zlacker

Tell HN: Godaddy canceled my domain, gave me 2h to respond, then charged €150

submitted by M0r13n+(OP) on 2022-08-15 14:21:15 | 603 points 297 comments
[source] [go to bottom]

I use my own domain to host a simple homepage. I also use it as a custom mail domain. Initially, I bought the domain on godaddy.com when I was getting into the realms of software engineering. I always found the user interface hard to get used to, but it never bothered me enough for me to transfer my domain. Especially because I run the DNS through Cloudlfare and, therefore, I have fairly little contact with the interface of godaddy.

Today Proton (my mail provider of choice) surprised me with a warning that there were problems with the setup of my domain. A quick research revealed that godaddy had cancelled my domain. It showed up in the Redemption Grace Period. This status code indicates that godaddy has asked the registry to delete my domain. After 30 calendar days + 5 days following the end of the redemption period, my domain is purged from the registry database and becomes available for registration.

I immediately contacted the godaddy support hotline. Mainly because of my mail account and the services connected to it. They confirmed the termination. The reason given was that I had failed to respond to an e-mail - that was sent yesterday on a Sunday(!) at 9:51 PM. Then at 0 o'clock my domain was terminated. So I had a breathtaking 2 hours to respond. Which is especially fun because I go to bed at 10pm. :-D

To make matters worse, the mail ended up in the spam folder because Godaddy's reputation seems to be bad and was titled: "Update your privacy settings and personal information.". Even under normal circumstances, I would have ignored this email. How should someone suspect that in a few minutes from now on the own domain is going to be killed.

If I understood the service employee correctly, this mail means that something was wrong with my payment data. And indeed, there was an old credit card on file. However, a PayPal address was also stored there, which still worked. Via this address, I was later even debited the penalty fees that I supposedly had to pay.

After some back and forth with service, I was then given an ultimatum: Either I pay €150 fine, allegedly required by my government to be charged for domains that enter the grace period. Or I lose the domain.

The latter didn't sound very inviting, as I like my domain and also don't feel like switching all accounts to another domain/provider. So I paid the fee.

Godaddy confirmed afterwards that there were no further emails or announcements. The service employee even confirmed by phone that apart from the mail and the subsequent generous transition period of 2 hours, there would have been no further information.

TL:DR If you have a domain with Godaddy, just make sure that the payment information is correct. Otherwise, it might get expensive.


NOTE: showing posts with links only show all posts
2. onepla+H1[view] [source] 2022-08-15 14:29:17
>>M0r13n+(OP)
TL:DR If you have a domain with Godaddy, move on to a proper service.

Depending on what you need, https://dnsimple.com seems to have a good reputation, I also see a bunch of people spreading their risk by putting DNS on one big (cloud) provider and all other services on other providers. This means that while Cloudflare does DNS registration now, you might still want to use Cloudflare for your DNS zone and something else for registration. That said, Cloudflare still has a good reputation (for paying customers!).

The idea behind that is the (generally) low fee of DNS registration is easy to monitor/check and maintain, so if all else fails you at least retain your domain name as an identity which is generally the foundation to everything else. While it might suck to lose the contents of a mailbox or a website, if you still retain the DNS registration you can always re-create.

Other service providers that don't structurally screw your DNS over (re-including the ones I mentioned):

  - AWS
  - Cloudflare
  - Leaseweb
  - Rackspace
  - transip
  - OVH
  - dnsimple

Those are the ones I have used (and most of them currently use) myself, but there are others that do domain registration and seem to come recommended by others:

  - GCP (Google)
  - EasyDNS
  - porkbun
  - Microsoft
  - Hetzner
  - key-systems GmbH (usually via one of their partners)
  - Scaleway

Most of them I do have some personal experience with (for what it's worth... we're just strangers on the internet here after all), but I never really had to do any long-term (10+ years) DNS registration with them.

If you are in an ITAR area, conflict region or trade sanctioned region, none of this will help tho.

