Thank you, John, Carob and Nicenic, for your contributions to this discussion. Your replies mean a lot to me and help me feel like I’m not alone in this.
The lack of clear, consistent responses and the silence from all parties—Namecheap, Enom, and the .BUILD Registry—have left me with no clear path forward. Despite my consistent follow-ups and clear requests, the information I've received contains contradictions and does not provide the accountability I am seeking.
Responses From Namecheap, Enom, And The .BUILD Registry
Namecheap’s Responses Often Referred Questions to Third Parties
Despite multiple follow-ups over the course of more than a month, Namecheap provided only one clear answer:
the EPP code was not requested. All other questions were met with vague responses, repeatedly referring inquiries to the upstream provider or the Registry. From my perspective, I did not observe escalation or any clear acceptance of responsibility in the responses I received.
Namecheap’s Reply on Key Questions (Date: Mon, Jul 14, 2025 at 3:20 PM)
From: Namecheap Domains Support Team Date: Mon, Jul 14, 2025 at 3:20 PM To: [My Email Address]
Hello,
Thank you for getting back to us.
What exactly happened to the domain? > Unfortunately, it seems that the domain was transferred from your account. At this point, we cannot specify what exactly happened,
we are waiting for the reply from the Registry and our upstream provider.
Was it transferred — and if so, by whom? > Most likely, it was transferred. However, we cannot tell who initiated the transfer.
Only Registry operates the domain names and can check the history, status, including past and present ownership details and changes over time.
That is why we are waiting for their reply.
Was an EPP code issued or used? >
No, according to our logs, the EPP code was not requested.
On what authority was the domain placed in “reserved” status at the registry? >
We are clarifying this point with the Registry. Once we have any news from them, we will address this question.
What concrete actions has Namecheap taken internally to investigate or escalate this, beyond contacting the registry and upstream provider? > We have checked our logs and correspondence with
the Registry. Unfortunately, we received no notices from the Registry. So,
we are waiting for their clarifications.
If this delay continues indefinitely, and the registry remains unresponsive, what is Namecheap’s plan? >
We are not currently considering this possibility as we expect to receive the updates from
the Registry and upstream provider in the foreseeable future. However, as soon as
we have some news from them, we will be able to answer this question more specifically.
Will Namecheap formally escalate this matter to ICANN? >
We are not considering this option at the moment, because
we need information from upstream provider and Registry first and foremost.
At what point does Namecheap accept responsibility as the registrar of record at the time of the incident? >
Once we have some news from the Registry and upstream provider, we will understand the picture and then we will be able to clarify who is responsible for this. However, we would like to emphasize that
as the Registrar, we do not transfer domains for customers.
Moreover,
according to our logs, the EPP code was not requested, so we cannot say what specifically happened, which is why
we are waiting for the response from the upstream provider and Registry.
Most importantly, can Namecheap confirm that it will accept full financial responsibility for the losses incurred due to the unauthorized loss of malaysia.build and the prolonged delay in resolving the issue? >
We cannot confirm this without understanding the full situation. We will consider this once we have more information.
Please rest assured that we are constantly monitoring this case. We
will provide you with all the details and decisions as soon as we clarify everything with the corresponding Registry.
Your understanding is highly appreciated.
-------
As of today, despite my complaint with ICANN and my communications with Namecheap, I personally have not received what I would consider a clear explanation or resolution regarding the domain’s removal. Namecheap’s own email responses have confirmed that no EPP code was requested, yet they have provided conflicting statements regarding the transfer process, leaving me without what I would consider a clear resolution or understanding of how responsibility was determined in this case.
