Buying a domain that is not for sale: the owner-direct approach

Most good domains are not for sale. They are parked, quietly redirecting, or sitting on a live site that has not been updated since 2016. None of that means the owner would refuse money. It means nobody has asked properly.

An owner-direct approach is a cold acquisition: you identify the registrant, contact them, and try to convert an asset they were not thinking about into cash they were not expecting. It works more often than founders assume, and it fails in predictable ways you can avoid.

First, work out what kind of owner you are dealing with

Your whole approach changes depending on who holds the name. There are roughly four types.

• The domain investor. Holds hundreds or thousands of names, has a price in mind, replies fast. Easiest to deal with, most expensive. They know what comparable names sell for and will not be talked below their floor by a story about your startup.
• The dormant business. A company that traded under that name and stopped, or rebranded. Often the most productive target. The domain is a line item nobody thinks about, and someone in finance would be glad to convert it.
• The personal holder. An individual who registered it for a project that never happened, or because it is their surname. Emotionally attached, slow to respond, unpredictable on price — sometimes far cheaper than market, sometimes offended by the question.
• The active operator. A live business using the domain every day. Realistically, this is a no unless you are prepared to fund a rebrand, which means six figures and up before anyone talks about the domain itself.

Spend ten minutes classifying before you write anything. Look at the site, the Wayback Machine history, the nameservers, whether MX records exist (mail records suggest a human still uses the address), and whether the name appears in a portfolio alongside other domains.

How to actually find the owner

Public WHOIS has been redacted since GDPR, so the registrant name and email are usually hidden. You still have routes in, roughly in order of hit rate:

• The registrar's contact form. Redacted WHOIS records almost always include a privacy-proxy email or a web form that forwards to the registrant. Unglamorous, but it lands in their inbox.
• The site itself. Even a parked page often carries a "make an offer" link or the landing page of a brokerage. If the name resolves to a real site, check the imprint, contact page and terms.
• Historical WHOIS. Records from before 2018 were public and are widely archived. An old registrant name gives you a person or company to search for on LinkedIn or Companies House.
• The Wayback Machine. Archived versions of the site frequently show the owning company, an email address, or a founder's name.
• MX and DNS fingerprints. Mail records pointing at Google Workspace tell you someone still receives email at that domain. Try the obvious addresses.

If three or four routes fail, the name may be genuinely abandoned but still auto-renewing. Note the expiry date. Some owners let names drop and you can catch them at auction rather than paying an acquisition premium.

Writing a first email that gets a reply

The first message decides your price more than the negotiation does. Two mistakes dominate.

The first is revealing urgency and funding. "We've just raised our seed round and we're launching in six weeks" is an invitation to quote you a number with an extra zero. So is emailing from an address at a well-known company.

The second is being so anonymous you look like a scam. Owners get dozens of low-effort offers. A message with no name, no context and an offer of "$100 USD" gets deleted.

Aim for the middle: a real human, modest circumstances, a specific offer. Something like this works:

• Say who you are in one line, without the company résumé.
• Say you noticed the domain isn't in active use and ask whether they would consider selling.
• Make an opening offer with a number in it. Emails without a number get ignored or answered with "make me an offer", which wastes a round.
• Keep it to five sentences. Long emails read like a pitch and pitches suggest budget.

Do not open at your maximum. Open at roughly 25-40% of what you would actually pay, assuming that number is not insulting in absolute terms. On a name you would pay £15,000 for, opening at £4,000-£5,000 is credible. Opening at £250 is not.

Working out what it is worth before you anchor

You need your own ceiling before the first exchange, because negotiations move faster than judgement. Three inputs:

• Comparable sales. Public sale records for similar names — same extension, similar length, similar commercial intent — give you a band, not a price. Expect wide variance.
• Replacement cost. What would it cost to launch on your second-choice name instead? If a strong alternative is available at registration price, the domain in front of you is worth the difference in value, not its full standalone value.
• Downstream cost of the wrong name. Paid acquisition, type-in traffic, credibility in enterprise sales. A category defining domain can carry a brand for a decade; a compromise name gets paid for again every quarter in ad spend.

Set a walk-away number and write it down. The most common way founders overpay on owner-direct deals is that the target becomes the goal rather than the means.

It is also worth pricing the alternative honestly. Names already listed for sale are faster, cheaper to negotiate and far less likely to collapse. Before you spend six weeks chasing a silent registrant, check what keyword domains are already on the market in your space. Sometimes the second-best name, available today, beats the best name eighteen months from now.

Negotiating and closing without getting burned

Expect the conversation to run three to five exchanges over two to six weeks. Silence is normal; a follow-up after ten days is fine, a third chase is pushing it.

Some mechanics that matter:

• Move in shrinking increments. Going 5k, 8k, 9.5k, 10k signals a ceiling. Going 5k, 12k, 20k signals you have more.
• Trade terms, not just price. If you are far apart, instalments over 12-24 months can close a gap that cash cannot. The domain sits in escrow and transfers on final payment. This is how many higher-value names actually change hands.
• Get the exact asset defined. Domain only, or also social handles, trademarks, existing traffic and backlinks? Agree in writing.
• Never pay first. Cold acquisitions attract fraud: people who do not own the name, hijacked email accounts, and "send a deposit to prove you're serious" requests. Use escrow, always. On Names.com transfers run through escrow so neither side pays or transfers before the other performs, sellers pay 15% on a completed sale, and buyers pay no fee.
• Verify control, not claims. Ask the seller to make a small, specific change to the DNS or the live page. It takes them two minutes and proves they hold the account.

Then be willing to stop. Roughly speaking, most cold approaches end in no reply, and a decent share of the replies you do get are priced beyond reason. That is the base rate, not a reflection on your email. Run three or four targets in parallel, keep your walk-away number honest, and let the one that answers sensibly win.