It's important to remember that "just" DNS records are anything but "just" safe. Keep in mind that when you do this, you grant a third-party organization the ability to 'vouch' to anyone that they 'own' your domain or a URL at it, as long as the 'vouch' test supports <a href="http://" rel="nofollow">http://</a> or <a href="https://" rel="nofollow">https://</a> URLs.<p>This is the case for all web-hosting everywhere on the Internet. I host all of my domains through third-party providers, knowing and accepting the above-described risk. I consider it so low likelihood and of only medium impact if something ever occurs. The value is immense, the time spent is small, and the tradeoff worth it.<p>Imagine if someone phoned up your IT department and asked them to fix the MX record due to a mail server outage. Would you notice if your Received headers added a hop you weren't familiar with before? How long would they be able to record your company's email before someone noticed?<p>So I encourage taking DNS with absolute seriousness, and careful consideration of changes, and <i>never</i> simply assigning "just" 2 records to anyone, ever. Given 2 records, someone can do a lot more damage than any website hack ever could.<p>ps. "IN TYPE15" or thereabouts is another way to state "IN MX", to further convey why it can be very dangerous to follow instructions. Most admins would pause at an MX change, but most wouldn't think twice about a custom "TYPE15" record 'not supported by BIND yet', given sufficient verbiage.
Sorry for being that guy, but seeing all the enthusiastic responses on HN, I'm wondering…<p>Am I, in 2017, the only one left thinking that domain parking is a harmful activity? Like… the DNS equivalent of patent trolling…
Careful. Pointing your A record to a third party allows that party to use HPKP [1] with a long expiry period and never give you the key, potentially nuking the domain (for anyone who has visited it before you sell it).<p>[1] <a href="https://en.m.wikipedia.org/wiki/HTTP_Public_Key_Pinning" rel="nofollow">https://en.m.wikipedia.org/wiki/HTTP_Public_Key_Pinning</a>
Other than the "secondes" my only real feedback is the price - Charge more!<p>I think you may be underestimating a little just how many domains people have if they're in the business of selling them!
You may want to look into adding a CAPTCHA or some other kind of spam prevention system to the contact form. Spambots these days will fill in any contact forms with all kinds of spam.<p>If you're remailing those contact form responses through your server to the domain owner, these spambots will damage your IP reputation and legit inquiries might start getting blocked.
I'm curious, why do you ask your users to create an A entry for this? I think a CNAME/ALIAS entry to the domain of the service would be a safer choice in case you should be forced to change your IP address (e.g. if you change your hosting provider), which would currently force all your users to update their A entries. Also, using a CNAME domain would allow you to hide your IP address behind a CDN service like Cloudflare, which can be handy sometimes (e.g. for DDoS protection).
Cool project. We do something very similar with an internally made lander for our domain portfolio, and it works well. Lots of serious buyers contact via e-mail listed on whois too.<p>One thing very useful is to have analytics, perhaps you could add a feature for users to input a Google Analytics tag (UA-000000).<p>Side note: for anyone who actually wants to sell/buy a domain in a private transaction, I highly recommend Escrow.com as an escrow service.
Thank you so much. I acquired blackmail.io as part of a, now defunct, project and had been meaning to put it up for sale. This was the perfect lazy solution for me :)<p>Tips for pricing your domain:<p>1. Think of how attached you are to the domain<p>2. Think of how much you think you'd be willing to pay for the domain in the open market<p>3. Think of how much the cleveriness of the domain name is<p>Add all these values together, and multiply it by 2.
Is there also a way to do it without the price? Putting a price on it directly will either cause people to not bother if it's too high for some side project or make it too cheap if some huge corp wants to buy it.
Hi, nice and simple site. Thanks!
Maybe in the future can you give analytics as to who is visiting the site? That way we can get an idea of the demographics of who is going to which domain? (paid feature maybe)
Cool idea. I hope you somehow confirm the listing on the dashboard, otherwise someone can just list some domains under your username to cost you money ;)