18. rozenm+83[view] [source] 2022-08-15 14:35:26
>>M0r13n+(OP)
Cloudflare now has a registrar service FYI: https://www.cloudflare.com/en-au/products/registrar/
25. echelo+V3[view] [source] 2022-08-15 14:39:24
>>M0r13n+(OP)
Back when I was in college, some "friends" of mine stole one of my first successful websites, StrategyWiki.org by transferring the domain into their own account.

GoDaddy did nothing to help. I've posted about this before, and like to bring it up everytime people mention bad GoDaddy customer service.

https://news.ycombinator.com/item?id=24507411

63. Andrew+a8[view] [source] 2022-08-15 14:59:59
>>M0r13n+(OP)
I'm always amazed to find techie people that don't use something at least as good as https://dnsimple.com/.

I've been using them since 2011 and have not had a single issue.

In fact, they have just kept on progressively getting better!

70. highcl+S8[view] [source] 2022-08-15 15:02:56
>>M0r13n+(OP)
Note on recommendations of namecheap in this thread. My experience with namecheap is very bad too. They also send emails like godaddy saying if you don't respond in a short time(24 hours) your domain will be revoked. Related experience: https://news.ycombinator.com/item?id=14139288 I moved my domains from namecheap to gandi.net and so far no problems. I would avoid namecheap like the plague for any large site.

ycombinator uses gandi.net too.

[Edit] Added 24 hours to short time

◧◩◪
76. igorst+qa[view] [source] [discussion] 2022-08-15 15:09:22
>>aaaaaa+Y6
Relevant discussion: https://news.ycombinator.com/item?id=30504812
◧◩◪
98. morgos+Pc[view] [source] [discussion] 2022-08-15 15:20:17
>>French+A8
They don't actually have to pay for it by using "domain tasting" which gives them the option to grab the domain for up to 5 days. https://en.wikipedia.org/wiki/Domain_name_front_running
113. Gasp0d+df[view] [source] 2022-08-15 15:30:40
>>M0r13n+(OP)
My favorite domain registar is https://www.inwx.com/en. They are very cheap for .de domains which I mostly use, they have an API and they offer dyndns as well as a mail service that is hosted by them (although that's a bit pricey in my opinion.
◧◩◪◨
132. jefftk+Kh[view] [source] [discussion] 2022-08-15 15:43:24
>>balent+l2
Most of Namecheap's employees are in Ukraine, and they decided to block Russian users after the invasion: https://www.namecheap.com/support/knowledgebase/article.aspx...
◧◩◪
148. 199X+dl[view] [source] [discussion] 2022-08-15 15:57:35
>>cgb223+hc
as long as you are not russian[0], today. Maybe tomorrow they will discriminate your country.

[0] https://www.namecheap.com/support/knowledgebase/article.aspx...

◧◩
154. nichol+Hm[view] [source] [discussion] 2022-08-15 16:04:37
>>danwee+X1
Used gandi for forever, then they had a major hardware issue and lost customer's data and kinda was rude about it: https://news.ycombinator.com/item?id=22001822 - so I decided to move my business elsewhere.
◧◩◪◨⬒⬓
177. Tryk+Vr[view] [source] [discussion] 2022-08-15 16:28:18
>>dannyw+Ko
They have 1700 employees in Ukraine (https://www.namecheap.com/careers/ukraine/) maybe you would feel differently if your country was invaded.
◧◩
178. vladst+fs[view] [source] [discussion] 2022-08-15 16:29:55
>>samela+74
Not sure how valid my case is, but in March Namecheap gave me (and thousands other Russian-based clients) a week to migrate before they ban me. The fact that I relocated to another country did not matter.

It's been discussed here at HN too: https://news.ycombinator.com/item?id=30504812

Even if I was affected, I'm not sure I'd want to continue relationship with them. Anyway, user of name.com now, so far so good.

