Namecheap is buying and holding onto domains you're interested in?
old.reddit.com
old.reddit.com
The price of a domain registration going up in real time as you’re trying to buy it is obviously a frustrating experience. Domain name frontrunning is a legitimate concern, shady registrars have done it in the past (e.g. NetworkSolutions), and there are many other entities besides registrars that might do it as well.
Trying to register a domain name is notably not a hygienic process at the best of times, the information that someone might be willing to pay money for a particular domain name could leak and be exploited at many different stages of a typical search process. Unfortunately, the user only finds out they’ve been exploited when they try to pay on the registrar’s site. Registrars concerned about being unfairly accused might find that providing some transparency into the process can assuage this reaction - perhaps a “why did this price go up?” button/link that shows excerpts from your log history of whois calls for that domain name, or if the problem is the gTLD provider changing their prices on the fly, maybe a log of that information over time.
(Exhaustive potential conflict of interest disclaimer: I hold ~$40/year worth of registrations through Namecheap and another ~$30/year worth of registrations through Gandi. Besides these two aforementioned purchases, I do not and have never been employed by, held an investment position in, or maintained any other kind of financial relationship with any domain registrar [lookup service, TLD provider, etc.] in any form.)
I chose three domains, and for each of them, did a whois query from a local terminal then looked them up on Namecheap. All three are domains I can imagine someone registering (i.e. not just keyboard mashing).
They have these SHA1 hashes (echo -n '$domain $salt', all salts are the same string):
3ded27709bfcbba44ce893262f531c595ee82f72
78eb52058b915fde23df7289250146e4a6622a9e*
e5db7a02eec8ce2b351a5955d84cc6daa561a41f*
These three I did not whois first, and only looked up on Namecheap:
8d59b003b9261bbb7f8268d8f56fbebb1574688f
68a87269d6011110c43ec6bb928ca008de4fcb6e
fa636723fb66d2fb4e93b317f185eb058149e53b*
I will check them again sometime tomorrow and report back (and reveal the domains then).
(I have four domains registered with Namecheap, no other allegiances of any sort. I was not logged in while testing this.)
* Edit: Well, this is embarrassing. I posted this, then closed the Termux session on my phone where I was hashing them... without saving the hashes. Apparently that doesn't write to .bash_history. I recovered three of them from memory by brute forcing words I'd used against a list of TLDs. I'll update again if I remember any of the others.
If this sounds incredibly suspicious to you given the entire point of this comment, I don't blame you. I encourage people to try the same experiment on their own anyway, especially sometime when this isn't in the news.
Archive link of this comment from before I edited it: https://web.archive.org/web/20230329003044/https://news.ycom...
8d59b003b9261bbb7f8268d8f56fbebb1574688f another.domains
68a87269d6011110c43ec6bb928ca008de4fcb6e bleppr.com
Salt was "monosodium glutamate". One of the ones I forgot was "quadrangular" or a similar word, but I couldn't find it by brute force.
As of right now, none of these are registered. I did kind of screw this up, might be good to try again another time and against more registrars (and maybe not post about it in advance in a thread where the CEO is known to be watching). But currently I don't see any evidence that this is happening, at least not with Namecheap and not for every domain.
That said, if anyone has a bot net they're not using...
Namecheap completely burnt all the goodwill and positive word-of-mouth they had built up.
It would be nice to have an independent and reputable registrar outside of the big co’s but it’s apparent that the shadiness and incentives in the industry don’t allow this to happen.
Will these two are probably safe, if you want to be certain I suggest checking with the registry operator itself. You can often find these on https://nic.tld. For example: nic.io, nic.nl, nic.cloud, nic.foo, etc. For com/net/org check ICANN directly: https://lookup.icann.org/
That could easily be a coincidence. For one thing you don't know about all the domains that were searched for that were not registered by the registrar. Only the ones you searched for (which could very easily be registered for another reason meaning there was another signal indicating their desirability and you even said 'and came up with some great ones only to find').
> Do a Google search on Namecheap frontrunning and you’ll find tons of posts of people talking about how it happened to them.
Is this really the way you think? You do a search and if people are reporting a certain 'symptom' well it must be correct. An anecdote. I drank coffee this morning and XYZ happened wow 'many' people had the same experience!
> If you don’t want to lose that great domain name, never search anywhere except Google or Amazon domains.
As others have pointed out you can also just search from the command line using whois. Not sure why you think that Google or Amazon are super safe either. Amazon runs many domains through gandi.net. Either of them have their own downside. At least at Namecheap you can actually last I checked get in touch with the CEO or an actual employee.
Still bitter about a domain that Godaddy stole from me when I wanted to quickly query one. Even at the time, I knew better, but was in a rush.
Feedback form: https://support.namecheap.com/index.php?/Tickets/Submit/Rend...
Any good alternatives?
Registrar: Namecheap Registered On: 2023-02-12
'Make a profit'. God forbid a business does something to 'make a profit'.
Entirely unclear why people seem to believe that domain names are something of a public trust and should go by different rules than any other object or item a private company can profit from. I've noted this attitude literally since the 1990's with public comments about domain names or registrars.
There is nothing at all wrong, illegal or unscrupulous with a domain name registrar - if a domain is not paid for by their customer - with the registrar holding that domain to auction it or sell to another party.
And in fact many if not most registrars do a version of this (Godaddy as only one example). ICANN allows this as long as the contract that the customer signed or says has this possibility pointed out. ICANN does require domains that are not paid for deleted but doesn't prevent a registrar from deleting the domain from the customer account and then taking possession of the domain in order to resell it. (Prior info refers to .com .net .org .info and other common tld's).
This seems basically like the definition of frontrunning:
> purchasing a security based on advance non-public information regarding an expected large transaction that will affect the price of a security
Domain searches are not public info. Domain expiry maybe, depending on how the expiry is handled (open auction where registrar bids vs registrar getting a unfair advantage and buying the domain before it becomes accessible to anyone else).
However it is not unscrupulous. Business and making money in this way is not unscrupulous. There is nothing to guarantee also that if the domain were not taken by a registrar it would be available to purchase at a nominal registration cost. It might not be for sale at any price.
> It would be illegal if domains were a regulated market.
Why does that matter. It's not a regulated market. That's like saying 'if it was illegal it would be illegal'.
> Domain searches are not public info.
There is nothing to indicate other than someone says something on reddit that the registrar front runned (what is being implied) even happened. As typical someone says something and everyone assumes all the facts are correct (ie someone searches and registrar says 'oh I will now grab that domain someone wants it!'.)
> Domain expiry maybe, depending on how the expiry is handled (open auction where registrar bids vs registrar getting a unfair advantage and buying the domain before it becomes accessible to anyone else
Except we don't know that is what happened here.