Five accounts behind one website: who holds which key in Mount Prospect
To a customer in Mount Prospect, a business website is one thing on a phone screen. Behind it sit five separate accounts. The domain name belongs to a registrar. The DNS records that point the name at a server live with a DNS host, which is often the registrar and sometimes the web host. The files and the database live with a web host. The certificate that puts the padlock in the address bar comes from a certificate authority, usually through the host. Email on the same name is a fifth service with its own settings.
In a shop near Randhurst Village or a service firm along Rand Road, those five accounts are rarely held by one person. The designer who built the site years ago may have registered the domain under a personal email. A relative may pay the hosting bill. The office manager who knew the logins left two years back. Nothing breaks while all five keep renewing, so nobody looks, and the first sign of a gap is an outage. Owners like this are not rare: in the 2020 to 2024 American Community Survey, 1,584 employed residents of Mount Prospect work in their own incorporated business and 1,227 in an unincorporated one (table B24080, margins of error apply).
A one-page register helps with most of it. For each of the five, write down whose name the account is in, which email receives its notices, when it renews and where the login is kept. The rest of this guide goes through the accounts in turn: domain renewal and transfer, DNS, certificates, backups, updates and speed, then what to do when a site is down and what a plan covers. Media Express LLC, based in Mount Prospect, IL, lists hosting, maintenance and domain services, and the quote form on this page is the place to say which of the five you would like someone else to watch.
The domain: renewal notices and what happens in the days after expiry
A domain name is registered for a set term, and the registration has to be renewed. ICANN's Expired Registration Recovery Policy tells registrars of generic domains such as .com, .net and .org how to handle the end of a term, and its text is plain about what a Mount Prospect business can expect. The registrar must send at least two reminders, one about a month before expiry and one about a week before. If the name has been neither renewed nor deleted, at least one more notice with renewal instructions must follow within five days after expiry.
Then the website stops. The policy has registrars interrupt DNS service, where the registry allows it, for at least the final eight days before a deletion, and ICANN's guide for registrants says that any website or email service on the name stops working in that window, which for a Mount Prospect shop means customer email as well as the site. After deletion, generic-domain registries offer a Redemption Grace Period of 30 days, during which the registrar that deleted the name must let the holder restore it. Registrars must publish their renewal, late-renewal and restore fees. The policy is written for generic endings. A country-code ending such as .us follows its own registry's rules, so read that registrar's terms.
The notices go to the email address on the registration, and that address is often one nobody reads. The Village of Mount Prospect mails each business license renewal notice in November through the U.S. Postal Service (Licenses and Permits page), and a notice sent to an address nobody checks gets missed in either place. Put the expiry date in a shared calendar, make the business the registrant, send notices to a mailbox that more than one person can open, and turn on auto-renewal where the registrar offers it. The domains page of Media Express lists auto-renewal setup, domain lock, two-factor authentication, renewal tracking and expiration alerts among its services.
Moving a domain between registrars: the transfer code, locks and 60-day waits
Sooner or later a domain changes hands. A developer retires, a business is sold, or an owner wants every name under one account. ICANN's guide to the Transfer Policy says a transfer needs the AuthInfo code, a code the current registrar creates to identify the domain holder. The registrar either lets the holder create it or provides it within five calendar days of the request. A registrar may refuse a transfer while the domain carries a lock, but it must give the holder a readily accessible way to lift the lock. For a Mount Prospect owner taking a domain back from a former developer, those are the steps in order.
Two 60-day rules shape the timing. A registrar may deny a transfer within 60 days of the initial registration or of a previous transfer. The guide also says a domain generally cannot move to a new registrar within 60 days of a change to its contact information, and a registrar must deny a transfer while that change-of-registrant lock applies. So the order of the two jobs matters. If a domain is about to be moved, plan the move before the contact details are edited, or allow for the wait.
The Village of Mount Prospect applies a similar habit to its own paperwork: its licenses page says a new business license application is needed for a change of owner or legal name, and for a move to a new location, even between suites in one building. A change of owner is also the moment to update the registrant of the domain. The domains page of Media Express lists transfers between registrars, portfolio consolidation and taking over domains from a former developer, and a transfer to or from a Mount Prospect business can start with the quote form on this page.
