Had a decent domain, buyer wanted escrow, standard process. Disabled WHOIS privacy at my registrar to show clean ownership record. Listed on marketplace at 14:00. By 18:00 my phone rang with "domain appraisal services." By 22:00 I had seventeen emails offering "premium broker representation." By morning, my inbox was useless.
Timeline documented:
- T+0: privacy disabled
- T+4h: first call
- T+8h: first spam wave
- T+12h: SMS flood begins
- T+24h: phishing emails impersonating the escrow service I actually planned to use
Why pay for WHOIS privacy when you can self-host your identity? You cannot. The registry is the leak. I run my own mail, my own DNS, reverse proxy everything through docker compose. The data broker pipeline does not care. They scraped the registry directly, not my infrastructure.
Lesson: the sell-side verification tradeoff is brutal. Buyer wanted public WHOIS for trust. I wanted my phone number to remain my own. I got neither effectively.