A ten-minute diagnosis: use a public lookup to tell expiry, re-registration and hijacking apart
Run a public domain lookup, commonly called WHOIS, and read three things: the expiry date, the current status and the registrar of record. Any registrar's website or a public lookup tool will do, with no login required. If the expiry date has just passed, the status shows a post-expiry grace or redemption stage, and the registrar is still the one you used, the domain simply was not renewed and has not actually been lost. If the creation date is now a recent day, the registrar is different and the registrant is not you, the domain was released after expiry and registered afresh by someone else.
If the expiry date is far off and the registrar is unchanged, yet the site will not load or shows an unfamiliar page, the problem is probably not ownership but DNS or hosting. Someone may have signed in to your registrar account and changed the records, the hosting may have lapsed or been compromised, or the web developer's service may simply have stopped. Check whether the domain still points to your original server address.
One case deserves particular attention: the lookup shows the domain has moved to another registrar and you never requested it. Someone obtained your registrar login or the transfer authorisation code. That is domain theft, the most urgent case, and the original registrar must be contacted immediately. Screenshot the lookup result with the time. It is the first piece of evidence for the registrar, a dispute complaint or the police. Confirm, too, something many owners have never checked: who the domain was actually registered to. The company, the owner personally, a former employee or the web agency? The registrant on record determines who is entitled to ask for it back, and discovering the answer during an emergency is far worse than checking it on an ordinary day.
Case one: expired and not renewed. Renew through the original registrar now
An expired domain is not handed to someone else at once. It normally passes through a grace period and then a redemption period before being released for general registration, and the original holder can still recover it in both earlier stages. The lengths and charges vary by extension and by registrar, and recovery in the redemption stage usually costs more than an ordinary renewal; follow the registrar's current terms. Domains ending in .ph and .com.ph are run by the local registry, whose rules differ in places from those for .com, so rely on its guidance and your registrar's. The conclusion is the same in every case: renew on the day you notice.
The usual obstacle is not money but access. The domain was registered years ago by a former employee or a contractor under their own account, the account email is long dead, and renewal notices have been going to a mailbox nobody reads. The route is to contact the registrar's support as the registrant, supply identification or company registration documents and request restored access. If the registrant on record is the contractor or the former employee, ask them to renew and then transfer the domain to the company, keeping the correspondence in writing. If they cannot be reached or will not cooperate, it has become an ownership dispute and needs a lawyer.
After renewal, deal with what hangs off the domain. Whether the site loads again also depends on whether the hosting lapsed. If company email runs on the domain, messages sent during the lapse probably bounced, so contact important customers and the bank proactively. Check any platform account registered with that email in case it was locked for failing verification. Losing company email during the lapse is the costliest part of an expired domain and the part most often overlooked.
Case two: someone else now holds it. Negotiation, a dispute complaint and the trademark question
Once a domain has been released and lawfully registered by another party, you no longer own it in principle. Whether it can be recovered depends on who holds it, what they are doing with it and whether you have a trademark. Look at its current use. A parked page with advertisements and a sale price points to someone who buys lapsed names for resale. A page built to resemble your old site, or one collecting customer details or payments, is impersonation. Unrelated content may mean someone registered it by coincidence. Three opponents, three approaches.
The first route is buying it back. Where the holder is openly selling, this is often quickest, but stay calm. Work out what the name is really worth to the company and what switching to another would cost, set a ceiling, and do not reveal urgency. Complete the purchase through a reputable domain escrow service, never by direct transfer to an individual. The second route is a domain dispute complaint. Generic extensions fall under a uniform dispute resolution policy administered by approved providers, and .ph domains have a corresponding policy. A complaint generally has to show three things: the domain is identical or confusingly similar to a mark in which you have rights, the holder has no legitimate interest in it, and it was registered and is being used in bad faith.
That leads to the third point, the trademark. Without a registered mark, an argument that you used the name before is hard to win, and a registered company name is not a trademark right. If the brand is not yet registered in the Philippines, do it now; the process is in the Philippine trademark registration guide. If the holder is impersonating your company to defraud people, report abuse to their registrar and host, report the impersonation to platforms, and file through the cybercrime reporting process. A dispute complaint has costs and a timetable and nobody can promise the result, so have a licensed lawyer weigh the evidence first.
Case three: still yours, but the DNS was changed or the domain was transferred out. Treat it as an account takeover
A domain that has not expired but points elsewhere, or that has moved to an unfamiliar registrar, means someone got into your registrar account. This is a security incident, and the first step is asking the registrar to lock it. Use the registrar's official support channel, state that the domain appears to have been stolen, and ask them to lock it, block or reverse the transfer and help restore the account. A transfer between registrars normally involves a confirmation and waiting stage, and an objection raised during that stage has a much better chance of success. Once the transfer has completed and time has passed, recovery runs through an inter-registrar dispute procedure and becomes far harder. Count this step in hours, not days.
