Cyger Selects
Posts
Issue #7: May 26, 2025

Issue #7: May 26, 2025

Michael Cyger
May 26, 2025

Hi there,

Be careful out there, folks. I included a useful PSA in today's newsletter that you should be aware of, as well as the goings-on of the industry.

Here are the most interesting 5️⃣ domain tweets from last week.

Have a great week,
Mike

P.S. I publish my best posts and opinions in Cyger Says every Friday morning.

#1️⃣ Alert on price change

Atom.com

@atomHQ

🚀 New Feature: Track Price is live!

Buyers can opt in to get alerts when a domain’s price changes, giving sellers real-time signals of interest.

Sellers can:
✅ See tracker count & country
✅ Filter tracked domains
✅ Apply discounts or price increases

helpdesk.atom.com/en/articles/11407212-introducing-track-price-a-new-way-to-engage-interested-buyers

Date unavailable

This is a smart feature for @AtomHQ to launch.

I read Elliot @DInvesting's comment, "A prospective buyer will need to create an @AtomHQ account to start tracking domain names. This step, in lieu of simply leaving an email address, may be an obstacle."

I think Elliot is exactly correct.

The quicker Atom can get the person to enter an email address, the better.

Once they have their email, then take them to a "Great, we'll keep you informed. And how about registering, which gives you A, B, and C benefits too."

#2️⃣ Speaking of Elliot

Elliot Silver

@DInvesting

John Berryhill and I are riding in the 2025 Pan-Mass Challenge to raise funds and awareness for Dana-Farber Cancer Institute. We have raised nearly $200,000 for DFCI.

We couldn't do this without the support of our domain industry friends and colleagues.

domaininvesting.com/2025-pan-mass-challenge/

Date unavailable

If you haven't donated to his fundraising efforts for the Dana-Farber Cancer Institute and you have the wherewithal to do so, I recommend it.

I love how Elliot consistently rides and raises every year.

And, I'm extra joyful to be a jersey sponsor with my big face on his back and my domain name Mi.ke.

It's sort of my own version of "I got your back, Elliot."

#3️⃣ Sam loves his domains

barman

@ppcbz

.io names making a comeback.

Both didn’t resolve for me

Date unavailable

Sam paid $15.5 million for chat.com.

It made me wonder if Sam & Jony will have an entity domain name.

Or just go with the OpenAI.com and Chat.com domain names.

Adam @synozeer mentioned in the thread that he owns www.io. That's a cool domain too.

#4️⃣ PSA to investors

David Nix

@davidnix_

🚨 Hard Truth Warning 🚨

As I dive into the world of domaining, the security is laughable.

I've worked in high compliance industries for years, like health tech, so I know a thing or 2 about security.

The problem?

Aftermarkets and portfolio managers wanting API keys and (worse) passwords.

All in the name of convenience: "Sync your data!"

Don't do it. Here's why:

1. If you hand over your password, you are playing with fire in a pool of gasoline. Someone could log in, change the password, and lock you out forever. Goodbye domains.

2. None of the registrar API keys are scoped. Meaning they have wide open permissions to do almost anything in your account.

There's obvious unlock + transfer away, but you'll probably get emailed an auth code and know something is wrong. Usually (no promises) you can't change emails via API.

But a savvy hacker could change your nameservers for phishing.

Say you own loans .com, easily a 7+ figure name. I could switch ns to my site and trick people into thinking it's for sale at $10k. Accepting only crypto, naturally.

Congrats! Your premium domain is now cursed if Google finds out.

My advice, do not trust any web app with your keys and passwords.

Never ever.

There is no such thing as 100% secure site.

So don't let your precious secrets leave your laptop!

May 20, 2025

Michael Cyger

@MichaelCyger

This is 100% true and many non-technical domain registrants do not realize it.

What’s unfortunate is that I cannot think of any reason a registrar would put in the time or resources to allow users to scope API keys.

What’s in it for them to do so? The investor community is so small.

But maybe that all @Dynadot or @Unstoppableweb needs to win a little business from larger registrars?

Date unavailable

If you give your developer your API keys to your @GoDaddy, @Afternic, or @Dynadot account (or any other registrars), they likely have the ability to delete, transfer, push, and wreak havoc in your portfolio.

It might not even be intentional. They could leak it by accident.

It pays to be aware of it and careful.

#5️⃣ Beetlejuice domaining