The new website was beautiful. Faster, more secure, professionally designed. But after 6 hours of digital forensics, late-night phone calls, and ICANN complaints, it sat unused on our servers. Why? Because nobody – not even my client – knew who actually owned his domain name.
This is Part 2 of my investigation into how Irsfeld Pharmacy was trapped in a 10x overcharging web hosting scam. Read Part 1 here if you missed how I discovered they were paying $3,500/year for $350 worth of services.
The Perfect Website Nobody Could See
I had just finished building Steve and Marian a stunning new website for Irsfeld Pharmacy. Clean design, mobile-responsive, lightning-fast loading on SiteGround’s superior hosting. Everything was ready to launch.
There was just one small technical step remaining: point their domain, irsfeldpharmacy.com, to the new hosting so the world could see their beautiful new site.
That’s when our nightmare began.
“I Think I Own It?”
“Do you have access to your domain registrar account?” I asked Steve during our launch prep call.
“I think so? I mean, I own the domain, right?”
Famous last words.
Steve tried logging into every account he could think of. Nothing. I guided him through password reset attempts. Still nothing. We checked his email for domain renewal notifications – surely he’d received something over the 15+ years he’d owned this domain.
Radio silence.
Red flag #1: If you can’t access your domain registrar account, you might not actually own your domain.
The Digital Forensics Begin
What started as a simple “forgot my password” issue quickly escalated into a full-scale investigation. I became a digital detective, determined to solve the mystery of the missing domain ownership.
My investigation toolkit:
WHOIS database searches
ICANN registration lookup tools
Historical domain data services
Registrar customer service calls
Business documentation review
The current WHOIS record showed the domain was registered through Wild West Domains, but with full privacy protection enabled. No contact information visible. No clues.
But here’s what I knew for certain: someone was paying for this domain every October, and someone had deliberately configured it to point to FatCow’s nameservers. Domains don’t configure themselves.
The Wild West Dead End
I called Wild West Domains directly. After explaining the situation to three different representatives, the message was consistent: “We have no record of Steve Irsfeld as a customer.”
How could that be possible? The WHOIS clearly showed Wild West Domains as the registrar. Steve had been running his pharmacy website on this domain for over a decade. Someone had to have an account there.
I submitted official domain reclaim forms. Steve provided business registration documents, tax ID numbers, proof of the pharmacy’s legal name – everything ICANN requires to prove a legitimate ownership claim.
Days passed. No response.
I escalated to ICANN directly, filing complaints about unresponsive registrar practices.
More forms, more documentation, more waiting.
Still nothing.
Steve grew increasingly frustrated – and rightfully so. His business was stuck with an outdated website on overpriced hosting while his beautiful new site sat in digital limbo.
The Breakthrough Text Message
After nearly a week of dead ends, Steve remembered something during one of our status calls.
“You know, let me check if I have any other contact information on previous web developers who might know about this.”
He scrolled through his phone and found a text thread with someone named Tyler. Not thinking much of it, Steve sent a simple message asking about the domain situation.
Tyler’s response changed everything:
“I own the domain. It appears like you have been trying to log into my account the past few days….”
Wait. What?
The Silence That Said Everything
Think about that for a moment.
Tyler had been watching login attempts on an account tied to a business he had previously served … for days … and said nothing.
No text. No call. No “hey, are you trying to get in? Need help?”
Just silence.
While Steve’s entire online presence sat frozen.
While a week of forensic investigation unfolded.
While ICANN complaints were filed, registrar calls were made, and forms were submitted into the void.
Tyler watched. And waited.
We’ll never know exactly why. But what it revealed is worth naming: when the relationship between a business and its vendors becomes purely transactional, or worse, when it quietly dissolves without anyone formally closing the loop, the vendor’s silence in a crisis isn’t surprising.
It’s just the absence of accountability that was always there.
It took Steve reaching out directly- not the investigation, not the ICANN complaints, not six hours of forensics – to finally unlock the answer that had been one text message away the entire time.
The Wrong Company Revelation
This explained everything:
Why Wild West Domains had no record of Steve
Why all my ICANN complaints went nowhere
Why reclaim forms disappeared into the void
Why Steve never received domain renewal emails
I had been investigating the wrong company for an entire week.
This is not an accident. The subsidiary shell game is a deliberate tactic in the web hosting industry. Companies create multiple entities with similar names, making it nearly impossible for customers to know who actually controls what. When problems arise, customers get bounced between companies like a pinball – each one pointing to the other, none of them accountable.
The Contact Confusion
There’s one more layer to this that perfectly illustrates how these situations spiral.
When I had first asked Steve for any contacts related to his web services, he gave me the number for Tyler F. of Mango Media. A different Tyler. A different company entirely.