(P.S. Might need to say that I support Ukraine in this horrible conflict, I just happen to hold a Russian passport)

◧◩
196. bitwra+pw[view] [source] [discussion] 2022-08-15 16:44:49
>>samela+74
I transferred from GoDaddy a few years back. I got tired of the constant attempts to up-sell me for services I didn't want. I went to namecheap and have been happy with their services so far. The UI is clear and pretty easy to use. They also support MFA for added security (GoDaddy did not at that time).

I've been playing with cloudflare recently, and just realized they also do domain registration and DNS hosting. I might seriously look at switching to them depending on hassle and potential benefit. But I usually like having dedicated registrar/DNS that is uncoupled from hosting.

https://www.cloudflare.com/products/registrar/

◧◩◪
199. bitwra+ex[view] [source] [discussion] 2022-08-15 16:48:52
>>gabeio+ed
I've only recently been using Cloudflare and noticed they do registrar and DNS hosting, I might transfer to them later if it's worth the hassle. I'm currently using namecheap.

https://www.cloudflare.com/products/registrar/

◧◩
209. dang+FA[view] [source] [discussion] 2022-08-15 17:02:35
>>daneel+M6
Please don't take HN threads into nationalistic flamewar.

https://news.ycombinator.com/newsguidelines.html

We detached this subthread from https://news.ycombinator.com/item?id=32470266.

◧◩◪◨
211. lovele+9B[view] [source] [discussion] 2022-08-15 17:05:08
>>dncorn+Fc
Only if you make certain assumptions - that Godaddy tries only one payment method, and that user hasn't set up a backup method.

As it turns out, Godaddy has a backup payment method option: https://godaddy.com/help/set-a-backup-payment-method-724

Like I said, in all these posts, there's a tendency to victim blame by making convenient assumptions to show the victim must have somehow been at fault. The GP even jumped straight into "if X, then it must be your fault" without even bothering to check with OP if X is true.

Additionally, despite all our insider observations of snafus as software engineers as well as personal experiences as customers, there's a tendency to implicitly assume that all software systems are designed perfectly and the entire chain of people that run them are 100% correct and ethical 100% of the time.

I termed this "the tech just-world hypothesis" because of how often I keep seeing it.

◧◩◪
213. slig+pB[view] [source] [discussion] 2022-08-15 17:06:06
>>cgb223+hc
See this thread before deciding: https://news.ycombinator.com/item?id=30506581
◧◩◪◨⬒
232. inepte+7N[view] [source] [discussion] 2022-08-15 17:59:46
>>FastEa+5E
The "free SSL" meant adding your domain as a sub of theirs, i.e. https://yourdomain.namecheap.com. I fell for it and was pretty salty to see how much they charge and the lack of a letsencrypt integration.

And on that note, Letsencrypt has a helpful list of hosting companies that automate the process for you: https://community.letsencrypt.org/t/web-hosting-who-support-...

◧◩◪◨
240. dang+LT[view] [source] [discussion] 2022-08-15 18:30:59
>>daneel+6F
Oh I certainly believe you that you had no such intention, but we have to go by effects, not intent. I've written about this many times, so if you or anyone want further explanation, you can find it at these links:

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor...

In the case of your comment, pejorative generalizations about national groups counts as nationalistic flamebait (that is, it has the effect, in the general case, of provoking nationalistic flamewar) whether you intended that or not.

◧◩◪◨
241. luckyl+OT[view] [source] [discussion] 2022-08-15 18:31:10
>>creebl+Vt
They'll put a warning message in front of the URL that's been claimed to use phishing ("Warning: Suspected Phishing Site Ahead!"), here's what that looks like: https://archive.ph/qqR8t

They do it for lots of right reasons, I'm sure, but they also do it based on simple claims. While I thought that's a great way to hurt any site if such a claim is all it takes, I haven't experimented with it, so I don't know if you have to make it a legalese thing, or if they do some automated checks. But once you get a site flagged, it'll probably stay so, unless they have some very good connections to CF.

