Comment by jandrese
6 years ago
Domain registrars giving away domains to squatters when people search for them is a time honored practice. The advice I've seen is to not search for the domain first, just register it outright from the start. The domain registration business is run with all of the integrity and customer focus of TicketMaster.
Really? I may have just found myself a new hobby. Search for incredibly unique (and worthless to me) domains to see if I can get people to squat on them. Heck, it could be a game ... I could get all my friends to make bingo boards ... or maybe see if I can think of some scrabble like rules.
The squatters do a thing called "Domain tasting".
They buy domain X and then they put generic advertising, maybe keyword based, on a cheap bulk hosted site. They measure for a few days - is this bringing in lots of revenue? If not, they cancel the purchase, using a "grace period" available to users of the registry in case of mistakes - the purchase is unwound and they are refunded the fees. Domain X is now available again.
In principle this is forbidden for major TLDs but it's still possible and unscrupulous vendors help them do it, albeit it may now attract a fee if you do it enough that the TLD registry detects you tasting.
https://en.wikipedia.org/wiki/Domain_tasting explains about this and related practices.
There are slight transaction costs of $0.18 - $0.20 that is not refundable. Miniscule, but it prevents some domain tasting at scale.
I suspect a human gets a dump of them and decides which to pay the $10 for.
For example, asdasdahbdajsdbajdbhsbdahsdd.com... not worth the $10
ireallylikechicken.com... maybe worth the $10?
(ireallylikechicken.com is available, go squat it and get rich)
Someone did buy it it!
> Creation Date: 2020-01-09T19:37:01Z
Registered with Gandi, ironically enough...
And the domain is meta! Response from HTTP GET
> Location: https://news.ycombinator.com/item?id=22001822
3 replies →
ireallylikechicken.com owner.
I'll give you 20 for it?
6 replies →
I am sure, in the past, one of the domain registrars took the liberty of actually registering your searched domain, deliberately, so that you had to go through them to get the domain later on? - I can't remember who it was, but it was an automated process.
I know it was very shortly stopped once people complained, but it goes to show that it has been done before.
Getting rich off domain's - sounds like a solid business plan!
4 replies →
hahahaha, the webpage redirects to this discussion!! WELL PLAYED!!! (sorry for the caps.. but wow!)
1 reply →
>The advice I've seen is to not search for the domain first, just register it outright from the start. The domain registration business is run with all of the integrity and customer focus of TicketMaster.
What if you don't want to cough up $10-$20 on a whim? Would doing a whois (using the NIC's whois site) suffice?
Doing an OOB whois search is almost certainly fine. It's when you search on godaddy.com or whatnot that you get burned.
What is an "OOB whois search"?
1 reply →
I've had this same scenario happen before, and since then I just issue a `whois` from the command line to bypass any potential frontend interception. Not sure if that is 100% full proof either though.
I have used whois cli since the early 2000s because I did not trust the registrars as domains I just searched ended up being registered. Never had that issue again since then.
Isn't the WHOIS query sent unencrypted? Can't it be intercepted in that case?
I use the whois command line tool when searching and have yet to get squatted. My experience is only about 500 domains over 20 years.
i use host -t NS cooldomain.example as a pre-filter. If a domain has NS records, it's definitely registered, although there are some registered domains without NS records (makes them pretty much nonfunctional, but if that's what the registrant wants, it's their business)
1 reply →
If I understand the domain name infrastructure correctly, that would imply that it's the registrar who is collaborating with the squatters. A command-line whois query would still have to query the servers of the registry for a particular domain (others on this thread speculate that it may be the domain registry that shares data with the squatters).
1 reply →
On Namecheap they have a "save for later" button per domain in your cart, so you can just pile them up for later.
Never had even 1 of my "saved for later" being squatted, for several years now, so I really have to trust and commend namecheap in that regard.