For people managing websites, domains are often treated as a one-time setup. But some registries can still request data verification later if something needs checking. The .AT update is an interesting example. Has anyone here dealt with a domain verification request after the domain was already active?
Yes, that can happen. Registrars may request additional verification later if something triggers a compliance, security or ownership review. It can be related to unusual account activity, contact data changes, transfer requests, abuse reports or regulatory requirements. I’d make sure the registrant email stays accessible and the WHOIS/contact information is kept up to date. It also helps to keep invoices or other proof showing when and where the domain was registered. In most cases it’s less about how old the domain is and more about whether something triggered a new verification check.
Good point on the email, people overlook that a lot. If the domain is still registered to an ex-employee's address, the site can look fine while a verification email sits unread in an inbox nobody checks.