DNS in plain words: the records that carry a small-business site
DNS records are instructions kept on authoritative DNS servers that say where a domain's website and mail go. Four of them cover most small-business sites, whether in Mount Prospect or elsewhere. The A record holds the IP address of the server that delivers the website. A CNAME forwards a subdomain, such as a booking page, to another domain and gives no IP address of its own. MX records direct mail to an email server. TXT records hold text notes and are often used for email security and for proving that you control a domain. Every record also has a TTL, which tells a DNS server how often to refresh it. These definitions come from the Cloudflare Learning Center.
The domains page of Media Express names the same four, with A records for hosting, MX records for email, CNAME records for subdomains and TXT records for verification, and warns that DNS errors silently kill email and website availability. Picture a shop near the Mount Prospect Metra station that moves its site to a new host. The host's panel carries the website's A record, the old MX records are left behind, and the site loads fine. Weeks later the owner finds that customer mail stopped on moving day.
Two habits prevent most of these cases for a Mount Prospect site. Copy every record from the old DNS panel before changing anything. Since the TTL says how often a record is refreshed, set a shorter value a day or so before a planned move, so the new address spreads faster. A CAA record is a quick check afterwards: Cloudflare describes it as the record that states which certificate authorities may issue certificates for the domain, and without one any authority may.
Certificates and HTTPS: lifetimes are getting shorter
The padlock depends on a certificate that expires. Let's Encrypt says its default certificates are valid for 90 days and recommends renewing them every 60. Its published timeline then tightens: from February 10, 2027 the default profile issues 64-day certificates, and from February 16, 2028 it issues 45-day ones, a change the post ties to the CA/Browser Forum Baseline Requirements. An opt-in 45-day profile has been running since May 13, 2026. For a site in Mount Prospect this means renewal has to be automatic, because a reminder once a year cannot keep up with a 45-day cycle.
A Mount Prospect site that is moving to HTTPS can follow Google's guidance on web.dev, which says Google uses HTTPS as a positive search quality indicator and lays out an order of work. Get the certificate working first, then add a 301 redirect from HTTP to HTTPS so that search engines and browsers treat the HTTPS address as canonical, and clean up mixed content, where an HTTPS page still loads an image or script over plain HTTP. It also holds back HSTS, a header that makes browsers insist on HTTPS, until the site's operation is reliable enough to avoid ever serving HTTPS with certificate validation errors. It suggests starting with a low max-age value.
Each of the three hosting plans listed by Media Express includes a free SSL certificate. Its SSL certificates page describes installation of certificates from Let's Encrypt, Sectigo, DigiCert or Cloudflare, automatic renewal for Let's Encrypt, mixed-content cleanup, HSTS headers and expiry alerts that begin 30 days ahead. Whoever runs a site, in-house or outside, should be able to say which renewals are automatic and who receives the alert. A visitor who opens a Mount Prospect shop's site on a phone at Randhurst Village sees a browser warning before any page content.
Backups: three copies, two kinds of media, one off-site, and a restore test
CISA's small-business guidance on backing up business data sets out the 3-2-1 rule: three copies of important files, on two different types of storage media, with one copy stored off-site, away from the business location. It asks for a backup solution that runs automatically and regularly, for tests showing that the team can restore data both fully and partially, and for the ability to roll back at least seven days. For a Mount Prospect office the practical point is that a copy kept on the same server as the website does not count as the off-site copy.
The hosting page of Media Express lists daily backups in all three plans, kept for 7 days on Starter, 30 on Business and 60 on Agency, and describes automated offsite backups every night. Its backup service page, part of its security services, describes daily website backups of files and database with versions kept for 30 to 90 days, replicated to storage in a different geographic region, with restore verification on a schedule. Retention is the number a Mount Prospect owner should read first on any plan: seven days of history do not help when a problem is noticed on day ten.
Backups touch the law as well. The Illinois Personal Information Protection Act requires a data collector to maintain reasonable security measures for records that hold Illinois residents' personal information (815 ILCS 530/45). If a site in Mount Prospect stores customer accounts, insurance or medical details, the backups hold copies of them too, so the off-site copy needs the same care as the live one: named people only and no shared login. Whether a given site holds personal information in the Act's sense is a question for an attorney.
