I recently ( just before around 3-4 days) bought a domain name from namecheap with privacy protection. Assume that domain is example.com

There was an email on spam folder today.

  • From : [email protected]
  • Title : Domain Notification for EXAMPLE.COM : This is your Final Notice of Domain Listing

How spammer found that example.com is a my website?

Note : Otherthan Google Webmaster tools and Analytics, I have not submitted my website for any other third party service.

  • 3
    Can you confirm that this message was not relayed?! since many whois guards will attach a ID number e.g [email protected] which will forward to your email address, this does not expose your email address unless you reply to the email, some domains require webmasters to be contactable. Check the header of the email received what is the mail-to: sent-from: and the reply-to: address. Commented Oct 11, 2017 at 12:00
  • 1
    Is the contact email address on the domain registration unrelated to the domain that's been registered?
    – MrWhite
    Commented Oct 11, 2017 at 14:05
  • @SimonHayter I checked the header. From: Domain Notice <[email protected]>, To: WhoisGuard Protected <828ae42 bla bla [email protected]> Commented Oct 12, 2017 at 4:11
  • 1
    So, they don't have your email. They are emailing you through the whoisguard, everything is working as intended. If you don't want those emails, do not use a important email address. ICCAN and other domain registerars are clear that webmasters must be contactable, so even who whois protection, doesn't mean your uncontactable. It's to prevent your address and real email being displayed and stored in a spam directory. Commented Oct 12, 2017 at 8:55
  • @SimonHayter Thank you for the explanation. So that means if any one send a email to 828ae42 bla bla [email protected], is it automatically forward to the my email address? [And why gmail think that it is a spam email?] Commented Oct 12, 2017 at 9:24

2 Answers 2


Even with privacy protection I believe there is a small delay between the Whois Database and ICANN registration where someone's info is publicly available.

Spammers harvest that info as new registrations happen. Its common with all registrations of .com TLD's especially, regardless of registrars.

Irritating and highly discussed around the web, but unlikely to be resolved any time soon.

  • This is not true and ICANN has nothing to do technically in this issue. Especially for .COM which is still thin for now, so the registry has no contact data, it only appears on registrar whois, which is capable of immediately showing protected email adresses (supposing the registrar knows how to do its job) Commented Oct 12, 2017 at 0:36

Was the email sent to your email address or was it sent to [email protected], which was then forwarded to your email address?

Many spammers will just hammer your domain with emails at any generic string they can think of, until they get hits.


Not the answer you're looking for? Browse other questions tagged or ask your own question.