What to Do When a Web Designer Holds Your Domain Hostage in Malaysia

A common crisis Malaysian businesses face is a rogue web developer or agency refusing to hand over domain names and hosting access after a dispute. Your domain is your digital real estate; here is how to get it back.

1. Identify the Registrar and Registrant

First, determine who legally owns the domain. For a .com.my or .my domain, use the MYNIC WHOIS lookup. For a .com, use ICANN WHOIS. If the domain is registered under your company's name and SSM number, you have full legal rights, regardless of who the administrative contact is.

2. The MYNIC Dispute Resolution Policy (MYDRP)

For MYNIC domains (.my), if the developer registered it under their own name maliciously, you can initiate a dispute under the MYDRP. If it is registered under your SSM but the developer refuses to transfer the technical contact, you can bypass them entirely. Submit official company documents (Form 9, Section 14, Director IC) directly to MYNIC to force an email address update and password reset.

3. ICANN Transfer Disputes

For .com domains, if the developer locked the domain or changed the registrant data without authorization, you can file a Transfer Dispute Resolution Policy (TDRP) complaint with ICANN. You will need to provide proof of payment for the domain and original registration intent to the current registrar (e.g., GoDaddy, Namecheap).

4. Reclaiming DNS and Hosting

Once domain control is secured, immediately change the nameservers to a secure DNS provider like Cloudflare. This severs the rogue developer's connection to your website and email routing, allowing you to repoint the domain to a newly secured server.

---

Need Expert Help?

We specialize in hostile infrastructure takeovers. JagaWeb has secured digital assets for clients like UrusHQ and TechFix Malaysia. Get our RM5,000 Ownership & Access Review for emergency domain and server recovery, or subscribe to our RM450/month Care Plan so you never lose root access again. Contact us today.