Updates: the WordPress, PHP and database calendar
A WordPress site in Mount Prospect runs on three layers that age at different speeds: WordPress itself, the PHP language it runs on, and the database. The WordPress.org requirements page recommends PHP 8.3 or greater, MariaDB 10.11 or greater or MySQL 8.0 or greater, and HTTPS support. It adds that PHP 7.4 and MySQL 5.5.5 still work but have reached end of life and may expose a site to security vulnerabilities. The releases page lists 7.1.4 of October 28, 2026 as the latest and says only the most recent in the 7.1 series is safe to use and actively maintained.
PHP has a calendar of its own. The php.net table of supported versions gives security support until December 31, 2026 for 8.2, December 31, 2027 for 8.3, December 31, 2028 for 8.4 and December 31, 2029 for 8.5, with active support for 8.4 ending on December 31, 2026. The site says a branch reaches end of life once its four years of support are completed. Which PHP version a site runs is a setting at the host, so for a Mount Prospect site it belongs on the one-page register next to the domain's expiry date.
WordPress updates itself in part. Its developer documentation says automatic updates are on by default for minor releases, which include security releases, and that new installations since WordPress 5.6 also update major releases by default. Plugins and themes update automatically only in special cases unless the owner turns it on, and the page advises a backup before an upgrade. The maintenance page of Media Express lists monthly WordPress core updates and plugin updates tested in staging in its Basic plan, and the Business and Agency hosting plans include a staging environment. For a business in Mount Prospect, a staging copy is where an update can fail without any customer seeing it.
Speed from the server side: the three numbers Google reports
Google's Search Central page on Core Web Vitals names three metrics that a Mount Prospect site owner can follow in Search Console. Largest Contentful Paint measures loading and should occur within 2.5 seconds. Interaction to Next Paint measures responsiveness and should be 200 milliseconds or less. Cumulative Layout Shift measures visual stability and should be 0.1 or less. The explainer on web.dev adds that a good threshold to measure is the 75th percentile of page loads, segmented across mobile and desktop, and that these are first of all field metrics. Lab tools help, but the page says they are not a substitute for field measurement. Search Console has a Core Web Vitals report that shows how a site's pages perform.
Google does not call these a single ranking factor. Its page says they align with what its core ranking systems seek to reward. Hosting is where the server part of the loading number is decided. The hosting page of Media Express lists NVMe SSD storage, LiteSpeed or Nginx servers, CDN integration and server-level caching, which are the server-side parts of that loading time. Because a visitor may be on a phone at Randhurst Village or in a car on Route 83, read the mobile figures for a Mount Prospect site first.
When the site is down: a first-hour order of checks and what Google does meanwhile
An outage is visible to search crawlers as well as to customers. Google's documentation on HTTP and network errors says that 5xx and 429 responses make its crawlers slow down temporarily, in proportion to the number of URLs returning an error. URLs already in the index are kept at first but eventually dropped if the errors persist, and once the server answers with a 2xx status again, crawling picks up gradually. The page gives no number of days, so any outage on a Mount Prospect business site is worth ending quickly.
A first-hour order of checks for a site in Mount Prospect, or anywhere, that stops loading:
- Is the domain still registered, and is DNS answering? An expired domain looks like a dead site.
- Is the certificate valid? A lapsed one produces a browser warning, not a blank page.
- Is the host up, and has the account reached a disk or resource limit?
- Did anything change in the last day: a plugin, a theme, a PHP version or a DNS edit?
- If a change is to blame, restore the last good backup instead of editing the live site.
The emergency page of Media Express, a firm based in Mount Prospect, IL, lists a site that is down or broken among its cases, including expired hosting or domains and bad plugin updates, next to hacked sites. It gives an initial response time of under one hour during business hours. If a move caused the outage, Google's site-move guidance asks for permanent 301 or 308 redirects, kept for as long as possible and generally at least a year.
