Wondering if anyone else has noticed this.
I was given designated access to a client's domain name on Namecheap - let's call it `domain.com` to edit DNS and such.
The client sold the domain using Namecheap's "sell domain" feature. The domain sold to a new owner and was transferred.
After the domain sold and the new owner changed WHOIS/DNS records, my account still has access to the domain. Months later I still have access. I can make changes to DNS and other settings even though it is not owned by my clieny anymore. It's clear the new owner doesn't know there was designated access to the domain.
I've tried reaching out to Namecheap support to find out if this is intended behaviour, but all they wanted to do was revoke the permission from my account. They could not escalate to any other level of support.
---
I can see that the domain you mentioned is still shared and can be managed by your account, even though it was sold via our Marketplace. It will take a while to investigate the case properly and fix the bug.
I'll ask the team to keep you updated on the progress. As for the domain itself, due to security reasons, we'll need to revoke your access to it.
---
Anyone who has bought a domain through the "sell domain" feature - you should immediately check for unauthorized access to your domain(s).
But I doubt you would get a response