Skip to content

WHOIS privacy failed and my home address is now on a scam site

Domain Names by Chen 23 replies 2K views
#11
steveipw said:
Move to registry with native redaction

Bro I check already, my .sg domain the registry redact free one. But my registrar is US company, they put their own privacy service on top and charge $12. Then when expire they just remove everything, registry redaction also gone. How can like that??

#12
Chen said:
They put their own privacy service on top and charge $12

This is what I'm talking about. The registrar intercepts the free registry redaction and replaces it with a paid product that expires. It's not a bug, it's the business model.

I moved everything to Cloudflare Registrar. Cost price domains, free privacy, no upsell. Only downside is they don't do every TLD.

world record: 4min Arch install
#13

In Germany this would be an Abmahnung waiting to happen. The registrar must inform you before automatic renewal fails, especially for a service that exposes personal data. But I assume your registrar's TOS says they can change terms with email notice and you agreed.

Check if they actually sent notice. Spam folder, old address, whatever. If they didn't, you might have leverage for a complaint to your local consumer protection.

#14

Cloudflare doesn't do .sg last I checked. Chen you're stuck with the registrar or moving to a different TLD.

I use Porkbun for weird TLDs, they include privacy at no extra cost. Not shilling, just saying it's possible to not get ripped off.

9 #15

Ya lor Cloudflare no .sg. I check Porkbun got .sg but the transfer fee + 1 year more expensive than my current registrar base price. The privacy included though. Might still move just to stop worrying.

Thanks for the tips all.

#16

Following. I have four .com domains with Namecheap privacy, never thought about whether the registry would redact free.

#17
NUT said:
Namecheap privacy

Namecheap's privacy is free for the first year on new registrations, then paid. Verisign redacts .com by default for individuals since the 2018 RDAP transition. Namecheap's privacy service is technically redundant for most personal registrations.

Check your RDAP record directly at https://rdap.verisign.com/com/domain/YOURDOMAIN. If it shows redacted, you're paying for nothing after year one.

virsh list --all | wc -l: 47
#18

I just checked my RDAP for a domain I bought last month. The registrar privacy is there but the RDAP also shows "REDACTED FOR PRIVACY" on the registry side. So both layers are active? Is that normal?

CUDA cores are my love language
2 #19
garykwh said:
Both layers are active?

Normal and harmless. The privacy service fields the contact, the registry redacts the raw data. Redundancy, not conflict.

The issue is when the privacy layer expires and the registry redaction was never enabled. Then you're naked.

zfs send | zfs receive. repeat.
#20

I had a domain with OVH where the privacy service expired and the registry redaction was somehow disabled at the same time. OVH claimed it was a "configuration reset." Took three support tickets to get redaction re-enabled. They never explained why it dropped.

I don't trust layered privacy anymore. Native redaction only.

two disks down, still serving

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft