Deemwar Monads & Abstractions

The Registrar Email Loop

Source: Namecheap just seized and disabled all my domains after a single email with a 72 hours termination notice, by u/pinchitony

A business owner posted on r/sysadmin that their registrar emailed a routine ID check that locked the account pending ID documents within 72 hours. They were away and did not reply in time, so every domain on the account was disabled, including the domains their company email ran on.

72 h to send ID documents
12 years a customer
1 inbox on the locked domains

What happened

This is one customer’s account of events, as posted on r/sysadmin. The registrar’s side is not public.

  1. 1

    A routine check

    registrar email

    The registrar emailed a “routine account information accuracy check-up” that locked the account pending ID documents, due within 72 hours.

  2. 2

    No reply in 72 h: every domain disabled

    owner away a few days

    The owner, a customer for 12 years, was away and did not reply within the window, so every domain on the account was disabled.

  3. 3

    Domains went dark

    every domain on the account

    The servers behind those domains went dark.

  4. 4

    Email went with them

    the loop closes

    The account’s email address relied on the disabled domains, so the owner paid another host to set up email again.

  5. two-factor was on: it protects the login, not against a compliance lock · support chat passed the case to a risk team that works by email only

The loop

Registrarholds yourco.example
Account email@yourco.example
No reply in 72 hdomains disabled
Warning inboxgone too

When the registrar’s contact address lives on a domain that registrar holds, the channel the registrar uses to warn you is the first thing a disabled domain takes away.

What to do instead

CheckWhy
Registrar account email outside the domains it holdsA lock or expiry cannot cut the warning channel.
Someone reads registrar mail while people are awayA 72-hour window is shorter than a holiday.
Critical domains split across two registrarsOne account problem does not take every domain down at once.

Read more

The r/sysadmin post and comments.

Hacker News discussion.

Sources: the 72-hour check, 12 years as a customer, the lock, the disabled domains, the email dependency, two-factor and the email-only risk team are from the r/sysadmin post. The three checks are our advice.