Hosting and maintenance plans side by side, and what to have ready before you write
Hosting keeps a site online. Maintenance keeps it current. The home page of Media Express says that domain registration, hosting and optional maintenance are separate from a website design project, so a Mount Prospect owner can take one without the others. The hosting prices below are per month, as the hosting page states them, and every plan includes a free SSL certificate.
| Plan | Websites | SSD storage | Daily backups kept | Support and extras |
|---|---|---|---|---|
| Starter, $19 | 1 | 10 GB | 7 days | Email support, one-click WordPress install |
| Business, $39 | 3 | 50 GB | 30 days | Phone and email support, staging environment, malware scanning |
| Agency, $79 | Unlimited | 100 GB | 60 days | Priority phone support, staging and dev environments, advanced security suite, monthly maintenance report |
The firm's maintenance page lists three plans without prices. Basic covers monthly WordPress core updates, plugin updates tested in staging, weekly automated backups, uptime monitoring, SSL certificate management and a monthly status report. Standard adds daily offsite backups, a security scan and firewall, two hours a month of content updates, a speed optimization check and priority support response. Premium adds five hours a month of content updates, monthly performance optimization, a Google Analytics review, an emergency response SLA and a quarterly strategy call. On hosting, the firm asks readers to contact it for a quote and says it can migrate an existing site at no extra charge. Its location page lists in-person meetings in Mount Prospect.
Before writing to any provider, have five things at hand: the domain name and the registrar, the email address on that registration, the address of the site's admin login, the PHP and WordPress versions if the site runs WordPress, and the date of the last backup that was actually restored as a test. With those, a quote request from a Mount Prospect business can be answered precisely, and the form on this page takes the details in a few lines.
The rules and dates behind this guide
| Fact | What the source says | Source |
|---|---|---|
| Domain expiry notices (ICANN) | Registrars must send at least two reminders, about a month and about a week before expiry, and one more notice within five days after expiry if the name was neither renewed nor deleted. The policy applies to generic top-level domains. | ICANN, Expired Registration Recovery Policy (21 Feb 2024 version) |
| After expiry (ICANN) | DNS is interrupted for at least the final eight days before deletion; gTLD registries (except sponsored ones) offer a 30-day Redemption Grace Period in which the deleting registrar must let the holder restore the name. | ICANN, Expired Registration Recovery Policy |
| Domain transfers (ICANN) | A transfer needs the AuthInfo code, provided within five calendar days of a request; a registrar may deny a transfer within 60 days of registration or of a previous transfer, and must deny one during a 60-day change-of-registrant lock. | ICANN, guide to the Transfer Policy for registrants |
| DNS record types and TTL | A record: IP address of a domain. CNAME: forwards a name to another domain. MX: directs mail. TXT: text notes, often for email security. Every record has a TTL that says how often it is refreshed. CAA: which authorities may issue certificates. | Cloudflare Learning Center, DNS records |
| Certificate lifetime today | Let's Encrypt default certificates are valid for 90 days; it recommends renewing them every 60 days. | Let's Encrypt FAQ |
| Certificate lifetime timeline | Opt-in 45-day profile from May 13, 2026; 64-day default from February 10, 2027; 45-day default from February 16, 2028. | ISRG, From 90 to 45 |
| HTTPS migration order | Google uses HTTPS as a positive search quality indicator; use a 301 redirect to the HTTPS address once HTTPS works; do not enable HSTS until the site is reliable enough to avoid certificate validation errors. | web.dev, Enabling HTTPS on your servers |
| Backup rule | 3 copies, 2 types of media, 1 copy off-site; automatic and regular backups; restore tests; roll back at least seven days. | CISA, Back Up Business Data |
| WordPress server requirements | PHP 8.3 or greater, MariaDB 10.11 or greater or MySQL 8.0 or greater, HTTPS support; PHP 7.4 and MySQL 5.5.5 are end of life. | WordPress.org, requirements |
| WordPress releases | Latest release 7.1.4 (October 28, 2026); only the most recent in the 7.1 series is safe to use and actively maintained. | WordPress.org, releases archive |
| WordPress automatic updates | On by default for minor releases (security releases included); major releases by default on new installations since 5.6; plugins and themes only in special cases. | WordPress developer documentation, upgrading |
| PHP support dates | Security support ends December 31, 2026 (8.2), December 31, 2027 (8.3), December 31, 2028 (8.4), December 31, 2029 (8.5). | php.net, supported versions |
| Core Web Vitals thresholds | LCP within 2.5 seconds, INP 200 milliseconds or less, CLS 0.1 or less, measured at the 75th percentile of page loads. | Google Search Central and web.dev |
