Proving Ownership After GDPR |
101 Domain

Proving Ownership After GDPR


GDPR has been in force for over a month, and it is creating some complications for domain investors. This afternoon, a friend emailed me to get some advice. His company is close to selling one of its domain names, but the buyer wants to confirm that the company owns the domain name. Because of GDPR, the Whois record shows “Data Protected” as the registrant. It’s challenging to prove ownership when the Whois information does not reflect this.

I made two suggestions to my friend, assuming that the buyer had contacted his company via the contact link on the landing page and the fact that he replied was not sufficient to the prospect. Here’s what I would do if I needed to prove ownership of a domain name:

1) Take a screenshot of the domain name in my registrar control panel. Take a second screenshot of the actual page where I can modify settings for the domain name.

2) Forward the domain name to a destination of the prospect’s choice temporarily (ie for a few minutes or hours).

I would also explain to the prospective buyer that I would sign a purchase agreement stating that my company is the registrant of the domain name and has the rights to sell the domain name. If necessary, and if the deal would be enough to justify additional costs, I might also reach out to a domain industry attorney to verify that my company owns the domain name.

GDPR is a pain in the you know what. Fortunately, there are still some registrars that show registrant information even with GDPR in force. People might consider this when deciding where to register their domain names if they aren’t based in Europe.

If you have other suggestions on how to prove that you’re the registrant of a domain name, I invite you to share them here. I am sure it could be helpful to other readers.

About The Author: Elliot Silver is an Internet entrepreneur and publisher of Elliot is also the founder and President of Top Notch Domains, LLC, a company that has sold seven figures worth of domain names in the last five years. Please read the Terms of Use page for additional information about the publisher, website comment policy, disclosures, and conflicts of interest.

Reach out to Elliot: Twitter | | Facebook | Email

Comments (23)

    Andrea Paladini

    You just need to choose a Registrar which disclose Whois data, there are many around.
    Those Registrars give you the option to show Whois data, specifically asking for your permission to opt out from GDRP regulation.
    IMHO this is something that all serious Registrars should do.

    July 10th, 2018 at 1:10 pm

      Elliot Silver

      Yes, but for those in a position of needing to prove ownership, this is an important topic.

      I have a couple hundred names at Enom and they all have Data Protected in Whois.

      In reply to Andrea Paladini | July 10th, 2018 at 1:18 pm

      Andrea Paladini

      Then move your names to another Registrar.
      Enom is one of the worst Registrars IMHO, not surprised …

      In reply to Elliot Silver | July 10th, 2018 at 1:50 pm

      Andrea Paladini

      If you need to prove ownership, move your domain to a Registrar which allows you to opt-out from GDPR and from 60-days lock, so that you can transfer it out immediately to the buyer.

      In reply to Elliot Silver | July 10th, 2018 at 1:58 pm


      I figure enom/tucows is using “data protected” so people CAN NOT easily transfer out. (I know there is a new transfer process that supposedly is more efficient. LOL)

      And, they truly shot themselves in the foot with their new pricing structure. It is amazing that enom is now more expensive to renew a domain than network solutions (special pricing).

      In reply to Andrea Paladini | July 10th, 2018 at 3:21 pm

      Elliot Silver

      I bought, which was registered at Tucows and the seller had no issue transferring it to my account at GoDaddy.

      In reply to Domainer | July 10th, 2018 at 3:27 pm

      Andrea Paladini

      Since May 25 you don’t need Whois data to transfer out.
      There is a new way which bypass sending the auth form.
      When ICANN’s new policies became effective on May 25, registrars implemented the new method of transferring domains without email validation.

      In reply to Domainer | July 10th, 2018 at 4:04 pm

      Elliot Silver

      FWIW, I don’t think the buyer is worried about delivery but wants to make sure the other party (my friend) is the registrant and can sell the name.

      In reply to Andrea Paladini | July 10th, 2018 at 4:10 pm

      Andrea Paladini

      If buyer wants to make sure that the seller (your friend) is the Registrant then your friend can simply move the domain to a Registrar which allows both to disclose Whois and to opt-out of the 60 days lock.
      Usually you can speed up the transfer by manually approving it, so that in minutes you can show the full Whois to the buyer.

      In reply to Elliot Silver | July 10th, 2018 at 4:25 pm


    Technically, all registrars need to allow you to opt-in to having your data displayed in Whois per the ICANN temp spec. But I don’t think that will happen anytime soon.

    July 10th, 2018 at 1:22 pm


    I wouldn’t forward to a prospective buyer.

    Assuming that your names are not pointed to a default page (a reasonable assumption as many point to sedo, internet traffic, etc) –
    1. buyer checks whois in its current state (eg, pointed to sedo)
    2. seller then changes name server to default landing page
    3. buyer checks whois in its “new” state (eg, pointed to default landing page)
    4. once buyer confirms change (proving seller’s ownership), seller reverts to “old” state

    July 10th, 2018 at 1:47 pm

    Rich Leto

    Lots of very good comments here, with pros and cons to each. I do however think moving your name(s$ to a registrar that discloses Whois info is a great route to take.

    July 10th, 2018 at 1:58 pm


    The easiest way is to add TXT record to DNS with a proof message. “Hi John, this is indeed my domain. – Bill”

    July 10th, 2018 at 2:41 pm

      Elliot Silver

      That’s beyond my technical level of expertise.

      In reply to moo | July 10th, 2018 at 2:42 pm

      Kevin Murphy

      Most registrars allow you to edit TXT records, don’t they? Same place you edit name servers I would imagine.

      In reply to Elliot Silver | July 10th, 2018 at 3:42 pm

      Andrea Paladini

      Another, simpler method is forwarding your domain to your buyer’s one or to a mutually agreed site.

      In reply to Elliot Silver | July 10th, 2018 at 4:19 pm


      That is really easy to learn and with most registrars requires just a few clicks (they have step by step guides for that) + typing whatever you want as a TXT record.

      In reply to Elliot Silver | July 11th, 2018 at 12:45 am


      Yeah – I was going to suggest adding a TXT record as well.
      This is now the method being used by both SEDO and flippa to verify ownership.

      Elliot – It is definitely NOT beyond your technical level of expertise!

      In reply to moo | July 11th, 2018 at 6:01 am

    Donny M

    Escrow concierge service for me. 2.5% and I don’t have to deal with any of it. Cost of doing business.

    I would never do a deal without it. I pay all fee’s and renew the domain for 5 years for client. Only talking 3% tops.
    Never lost a deal and never will with escrow dealing with transferring the name first.

    Donny M

    July 10th, 2018 at 7:59 pm

    Larry Scott

    I’ve been wondering how is handling this. One way they prevent banned users from reentering their site is by looking at the domains whois.

    July 10th, 2018 at 10:29 pm


    The standard ways are:

    1) upload a file with custom content that can be accessed via (for example.
    2) add a txt record in DNS as mentioned above.
    3) add a custom meta tag to the homepage.

    For large purchase it may also be worth to get a Whois history via domaintools.

    July 11th, 2018 at 2:32 am


      RE: upload a file with custom content that can be accessed via (for example).

      Ah – an even simpler method than adding a TXT record!
      This is one of the (if not preferred) methods that Google uses to prove ownership.

      I had TX records in front of mind since I now routinely do it for listing on SEDO.

      In reply to Tobias | July 11th, 2018 at 6:04 am

    Elliot Silver

    THanks to all for sharing!

    July 11th, 2018 at 6:07 am

Leave a Reply

Name *

Mail *