I guess this is a cautionary tale.

I was recently having issues with my Gmail account that’s tied to my Epik ( a domain registrar ) account, so when I was supposed to renew my domain, I didn’t receive any e-mails about it. When I decided to randomly check on my website, it seemed to be down. So I checked Epik and a domain that usually cost £15 a year to renew now cost £400 to renew as it was expired.

As a teenager who does not have £400 to spend on a domain, I decided to just wait until the domain fully expired and buy it for a cheaper price.

After some time, the domain fully expired and GoDaddy decided to buy it as soon as it did, and charged me £2,225 to renew the domain. I don’t understand how a price that large is justified, considering that my website gets barely any visitors and I basically only use the domain for hosting stuff. No idea how hiking prices this much is legal

  • kitnaht@lemmy.world
    link
    fedilink
    English
    arrow-up
    185
    arrow-down
    1
    ·
    edit-2
    3 months ago

    Sorry, but chalk this up to lesson learned. It’s almost always been this way. Domain squatters will do this all the time. In fact, some domain registrars will use you searching their site for an ‘available’ domain, and if you don’t buy it up right away – will buy it and hike the price and sit on it for years in order to lock it down, knowing you wanted it.

    btw, Namecheap says Sunglocto dot com is like $10 - so just register a .com. Not through that Epik piece of shit that you used before. Legit, use Namecheap; they’ve never done me wrong and have been my registrar for more than a decade now.

        • hddsx@lemmy.ca
          link
          fedilink
          English
          arrow-up
          6
          ·
          3 months ago

          I mean, I use namecheap. I’m thinking about throwing one of my domains onto cloudfare just in case.

          If you don’t like namecheap, some people have been suggesting porkbun or something.

        • jqubed@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          3 months ago

          I had this happen with NameCheap. I’m not sure if they bought it or someone else, but it stayed registered with them. Whoever bought it has held it for a couple years, put up a fake website to look like they were using it, but took it down after a year when I didn’t bite on buying it. Current status shows it’s pending deletion finally for abuse or non-payment. I keep checking to see when I can nab it again.

          • Optional@lemmy.world
            link
            fedilink
            English
            arrow-up
            12
            ·
            3 months ago

            It happens with anyone. Bots track expirations and snatch them so that they can ransom them back to you for thousands - exactly as in OPs example.

            AUTO RENEW. Auto-renew. Auto-renew is the way. The solution to this problem is Auto-renew.

            • jqubed@lemmy.world
              link
              fedilink
              English
              arrow-up
              3
              ·
              3 months ago

              Yes, I just didn’t realize that auto-renew doesn’t work with PayPal on NameCheap and had lazily set it up with PayPal when I got it because I didn’t want to go get my wallet. Lesson learned!

            • Septimaeus@infosec.pub
              link
              fedilink
              English
              arrow-up
              1
              ·
              3 months ago

              I think you can also register 10 years in advance, or maybe more depending on the registrar, which would cover all other potential snafus like expired card info.

        • something_random_tho@lemmy.world
          link
          fedilink
          English
          arrow-up
          5
          ·
          3 months ago

          Then they make you use them for DNS. May or may not be a big deal, but the reason it’s at cost is to act as a loss leader to get you exposed to and buying their other products.

          • go $fsck yourself@lemmy.world
            link
            fedilink
            English
            arrow-up
            4
            arrow-down
            1
            ·
            3 months ago

            Their free services are extremely useful and you can’t find that anywhere else. I’ve used them for years with hundreds of domains and never paid them a single dime.

    • lemmyvore@feddit.nl
      link
      fedilink
      English
      arrow-up
      12
      ·
      3 months ago

      Namecheap has extra rules if you want to use an API (minimum money spent with them, minimum of domains managed with them etc.) — GoDaddy style.

      Keep that in mind, if you need an API (for DDNS or for obtaining wildcard TLS certificates) you’ll have to use a separate service for DNS.

      • chiisana@lemmy.chiisana.net
        link
        fedilink
        English
        arrow-up
        8
        ·
        3 months ago

        You really should have separate services for registration, DNS and hosting. That way you’re not held hostage by a single provider.

      • kitnaht@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        ·
        edit-2
        3 months ago

        DDNS with Namecheap is as simple as hitting a URL with a /GET request from the IP you want it to point to. No limitations. No special requirements.

      • kitnaht@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        ·
        3 months ago

        Absolutely. But I think it might be more advanced than that. They might have some sort of analytics that measures how long people stay on the page, etc to inform their purchasing decisions.

  • Admiral Patrick@dubvee.org
    link
    fedilink
    English
    arrow-up
    80
    ·
    edit-2
    3 months ago

    After some time, the domain fully expired and GoDaddy decided to buy it as soon as it did, and charged me £2,225 to renew the domain. I don’t understand how a price that large is justified, considering that my website gets barely any visitors and I basically only use the domain for hosting stuff. No idea how hiking prices this much is legal

    GoDaddy is known to do that.

    Technically, they’re not hiking the price. GoDaddy bought scalped it after it expired and then is re-selling it at an astronomically higher price. It’s one of the many, many reasons people hate them.