| Server errors and crawling | 5xx and 429 responses slow Googlebot's crawling; persistently failing URLs are eventually dropped from the index; crawling recovers gradually after 2xx responses return. | Google Search Central, HTTP and network errors |
| Redirects after a move | Use permanent 301 or 308 redirects and keep them for as long as possible, generally at least a year. | Google Search Central, site moves with URL changes |
| Illinois data security | A data collector must maintain reasonable security measures for records holding Illinois residents' personal information (815 ILCS 530/45). | Illinois General Assembly |
| Mount Prospect business license renewal | The Village mails each business license renewal notice by USPS in November; a new application is needed for a change of owner or legal name or a move, even between suites. | Village of Mount Prospect, Licenses and Permits |
| Mount Prospect self-employed residents | Of 28,092 employed residents, 1,584 work in their own incorporated business and 1,227 in an unincorporated one (ACS 2020-2024, margins apply). | Census Reporter, ACS table B24080 |
| Hosting plans listed by Media Express | Starter $19, Business $39 and Agency $79 per month; each includes a free SSL certificate and daily backups kept 7, 30 and 60 days. | Media Express LLC, web hosting |
The featured firm: Media Express LLC
Media Express LLC
Media Express LLC is an agency founded in Chicago in 1995 and based in Mount Prospect, IL 60056. Its pages list three hosting plans at $19, $39 and $79 a month, three monthly maintenance plans, and domain services covering registration, transfers, DNS management and renewal tracking. The hosting page states that it can migrate an existing site at no extra charge.
How a hosting and domain project runs, from the account register to the first restore test
- Account register: the domain, DNS host, web host, certificate and email accounts are listed with the name each one is registered in, the email that receives its notices and its renewal date.
- Plan and quote: hosting is chosen by number of sites, storage, backup retention and support level, and the owner decides whether monthly maintenance is included. Media Express lists three hosting plans and three maintenance plans and asks for contact for a quote.
- Migration: the site and its database are copied to the new host, checked on a staging copy where the plan has one, and DNS is switched once the website, mail and certificate all work. Media Express states that it can migrate an existing site at no extra charge.
- Backups and the first restore test: schedule, retention and the off-site copy are set, and one restore is tried before the plan is trusted.
- Routine care: updates, monitoring and renewals follow the register. On the Media Express maintenance plans that include it, a status report arrives each month.
Hosting and domain questions, answered plainly
The business itself, with an email address that more than one person can open. Renewal notices go to the contact data on the registration, and ICANN's rules on transfers and contact changes work from that same data, so a designer's or a relative's name on it becomes a problem the day that person cannot be reached. Media Express LLC, based in Mount Prospect, IL, lists taking over domains from a former developer among its domain services.
ICANN's Expired Registration Recovery Policy requires registrars of generic domains to send at least two reminders, one about a month and one about a week before expiry, and another notice within five days after expiry if the name was neither renewed nor deleted. The notices go to the contact address on file, so a Mount Prospect owner should check that it is current. A country-code ending follows its own registry's rules.
Both stop working. The registrant guidance from ICANN says registrars disrupt DNS service for the last days before deleting a name, so any website or email on it fails. After deletion, generic domains have a 30-day Redemption Grace Period in which the registrar that deleted the name must let the holder restore it, and the registrar must publish its restore fees. A lapse can cost a Mount Prospect business its customer email as well as its site.
Generally yes, within ICANN's transfer rules. The registrar holding the name provides the AuthInfo code, either letting the holder create it or giving it within five calendar days of a request, and any lock has to be lifted first. A transfer can be refused within 60 days of registration or of an earlier transfer. Media Express lists taking over domains from a former developer, and a Mount Prospect owner can begin with the quote form.
The registrar holds the domain registration. The DNS host holds the records that point the name at a website and at mail servers, and it is often the registrar, sometimes the web host. The web host stores the site's files and database. For a small business in Mount Prospect all three can sit with one company or with three, which is why a one-page register of accounts is worth keeping.