They will forward any complaints also to the hosting company of the origin, but if you're not in luck, the site will be hosted at a questionable company that has no trouble hosting phishing sites. Hetzner for example did quickly react and requested comments from us under threat of shutting down the server. They were happy with our response and their own checks however.

Still, I agree that they should have a way of de-anonymizing who is behind a site, their business is in protecting against technical attacks, not protecting against the law.

◧◩◪
242. scotty+KY[view] [source] [discussion] 2022-08-15 18:59:55
>>eadmun+wR
You can reduce chances of this by acting fast. Follow these steps:

1. Get authorization code for transfer from GoDaddy

2. Put that in the host you want to transfer to (This will start your race against time). I suggest you use cloudflare since the transfer is fast.

3. Go to GoDaddy and approve transfer(GoDaddy hides this option to delay the process intentionally, follow the video to find this option).

4. Your details will become private again if your new host support whois privacy.

Here is a video(starts at 8:18) to do all 3 steps back to back: https://youtu.be/81LtL2ZvD38?t=498

◧◩
247. scotty+I61[view] [source] [discussion] 2022-08-15 19:36:44
>>scotty+ov
TO AVOID THIS FOLLOW THESE STEPS:

1. Get authorization code for transfer from GoDaddy

2. Put that in the host you want to transfer to (This will start your race against time). I suggest you use cloudflare since the transfer is fast.

3. Go to GoDaddy and approve transfer immediately (GoDaddy hides this option to delay the process intentionally, follow the video to find this option).

4. Your details will become private again if your new host support whois privacy.

Here is a video(starts at 8:18) to do all 3 steps back to back: https://youtu.be/81LtL2ZvD38?t=498

◧◩◪◨⬒
255. creebl+Nr1[view] [source] [discussion] 2022-08-15 21:24:52
>>luckyl+OT
Thanks for that.

By contrast, this is the email that a MAANG company received recently regarding a site being reported for phishing one of their login sites:

https://ibb.co/kcsQN0w

So I guess they are somewhat arbitrary in their phishing actions.

◧◩◪◨
268. accoun+1X2[view] [source] [discussion] 2022-08-16 11:09:55
>>inepte+2r
How exactly do they make it hard to use Let's Encrypt? The HTTP challenge just needs the A/AAAA records that your web server needs anyway and for the DNS challenge (only really needed for wildcard certs) they do seem to at least support using your own name servers (as do most registrars): https://www.namecheap.com/support/knowledgebase/article.aspx...
◧◩◪◨⬒
271. rovr13+y53[view] [source] [discussion] 2022-08-16 12:25:44
>>Normil+ZB
> The second time, I got an email back from NameCheap Customer Service saying "We're an American company. We use American date format"

I'm guessing that's a low level person and they closed it with that.

There's a post here where the CEO wrote how they had about 1000 people in Ukraine being affected by the war.

Found it, https://news.ycombinator.com/item?id=30506813

I've stumbled upon them a couple of times before.

272. circa+ye3[view] [source] 2022-08-16 13:30:15
>>M0r13n+(OP)
I can't/can believe this and they make it seem like its a normal practice from your story. Pretty awful.

I left GD years ago after this - https://science.time.com/2011/04/04/godaddy-ceo-on-shooting-...

Not only did I hate their interface like you mentioned. Their customer service always sucked too. I moved a lot of TLDs off of there at my old job. Happy to say all the other companies I have used have been above and beyond better than GoDaddy.

Do some research and you'll find some great deals out there. Cloudflare, Hover, NameCheap offer great services IMO. Never had any issues with them.

◧◩◪◨
279. thiht+hD3[view] [source] [discussion] 2022-08-16 15:20:26
>>ksec+8t3
I don't know the full details but AFAIK there's still a dispute between Verisign (.com, .net) and Afilias (.info), they both accuse each other of cheating at the 2016 auction.

You can find most of the drama here: https://domainincite.com/tag/web

[go to top]