    I’m ashamed to say I still have a couple of domains with GD that I haven’t migrated yet. This post might just light a fire under me to get that done.

  • Joël de Bruijn@lemmy.ml
    link
    fedilink
    English
    arrow-up
    76
    ·
    3 months ago

    Got a work related variant, a 3 letter domain we really liked was registered by a person asking a couple of hundred bucks or so. Which really was a good deal and we were more then happy to pay.

    Our IT department advised guiding the transfer themselves. Instead our marketing department went ahead anyway and just agreed to “you end your subscription and after that we register it” … instead of using transfer codes.

    In the minutes between, a bulk claimer snatched it away.

      • seang96@spgrn.com
        link
        fedilink
        English
        arrow-up
        12
        ·
        3 months ago

        Honestly I believe it. I had a VP of sales / marketing overriding requirements making them more difficult from the CEO after getting screamed at by the CEO who wanted the product (bono project) to be quick and easy for initial release.

        He also ordered IT garbage for a site once (consumer PCs running Windows not server edition)

        And to top it all off went behind supervisors backs in engineering departments asking for daily spreadsheets trackong their time because "if you can go to the bathroom you have time for this.

        All leadership was toxic though like the CEO screaming at him lol.

  • starshipwinepineapple@programming.dev
    link
    fedilink
    English
    arrow-up
    61
    arrow-down
    1
    ·
    3 months ago

    tldr - lesson learned. buy a new domain and move over to it.

    but for those who want to learn something new - you are only renting your domains. If you fail to pay by the registration date then you generally get a grace period to pay more money to renew it. If you fail to pay before that period expires then the domain will be released. Some companies like godaddy will automatically buy the domain for another year (or more). But even if Godaddy doesn’t then it still goes up on a list of expiring domains and there are backorder services that will try to buy the domain or auction them off.

    So in the end it doesn’t really matter what registrar you use. If you do not pay, it goes back to a list where people can see it is expiring and then you’ll get some people who either want to legitimately use that domain or more likely they are wanting to try to sell it to you or someone else for more than they buy it for.

    And I saw someone mention file a complaint. I’m sorry to say that if you did not have money to renew the domain then you aren’t going to be able to do that either. This is called Uniform Domain Name Dispute Resolution Policy (UDRP) and the fee is between $1500-4000 for 1 to 5 domains.. Additionally, just because you file a complaint does not mean the issue will be resolved favorably or timely. These complaints can last years, and there is no guarantee you will get the domain back.

    This is why you should always pay your domain rental fee. And if you don’t, then you need to either be willing to pay a ton of money to get it back or you will need to move on. Sorry its a tough lesson to learn but if you’re just a student then you probably weren’t using this to run a business or anything so in the end you are quite fortunate.

  • VonReposti@feddit.dk
    link
    fedilink
    English
    arrow-up
    40
    ·
    3 months ago

    I simply don’t get why domain squatting is legal. On my ccTLD it is absolutely illegal meaning you have to forfeit the domain if you don’t use it anymore.

    • kitnaht@lemmy.world
      link
      fedilink
      English
      arrow-up
      31
      arrow-down
      2
      ·
      3 months ago

      Just because you don’t have a website up at [XYZ].com doesn’t mean you’re not using it. You could have a domain controller on the back end doing file services, or you could be using it for network auth, etc. Not all .coms exist for the purpose of putting up a website.

      • VonReposti@feddit.dk
        link
        fedilink
        English
        arrow-up
        9
        ·
        3 months ago

        Neither do .dk domains, but in order to determine use the courts will have to be involved. I haven’t heard about a lot of those cases, but I’d guess you can prove use against the person who wants to take the domain. If I have a domain called firstnamelastname.dk it’d be pretty easy to show that I got a mail address at contact@firstnamelastname.dk that’s in use.

        • towerful@programming.dev
          link
          fedilink
          English
          arrow-up
          7
          ·
          3 months ago

          Other services will be reflected by active DNS records.

          If the only DNS record points to a “Buy this domain” webpage, I think it’s fair to argue that is misuse.
          Doubley so if it turns out many unrelated domains are owned by and point to the same webpage, and it’s just doing a js hostname thing to make it seem relevant to the current address

    • TCB13@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      3 months ago

      I believe most regulated ccTLDs (not the ones sold to the higher bigger) actually do that.

  • cygnus@lemmy.ca
    link
    fedilink
    English
    arrow-up
    32
    ·
    3 months ago

    This happened to me years ago (the .com of my full name). I kept checking in at expiry date for 3 years and they eventually let it expire, so I bought it back for normal price.

    • BinaryUnit@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      3 months ago

      This ☝️it happened to me and to a close friend, if you are reselient and can wait it is possible to but it back at regular price

      • brbposting@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 months ago

        Hopefully it’s not a common last name + a first name that suddenly became popular, could imagine it getting scooped by someone else.

  • TedZanzibar@feddit.uk
    link
    fedilink
    English
    arrow-up
    28
    arrow-down
    1
    ·
    3 months ago

    Make an offer of $0.01. Assuming the responses aren’t automated, every time they reject it, raise the offer by 1c. Keep doing it till you hit the $15 mark and then just stop. It could waste literal years of their time.