A frequent cause is DNS. MX records direct mail to an email server, and if they were not copied into the new DNS setup, messages go to the wrong place or nowhere. Media Express's domains page warns that DNS errors silently kill email and website availability. Before a move, copy every record, and afterwards send a test message to the office from outside, for example from a phone on mobile data. A Mount Prospect office can do this in minutes.
If it comes from Let's Encrypt, yes. Its default certificates last 90 days today, with 64-day certificates planned from February 10, 2027 and 45-day certificates from February 16, 2028, and it recommends renewing 90-day certificates every 60 days. A Mount Prospect site whose renewal is automatic will not notice the change. A site renewed by hand will.
HSTS is a header that tells browsers to use HTTPS even when a visitor follows an HTTP link. web.dev says not to enable it until the site is reliable enough to avoid ever serving HTTPS with certificate validation errors, and to begin with low max-age values. For a Mount Prospect business that nobody is watching day to day, working automatic renewal comes first and HSTS second.
CISA's guidance for small businesses suggests the 3-2-1 rule: three copies of important files, on two types of storage media, one copy off-site, with backups that run automatically and a rollback window of at least seven days. A Mount Prospect office can compare a plan's retention, off-site location and last restore test against that list.
In part. WordPress's developer documentation says automatic updates for minor releases, security releases included, are on by default on most sites, and that new installations since 5.6 also update major releases by default. Plugins and themes update automatically only in special cases unless the owner turns it on. A site in Mount Prospect still needs someone to watch the PHP version and the plugins.
The hosting page shows Starter at $19 a month for one website and 10 GB of storage, Business at $39 for three websites and 50 GB, and Agency at $79 for unlimited websites and 100 GB. Each includes a free SSL certificate and daily backups, kept 7, 30 and 60 days. For a project in Mount Prospect the page asks readers to contact the firm for a quote.
Its hosting page says it can migrate an existing site at no extra charge. A migration normally copies the files and database, tests them on a staging copy, switches DNS and then checks mail and the certificate. The quote form on this page is the place to describe the current host and platform. The firm is based in Mount Prospect, IL and works in English and Polish.
The maintenance page lists Basic, Standard and Premium. Basic covers monthly WordPress core updates, plugin updates tested in staging, weekly automated backups, uptime monitoring, SSL certificate management and a monthly status report. Standard adds daily offsite backups, a security scan and two hours a month of content updates. Premium adds five hours a month and a quarterly strategy call. No prices are listed, so a Mount Prospect owner asks for a quote.
The domain name and its registrar, the email on that registration, who hosts the site now and on which platform, the PHP and WordPress versions if known, and the date of the last backup. Media Express states that it replies within one business day and that the first 30-minute strategy call is free. A Mount Prospect owner can send these details in a few lines through the form on this page.
Pages this guide was checked against
- ICANN: Expired Registration Recovery Policy (21 Feb 2024 version)
- ICANN: 5 things registrants should know about the Expired Registration Recovery Policy
- ICANN: 5 things registrants should know about the Transfer Policy
- Cloudflare Learning Center: DNS records
- Let's Encrypt: FAQ
- ISRG: Let's Encrypt, from 90 to 45 days
- web.dev: Enabling HTTPS on your servers
- web.dev: Web Vitals
- Google Search Central: Core Web Vitals and Google search results
- Google Search Central: HTTP status codes, network and DNS errors
- Google Search Central: site moves with URL changes
- CISA: Back Up Business Data
- WordPress.org: requirements
- WordPress.org: releases archive
- WordPress developer documentation: upgrading and background updates
- php.net: supported versions
- Illinois General Assembly: 815 ILCS 530/45, data security
- Village of Mount Prospect: Licenses and Permits
- Census Reporter, ACS 2020-2024, table B24080, Mount Prospect
- Media Express LLC: web hosting
- Media Express LLC: website maintenance
- Media Express LLC: domains
- Media Express LLC: emergency website recovery
- Media Express LLC: backups
- Media Express LLC: SSL certificates
- Media Express LLC: Mount Prospect location page
- Media Express LLC: contact