Buying a domain that is not for sale: the owner-direct approach

Most of the domains you want are not for sale. They are parked, quietly redirecting to a holding company, or sitting on a website whose copyright notice still says 2016. None of that means the owner would turn down money. It means nobody has asked properly.

An owner-direct approach is a cold acquisition. You work out who the registrant is, you contact them, and you try to turn an asset they had stopped thinking about into cash they were not expecting. It succeeds more often than founders assume. It also fails in a small number of very predictable ways, which is good news, because predictable failures can be designed around.

Four kinds of owner, four different conversations

Before you write a word, work out whose inbox you are aiming at. There are roughly four types, and they behave nothing alike.

• The domain investor. Holds hundreds or thousands of names, already has a number in mind, replies within a day. The easiest counterparty and the most expensive one. They know what comparable names fetch and no amount of startup narrative will move them below their floor.
• The dormant business. A company that traded under the name and then stopped, or rebranded and kept the old domain out of habit. Usually your best target. The renewal is a line item nobody examines, and somebody in finance would be quietly delighted to turn it into revenue.
• The personal holder. An individual who registered it for a side project that never launched, or because it happens to be their surname. Attached to it, slow to answer, wildly unpredictable on price. Sometimes a fraction of market. Sometimes offended you asked.
• The active operator. A live business using the name every day. Realistically a no, unless you are willing to fund somebody else's rebrand, which starts in six figures before the domain itself is even priced.

Ten minutes of classification pays for itself. Look at the site, the Wayback Machine history, the nameservers, and whether MX records exist, since mail records suggest a human still reads email at that address. Check whether the name shows up in a portfolio next to fifty others.

GDPR hid the registrant, not the route to them

Public WHOIS has been redacted since GDPR, so the name and email are normally gone. Several routes remain, listed here roughly by hit rate.

• The registrar's contact form. Redacted records almost always carry a privacy-proxy address or a web form that forwards to the registrant. Deeply unglamorous. It lands in their inbox.
• The site itself. Even a parked page often carries a make-an-offer link or a brokerage landing page. If the name resolves to something real, read the imprint, the contact page and the terms.
• Historical WHOIS. Pre-2018 records were public and are widely archived. An old registrant name gives you a person or a company to look up on LinkedIn or Companies House.
• The Wayback Machine. Archived pages regularly hand you the owning company, an email address, or a founder to search for.
• MX and DNS fingerprints. Mail records pointing at Google Workspace mean somebody still receives email there. Try the obvious addresses.

If three or four routes come up empty, the name may be genuinely abandoned and merely auto-renewing. Note the expiry date. A share of owners eventually let names drop, and catching one at auction beats paying an acquisition premium.

Your first email is where the price gets set

More of your final number is decided by that message than by anything in the negotiation afterwards. Two mistakes account for most of the damage.

The first is advertising urgency and funding. "We've just closed our seed round and we launch in six weeks" is an engraved invitation to add a zero. Emailing from an address at a company anyone has heard of does the same job.

The second is being so anonymous you read as a scam. Owners receive a steady drip of low-effort offers. No name, no context, "$100 USD" — deleted, unread, and quite right too.

Sit between the two. A real person, modest circumstances, a specific number.

• One line on who you are. Not the company history.
• Note that the domain looks unused, and ask whether they would consider selling it.
• Include an actual figure. Emails without one get ignored, or answered with "make me an offer", which burns a round for nothing.
• Five sentences, maximum. Long messages read as pitches, and pitches imply budget.

Do not open at your maximum. Open at roughly 25-40% of what you would genuinely pay, provided that number is not insulting in absolute terms. On a name worth £15,000 to you, £4,000-£5,000 is a credible opening. £250 is an insult with a stamp on it.

Decide your ceiling before anyone replies

Negotiations move faster than judgement, so the number has to exist beforehand. Three inputs feed it.

• Comparable sales. Public records for similar names, same extension, similar length, similar commercial intent. These give you a band rather than a price, and the variance is wide.
• Replacement cost. What does launching on your second choice actually cost you? If a strong alternative sits there at registration price, the name in front of you is worth the gap between them, not its full standalone value.
• The recurring cost of a weaker name. Paid acquisition, type-in traffic, credibility in enterprise sales. A domain that defines its category can carry a brand for a decade. A compromise name gets paid for again every quarter in ad spend.

Write the walk-away number down. Founders overpay on owner-direct deals for one reason above all others: the target quietly stops being a means and becomes the goal.

Price the alternative honestly too. Names already listed for sale close faster, negotiate cheaper and collapse far less often. Before you spend six weeks chasing a registrant who may never answer, look at which keyword domains are already on the market in your space. The second-best name, available this afternoon, often beats the best name eighteen months from now.

Three exchanges, six weeks, and never pay first

Expect three to five exchanges spread over two to six weeks. Silence is ordinary. A follow-up after ten days is reasonable; a third chase is starting to look desperate.

The mechanics that decide outcomes:

• Shrink your increments. 5k, 8k, 9.5k, 10k tells them you are near a ceiling. 5k, 12k, 20k tells them there is more where that came from.
• Trade terms as well as price. When you are far apart, instalments over 12-24 months can close a gap that cash cannot. The domain sits in escrow and transfers on the final payment. Plenty of higher-value names change hands exactly this way.
• Define the asset precisely. Domain only, or social handles, trademarks, existing traffic and backlinks as well? In writing, before money moves.
• Never pay first. Cold acquisitions attract fraud: people who do not own the name, hijacked email accounts, and requests for a deposit "to show you're serious". Use escrow every time. On Names.com transfers run through escrow, so neither side pays or transfers before the other performs; sellers pay 15% on a completed sale and buyers pay no fee.
• Verify control rather than claims. Ask the seller to make a small, specific change to the DNS or the live page. Two minutes of their time, and it proves they hold the account.

Then be prepared to walk. Most cold approaches get no reply at all, and a decent share of the replies that do arrive are priced past reason. That is the base rate, not a verdict on your email. Run three or four targets at once, keep the walk-away number honest, and let whichever owner answers sensibly take your money.