You emailed him two weeks ago. You called last Tuesday. The number now goes to a voicemail box that's full. And somewhere in the back of your head you're realizing you don't know who actually controls your website.

This happens all the time. Freelancers burn out, move states, take a full-time job, or just stop checking the inbox they used for clients. Most of them aren't villains. They also aren't coming back to hand you the keys. It isn't your fault, and it's almost always fixable. Start with the domain.

Step 1: Find out who your registrar is

Your domain name (yourbusiness.com) is rented from a company called a registrar. That's the single most important piece, because whoever controls the domain controls where your website and email point.

Go to lookup.icann.org, type in your domain, and hit Lookup. You'll get a page of technical-looking results. Ignore most of it and find these:

  • Registrar: usually GoDaddy, Namecheap, Squarespace Domains (which absorbed Google Domains), Network Solutions or Cloudflare.
  • Expiration date: write this down. If it's within the next 60 days, this just became your top priority.
  • Name servers: these show who controls your DNS, the settings that point your domain at a website and an email provider. If they name a company you've never heard of, that's probably where your developer manages things.
  • Registrant organization or state: often redacted for privacy, but sometimes it'll show your business name or your developer's.

If the registrant shows your business, good news. If it shows his name or his company, that's still recoverable, just slower.

Step 2: Find out where the site is hosted

The registrar holds the name. The host holds the actual website files. They're often different companies.

Plug your domain into a free tool like hostingchecker.com. It'll tell you the hosting provider, something like SiteGround, Bluehost, WP Engine, or a big cloud provider like AWS. If it says Squarespace, Wix or Shopify, that's actually simpler: the platform is the host, and the account is what you need back.

One catch: these tools report whoever owns the server address your site answers from. If your site sits behind Cloudflare or a similar service, the result will just say Cloudflare, and the real host stays hidden. In that case you'll need your billing records, or a look inside the Cloudflare account's DNS settings, to see where the site actually lives.

Also look at your own records. Search your email and your credit card statements for the words "hosting," "renewal," or the provider's name. If you've been paying the host directly, you're in a much stronger position than you think.

Step 3: Find your email, which is probably the urgent part

A dead website is embarrassing. Dead email means you stop getting quotes, invoices and password reset links.

Run your domain through MXToolbox's MX lookup. If the results mention google.com, you're on Google Workspace. If they end in mail.protection.outlook.com, you're on Microsoft 365. If they point at something like mail.yourbusiness.com, or at the same company as your host, your email lives on that hosting account, which means it's tied to whoever controls that account.

Figure out who the admin is on that email account. If it's you, change the password and add a second admin today. If it's your developer, move this to the top of the list.

Step 4: The recovery paths, honestly ranked

1. Registrar account recovery. If the domain is registered to your business, call the registrar and ask for account recovery. Expect to show a government ID, and often your business license or EIN letter. GoDaddy and Namecheap both have formal processes for this. It usually takes a few days to a couple of weeks. Once you're in, you control everything downstream.

2. Hosting support with proof of ownership. Hosts are pickier, because the account holder is whoever signed up. If you have invoices showing you paid, or the account email is an address at your own domain that you can still receive mail on, you've got a strong case. Ask for an ownership change or a full backup of the site files and database.

3. Rebuild on a new host while you recover the domain. This is the last resort, and sometimes it's the fastest one. If the hosting account is a dead end, you can stand up a simple new site elsewhere, get the domain back through path 1, then point it at the new site. A transfer between registrars takes up to about five days for a .com once it's approved, sometimes less. Moving a domain between two accounts at the same registrar is often immediate.

Watch out for one trap you can set off yourself. Under ICANN's current rules, changing the owner on a domain locks it against moving to another registrar for 60 days unless you opt out before the change goes through. Registrars can also refuse a transfer within 60 days of a new registration or a previous transfer. ICANN has been working on shortening these windows, so ask your registrar what applies today before you change anything. If you plan to move registrars, think about the order you do things in.

One more thing. If he still answers anything, even a text, don't ask for "everything." Ask for one specific item: "Can you push the domain to my GoDaddy account?" Small asks get answered. Big ones get ghosted.

What's actually unrecoverable

Less than you'd fear. The domain is almost always recoverable if your business is the legal registrant. The live website can usually be backed up from the host, or at worst scraped from the public site and the Wayback Machine. A scrape gets you what visitors saw: pages, text and images. It won't bring back the CMS, the database, or anything behind your forms.

What you often lose for good are the design files: the original Figma or Photoshop mockups, the logo source files, the stock photo licenses he bought under his own account. Annoying, but you can recreate a logo file or buy a new photo license, and none of it stops you from doing business.

The one truly bad case is an expired domain that gets released. The timeline is less forgiving than people assume. How long you get to renew after the expiration date depends on the registrar: some give you weeks, others only days. Many registrars put expired domains up for auction during that window, before the 30-day redemption period (when you can still buy it back, at a steep fee) even starts. If your lookup shows the domain has already expired, treat it as an emergency that day. That's why the expiration date from Step 1 matters so much.

Once you're back in: what should be in your name

If you're reading this before anything has gone wrong, here's what should be in your name. Check each one this week:

  • Your domain registrar account should use your login, your email and your card on file, with auto-renew turned on. Renewal notices should only ever come from that registrar. If a company you've never heard of mails you one, here's what that letter actually wants.
  • Your hosting or website platform account should list you as owner, with your developer added as a collaborator.
  • For email, you should be super admin on Google Workspace (Global Administrator on Microsoft 365), plus one backup admin you trust.
  • You should be primary owner on your Google Business Profile, not a manager, and an Administrator on Google Analytics.
  • Each of the above should have an entry in a password manager, so it's not living in one person's head.

Your developer should be a guest in these accounts. Not the landlord. If you want the longer version, read Who Actually Owns Your Website? The same goes for an SEO agency that set up your Search Console or Business Profile, and here's how to tell whether they're doing anything with that access.

Our standing offer

We do sell hosting, but most people in this spot don't need to move anything. And we'll happily tell you when you don't need us at all. A lot of the time the honest answer is "you already own all of this, here's where to log in."

So here's the deal. Send Marshland your domain name. Within one business day, we'll reply with who controls your domain, your hosting and your email, and what we'd do first. It's free. You don't have to get on a call, and there's no sales pitch attached.

Just the map. What you do with it is up to you.

Do this today

Open lookup.icann.org, type in your domain, and write the registrar and expiration date on a sticky note. Then try logging into that registrar. If you can't, you've just found your first problem, and you found it on your own schedule instead of your developer's.