Here is a timeline of their shifting explanations and lack of action:
Initial Delays (June 12 – July 13, 2025):
- “Regrettably, we find ourselves in need of additional time to thoroughly review your case.” (Date: Thu, Jun 12, 2025 at 3:01 AM)
- “We need some more time for additional investigation.” (Date: Fri, Jun 13, 2025 at 3:42 PM)
- “To our deepest regret, we are still investigating this issue and will update you as soon as possible.” (Date: Tue, Jun 17, 2025 at 5:13 PM)
- “We are still working on the issue. We are monitoring the case and will contact you as soon as we have any information.” (Date: Thu, Jun 19, 2025 at 3:26 PM)
- “We are currently in contact with our upstream provider and Registry and waiting for further updates.” (Date: Sat, Jun 21, 2025 at 3:42 PM)
- “Unfortunately, we do not yet have exact details regarding why the domain was removed. Right now, we are still waiting for updates from our upstream provider and the Registry.” (Date: Thu, Jul 3, 2025 at 4:21 AM)
- “…we’ll notify you immediately the moment we receive any update.” (Date: Mon, Jul 7, 2025 at 12:52 AM)
- “To our regret, there are still no updates regarding the domain.” (Date: Fri, Jul 11, 2025 at 11:59 PM)
- “Unfortunately, a time estimate cannot be provided, but as soon as there are any news we will let you know.” (Date: Sat, Jul 12, 2025 at 2:09 AM)
- “As soon as we receive any updates or further information from them, we will let you know immediately.” (Date: Sat, Jul 12, 2025 at 2:39 PM)
- “…but the investigation may take some time. We’ll share any updates or new information with you as soon as we receive it.” (Date: Sat, Jul 12, 2025 at 4:16 PM)
- “Thus, we are just waiting for the information about the domain status.” (Date: Sun, Jul 13, 2025 at 3:02 AM)
Conflicting Information, Shifting Explanations and Responsibility (July 13 – July 14, 2025):
- Regarding the transfer: Namecheap stated on July 13, 2025: “Yes, the transfer out was processed from our database on 12/4/2023.” Yet, in the same communication, they admitted, “we cannot clarify who exactly requested/ initiated it. This point is under investigation.” (Date: Sun, Jul 13, 2025 at 3:02 AM) Later, on July 14, 2025, they stated, “No, according to our logs, the EPP code was not requested.” (Date: Mon, Jul 14, 2025 at 3:20 PM)
- Regarding responsibility: On July 12, 2025, Namecheap replied “We are currently investigating how and why the malaysia.build domain was transfered with our Upstream provider, currently we do not know how the transfer occurred in this case.” (Date: Sat, Jul 12, 2025 at 2:09 AM) On July 13, 2025, Namecheap claimed, “only Registry operates the domain names and can check the history… Thus, we are just waiting for the information about the domain status.” This directed inquiries about domain history and status to the Registry. (Date: Sun, Jul 13, 2025 at 3:02 AM)
- Inability to Revert: Namecheap confirmed, “It is possible to cancel a domain transfer, but only if it’s still in a pending state. Since the case was processed back in 2023, we cannot revert it.” This highlights their inability to rectify an issue that occurred under their management. (Date: Sun, Jul 13, 2025 at 3:02 AM)
- Contradiction on EPP: On July 13, 2025, Namecheap stated, “Based on our logs, we have not detected any requests for EPP codes.” This directly conflicts with their previous statement of a “transfer out was processed from our database.” (Date: Sun, Jul 13, 2025 at 4:35 PM)
- Shifting Accountability: In several responses, Namecheap pointed to its upstream provider (Enom) and the .BUILD Registry as responsible parties, ie, “Please rest assured that as soon as we received your request, we submitted it to our upstream provider. Since then, we’ve been closely monitoring the progress, which, unfortunately, is still pending on their end.” (Date: Mon, Jul 7, 2025 at 12:52 AM) Enom replied once, stating that the registry executed the removal. The .BUILD Registry, although copied in every email, has remained silent to date.
- Regarding financial/reputational impact: “Regarding the concerns about potential financial and reputational impact, we are actively exploring all available options. However, we first need to receive a response from the registry to determine the appropriate next steps.” (Date: Sun, Jul 13, 2025 at 4:35 PM).
- Acknowledgment of Losses: On July 13, 2025, Namecheap stated: “Your business means a lot to us. We completely agree that this may cause losses to your company.” This is a direct acknowledgment of the financial impact. (Date: Sun, Jul 13, 2025 at 10:29 PM)
- Non-Committal on Financial Responsibility: Despite acknowledging potential losses and being directly asked about financial responsibility, Namecheap consistently provided vague and indefinite answers. For instance, on July 14, 2025, when asked “can Namecheap confirm that it will accept full financial responsibility...?“, their reply was, “We cannot confirm this without understanding the full situation. We will consider this once we have more information.” (Date: Mon, Jul 14, 2025 at 3:20 PM). Earlier, on July 14, 2025, they stated, “depending on the final outcome of the ongoing investigation, we will be carefully reviewing all circumstances involved, including those that may warrant further consideration regarding the compensation on our side.” (Date: Mon, Jul 14, 2025 at 1:51 AM). Namecheap consistently stated they could not confirm financial responsibility without more information.