I had been chasing the wrong Tyler while the right Tyler – Tyler H. of Wild West Media – sat quietly watching our login attempts.
Steve only remembered Tyler H. when I specifically asked him to think through the timeline of when his domain was first set up. Sometimes it takes that specific prompting to surface business relationships that go back years and were never formally documented.
This is exactly why domain ownership gets so murky.
Most business owners don’t connect the dots between:
- The person who “helps with computer stuff”
- Actual domain ownership
- The technical infrastructure on which their entire online presence depends on
When those dots aren’t connected, and when nobody ever maps them, you get a week of forensic investigation to answer a question that should have taken five minutes.
The Dangerous Gray Area
Tyler’s text revealed something deeply troubling about how domain ownership works in practice. He said he “owned” the domain for Steve’s business.
But what did that actually mean?
- Did Steve ever formally transfer ownership to Tyler?
- Was this a management arrangement that quietly became confused for ownership?
- How many other businesses think they own domains that are actually in someone else’s name?
- What happens if Tyler disappears, moves on, or simply decides he’s done helping?
This gray area between ownership and management is where small businesses get trapped. Someone trustworthy offers to “handle the technical stuff.”
Years pass.
Nobody documents the arrangement.
And one day, when you need to move, migrate, or simply launch a new website, you discover the foundation was never yours to begin with.
The Professional Standard That Should Exist
Here’s what should have happened from the beginning:
Proper Domain Management:
Business owner registers domain in their own name
Web developer gets temporary administrative access when needed
All login credentials and transfer codes are documented and shared
Annual renewals go to the business owner’s email
Clear contracts specify who owns what
What Actually Happened:
Tyler registered the domain in his own name (possibly for convenience)
Steve assumed he owned it
No documentation of the arrangement
No shared access or credentials
Years of renewals happening invisibly
Red Flags Every Business Owner Must Know
Don’t let your business become the next victim of domain confusion. Here are the warning signs that you might not actually own your digital real estate:
Immediate Red Flags:
You can’t access your domain registrar account
You don’t receive annual renewal notices
Domain renewal charges don’t appear on your credit card statements
Your web developer says they “handle all that stuff”
You’ve never seen transfer authorization codes
Business Relationship Red Flags:
Vague agreements about who owns what
Technical services bundled without clear ownership documentation
Providers who discourage you from having direct access
No written contracts specifying digital asset ownership
Automatic renewals you didn’t explicitly set up
How to Verify Domain Ownership Right Now
Step 1: Go to lookup.icann.org and search your domain name.
Step 2: Note the registrar name and contact information shown.
Step 3: Try to log into that registrar’s website with your credentials.
Step 4: If you can’t access it, contact the registrar directly to verify ownership.
Step 5: Request transfer authorization codes to prove you have administrative control.
If you discover someone else owns your domain:
Document your business’s legitimate claim to the name
Gather evidence of how long you’ve used it for business
Get written confirmation of any ownership transfer arrangements
Consider legal consultation if the situation is unclear
The Resolution (Finally)
Once we identified Tyler H. as the actual domain owner, the solution became straightforward. Tyler was cooperative about transferring ownership back to Steve, but it required a specific technical sequence:
- First, change nameservers to point to SiteGround
- Wait for DNS propagation (about 3 days)
- Then initiate the ownership transfer process
Why this order mattered: Changing ownership first could have caused the website to go offline during the transfer process. By changing nameservers first, we ensured continuity of service while sorting out the legal ownership.
The Fresh Take
Your domain name is not a technical detail. It’s the deed to your digital property.
Just like you wouldn’t let someone hold the title to your physical building “for convenience,” you shouldn’t let anyone else control your domain registration. Not a developer. Not an agency. Not someone who used to help with “the tech stuff” years ago and never formally handed it back.
The pharmacy that thought it owned its domain was actually at the mercy of a third party’s goodwill. One unanswered text away from losing everything, and that text was only sent because Steve thought to look through his phone on the right afternoon.
That’s not a business strategy. That’s a hostage situation you don’t know you’re in.
If you can’t independently access your domain registrar account right now, today is the day to find out why.
The Tech Stack Inventory Kit is free and includes a step-by-step guide for finding your domain information, even when the trail has gone cold.
And if what you uncover feels like more than you want to sort through alone, the Website Assessment is where we look at your full digital ecosystem together.
The domain mystery is solved, but the story isn’t over. In Part 3, I’ll take you inside FatCow’s deliberately confusing website architecture and show you how poor design isn’t just bad user experience. It’s a tool for financial exploitation. When a company makes it nearly impossible to understand what you’re paying for, that’s not an accident. That’s a business model.