Three Days of Watching a Name Fall Off the Edge

Three Days of Watching a Name Fall Off the Edge

The thing about .sg domains is that nobody tells you when exactly a name drops. There’s no bell, no email, no notification that the one you’ve been watching for six months is suddenly available. It just… stops renewing. And then, at some point in the next 65 to 70 days, it falls off the whois database like a leaf no one noticed was dead.

I learned this the hard way, sitting at a hawker center in Toa Payoh with a half-finished bowl of laksa and a phone that kept buzzing with error messages. The registration had failed. Not “pending” — failed. The domain I’d been tracking since January was gone, and someone else had grabbed it four minutes before my script fired.

The guy at the next table was reading a Chinese newspaper and didn’t look up when I swore under my breath. That was probably the right response.

What the Registry Doesn’t Tell You

Here’s what I’d pieced together before that afternoon. The Singapore Network Information Centre — SGNIC — runs the .sg namespace. They don’t publish a drop list. There’s no public auction, no “deleted domains” page you can scrape. The process is basically: domain expires, registrant gets 30 days to renew, then a 30-day redemption period where they can still get it back for a fee, and then it’s released into the wild.

But “released” doesn’t mean “available.” It means the registry deletes it from the zone file at some point during their working hours — which, for SGNIC, means sometime between 9 a.m. and 6 p.m. Singapore time, Monday through Friday. Nobody outside their office knows the exact minute.

What I Thought I Knew

Before that failed attempt, I’d been running a cron job every ten minutes. I know, amateur hour. But I’d assumed that if I checked often enough, I’d catch the window. The problem is that the window isn’t a window — it’s a single moment, and the registrar I was using had a batch process that ran every hour. So even if SGNIC dropped the domain at 2:14 p.m. on a Tuesday, my registrar’s system wouldn’t check until the next full hour. By then, someone with a faster setup would have already registered it.

That someone turned out to be a guy named Wei Liang — or at least, that’s the name on the whois record. I emailed him out of curiosity a week later. He replied in about four hours, which surprised me.

“I use a service that monitors the registry’s EPP feed directly,” he wrote. “Costs about S$200 a month. Worth it if you’re chasing something specific.”

I didn’t reply. S$200 a month for a domain that might cost S$30 to register? That math didn’t work for me. But I couldn’t stop thinking about the gap between what I was doing and what he was doing. He wasn’t faster. He was closer to the source.

The Backorder Ecosystem

After that failure, I started looking into backorder services specifically for .sg domains. Most of the global players — GoDaddy, Dynadot, Namecheap — offer backordering for .com, .net, .org. For .sg, it’s patchier. Some don’t support it at all. Others claim to but quietly refund you when the drop happens because their system doesn’t actually integrate with the registry.

I found three services that consistently worked, and I tested all of them over the next four months.

HoganHost (Local Registrar)

First one I tried. They’re based in Singapore, which meant their payment systems and support hours aligned with SGNIC’s schedule. I placed a backorder on a lapsed .sg domain for a consultancy that had gone out of business — something about logistics software. The backorder cost S$49, plus the registration fee if successful.

It took 73 days from the expiration date I’d noted. The domain dropped on a Thursday at 11:37 a.m. HoganHost’s system registered it at 11:38 a.m., and I got an invoice at 11:41 a.m. That was the fastest I’d seen. I asked their support how they managed it, and the person on the phone — a woman who sounded like she was eating something crunchy while she talked — said, “We have a direct connection to the registry. It’s not public API, but we’re an accredited registrar, so.”

I later found out that “direct connection” probably meant they were polling the registry’s RDAP feed at sub-minute intervals. Not quite real-time, but close enough.

Mizu Technology (Catch-All Service)

Second test was different. Mizu isn’t a registrar — they’re a drop-catching service that works through multiple registrars at once. For .sg, they use three different backend registrars, and the backorder fee was S$35, plus the domain cost. The logic is that if one registrar misses the drop, another might catch it.

This one failed. The domain I was after — a short, two-letter .sg that had expired — didn’t get caught by any of the three backends. I watched the whois status change from “REDEMPTIONPERIOD” to “PENDINGDELETE” to nothing, and then a new registrant appeared at 4:22 p.m. the same day. Mizu refunded me, no questions asked, within 48 hours.

I emailed their support to ask what happened. The reply was: “The domain was registered by an ICANN-accredited registrar using a pre-registration system. We cannot confirm which one.” Which I read as: someone else had a faster pipeline.

Direct Backordering via SGNIC Accredited Registrar

The third approach was the simplest and the one that eventually worked. I found a list of SGNIC-accredited registrars on their website — about 30 names, most of which I’d never heard of. I picked three at random, called each one, and asked if they offered backordering services for .sg domains. Two said no. The third, a small shop called NetVault Solutions, said yes, but it was manual.

