages, this matter can be resolved in fifteen minutes.

A transfer request goes faster if you name the technical details

Messages like "I want to take over the domain" often go back and forth for days because both parties imagine different tasks. Specify which one you mean, as there are two options with significantly different implications.

• Changing the registrant data only. The domain remains at the same registrar, only the name and email of the registrant are changed to yours. This is the lightest option, usually completed within minutes in the panel, and is sufficient if you are still continuing to work with the vendor.
• Transferring the domain to your own registrar account. Here, you need an authorization code, often called an auth code or EPP code, and the domain transfer lock must be opened first by the current account holder. Choose this path if you want to stand completely on your own.

Prepare three things before sending a message. The complete domain name as written in WHOIS. Proof of domain payment, either an invoice, transfer mutation, or old conversation that mentions the amount; this is rarely requested, but quickly resolves debates if they arise. And the email address you will use as the registrant email, preferably the official company email that remains active even if the person changes, not a personal email of one employee.

As for the tone, you are requesting access to something you paid for, and such requests do not need to be wrapped in accusations to be fulfilled.

If the domain is already back in your hands and you also want to change the website, the steps to rebuild without breaking the old address are on the redesign and migration website page.

Transfers between registrars can be locked for 60 days, so don't leave it to the last minute

For domains like .com, ICANN's rules lock the transfer between registrars for 60 days after the domain is first registered, and also after certain changes to the registrant's data. The effect is often surprising: you've just managed to change the registrant's name to your own, then the transfer to your chosen registrar turns out to have to wait two months.

Some registrars provide an option to not activate this lock when the registrant's data is changed, so ask your current registrar first before pressing any buttons. Indonesian extensions have their own rules that are not always the same as gTLDs, and the place to ask is still the same: your registrar.

The process itself takes several days because there is a confirmation email that must be opened and replied to by both parties. Transfers between registrars are generally also subject to a fee equivalent to one year of renewal at the destination registrar, and your domain's active period will also increase by one year. The exact figure is on the destination registrar's price list, so open their page yourself and don't rely on anyone's estimates, including ours.

Two times you should avoid: a few weeks before the domain's expiration date, and before an ad campaign or exhibition that has already been scheduled. Do it in a quiet month, when your website can afford to be temporarily disrupted without anyone losing out.

Four questions before anyone registers your next domain for you

If the inspection shows that everything is already in your name, your job is done until next year. Mark the expiration date on your calendar, make sure the registration email is still accessible to you, and move on with your life.

If you are about to order a new website, asking these four questions at the beginning is much cheaper than dealing with them later:

• Who is the domain registered under, in terms of name and email.
• Whose registrar account is the domain in, and can you log in yourself or not.
• If you decide to switch developers someday, what steps do you need to take, and are there any costs involved or not.
• Who receives the annual renewal warning emails.

In our packages, the domain is registered under your name and the first year is already included in the package price, starting from Starter Rp 1.500.000. The details of each package are available on the pricing page. If your domain is currently held by another vendor, just send us the WHOIS result when you chat with us, so the transfer steps can be arranged before work begins.