    • hactar42@lemmy.ml
      link
      fedilink
      English
      arrow-up
      19
      arrow-down
      1
      ·
      3 months ago

      Reminds me of a guy I knew who kept getting letters for a $10 parking fine he got while at university. He waited until they spent more in postage than the fine before paying it.

  • PassingThrough@lemmy.world
    link
    fedilink
    English
    arrow-up
    21
    ·
    edit-2
    3 months ago

    Now would be a good time to look for a .com you like, or one of the more common TLDs. And register it at Namecheap, Porkbun, or Cloudflare. (Cloudflare is cheapest but all-eggs-in-one-basket is a concern for some.)

    Sadly, all the cheap or fun TLDs have a habit of being blocked wholesale, either because the cheap ones are overused by bad actors or because corporate IT just blacklists “abnormal” TLDs (or only whitelists the old ones?) because it’s “easy security”.

    Notably, XYZ also does that 1.111B initiative, selling numbered domains for 99¢, further feeding the affordability for bad actors and justifying a flat out sinkhole of the entire TLD.

    I got a three character XYZ to use as a personal link shortener. Half the people I used it with said it was blocked at school or work. My longer COM poses no issue.

  • TCB13@lemmy.world
    link
    fedilink
    English
    arrow-up
    21
    ·
    3 months ago

    After some time, the domain fully expired and GoDaddy decided to buy it as soon as it did,

    Oh yeah, that’s what happens when you pick scammy domain registrars. It is very possible that Epik auctioned your domain (after wall they kept it after the expiry date and payed fees) and then GoDaddy snatched it. This is what usually happens.

    • kautau@lemmy.world
      link
      fedilink
      English
      arrow-up
      15
      arrow-down
      2
      ·
      3 months ago

      Not just scammy

      Epik is an American domain registrar and web hostingcompany known for providing services to alt-tech websites that host far-rightneo-Nazi, and other extremist materials. It has been described as a “safehaven for the extreme right” because of its willingness to provide services to far-right websites that have been denied service by other Internet service providers.

      https://en.wikipedia.org/wiki/Epik

      I’m in no way surprised at what they did, and in fact only surprised that it wasn’t them that bought the expired domain, but instead was godaddy

      • TCB13@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        3 months ago

        You’re missing the point, it wasn’t bought by godaddy. Epik auctioned the domain to godaddy after it expired, it’s common for registrars to sell domains to each other so they don’t get a bad reputation and make people think what you’re thinking.

      • brbposting@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        3 months ago

        Great to know, wouldn’t wanna be associated with someone who seems to specialize in far-right businesses.

        Interesting, had to check and see: 4chan is registered with Cloudflare.

        A part of me would rather these baby Hitlers operating in the open in case it’s harder for the FBI to follow them around the dark web. Downside is clearnet makes it easier for low-braincell nazis to communicate. Woulda thought we’d have socially stomped out extremism by now so doing it technologically wouldn’t be necessary…

        Alas.

  • jet@hackertalks.com
    link
    fedilink
    English
    arrow-up
    20
    ·
    3 months ago

    Recommendation: Cloudflare, register for 10 years, set to auto-renew every year. If anything goes wrong you get 9 years to fix your credit card info.

    I’m sorry you lost your domain, that really sucks, thanks for sharing your cautionary tale with us all!

  • Cornpop@lemmy.world
    link
    fedilink
    English
    arrow-up
    28
    arrow-down
    11
    ·
    edit-2
    3 months ago

    That’s a horrible domain name anyways. .xyz is trash, the name itself is long, hard to pronounce and sounds like gibberish. Time for an upgrade.

    • ElectricMachman@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      11
      ·
      3 months ago

      That’s the second time I’ve seen someone cast xyz in a negative light. What’s wrong with it? (Genuine question, in case it needs saying)

      • NateNate60@lemmy.world
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        2
        ·
        3 months ago

        It’s just a hallmark of “I bought the cheapest domain name TLD available”.

        That’s not necessarily bad if all you need is something to get the job done, but there is a stereotype associated with it.

      • vividspecter@lemm.ee
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 months ago

        It’s commonly used by spammers, so it could cause issues if you’re planning to use it for mail.

  • foggy@lemmy.world
    link
    fedilink
    English
    arrow-up
    15
    ·
    3 months ago

    Hahaha. I purposely got a jibberish .xyz domain. If they ever ask for more than the $9.99 a year they can pound sand.

    • Perhyte@lemmy.world
      link
      fedilink
      English
      arrow-up
      17
      ·
      3 months ago

      If you don’t mind using a gibberish .xyz domain, why not an 1.111B class? ([6-9 digits].xyz for $0.99/year)

    • helenslunch@feddit.nl
      link
      fedilink
      English
      arrow-up
      6
      ·
      3 months ago

      They don’t really care. They’re fishing for “whales”. Those who forgot to renew their domain or something but desperately need it back. Businesses, likely.

      • lemmyvore@feddit.nl
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 months ago

        Or people who use it for email and basically have their online identity tied to them.