“We don’t have an automated system,” the guy on the phone said. “You tell us the domain, we put it on a spreadsheet. When it drops, one of us manually registers it.”

I asked how often they succeeded. He laughed. “Depends on who’s working that day.”

I didn’t use them. But I respected the honesty.

The Timing That Actually Mattered

What I eventually figured out — and what I wish I’d known at that hawker center — is that the exact moment a .sg domain drops depends on two things that aren’t documented anywhere.

First, SGNIC processes deletions in batches. That much I’d inferred from the pattern I saw across 20 or so domains I was monitoring. The batches seemed to happen at irregular intervals during the day, but there was a cluster between 11 a.m. and 2 p.m. Singapore time. Not guaranteed, but more likely.

Second, the actual registration happens in the seconds after the deletion, but it’s not the registry that does it — it’s the registrar’s system submitting a registration request to the registry’s backend. The first registrar to get that request in gets the domain. So the race isn’t about who checks first. It’s about who can submit a registration request closest to the deletion event, with the least latency between the drop and their HTTP request reaching SGNIC’s server.

That’s why local registrars have an edge. Their servers are physically closer to SGNIC’s infrastructure. Round-trip time from a server in Singapore to SGNIC is maybe 2-5 milliseconds. From a server in the US or Europe, you’re looking at 150-300 milliseconds. In a race measured in milliseconds, that’s a lifetime.

The Mail Forwarding Experiment

I tried one more thing that I’m still not sure was a good idea. I set up a mail forwarding catch-all on a domain I owned, then used it to register for a free trial of a backorder monitoring service that claimed to track .sg drops. The service sent me an email whenever a domain transitioned from “REDEMPTIONPERIOD” to “PENDINGDELETE” — which is the status it enters about a week before the actual drop.

I got 47 emails in three weeks. Most were for domains I didn’t want — gibberish names, obvious typos, one that was literally “sgtestdomain2023.sg.” But three were for domains that looked legitimate. I tracked all three, and none of them got caught by any backorder service I tried. All three were registered within 24 hours of the drop, which suggested someone was manually registering them as soon as they became available.

I still don’t know who that someone was. But I stopped using the service after the trial ended. It was too noisy, and the false positives were exhausting.

What the Drop Actually Looks Like

I finally caught one. I’d been tracking a domain — “artsandculture.sg” — that belonged to a small gallery in Katong that had closed during the pandemic. The whois showed the expiration date. I set a calendar reminder for 65 days after. On that day, I took a half-day off work, sat at a coffee shop near Chinatown with a laptop and a mobile hotspot, and watched.

I was using a registrar called Exabytes — Malaysian-based, but they had an SG server location and supported direct registration. I’d already funded my account. I had the registration form pre-filled in a browser tab. I was refreshing the whois every 30 seconds manually.

At 11:48 a.m., the whois status changed from “REDEMPTIONPERIOD” to nothing. No status at all. I clicked the registration button. The page loaded for about four seconds — which felt like four minutes — and then returned: “Domain registration successful. You have registered artsandculture.sg.”

I remember the exact time because I took a screenshot. 11:48:23 a.m. Singapore time. Thursday, June 15.

It cost S$28.00 for the first year.

The Registry’s Quiet Hours

What I didn’t test, because it never came up, was what happens if a domain drops on a weekend or a public holiday. SGNIC’s business hours are Monday to Friday, 9 a.m. to 6 p.m., excluding public holidays. If a domain’s redemption period ends on a Saturday, the actual deletion gets pushed to the next business day. That much is in the terms of service, buried in a PDF.

But the timing within that business day? I spoke to a friend who works at a registrar in Singapore. He told me off the record: “The deletion process is partially automated. The system runs a batch at some point during the day, but a human has to approve the batch. So if the person who does that is on leave, or in a meeting, or just slow that day, the batch doesn’t run until they get back to it.”

Which means you can’t predict the day, let alone the hour. You can only watch.

A Thing I Still Don’t Have an Answer For

That domain I caught — artsandculture.sg — I didn’t actually have a use for it. I just wanted to see if I could. I let it sit in my account for three months, then let it expire. I didn’t tell anyone I’d caught it. I didn’t build anything on it. It just felt like I’d won something, even though I hadn’t won anything useful.

Someone else probably backordered it after it expired again. I don’t know who. I don’t check anymore.

The whole thing taught me that the gap between “possible” and “reliable” is wider than I’d thought. You can backorder a .sg domain. You can even catch one if you’re lucky, fast, and willing to sit at a coffee shop for three hours with a laptop. But reliable? That costs S$200 a month for someone else’s monitoring system, or you build your own, or you settle for the knowledge that most of the domains worth catching are caught by people who are already closer to the registry than you are.

I still have the screenshot. 11:48:23 a.m. I don’t know why I keep it.

📷 Photos: Zulfugar Karimov (Unsplash), Zulfugar Karimov (Unsplash)