CertaDNS
Skip to lesson

The Findings Nobody Can Fix Cleanly · lesson 1 of 3

The agency nobody can contact

After this lesson you can

Recover control of a domain administered by a party that no longer answers.

Assumes you have read What the evidence supports.

Two country domains are administered by an agency nobody can contact. Nobody internally knows the registrar, the account or the renewal date. This is extremely common and it has a defined sequence.

Establish the facts

curl -s https://rdap.org/domain/calderandvoss.co.uk | jq

   registrar        -> who to talk to
   registrant       -> redacted, or the agency's name
   status codes     -> is it locked, is it on hold
   expiry           -> the clock you are actually racing
   nameservers      -> whose DNS is serving it

The expiry date is the finding. Everything else is
recoverable; an expiry is not.

An unmanaged domain with an expiry in six weeks is an emergency. One with two years is a project. The same situation, and the response differs entirely.

The routes, in order

  • Find anyone who ever dealt with the agency. Finance records name them and may have a contact. Old contracts have signatories. This works more often than people expect and costs an afternoon.
  • Approach the registrar directly. With evidence of the company’s identity and its relationship to the domain, registrars have processes for a registrant who has lost access. It is slow and it is the main route.
  • Check whether the registrant is actually you. If the agency registered it in the company’s name, you are the registrant and the agency is only the administrative contact — which is a much stronger position.
  • Prepare for expiry as the fallback. If the domain lapses, it enters redemption and then becomes available. Knowing the date lets you be ready rather than surprised — and being ready means a registrar account and a plan, not hope.
  • Dispute processes, last. A ccTLD dispute procedure exists for this and takes months, so it is a parallel track rather than the plan.

What to do meanwhile

You cannot change records you do not control, and you can act on everything downstream of them: assume the domains are unprotected, treat them as capable of being used against the brand, and include them in monitoring. If either is used for mail, that is now an impersonation finding rather than a configuration one.

Do not let this block the rest of the plan

Recovering a domain from an uncontactable third party takes months and is frequently the most visible item on a report, which makes it a magnet for attention. It is one of eleven domains. Give it an owner, a track, and a date — and do not let it become the thing the programme is measured by.

Knowledge check

Which fact about an unmanaged domain most changes the urgency of recovering it?

Last reviewed