Final Denial & Redirection (July 15, 2025):
- “The responsible party in this case is the .Build Registry. Only the Registry can provide answers to your questions or determine whether your domain can be restored or re-registered. We recommend reaching out to them directly to pursue this matter further.” (Date: Tue, Jul 15, 2025 at 11:09 AM)
- “If you have any further questions, please do not hesitate to contact our Legal team directly at Namecheap's legal email address.” (Date: Tue, Jul 15, 2025 at 3:57 PM)
- “As such, Namecheap was not involved in and is not responsible for the transfer.” — Namecheap Legal Department (Date: Tue, Jul 15, 2025 at 1:51 PM)
- Premature Closure: On Date: Tue, Jul 15, 2025 at 11:09 AM, Namecheap stated, “This email will be closed now,” ending the thread without any resolution, explanation, or acknowledgment of responsibility.
- When I challenged “Namecheap was not involved in and is not responsible for the transfer” on Date: Wed, Jul 16, 2025 at 9:40 PM, requesting clarification on how they could disclaim responsibility as the registrar of record, I received no further response. Subsequently, Namecheap has ceased all direct email replies.
To me, Namecheap’s explanations appeared inconsistent at times, as their emails mentioned both a ‘transfer out’ and that no EPP code was requested. According to their internal records, a “transfer out” of the domain occurred, yet they have also stated that they had “no involvement” and that no EPP code was requested. This apparent contradiction raises questions, in my view, about the transfer process and Namecheap’s role and responsibilities as the registrar of record at the time.
I registered and paid for the domain through Namecheap and had no direct relationship with the .BUILD Registry. To my mind as a registrant, I expected that my auto-renewal status would keep the domain secure unless I was directly required to take action. The circumstances surrounding the transfer left me uncertain about how registrar practices are applied in such cases.
The financial impact I’ve experienced is tangible and significant — including development costs, delays to launching the platform, lost business opportunities, and reputational setbacks. These losses arose because I unexpectedly lost access to
malaysia.build, even though the domain was fully paid and valid during its active registration period. From my point of view, this sudden loss disrupted a project that had been under development for years and created serious financial consequences.
From my perspective, the combination of delays, limited responses, and silence raised questions for me about how customer service and communication are handled in such situations. Based on the evidence, the domain disappeared under Namecheap’s management as registrar of record.
-------
Direct Communication with Upstream Provider (Enom) Reveals Registry Action
Due to Namecheap’s persistent delays and vague excuses about awaiting answers from their upstream provider (Enom) and the .BUILD Registry, and having struggled with this issue for over a month, I was compelled to contact Enom directly. The reply received from Enom on
Mon, Jul 14, 2025 at 10:49 PM provides crucial clarity:
From: Compliance Support Date: Mon, Jul 14, 2025 at 10:49 PM To: [My Email Address]
Hello,
We received the following from the .build Registry regarding this domain (malaysia.build) on December 1, 2023.
“Dear Registar partner,
This email is to inform you that we have been requested by ICANN to remove / Block the domain malaysia.build from registration due to it violating Spec 5 of our Registry agreement. Thank you for your assistance in this matter.
Sincerely, <redacted> Founder / CEO .build <redacted> about.build”
You will need to contact the registry directly for any answers to these questions, as this action was taken by them directly. This is also why we have no record of the transfer, or distribution of an Auth Code for transfer, as the action was performed solely at the Registry level.
Thank You, Enom, a Tucows Company 96 Mowat Avenue Toronto ON M6K 3M1 Canada
-------
The Registry’s Silence: No Answers from .BUILD
Despite Namecheap’s (and subsequently Enom’s) insistence on directing inquiries to the .BUILD Registry, repeated attempts to contact the Registry directly (Date: Wed, Jul 9, 2025 at 8:59 PM), including online form submissions, have yielded
no reply to date. This further highlights an important issue, leaving me uncertain about the extent of transparency and communication among the parties involved.
-------
Based on all of this, I've already filed a formal complaint with ICANN on
July 11, 2025.
Despite having taken this step, I would greatly appreciate any advice you have on what steps I can take next. What would you do in my situation?
Thank you to everyone who has read and replied to my post. Your insight and perspectives are greatly appreciated.
I don't think there is any way the registrant will get the domain back, but there is an interesting question about what losses the OP incurs as a result of registry or registrar errors leading them to build on a domain that is later taken back.
In losing a domain you can lose associated email addresses, links to site stop working, business may suffer loss of traffic and reputation, loss of any goodwill or recognition built up in a brand.
I recall reading of a case in the UK where a builder built the house on the wrong plot of land - turns out the landowner was able to keep the house at no cost.
Godaddy and probably most other registrars have stuff in their ToS allowing them to cancel a domain at any time for any reason or no reason at all. Interesting point for comparison if anyone cares to look into it, or maybe someone already has on here?
That's tough, man.
Clear, consistent communication between registrar, registry, and registrant should always be the standard.