If you can still sign in, change the password, turn on two-step verification, restore the DNS records to their original values, and check whether the account's contact email was replaced or the transfer lock switched off. Then find the way in. A registrar password is usually reset through the mailbox, so examine company email at the same time: change its password, review forwarding rules and sign-in history. While a domain is hijacked the intruder can replace your site with a phishing page. Less visibly, they can point the mail records to their own server and receive every message sent to your company, which is one of the upstream techniques behind business email compromise fraud.
Until the domain is back to normal, act as you would for any account takeover. Use phone calls, chat groups and other channels to tell important customers and partners not to trust payment or bank-detail requests from the company's email addresses for now, and not to enter information on the website. Keep every registrar notice about DNS changes, transfer requests and password resets. Together with the lookup screenshots they form the core of your appeal to the registrar and of any police complaint. After recovery, review which emails may have been intercepted and whether any customer was deceived.
While the domain is still out of your hands: keep the business reachable
In every one of the three cases recovery takes time, and during that time customers must still be able to find you and trust what they find. First, announce. Use what you still control, whether a social page, customer groups, the owner's personal profile or a notice at the premises, to say that the company website and domain email are temporarily unavailable, give interim contact details, and warn that any recent message in the company's name asking for a change of receiving account should be verified by phone. If the domain is now in someone else's hands and being used to impersonate you, say plainly that the address is not under the company's control.
Second, email. If company mail runs on the affected domain, set up an interim way to receive messages and inform the bank, the accountant, major customers and whoever handles government filings. Pay special attention to systems that recognise only the registered email address. If the contact email the company registered with regulators, the tax system, online banking and platforms sits on this domain, verification messages and official notices will not arrive. Sign in and change the contact email as soon as possible, and where you cannot sign in, take company documents to the counter or use the manual route.
Third, decide whether to activate a fallback domain. If recovery is unlikely soon, registering a similar new name and restoring the site and email on it is often better than waiting. Restore content from backup and update the address on platform profiles, business cards and invoice letterheads. Search visibility will suffer, and that loss is real; it is one of the factors in deciding whether to keep fighting for the old name. Fourth, check whether the same party has registered your brand under other extensions or on social platforms, and keep a record of what you find.
Never again: registered to the company, auto-renewed, multi-year, and what Yixing can do
Losing a domain is almost never a technical failure. It is a management failure. Four measures make a repeat very unlikely. First, register the domain in the company's name, with a registrar account tied to a company email and a phone number the owner controls, not the private account of an employee or contractor. If it currently sits in someone else's name, arrange the transfer while relations are good. Second, turn on automatic renewal with a card that will stay valid, renew for several years at once, and enter the expiry date in the company's licence calendar alongside the business permit and the lease.
Third, protect the registrar account as you would online banking: a unique strong password, two-step verification and the transfer lock switched on. Ideally the contact email on the account should not be an address on the same domain, or a problem with the domain will also block the recovery messages. Fourth, register the brand as a trademark, the strongest card you can hold in any later dispute; how company names are approved and how that differs from trademark rights is covered in the SEC company name rules. Back up the website regularly and store the copy away from the host so that it can be restored quickly even on a different domain. Official portals you may need are listed in the Philippine essential websites directory.
Yixing Travel Consultancy (SEC Registration No. CS202009551, Bureau of Immigration Accredited Agency No. CA-202624381-1) provides compliance retainer services to foreign-owned companies in the Philippines: adding domain, hosting and company email expiry dates to the licence and renewal calendar, preparing the registration documents needed to prove the company's identity to a registrar, and connecting you with trademark agents and licensed lawyers where a dispute arises. We are not a domain registrar, we do not act in domain dispute complaints, and we cannot promise the recovery of any domain. What we do is make sure an asset nobody was watching has someone watching its expiry date. For your specific case consult a licensed lawyer; this article is not legal advice.
Frequently Asked Questions
Our company domain expired. Can we still get it back?
Someone else registered our old domain. Can we recover it?
The domain has not expired but the site redirects elsewhere. What happened?
The domain moved to another registrar and we never requested it. What now?
A former employee or web agency registered the domain and will not cooperate. What can we do?
Company email is down while the domain is lost. How do we cope?
How do we stop the domain expiring or being stolen again?
Let’s talk through your situation — free
Every company is different. Leave your details and a Chinese-speaking advisor will get back within 1 business day with practical, industry-specific guidance and a transparent quote.
Get help with Compliance & Retainer → Free consultation